last executing test programs: 6m39.370369668s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x118, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote}, @in=@multicast1}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@dev, 0x0, 0x0, 0xee}}]}, 0x118}}, 0x0) 6m38.321663683s ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000040), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) 6m36.041395882s ago: executing program 2 (id=129): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = io_uring_setup(0x617c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000540), 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r0]}, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000010900010073797a30000000002c000000030a010200000000000000000100ffff0900010073797a30000000000900030073797a300000000084000000060a010400000000000000000100000008000b40000000005c000480580001800c000100626974776973650048000280080001400000000408000640000000800400078008000340000000042000048004000280180002800900020073797a30000000000800018000000000080002400000000a0900010073797a30"], 0xf8}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x0) 6m35.019092009s ago: executing program 2 (id=132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x2e, 0x71, 0xfffffffe, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x15}, 0x700, 0x1, 0xfbe, 0x18}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x8}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa7, 0xf3, 0x98, 0x8, 0x547, 0x7303, 0xc4ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0x22, 0xd3}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r3, &(0x7f0000002280)='net/ip6_mr_cache\x00') 6m31.834978692s ago: executing program 2 (id=148): socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$alg(0x26, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x4, 0x30, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @local}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x3, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @window={0x3, 0x3, 0x4}, @eol, @nop]}}}}}}}, 0x0) 6m31.671601629s ago: executing program 2 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 6m16.396643737s ago: executing program 32 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 3m42.005212374s ago: executing program 4 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="d9edbaf80c66b848dd4f8666efbafc0ced2ef30f09f2a5f030a68a0fbad00466ed3e89d9660fc73766b9800000c00f326635000400000f300f01c8", 0x3b}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002294e7610cd06020298f4010282ec4b3f0157cacf06d00609044f0602816a020009050f0e0002fdd603090507054cd523d1a95a5b3415a99d7e6d18130002408102"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="002e5a810eed9dc7b6f48ab9d26d005246a740c7589172ea17dc1807000041e13f4e631c34c44ec1ddbd1e32ab74f497d3ea10ab44bd", 0x36}, 0x1, 0x0, 0x0, 0x8015}, 0xc0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0x4bbc43373503624c}, {&(0x7f00000006c0)="3eee53ae5baf2b95a5cefb5c7ae7f27c446d6062aa82a0d1cdafedfdfc42a88687da4859b624166f24fa8bd13345d637ac6e6eabac4bcd16a1d7d786307e6aaeec0f12daaad721e25e4ba63192f238ba2cd2580d", 0x54}, {&(0x7f0000000880)="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", 0xff8}, {&(0x7f00000007c0)="9b4a41475d20c855e8abe1ed0269b6dc2a48afae9d15049b72cbaa0700e4a2a387f2a2c33c4c09001c99b937acb30568d555b27ace90ec701176267fe5bb2b84327faeebe076e894a73e336540919244ad", 0x51}], 0x4}, 0x20000800) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_ethernet(0x96, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa3daaaaaaaaaa3708004500008800000002002f90780a010101e00000012480886400300000a9f90205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d10000800000086dd080088be0000000010000000050000000000080022eb00000000200000800200000010000000000000000800655800000000"], 0x0) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file4/file6\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = open$dir(&(0x7f0000000000)='./file1/file4/file5\x00', 0x8000, 0x0) mknodat(r4, &(0x7f00000001c0)='./file1/file4/file5\x00', 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) 3m38.070067939s ago: executing program 4 (id=748): mq_timedsend(0xffffffffffffffff, &(0x7f0000001400)="36717cb0235c60b242b98c", 0xb, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$kcm(0x10, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYBLOB="0000000001"], 0x48}}, 0x0) 3m37.038013448s ago: executing program 4 (id=753): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0xfffffffd) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x48, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000400)="0bfad3240668", 0x6}], 0x1}}], 0x3a, 0x8000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x1000, @empty, 0xca7}}, 0x7}, &(0x7f0000000200)=0x90) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x3) 3m35.829669277s ago: executing program 4 (id=757): timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x10, 0x4, @thr={0x0, &(0x7f0000000240)="23eb77b267b51fce"}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30}], 0x1, 0x4044040) 3m32.500758687s ago: executing program 4 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)={0x3, 0x0, 0x1}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) readv(r5, &(0x7f00000003c0)=[{0x0, 0xfffffdea}, {&(0x7f0000000900)=""/4100, 0x1004}, {&(0x7f0000000180)=""/120, 0x78}], 0x3) 3m30.705272034s ago: executing program 4 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="1802000063f9fffe00000000000000008500000041000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f00000002c0)=0xc) syz_open_procfs$pagemap(r3, &(0x7f0000000300)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001340)=""/4096, &(0x7f0000000280)=0x1000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r2, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x4000, 0x0) 3m13.78897134s ago: executing program 33 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="1802000063f9fffe00000000000000008500000041000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f00000002c0)=0xc) syz_open_procfs$pagemap(r3, &(0x7f0000000300)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001340)=""/4096, &(0x7f0000000280)=0x1000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r2, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x4000, 0x0) 1m39.491582991s ago: executing program 5 (id=1507): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m39.102495345s ago: executing program 5 (id=1509): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m38.685029316s ago: executing program 5 (id=1513): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m38.191717383s ago: executing program 5 (id=1517): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a240)={0x7c, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x64, 0x1, 0x0, 0x1, [@nested={0x5d, 0xdc, 0x0, 0x1, [@generic="8b86519f58e9a992f077dc723a32937b18212758506d7dd0618e97cc4ae268dfeb9584a0a2b0fc49adbefc6744d8d15975614fad326ccde743cf4804eac079614524b82049e0daea7f48d457b7fc295f1d27517774", @nested={0x4, 0x8a}]}]}]}, 0x7c}}, 0x0) socket(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1m37.65912296s ago: executing program 5 (id=1523): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x7, 0x5, 0x8, 0x61, 0xfff, 0x6, 0x80000001, 0x80000000}}}}]}, 0x58}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m37.088578727s ago: executing program 5 (id=1527): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19) 1m21.659811166s ago: executing program 34 (id=1527): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19) 5.179677153s ago: executing program 7 (id=2393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001000080fda34a"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x3}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 4.803659019s ago: executing program 7 (id=2398): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80080400) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) close(0x3) syz_usb_connect$uac1(0x5, 0x7c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x2, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x1ff, 0x7, "eed9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8b, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x3, 0x24, {0x7, 0x25, 0x1, 0x80, 0xc7, 0x6}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x0, 0x0}]}) 2.983707309s ago: executing program 1 (id=2421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13f6, 0x0, 0x0, 0x0, 0x3}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x806}}]}, 0x0, 0xeb3c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x0, 0xd64a, 0x0, 0x0, 0x0, 0x1000000000001, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x7, 0x3], 0x5}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x2, 0xe, 0x7, 0x0, 0x0, [{{r3}, 0x7f}, {{}, 0x1}, {{r1}, 0x71}, {{}, 0x7}, {{r2}, 0x1}, {{r0}, 0x63}, {{}, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 2.582891943s ago: executing program 1 (id=2427): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x4, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PPPIOCCONNECT(r4, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.564366122s ago: executing program 0 (id=2428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 2.418073905s ago: executing program 3 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x44854) 2.417840276s ago: executing program 1 (id=2430): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000002c0)={0x18, r0}) 2.26953528s ago: executing program 0 (id=2432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x26004001}, 0x0) 2.186083294s ago: executing program 3 (id=2433): io_setup(0x8, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x161d02) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x2}]) 2.185889712s ago: executing program 1 (id=2434): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a", 0x23}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x20008040) 2.127304266s ago: executing program 6 (id=2435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0xfc, 0x0, 0xff, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) pread64(0xffffffffffffffff, &(0x7f0000002300)=""/176, 0xb0, 0x2) 2.043413298s ago: executing program 0 (id=2436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x3, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.961905688s ago: executing program 3 (id=2437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) unshare(0x62040600) 1.850759574s ago: executing program 6 (id=2438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1.831330982s ago: executing program 0 (id=2439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.703152358s ago: executing program 1 (id=2440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001000080fda34a9f6645f438bc6aec"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x3}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 1.633960519s ago: executing program 7 (id=2441): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'lo\x00'}) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.582146179s ago: executing program 6 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 1.341294134s ago: executing program 7 (id=2443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/135, 0x87}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) 857.406337ms ago: executing program 3 (id=2444): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r1, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x44}}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 668.307436ms ago: executing program 0 (id=2445): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f000000bf00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f000000c000)={0x0, 0x0, &(0x7f000000bfc0)={&(0x7f000000bf40)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) 640.206245ms ago: executing program 1 (id=2446): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x4460}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x57}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50}, 0x1001) syz_fuse_handle_req(r0, &(0x7f0000006380)="c3664c086d5ee06ccddd19dd457ba5aeb1903213c23a24dd49e4f6c488d2f4bee88e4c3c5a80d2c3432d05f47e280235845d65dbe4283294500b07d8a870db17460c71a19c9714769b8b55516fd6ac84a396847b9df64d4bdad0a620b067a2e1cbb0ce63f9a53b7fe7891d3be1ba32610a30e7ebac313ef1a9ee0d4bc8592595222c4628d5645d3cf3d881eb1266eb4c86314903f2271492b45b3c31701746aa99494c1c4ddd6b94d9425cff851eaee4d4fc052eddfab2c111c0be86c0e6d255f61461608f8e643a9d4420163259f7a202cc61e46f0aa16c795e2afe24cb67fc8a4565291e8dd9cc451edcff05225cc31af7684db1ed7c2a92e673dccdc9327682371dff37e55ed69c1b7d11606a93fad850c93eaba56ee39014a3dc5bd15027d40561c49da9d4430f2796411a234a7b47a94c25c69ffbca2e22ca6346aaddf066446cf780af00537da6114d1f0c55c9cc40816adeb5f41fe1f4ab853caf0738e4f7c7b0d250c8a861dbf5687f9795896cbd1d20a74bd7b789526da1f79839a91493165febb586f3eae0f565e92967fe8c144d43c0fc58c7e8a25a3c2376136101e20944c3ed4db10d402be789637b72c9c255a6c7d4161d28e58cc8ed3841657f6b1db8253b33dd1a6b4e7d6ce057e49dc73b5f9b4193448d2417d1ec1c15a6c6e1a3db3563963eb503bab9d95d71999d4392fbd87f8b637f7191b234d2820e30698dff34ff3207886a318df907afec164f4d7e719ab91d127d6ed69cffc3ecf9210764c3a7ff83ce2d333f00c29a60925bc5bb0d65afccd17b52fe174f7f6c6ac769d2e65eafda7703ebb90b9119f9073248fe2700998e1561b9b5ab381b192f1948efc9bf22c2fcfad2f001e15db8c9170b8aeaf72d118c579f7d3a73567d17b8fa77a0790e1ae58e47ebcaf9cebd067a6efa871d49d7fff2b99ed5c541ae0afdb6eadad572f3523ef4c912cffab6f8855da63b10382781b361db4e2b44462298254e4b0253fea645206d821f9a4c966657caea642ddccc27b617d792757a10e4ef11c4f87d871c0e0f2a38d7699cd70fe595024af54a99f1342ad020070be2ea60e0d8431465a6db7016d0e2b7560a35986bf9e6c043c846f1f174cb5da60177afdd0cd6d457613293a02f93a2c5b85a05766f651479e2f82b580b68be24a5f784e349e732f4eaae7a572173129a64d3141bbf638942c0ebe0b8823d079c30253280e386d736aa9372191f3f32f46af958f49437a2b2d6a0d72dc2510932bd2adba933bf3a3c392398baa185ef9e2664dec0169c433d3cb0f18d95a8e934017371eeaa8871c67e1040d8ab2b8f0dee8c6894a0cef454e8fdc430791a07deaebf3630f603b99a03761ce073e3b4b1033fb8cd9a22badc5014e71806bbc8afdfacc5427f705818bcc28da0413f90018e5e27b00d1cbf662a764b32a14b396a7ee054a88350fb038bc4d8bd8e4c92d1cd379028b4ee603c4b32a35d4f124836c128eebea62cc4daae17c45dd1cbb0fa6d3dd74a1ea01a627b79047fbd453a68a75b353bda05a3c97c9cb105b57c025c6838f25c62d44bb1667c60af2aa3814204f1d2491af26b11acf278d9c0312a1deb7ea3a41a9da3e9b3196a0e18e32b2c16715e1c9b94bb70df0adfd8ef5cb19b8d82e5e90ee28b0cb78b21af0921f25a659036c51fc676bb412869fc1eafa1f1674a7199ef4417872737c6ec11c745bf26377b3153c290f14fbaeec512d7d2d1f6b9492028231545f2a3f45754c961cc6afdb65946a93ca06b97ffb211d479cf294da74d60c848570b7560626582ed9aff45490186801012a41e405e029c0131f0dc878fb9bc777cb7eca027e8d392b569f386db2b08ec07816ca0257dea5ede9d18f2d822d4089101642f9bef4645c1de5d4e9b439b2737718aa33d5626e211788df13885d0503cbab0c78226bd87e446c918cb9f763af18cd6933191e2fa8c789c5ccc30da3534579ee3eda51dd72b959a5baf7beff4051c46b99aa2bba9e4861be7cd81b00d9d690b63ea41ae80579212662ed041d776bb32e342231cbb562d7aabf628a80837a721e0eb3a264bd21699ca5420c77bc11b9951e62b43bcafb87f2b1069f674679126e7b0171c0990fbd1627ce063604e698b5d95dc4368883149becdf68ae779505c24955afb087b429b3c52d6d28fc6684c4e0c8ef590db2767d9e9cf7ad4f80f694fba78097bb0f0270c7d9372567bf3d3cd130b9d8496f422c021fde6e53d1b6984a6e146993d8b635b72497becc5538e0570da8048d420050e5bb8020152adbcbd4588909160f2cc35758880d3dc01936e55ceb88e551cd6f1ccba00b385243034e343da18bbb5675a03f8f5b4e34c1bfcb5b8551845696de57a4f96526f7e21c677e0dc235140bc56c2d32479893a1a111967430ae98f856fc9031cf23df21be10ee5a55fbf4800c3c6e894b9b5291ffba11d65443650b93de5f1c4b02eda85a76aca5770d221169bc7a42467547270ffd70cc9b79713e1ba715f6c7017da8a3b67b7ce9ecd18670ede946c4628a1b9594344fcec70c5b4342b97ed59b6fd2f385fd3d4b4b713a2982dab606c23b2fe2f62914bdb716a3a4735a1a8b8491ee82a21dd6d69ef94ab7b06ca3a8650d41b1b957b5a15c38b33b0bb3b91d2f83bb4f16bf3c71a4719690795dcc814a670ee1bbfe18ac1823d795cef3100fd8ac8a1ba5629616df849a3b11cd5a70834f2c556b1cda1b9b5d4a83f7dd80186b6487bb7ecfbfe17f6a3b709281577cdc3fa215e1d9ec2ed9bde32f5db922461333a029d37d6ee2850b2a8510e403e0d7f14864c73f0e032d75ca4ccf3a01ec811530d0da0bff591dad1ac68b9d5e6c9cd75941f4925733cf7ed09e41c77b1c2d05fd55b40858d214aaa79108bb237e22b4abdcd5e847224cc47c45e37869ca4ed4a82a5946990ce0209900955f312ae75504f1664a38f836c363eb2022420c8fd4a9aae467e9bdcd642ccb7289802f721d47c7e066545f59b3853797191b1b4d6adf8b0769183d6585ec786868eca583b4489c0806083a342aff352d70fb1c12410c0a894c95c3ab2a94af7f061887bf05d95b5c6f4aef7621a0ac4ae03bae4239e766b38f767df4418301a89f8c4c6da454deb916c44d337fcb213c12b17c97b80b867e6ad2f23df6814a77e5c650062c7a8576bf065444426a4740c0ff3c332b04869904d089be73fb7a8c5e85502152d50c2c5f6d73bfa47b626b84f275547ee3b0b002548c47cb343cbb841f03bfdeb70eec2849076b0d0194314a7a575d5462ccbb304e3326dcc0a8a46cb4051cd0d4524c3f9aec61fbc4776fb19a34189faf7b9e0bc1361a583d10556278b743a6e4971bb0f3633efb8fc3e1794081ad1ab0fe435d503130e0247310dded7da5690073cf5727df39c0c92f31d73e880566a7de89454143ab6e44821fe377bd473223f233adfa4cda4ecf17f999919d19ad987b792335e9d8b0d96118fe9890bb93eba0ce6930d2a6a78c9ec561bcbbd028f36b8df59878beca00347ef8a40be3a699b7748716eb16058c503d97e59efc90482ff81cc5d5e8ee8d7c14ab31727b5f706f9363107be708f7e3480c66f0c4a90e43cbec40dcddfb150df3c2f1ceb50694c58a9c213e4a3aea91f5ddca22476ff89a8c5b1ace1295821288352b525895b939fbc9336bb8f1198fe2b649452a5da1ae6e3b88a8898cb24004be1e271b61d1a41de54f80a4eae68ee7d08e95cd410c98af7483081dd69c988f14e7734648f786e68a8fad05ad2607eb7a982c424d8369ba5854180fd2c16e8e62f225dd0a581e28c23d88170f4964a451eff791f0ed186a2d5bc7b0f71a419189b903aa617578e1cd829f9d6de8608a2419d60b8b1ef309d6a69658831fe507a207307018b4fb61962fdc93adff2db57a04b64cffa123040a4ac205aaa50b56561fa4a4d5fb948f32fc4c07998ac86c405983bc62c633ef19e104bd7a1aa082d458d4951987c76a8029744ca91c5120a54f8976c08d03305d9e6f34db756277cc3dd05eb1e57f5982bf5f007cdcd2d377616e8d5d2c523edc52e1dfa46ba5ee78166a97ff59de0dcbaf484d04ff2dc4f73362a5ff2291a67271975be9279202f6d44e74845ff8b0e88bfe151f6acdd2f97c44c7a905b2b724cda679d655da74af8fb50d16afcfa94544c603c45a311018a70ac57c85e619e9f847d0542faed71d1933ae7697f8c96d809ac330cb0bbad21b562e6b6fc8d6320eb37fc1d0f93e6791bf3f1bfede5a31b5e05721b241cc462a1c9727f74e30a2e9cb3ad8201f112d375bf870e1e4c10e571500d4b29e94e7e339523d4164c7c51cc4fce0fa93c6f4d10517a80384ad1fec87bc4a18d0023f9028fd888515bd0308d84e4ced9b59d4b123201087f18a4748b464c12bb2fa5d5b2a6096d1dd8c2f68984d9df8e18e14f9eccdfdccbfc55f4839fad797b3b24568eb13a63315ba4e988d336212e2e0b6c5e8793ac4bd3dd7a0bbc2467b2d7fcd291bae7d1edc43cba69e83a731f3030e5bc4da80e3017bea8086a783564890cdf4aa02beb51e0b21fdde42c6145eef2e4fb27ca720a3cb697a9d32b6d3177f65b2e684ab1f477d4c759e615fd94a10925551af15f2465355df146095c9bc73d693e40cc275b936ae49b5b3288030b4ce7bf726ff3610007e3af0da844cd4610124d95cd5895c022cc6081c2b1654284dfb9d9ac7b623324a54ba22e55184b7d0daec9036ab1d6b43b6350acc3f107219600041a283f6abdcdf9c864d7a93155e8afe22d1438c0bd5195e6f09cc72091a01fff06c3b5110886b6021c8666531d798b64f8421bbc9a66405b405781a880b2a0e04ab6dada5d3c2e5265fb3339830404ca8f64e051adc36e59737a8e2e9ad9d77cd93ec786f032ab70b608a057a646cd92206d321edcedc602b033944b0b7389ca95c8cb2d9aa7a4ad331f3d9561290e5b1af38d7164cf0c6866a58d60e53b4277ae4a3c02ff94a9abddc2dac439cd72d0ab4c8b97b110c48eac6704e6c038ba0fabc921f0e8b745d8a1d5990495bd93173bcd55ffa08c60b550a3323e18a34d34ff4de42b982b78948d736c13633a41a090a809c65410dc47c03ee8ffc598009f89f14f55f11340d56cd1dfb669c26072838f0c4a995a81a74b65c9bb04cba837f04b6048a62ea1a3321a85169ec43643d41c0f3263d4d68412c5c2d6a02dcb05e5318dedbb62e105fccd58a4a1834179689b11aa0aebc013203fb0d184963606d30f7d85c5380aba6b2ea934044d80e1eaf617897c79b78450452082a64413ad6fec698713608d737c2b6eb8a29925c32ec7237017227adace624e4902c0b0a20865c76aec6f8b30cf197c8a3376f629499c0e79bd687de31efcf30aa9f61b1adedc634a40b97a3dc410f111c50ad8e5fbfca9d40fc59b7239e6c48ce891e45d89450a0b964a5f8c22811b2999460c97e5f3c4b9f3f2128e9122157638b85432ffb50d3e234557e6a45b05266803d9cdc7e484ba3a8d6f735e6fdd2b9d2835d066e58f132d48682aec18abd9ce5161758f860b821406b06455975d0af5589ee2bf375034d8ae7704d92a113fe34ef6ce6f970841281eb38ec8edd5793ba2885ca1a806cf7803b324ebc97006b93478631a0bcf3ad65b1efa56334f3ad5244c86a4a0081f10337cd30ab6983dfb31a90cf08aa904ee54bbcecbfdd4ef6a427a6f7a08a180ad4674e0d6029cd14d068b3f06e9b7742e5bc9ffab5d4717640bf3cf681022feac69d933ecbf53995177883c8811fa403806bc2b70585bfc844ed56eadc729437cb472cf91777c26b5f7edff5117b76edaa3b2c631afe20065dcbdbae122f5c44d9c9def516ce64e44aa88007e8b4cbf4fe7d3034ea842c65e22128496e9d46d717f661048f77473e93040709ebbe42f9f8dfdb8ce1e57c47d1b8660c373b2a4ae8d9b3dd7c1aac04436f82e8bc8fda445b4f53842c22ad6d8e4ee80bfbfecfa5469f41f60a8a43e3b9c140cebadf29f29f9abff89b48575d2626c69af7a53756978fe5115dc49edff0b6721a3b3d26bf4e6b78e99cd8d396bc7378e3d7d786466d059b79b23a27672acbbe20b8bb3ac6c6d59951f86d32167840c5e4f836e7dac3815342e55924c64e4ecdec680999e7863ee2a790c41fade6424f828f2990ea0c57a3856df10fd96aa120335d1374166f78e4131dfc07ee66699f5651881a4de65d481dfae3a15775b060757f09cb32dcb80bcec44778f4460c567dce2d58d79ca2497133fba07d137080e8040bee4320df29ff60c845c04cd8ec9b6a8c67b79ff192039e948f00a89b36c53872da596c01b2d5fec38e3789968f8e3990620e99c9b9a9448e993d9b1b1b56444792687c4dc528f3dd34167716c7bf17bc11fe891249718358d53c633d7fbefbafd687c19dc53e872e63f469dee2658f3e8aa196ceb91b9aa0c70886295a72646bea0821a5e21a5719cdd18fa095c8a125a2bb01f92445e8f8d8d56dfe7276a1ebd45d8cb336b687d906770b16b907ecea0a9d1f437f9e0124a3d2c87711482d1f687625b9445362bce7b40101a8c0bd752e487dbd76444cdb10e8472a69fdf1c8cb0ffa8647fdf27c59e206b2b6f1779ef491c06ff6c7b40ddc806cd9c4d78d7220e9435f595ef6f3c3f56a6a5b6d5a9833a98a5dc831673323953f2cddfe06e17a01f2bc54bd01ce9adccc844958f494c7b4234af6c99463b7d8d0199e78330595608bc9fe942d60e48b6ec35489e39b1eba6edd4254a03b0bc72a7e10a36d5ab60ade649f2b66ff90a6f4d949a6fa25eabf51857b41593332b753ecc79ee56972d5f0fa42d54e381e45576e2546712401309773abec949afd8792d06f40a7db284255b1f1bf9e3045fefc24996a1bd9426bdd71d4947b26b8f72d7d20e44513a95908983d0c66e4cb5046416ae91fa355d57bb133068d8a14028fbf32518be84be52e070f7eb18ef189291d1f5224d9939e915dc92d4717329820d49f1efb11868ad0a317879bc3bbc2d2bc5c53f12e5c2d30e6e4c74006dd2e969a9db870debea3127e60e63d7f119a0ece832f86212f606f3ada4f90a316109d2cf9b862bfc7946c2f19cb011d57fdd526976c959bdd2202d53b229fcdddf7fbefab5885c1ee3f8988dcb32ce5fb58a007198b3fc51255fc70683dcfe60049423b9e8229d47f56b1045b7a14e77acc4de36af13f57681c9fba939763d775a96072c4798e138c8d7e6c9c9fc9d8b1749e6a8f770cb9c9b1549f337518637cb93c7bd38519f2511409a2a06bc2ef1b12d60fe2b022cfb53027b1b3c7bd3ded418990b3cf5509bb877b6ddb8a104b6b93b31587e3873ea34dee425ce8679a545f87ab83b14e09372051c80451064d9e3daed9ec8c0905be95ce403118ac4fa67439e3f48963699471e6754a477427cade303f6b4b3daf272c5098c2bdc14e5768c468cc74f8513129e6b728ccbbea852cc3442e71575741980452f6cdc8ed9dc4c7aa0e24deb67510816c24321663c34852574d05f0c97b789d51ca43e6508b3a758e05206cb9d70512512d7a0c6ac2cccd9b848316e188a2a1b7ddffddccb05ad5ec5bae06d4b7f3d68e5ec0f85852d47cb4fca8049ccdfb6ac0b14ccad5afdbf2bf0decd1c2c4a815f3ca9a74a91a71828622ddaaf4a1b29974f409aef5967eff9daed81995a5b63a7a97020fcb7334bfaee724f3564a52fb175a70150dd2fe7412663fbeaf70f90fd001eb28bd9950741115af9a80750492265c8f77bf44bbbacfce219fa25eb73e0b5c980d67afecc5a4dd143cc93f1033197bc7d1883a4a9d6290e733798445335007843cb2d78085e3caf15e9befc277bfd47fe3fe82b5f162631982ddd2223b1bda929184a0708123fe0f432ae3b60776237438e39259d2f01fcdd4af6c8de6fe37f7b2f7fa9a0908ad8b519c2a364fec90ce1d127b6ff9c743e742ee75e4c1bb72ef0d35ba95817d48e139d3f6cac911b0ee9ed6405eb4281d8279f2dc57743773ee32c62e5fe31c3a3db1f418c1188e318a8074f26cad21084ca22a5b62c6f4ef08e119b1e4526a9eee2f81a23560de01fad97574e3b7741865387fd3b8bf97b72448d6826158f39972f98850d59833551a5ea576c5dc57a62f91fba47eb742822f6e92c21acbad8fe0f154e28668f1c309c5eab9298d7974221de840ba8e0ea39c133d2bed6025561815d6c7629780387f1e91025f2c099508fa85bc419a8c10dacd722c219fddee7c2f3173a0627c3486d23808ea6475ad6168e7acca3b41cda7abf3c1c2993e3b4d6cfbdbbd26b9bbf9461a60bef2c57da5dc92b610ed78b95cb8924f4eb418389b3e94768a37c8794bdcab0a824f8f922797aef48836fd43c742521ea2a6012e0e4be56b69a93e7b5a3ecdf0a3ddf83c96f788f92b1245f83de55341cff821a42f3e2accfd1a94f4bcc5a16497c0ae0895b2e77588c3bfaefa433c49e198a42c2d02067b3e7970d471f9f8a2751066e07b35ce2076c962cdc9c36916f95bff35512443ae4df3bb5c21150501b1b87a759986970b2cf10ff3d2c5492f78c864ae6788583b4bd1e87eb8a9e63b900fc66504c796dfc742997b613ca7f1767031b93f997f9a5e77f70b888a123de6f15e0f8e1e8df8a1abbf1431fe8224ce9f4199ea3a9807dfe3a7199f3fd64e5f352a257ec6e1410f0d2e3df8bc1d9ae692cdb6cc31cc553dd0c1e8ad4b3b5830b12731cb7910b6b196125b1ac08d2b8bb64d8ee5428b54fbfe6a618cbad4bbf192c5cef2bdb8735267e1363e522957f9ac8b739e2311bf4917b314155060b33b873c08e71db41f9eb89d83f1e28036e615199f3279b9b23e9a74ae4dd0939b0e09b636a62fee5def75fd5f1738185895814aa4926f4e9f49050aed5e3eb5c5c41a544bd77b7fa67532d2b43d4ad6e9541c5758a51b38dc6bfaf2facd583a3cd6fce0d9e6e75c10fad3890cc79f2c578483a9395e8d286c680a97b3ca16a37dcdde26515b2b3dfe51a0fa167a1b5c3cf994714f00d2f10451937ec8da1cb7aba2480373a7c27b4285ee87433ccc5bc3ae848b424b458e53d89f45ad4c89be7cb6f037c6b151fe0dffb9e1acb61f776ce81e9f9350fcecc1292dcaa93d42d967900163aee7ccef45803dbc020d807ca7453fde033bfe99759a0c23ea8c48b2e85acf2a315020d922acb1c11fccb79faf7753cfd7478b943e575721e950acfd127675a73136e16e41e92bee3bf0afef46311f37b4728b8b58072de1478dd538cc268dcdd19c1b6879b19efd38d2a17075bde5ce838a02487cc10a379f89debf6eba0224ed1b9c90b1902ba9fd4e09a22bc58b190debed529a9a6bb7faf6b031a167fb74146f2cbd9f25cad85177332d9cc9bd0377759ed97be20cfd2b2b7f2d0de5740a1ad597de1df55197518e234c207406e66afc000dc7147e5d4fed22f7ebc374e99019d21555a6620ab6d9f48b34ecf8a9676020ec4c75e6c57a36c85d6e5e461e1da1eef59e6cd831fca7bf6797f6d19b4dd98fd4cf3937575b31e3cedbec7f654cda2d3f9882c83a1c9699e3a97b1885e6631c8616f36eaa6e6b080fd0509e958b50683245c479b23cb9ddc878c8b4049c83b2465a30539d7af6d56be0e906de2a723b0eedcff8642fa9b72d3268b2016c04addaa18164a302993364bc0cf9feb5913e21d7256e9e39821a15a573d3916756d54edf5c04d9f7cde194a0357bb1bf2dca4b420087bacf331f08c722a2900673bdbc069420b826903cf8e1b72e08eaf2f5454ebec4b13a760268812a3cdcbf360e744a18f85c54a9c850232d54e0cd425820f89a9d7b24df097a8c7f6cae482d323e8d603e25d4cd7d6249130349f4929e2f4dfd7ffd3f9582f556f2df951ee0a2e35731eba11c195f5b19d00a45331054c26aadb07a94179da77d5067c1a09268810837c865869655169a99b2ef3748612a75c0e51b508dd264f7fef021f6883d395b739f12ef8f8345587a2c62ec697307c697fc559afb637ca120b71a1a190ba0a8e9e3d2e0686c9f77f182f3518cedd0875352847fba28e2dc1fdcd14631257c793e5747eed67f3c9c1b2b14c848c51737fb4a40ca97bd27d5bf6d30344ab922526ff1df48946bdb3f54f0842c21dc276da591698ad800b2b6d785a182ed3b621658e6644b19256112835f29e84bc6c01465c2f5aa6e4be425be3662ccbaa4f2cb64529871d510aae287f3711d64eac16458389f9d07fb1a3c06168acf937c1a014aeaab28beb290eacafcea6ab6cec0e8b8c93d2f4f558fcf10b66541431e1be6d90af057b71f897ae24a07db72b7ce277a328f3f8b219a0393332a4f6834bda06c865f4228db30c33e1d1dd3d57dcb9633b58bcaaee71b4c3a056a4c7c3e42310dff47978eca4f59209603e43758a4236123f0798a4c061a907779567e12f4d3f5fdc0ef77ca09337aa56821be637b40e2e083f1ccaef7f5501fc7988a8f1f578b98b5479ff3ae00dc9d97b27f4996e24ad421890fc19e43f1565c98da0c8da8d258a3f2ce3ccccfb0d63b32c10f128774e71ff6652ecae4e624b680cd9a961c293fbab38bf2fc29a17ff5909705e6f3532f11cb80edd7dd8517f9f4cb10f16595006f3fd9f0ecc15a0ef17dc4d8bac8d60c25112b2733bb2797bc10693b08e9d1052dd6f7af88ad240183b7997416b684442fdf6121ac08d79082250da1352e5590075cbcfd6aad16ed37ccdd8772ab2059c5e4c51e223392c33c0e86b8c4fd81d4d1951a09f0fb467f488aa13e98eff188836f2526479fc0f236964cb850dbfbd6ba96de90e69fcd7fbec1b7a898b5b9015e5ec1dcb208239cabe06ee7ceeed005d0138511f76221b30c211b8255b753e133b0bb1ca4dec7e6b7b0be1fe280c62db489e59f398fc6e4a7e976aa83e10b56c86e2ba108dc9c922c7c683d8840eebcd5f67591bae61ffafcff45e4c291666a0a5270a3d8bb86e1b44059b96856f52267b6376c2d3cce19342bd0e27e9706fe9b37308cb7c4570b91eeb926ef13bf4a473e469c39c70a418ff7e7294f7ebcd6af8c22ebc536e386ce4e6c8c3f8b091cc604e00c0423fc58ade70fdf058d66f53d1f47c72970c391accb38f798bd95db7284a75608fd308d3df2cd47a17db6bf0410faa9c911b1bbc09b98cd2571eaf1e03a7ebe9129e9c8cdb94e1adfdb1e7b1635b8689479d2f7bf16f66558f54c1843772a029ff0154170716e2a8df2a46bc07f0a906e31779c0f785f5dc363a6ab88b28afa75d564cbcaef09524353b4c6a74ed5ebb9da07404b260c6b8e79eecc36402834d47371f4b3daefd38e7b3172bea2956d870b05d793778e654c5e2a2bb19a561eb4a5592e942399e0abb32b16ab7777c5a02e832aa21e286e9b40ffaaf15973fd4c689a924e52fdcbbe640adf30ac5d01712febc0c24d827d4568be679a3b8f1f0576a6e9276554438f82aa2ae846e2c7e9993be65d68f7f1449a9dd62507103498838fc50f61a3f3b07ec9bafcadabdb112084ec9d972dc6318282d495fbb07346fd2345736a0fbf73a9c61ac1416c2ab778ba6bfddb5a7339357b25d7c3232315ab670ab49cae6910795f120d18955", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 563.823869ms ago: executing program 6 (id=2447): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 490.012387ms ago: executing program 6 (id=2448): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r0, &(0x7f0000002300)=""/176, 0xb0, 0x2) 437.335977ms ago: executing program 3 (id=2449): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe080600010800060400012aaaaaaaaa2aac1414bbaaaaaaaaaa00ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 436.602769ms ago: executing program 0 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a", 0x23}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x20008040) 331.29048ms ago: executing program 6 (id=2451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 297.044919ms ago: executing program 7 (id=2452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 242.019282ms ago: executing program 3 (id=2453): clock_adjtime(0x0, &(0x7f0000000700)={0x1000000000066fb, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) clock_adjtime(0x0, &(0x7f0000000100)={0x5eb, 0x6a, 0x55cd, 0xa, 0x48c, 0x7, 0xd, 0x422, 0x2, 0x98e9c422, 0x800, 0x2, 0x7, 0x2, 0x7f, 0x5, 0x0, 0x5, 0x1, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) 0s ago: executing program 7 (id=2454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x20048441) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/135, 0x87}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): 344.066387][ T9457] io_connect+0xa4/0x4f0 [ 344.070633][ T9457] io_issue_sqe+0x3e2/0x13d0 [ 344.075229][ T9457] ? __pfx_io_issue_sqe+0x10/0x10 [ 344.080251][ T9457] ? _copy_from_user+0x99/0xc0 [ 344.085023][ T9457] io_submit_sqes+0xa75/0x1d90 [ 344.089813][ T9457] __se_sys_io_uring_enter+0x2c8/0x3200 [ 344.095367][ T9457] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 344.101281][ T9457] ? ksys_write+0x22a/0x2b0 [ 344.105795][ T9457] ? __pfx_lock_release+0x10/0x10 [ 344.110822][ T9457] ? vfs_write+0x730/0xd30 [ 344.115249][ T9457] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 344.121226][ T9457] ? __mutex_unlock_slowpath+0x21e/0x790 [ 344.126859][ T9457] ? __pfx_vfs_write+0x10/0x10 [ 344.131625][ T9457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.137603][ T9457] ? __fget_files+0x2a/0x410 [ 344.142207][ T9457] ? __fget_files+0x2a/0x410 [ 344.146818][ T9457] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.152798][ T9457] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.159123][ T9457] ? do_syscall_64+0x100/0x230 [ 344.163889][ T9457] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 344.169442][ T9457] do_syscall_64+0xf3/0x230 [ 344.173951][ T9457] ? clear_bhb_loop+0x35/0x90 [ 344.178643][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.184532][ T9457] RIP: 0033:0x7fd48557e819 [ 344.188944][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.208554][ T9457] RSP: 002b:00007fd48639d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 344.216972][ T9457] RAX: ffffffffffffffda RBX: 00007fd485735fa0 RCX: 00007fd48557e819 [ 344.224942][ T9457] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 344.232912][ T9457] RBP: 00007fd48639d090 R08: 0000000000000000 R09: 0000000000000000 [ 344.240879][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.248850][ T9457] R13: 0000000000000000 R14: 00007fd485735fa0 R15: 00007ffe246d7808 [ 344.256832][ T9457] [ 344.358407][ T25] usb 2-1: USB disconnect, device number 26 [ 344.459114][ T9463] netlink: 'syz.6.903': attribute type 21 has an invalid length. [ 344.487708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.528284][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 345.540978][ T9463] netlink: 'syz.6.903': attribute type 21 has an invalid length. [ 345.551639][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.6.903'. [ 346.231915][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 346.241067][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.275251][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'. [ 346.417791][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 346.435632][ T5887] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 346.469428][ T5887] usb 1-1: config 0 has no interface number 0 [ 346.529384][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.552821][ T5887] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice= 3.6f [ 346.562376][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.567715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.570571][ T5887] usb 1-1: Product: syz [ 346.581675][ T5887] usb 1-1: SerialNumber: syz [ 346.642226][ T5887] usb 1-1: config 0 descriptor?? [ 346.660071][ T5887] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.331891][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 347.535919][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 347.607715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.617472][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 348.089502][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 348.305638][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.366220][ T46] usb 1-1: USB disconnect, device number 20 [ 348.451306][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.519895][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 348.548133][ T9522] program syz.6.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.570809][ T46] quatech2 1-1:0.51: device disconnected [ 348.647748][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.668332][ T5886] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 348.793388][ T9530] netlink: 'syz.6.920': attribute type 21 has an invalid length. [ 348.919397][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 348.968083][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.034787][ T9536] netlink: 'syz.6.920': attribute type 21 has an invalid length. [ 349.043710][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.6.920'. [ 349.208528][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 349.209060][ T5886] usb 2-1: config 0 descriptor?? [ 349.426720][ T25] usb 6-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 349.433819][ T5886] cp210x 2-1:0.0: cp210x converter detected [ 349.491168][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.569259][ T25] usb 6-1: Product: syz [ 349.573540][ T25] usb 6-1: Manufacturer: syz [ 349.602634][ T25] usb 6-1: SerialNumber: syz [ 349.625971][ T25] usb 6-1: config 0 descriptor?? [ 349.653415][ T25] usb 6-1: bad CDC descriptors [ 349.687826][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.903527][ T46] usb 6-1: USB disconnect, device number 13 [ 350.140882][ T5886] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 350.727706][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.736539][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0 [ 351.441600][ T9572] ax25_connect(): syz.0.930 uses autobind, please contact jreuter@yaina.de [ 351.740212][ T9584] netlink: 'syz.5.932': attribute type 39 has an invalid length. [ 351.767712][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.408577][ T5886] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 352.572140][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 352.595456][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 352.611259][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.632851][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.644618][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.667419][ T5886] usb 1-1: config 0 descriptor?? [ 352.673343][ T9592] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 352.807698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.047737][ T5887] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 353.848094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.999559][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.010681][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.020749][ T5887] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 354.030142][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.041709][ T5887] usb 4-1: config 0 descriptor?? [ 354.371274][ T25] usb 2-1: USB disconnect, device number 27 [ 354.399001][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.481527][ T25] cp210x 2-1:0.0: device disconnected [ 354.495696][ T5887] sony 0003:054C:024B.0010: unexpected long global item [ 354.543937][ T5887] sony 0003:054C:024B.0010: parse failed [ 354.560844][ T5887] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 354.706953][ T25] usb 4-1: USB disconnect, device number 19 [ 354.887781][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.534139][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 355.540359][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 355.579665][ T5886] usb 1-1: USB disconnect, device number 21 [ 355.624197][ T9623] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 355.924844][ T9634] netlink: 'syz.5.942': attribute type 1 has an invalid length. [ 355.927712][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 356.137854][ T5886] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 356.267963][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 356.289429][ T5886] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 356.307187][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.338656][ T5886] usb 1-1: config 0 descriptor?? [ 356.422846][ T25] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 356.445912][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.469129][ T25] usb 6-1: config 0 descriptor?? [ 356.634195][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.653863][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.881861][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.951893][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.967821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.311377][ T9623] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 357.705807][ T9623] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 358.007830][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.668008][ T9631] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 358.765494][ T9631] bond1 (unregistering): Released all slaves [ 358.839544][ T25] mxuport 6-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 358.839589][ T25] mxuport 6-1:0.0: probe with driver mxuport failed with error -5 [ 358.842089][ T25] usb 6-1: USB disconnect, device number 14 [ 358.924171][ T5886] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 358.924237][ T5886] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 358.972197][ T5886] usb 1-1: USB disconnect, device number 22 [ 359.047810][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.857129][ T9701] block nbd0: shutting down sockets [ 360.087801][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.729521][ T9714] FAULT_INJECTION: forcing a failure. [ 360.729521][ T9714] name failslab, interval 1, probability 0, space 0, times 0 [ 360.742465][ T9714] CPU: 0 UID: 0 PID: 9714 Comm: syz.3.958 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 360.752722][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 360.762775][ T9714] Call Trace: [ 360.766049][ T9714] [ 360.768979][ T9714] dump_stack_lvl+0x241/0x360 [ 360.773663][ T9714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.778859][ T9714] ? __pfx__printk+0x10/0x10 [ 360.783447][ T9714] ? fs_reclaim_acquire+0x93/0x130 [ 360.788568][ T9714] ? __pfx___might_resched+0x10/0x10 [ 360.793860][ T9714] should_fail_ex+0x3b0/0x4e0 [ 360.798549][ T9714] ? tomoyo_encode+0x26f/0x540 [ 360.803310][ T9714] should_failslab+0xac/0x100 [ 360.807995][ T9714] ? tomoyo_encode+0x26f/0x540 [ 360.812756][ T9714] __kmalloc_noprof+0xd8/0x400 [ 360.817519][ T9714] tomoyo_encode+0x26f/0x540 [ 360.822115][ T9714] tomoyo_realpath_from_path+0x59e/0x5e0 [ 360.827756][ T9714] tomoyo_check_open_permission+0x258/0x4f0 [ 360.833678][ T9714] ? tomoyo_check_open_permission+0x207/0x4f0 [ 360.839751][ T9714] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 360.846168][ T9714] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.852165][ T9714] ? tomoyo_file_open+0xa7/0x220 [ 360.857107][ T9714] security_file_open+0xac/0x250 [ 360.862043][ T9714] do_dentry_open+0x328/0x1b70 [ 360.866834][ T9714] vfs_open+0x3e/0x330 [ 360.870908][ T9714] path_openat+0x2c84/0x3590 [ 360.875539][ T9714] ? __pfx_path_openat+0x10/0x10 [ 360.880489][ T9714] do_filp_open+0x27f/0x4e0 [ 360.884996][ T9714] ? __pfx_do_filp_open+0x10/0x10 [ 360.890025][ T9714] ? do_raw_spin_lock+0x14f/0x370 [ 360.895094][ T9714] do_sys_openat2+0x13e/0x1d0 [ 360.899777][ T9714] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.904971][ T9714] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.910961][ T9714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.917288][ T9714] __x64_sys_openat+0x247/0x2a0 [ 360.922139][ T9714] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.927539][ T9714] do_syscall_64+0xf3/0x230 [ 360.932045][ T9714] ? clear_bhb_loop+0x35/0x90 [ 360.936722][ T9714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.942614][ T9714] RIP: 0033:0x7f6ff3d7e819 [ 360.947028][ T9714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.966725][ T9714] RSP: 002b:00007f6ff1bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.975140][ T9714] RAX: ffffffffffffffda RBX: 00007f6ff3f36160 RCX: 00007f6ff3d7e819 [ 360.983109][ T9714] RDX: 0000000000000002 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 360.991089][ T9714] RBP: 00007f6ff1bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 360.999062][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.007032][ T9714] R13: 0000000000000000 R14: 00007f6ff3f36160 R15: 00007ffc43068ef8 [ 361.015015][ T9714] [ 361.019270][ T9714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.127803][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.879577][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'. [ 361.904918][ T9732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.167839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.339261][ T9755] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 362.431750][ T9759] netlink: 'syz.3.973': attribute type 4 has an invalid length. [ 362.443882][ T9759] netlink: 17 bytes leftover after parsing attributes in process `syz.3.973'. [ 362.479881][ T9758] bridge0: port 4(syz_tun) entered blocking state [ 362.508845][ T9758] bridge0: port 4(syz_tun) entered disabled state [ 362.522589][ T9758] syz_tun: entered allmulticast mode [ 362.547911][ T9758] syz_tun: entered promiscuous mode [ 362.560176][ T9758] bridge0: port 4(syz_tun) entered blocking state [ 362.567171][ T9758] bridge0: port 4(syz_tun) entered forwarding state [ 362.799409][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.976'. [ 362.831323][ T9773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.976'. [ 363.207685][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.873795][ T9812] netlink: 60 bytes leftover after parsing attributes in process `syz.5.993'. [ 363.884620][ T9812] unsupported nlmsg_type 40 [ 364.142696][ T9819] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 364.200316][ T9824] syz_tun: left allmulticast mode [ 364.205484][ T9824] syz_tun: left promiscuous mode [ 364.212966][ T9824] bridge0: port 4(syz_tun) entered disabled state [ 364.230899][ T9824] bridge_slave_0: left allmulticast mode [ 364.247700][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.250889][ T9824] bridge_slave_0: left promiscuous mode [ 364.274339][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.287808][ T46] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 364.305899][ T9824] bridge_slave_1: left allmulticast mode [ 364.306601][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 364.312182][ T9824] bridge_slave_1: left promiscuous mode [ 364.326866][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.339587][ T9824] bond0: (slave bond_slave_0): Releasing backup interface [ 364.351168][ T9824] bond0: (slave bond_slave_1): Releasing backup interface [ 364.412310][ T9824] team0: Port device team_slave_0 removed [ 364.424344][ T9824] team0: Port device team_slave_1 removed [ 364.435615][ T9824] bond0: (slave batadv_slave_0): Releasing backup interface [ 364.448343][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 364.458723][ T9824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.463096][ T46] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 364.466274][ T9824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.486682][ T46] usb 6-1: config 0 has no interface number 1 [ 364.493203][ T46] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.500202][ T9824] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 364.512361][ T9824] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 364.525262][ T9824] bridge0: port 3(netdevsim0) entered disabled state [ 364.526743][ T46] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 364.561836][ T9819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 364.575283][ T46] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 364.617762][ T46] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 364.649744][ T46] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.672765][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 364.694959][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.717816][ T46] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 364.727056][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.767715][ T46] usb 6-1: Product: syz [ 364.772008][ T46] usb 6-1: Manufacturer: syz [ 364.776705][ T46] usb 6-1: SerialNumber: syz [ 364.784468][ T46] usb 6-1: config 0 descriptor?? [ 364.790594][ T9817] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 364.809101][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 364.833863][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 364.844692][ T46] usb 6-1: invalid MIDI in EP 0 [ 364.914040][ T46] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 365.054112][ T5886] usb 6-1: USB disconnect, device number 15 [ 365.054221][ T9838] bridge_slave_0: left allmulticast mode [ 365.086384][ T9838] bridge_slave_0: left promiscuous mode [ 365.101915][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.145777][ T9838] bridge_slave_1: left allmulticast mode [ 365.165080][ T9838] bridge_slave_1: left promiscuous mode [ 365.183445][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.261562][ T9838] bond0: (slave bond_slave_0): Releasing backup interface [ 365.287708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.303675][ T9838] bond0: (slave bond_slave_1): Releasing backup interface [ 365.405803][ T9838] team0: Port device team_slave_0 removed [ 365.431000][ T9838] team0: Port device team_slave_1 removed [ 365.437492][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.459176][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.469726][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.477416][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.527880][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 365.569629][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.584550][ T9841] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 365.597107][ T9841] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 365.967453][ T9864] ubi0: attaching mtd0 [ 366.008578][ T9864] ubi0 error: validate_ec_hdr: bad VID header offset 64, expected 1024 [ 366.017496][ T9864] ubi0 error: validate_ec_hdr: bad EC header [ 366.023664][ T9864] Erase counter header dump: [ 366.033265][ T9864] magic 0x55424923 [ 366.040005][ T9864] version 1 [ 366.043902][ T9864] ec 1 [ 366.047834][ T9864] vid_hdr_offset 64 [ 366.051809][ T9864] data_offset 128 [ 366.055898][ T9864] image_seq -711406779 [ 366.102133][ T9864] hdr_crc 0x9579361e [ 366.106866][ T9864] erase counter header hexdump: [ 366.118996][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.0.1015 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 366.129382][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 366.139899][ T9864] Call Trace: [ 366.143205][ T9864] [ 366.146155][ T9864] dump_stack_lvl+0x241/0x360 [ 366.150869][ T9864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.156101][ T9864] ? ubi_io_read+0x580/0xc30 [ 366.160745][ T9864] validate_ec_hdr+0x204/0x330 [ 366.165542][ T9864] ubi_io_read_ec_hdr+0x19e/0x640 [ 366.170602][ T9864] ubi_attach+0x7e7/0x5b80 [ 366.175088][ T9864] ? __pfx_ubi_attach+0x10/0x10 [ 366.179970][ T9864] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 366.185381][ T9864] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 366.190606][ T9864] ctrl_cdev_ioctl+0x346/0x570 [ 366.195378][ T9864] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 366.200678][ T9864] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 366.205970][ T9864] __se_sys_ioctl+0xf5/0x170 [ 366.210568][ T9864] do_syscall_64+0xf3/0x230 [ 366.215077][ T9864] ? clear_bhb_loop+0x35/0x90 [ 366.219766][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.225658][ T9864] RIP: 0033:0x7fac5ed7e819 [ 366.230076][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.249684][ T9864] RSP: 002b:00007fac5fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.258100][ T9864] RAX: ffffffffffffffda RBX: 00007fac5ef35fa0 RCX: 00007fac5ed7e819 [ 366.266067][ T9864] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000003 [ 366.274032][ T9864] RBP: 00007fac5edf175e R08: 0000000000000000 R09: 0000000000000000 [ 366.282005][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.289972][ T9864] R13: 0000000000000000 R14: 00007fac5ef35fa0 R15: 00007ffed32df7b8 [ 366.297956][ T9864] [ 366.304603][ T9864] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 366.327695][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.367854][ T5919] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.381686][ T9864] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 366.508978][ T9876] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 366.547668][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 366.587734][ T46] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 366.612117][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.627765][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.658228][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.696634][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.730061][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.760849][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 366.772529][ T5919] usb 2-1: config 0 descriptor?? [ 366.782838][ T46] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 366.807955][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.844438][ T46] usb 6-1: config 0 has no interface number 0 [ 366.851073][ T46] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.862920][ T46] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.874086][ T46] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 366.885566][ T46] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.898701][ T46] usb 6-1: config 0 interface 52 has no altsetting 0 [ 366.905528][ T46] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 366.914754][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.946178][ T46] usb 6-1: config 0 descriptor?? [ 367.124291][ T9900] team0: Mode changed to "loadbalance" [ 367.196588][ T9897] bond0: (slave netdevsim0): Releasing backup interface [ 367.216701][ T46] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input18 [ 367.223429][ T5919] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 367.278850][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.286462][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.314372][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.342260][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.367693][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 367.379293][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.429424][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.436864][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.485478][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.506257][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.513708][ T5919] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 367.524146][ T5919] HID 045e:07da: Invalid code 65791 type 1 [ 367.530649][ T5919] HID 045e:07da: Invalid code 768 type 1 [ 367.536312][ T5919] HID 045e:07da: Invalid code 769 type 1 [ 367.542450][ T5919] HID 045e:07da: Invalid code 770 type 1 [ 367.548655][ T5919] HID 045e:07da: Invalid code 771 type 1 [ 367.554312][ T5919] HID 045e:07da: Invalid code 772 type 1 [ 367.560374][ T5919] HID 045e:07da: Invalid code 773 type 1 [ 367.566026][ T5919] HID 045e:07da: Invalid code 774 type 1 [ 367.572095][ T5919] HID 045e:07da: Invalid code 775 type 1 [ 367.578226][ T5919] HID 045e:07da: Invalid code 776 type 1 [ 367.604446][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input19 [ 367.683879][ T5919] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 367.709988][ T3067] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 367.734031][ T5919] usb 2-1: USB disconnect, device number 28 [ 367.760313][ T5887] usb 6-1: USB disconnect, device number 16 [ 367.760342][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 367.880383][ T3067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.905738][ T3067] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.946446][ T3067] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.984404][ T3067] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.020157][ T3067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.065988][ T3067] usb 7-1: config 0 descriptor?? [ 368.407709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 368.499561][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.507116][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.527911][ T5887] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 368.545379][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.577795][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.585374][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.622793][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.634232][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.657381][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.686774][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.694545][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.698202][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 368.723922][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 368.728372][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.752138][ T5887] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 368.769919][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.776405][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.794054][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.803796][ T5887] usb 2-1: Product: syz [ 368.822765][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.828754][ T5887] usb 2-1: Manufacturer: syz [ 368.838208][ T3067] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 368.846928][ T5887] usb 2-1: SerialNumber: syz [ 368.855707][ T3067] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 368.876535][ T5887] usb 2-1: config 0 descriptor?? [ 368.895566][ T5887] hub 2-1:0.0: bad descriptor, ignoring hub [ 368.909733][ T5887] hub 2-1:0.0: probe with driver hub failed with error -5 [ 368.917563][ T3067] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 368.944233][ T5887] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 368.970136][ T3067] usb 7-1: USB disconnect, device number 2 [ 369.447692][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.497578][T10000] netlink: 'syz.5.1041': attribute type 1 has an invalid length. [ 369.518020][ T5919] IPVS: starting estimator thread 0... [ 369.526663][T10000] tipc: Started in network mode [ 369.537676][T10000] tipc: Node identity ac1414aa, cluster identity 4711 [ 369.555200][T10000] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.578818][T10000] tipc: Enabled bearer , priority 10 [ 369.607738][T10003] IPVS: using max 24 ests per chain, 57600 per kthread [ 369.687882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.827928][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.904709][T10016] team0: Mode changed to "roundrobin" [ 369.952888][T10016] vlan0: entered promiscuous mode [ 369.967718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.973382][T10016] team0: Port device vlan0 added [ 370.107709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.247812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.387694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.488036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.527705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.667748][ T5919] tipc: Node number set to 2886997162 [ 370.975401][T10056] syz_tun: left promiscuous mode [ 371.013703][T10056] bond0: (slave syz_tun): Releasing backup interface [ 371.054113][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.061656][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.149032][T10056] team0: Port device bond0 removed [ 371.444661][T10056] bridge_slave_0: left allmulticast mode [ 371.450541][T10056] bridge_slave_0: left promiscuous mode [ 371.456269][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.578343][T10056] bridge_slave_1: left allmulticast mode [ 371.597725][T10056] bridge_slave_1: left promiscuous mode [ 371.603502][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.735816][T10056] bond0: (slave bond_slave_0): Releasing backup interface [ 371.765611][T10056] team0: Port device team_slave_0 removed [ 371.799354][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 371.826230][T10056] team0: Port device team_slave_1 removed [ 371.836054][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.860058][T10056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.891421][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.911757][T10056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.049741][T10056] team0: Port device geneve0 removed [ 372.071380][T10056] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.088058][T10056] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.096962][T10056] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.128174][T10056] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.247888][T10056] bond1: (slave batadv1): Releasing backup interface [ 372.269973][T10058] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 372.287361][T10064] team0: Mode changed to "loadbalance" [ 372.294594][ T5887] usb 2-1: USB disconnect, device number 29 [ 372.305414][T10066] vlan0: entered promiscuous mode [ 372.321559][T10099] bridge_slave_1: left allmulticast mode [ 372.341014][T10099] bridge_slave_1: left promiscuous mode [ 372.366714][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.404636][T10099] bridge_slave_0: left allmulticast mode [ 372.417845][T10099] bridge_slave_0: left promiscuous mode [ 372.435580][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.604620][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 373.241252][T10145] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 373.487548][T10161] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 373.645481][T10174] netlink: 'syz.3.1092': attribute type 4 has an invalid length. [ 373.717834][ T5844] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 373.879529][ T5844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.891856][T10184] Cannot find del_set index 286 as target [ 373.921303][ T5844] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.951939][ T5844] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.976389][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.013038][T10165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 374.046793][ T5844] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.366235][ T5920] usb 7-1: USB disconnect, device number 3 [ 374.410361][T10212] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 374.535449][T10218] netlink: 'syz.5.1105': attribute type 4 has an invalid length. [ 374.647695][ C1] net_ratelimit: 8 callbacks suppressed [ 374.647716][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.699599][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.727697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.836563][T10230] team0: Mode changed to "roundrobin" [ 374.855967][T10230] vlan0: entered promiscuous mode [ 375.014167][T10239] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 375.027023][T10240] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 1 [ 375.044710][T10241] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 2 [ 375.050673][T10242] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 3 [ 375.314273][T10248] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 375.469065][T10254] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 375.602231][T10258] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 375.687683][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.716400][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1121'. [ 375.767738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.189611][T10280] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 376.297741][T10286] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 376.727691][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.807681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.808906][T10311] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 376.962810][T10318] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 377.396939][T10336] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1155'. [ 377.590765][T10347] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 377.727442][T10354] tbf_change: 1 callbacks suppressed [ 377.727462][T10354] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 377.767745][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.847716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.021615][T10370] TCP: TCP_TX_DELAY enabled [ 378.213768][T10379] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 378.282974][T10379] tipc: Started in network mode [ 378.307873][T10379] tipc: Node identity ac1414aa, cluster identity 4711 [ 378.324655][T10379] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.332114][T10379] tipc: Enabled bearer , priority 10 [ 378.458038][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.507961][ T5920] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 378.697934][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 378.747818][ T5920] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 378.812188][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.836011][ T5920] usb 6-1: config 179 has no interface number 0 [ 378.868143][ T5920] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 378.919841][ T5920] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 379.012170][ T5920] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 379.075884][ T5920] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 379.099761][ T5920] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 379.127729][ T5920] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 379.136970][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.197558][T10383] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.217859][T10383] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.261171][ T5920] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21 [ 379.319984][T10078] tipc: Node number set to 2886997162 [ 379.326941][ T5194] input input21: unable to receive magic message: -110 [ 379.420129][T10403] netlink: 'syz.6.1186': attribute type 10 has an invalid length. [ 379.473806][ T5194] input input21: unable to receive magic message: -32 [ 379.489277][T10403] syz_tun: entered promiscuous mode [ 379.570201][ T5194] input input21: unable to receive magic message: -32 [ 379.588559][T10403] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 379.608922][ T29] audit: type=1326 audit(1732314041.932:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10382 comm="syz.5.1177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f777317e819 code=0x0 [ 379.632712][ T5194] input input21: unable to receive magic message: -32 [ 379.667651][ T5194] input input21: unable to receive magic message: -32 [ 379.696575][T10407] bond0: (slave syz_tun): Releasing backup interface [ 379.711972][ T5194] input input21: unable to receive magic message: -32 [ 379.727766][ C0] net_ratelimit: 8 callbacks suppressed [ 379.727787][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.743491][T10078] usb 6-1: USB disconnect, device number 17 [ 379.743543][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 379.759609][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 379.762546][T10078] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 379.847684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.927696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.983231][T10419] bond0: (slave macvlan2): Opening slave failed [ 380.268235][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.887762][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.920244][T10438] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 380.966182][T10438] tipc: Enabling of bearer rejected, already enabled [ 380.973838][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.168331][T10450] pim6reg: entered allmulticast mode [ 381.278022][ T46] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 381.287731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.458355][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 381.483063][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.508529][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 381.519053][ T46] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 381.530098][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.560034][ T46] hub 7-1:1.0: bad descriptor, ignoring hub [ 381.566168][ T46] hub 7-1:1.0: probe with driver hub failed with error -5 [ 381.606385][T10467] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 381.628096][T10467] tipc: Enabling of bearer rejected, already enabled [ 381.764205][T10471] bond0: (slave syz_tun): Releasing backup interface [ 381.808561][T10471] team0: Port device bond0 removed [ 381.842690][T10471] bridge_slave_0: left allmulticast mode [ 381.860803][T10471] bridge_slave_0: left promiscuous mode [ 381.866623][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.878518][T10078] usb 7-1: USB disconnect, device number 4 [ 381.890665][T10471] bridge_slave_1: left allmulticast mode [ 381.909222][T10471] bridge_slave_1: left promiscuous mode [ 381.916411][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.927722][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.935685][T10471] bond0: (slave bond_slave_0): Releasing backup interface [ 381.962240][T10471] bond0: (slave bond_slave_1): Releasing backup interface [ 382.006635][T10471] team0: Port device team_slave_0 removed [ 382.012721][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.044106][T10471] team0: Port device team_slave_1 removed [ 382.055597][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.068927][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.097580][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.118882][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.166259][T10474] pim6reg: entered allmulticast mode [ 382.327720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.910451][T10493] tipc: Started in network mode [ 382.930179][T10493] tipc: Node identity ac1414aa, cluster identity 4711 [ 382.945084][T10493] tipc: Enabled bearer , priority 10 [ 383.332008][T10502] bond0: (slave syz_tun): Releasing backup interface [ 383.498216][T10502] team0: Port device bond0 removed [ 383.538921][T10502] bond0: (slave bond_slave_0): Releasing backup interface [ 383.577520][T10502] bond0: (slave bond_slave_1): Releasing backup interface [ 383.620614][T10502] team0: Port device team_slave_0 removed [ 383.650954][T10502] team0: Port device team_slave_1 removed [ 383.657275][T10502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.687874][T10502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.697814][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 383.699669][T10502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.724846][T10502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.776475][T10504] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 383.827852][ T5887] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 383.847780][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 383.859649][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.897740][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.927061][ T46] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 383.974528][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.020370][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.027283][ T46] usb 7-1: config 0 descriptor?? [ 384.042149][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.062737][ T25] tipc: Node number set to 2886997162 [ 384.092975][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.137914][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.171528][T10514] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 384.191037][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.273894][ T46] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 384.466696][ T5887] usb 7-1: USB disconnect, device number 5 [ 384.480026][ T5887] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 384.768792][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1239'. [ 385.047715][ C1] net_ratelimit: 6 callbacks suppressed [ 385.047734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.096784][T10535] netlink: 'syz.3.1243': attribute type 15 has an invalid length. [ 385.127711][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.248744][T10537] team0: Port device vlan0 removed [ 385.447720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.597292][T10551] team0: Port device vlan0 added [ 386.016092][T10564] tipc: Enabling of bearer rejected, already enabled [ 386.029263][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1257'. [ 386.087718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.167700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.261877][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 386.271567][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 386.347787][ T46] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 386.488680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.509881][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.520388][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 386.529631][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.541814][ T46] usb 6-1: config 0 descriptor?? [ 386.724603][ T25] usb 2-1: USB disconnect, device number 30 [ 386.836501][T10584] netlink: 'syz.1.1265': attribute type 10 has an invalid length. [ 386.868715][T10584] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 387.009874][ T46] apple 0003:05AC:027D.0013: unknown main item tag 0x1 [ 387.030845][ T46] apple 0003:05AC:027D.0013: hidraw0: USB HID vff.ff Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0 [ 387.051496][T10591] tipc: Enabling of bearer rejected, already enabled [ 387.127803][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.207711][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.224077][T10599] Cannot find del_set index 286 as target [ 387.232099][ T25] usb 6-1: USB disconnect, device number 18 [ 387.384642][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 387.408975][ T46] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 387.537763][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.581423][ T46] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 387.599424][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.624061][ T46] usb 2-1: config 0 has no interfaces? [ 387.631784][ T46] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 387.651102][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.679671][ T46] usb 2-1: config 0 descriptor?? [ 388.036744][T10617] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 388.154588][T10628] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1284'. [ 388.167705][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.314038][T10631] Cannot find del_set index 286 as target [ 388.678676][T10649] 9pnet_fd: Insufficient options for proto=fd [ 388.696990][T10652] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 388.815291][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 388.958908][T10662] netlink: 'syz.0.1300': attribute type 4 has an invalid length. [ 389.026851][ T25] lo speed is unknown, defaulting to 1000 [ 389.339130][T10678] syzkaller1: entered promiscuous mode [ 389.349062][T10678] syzkaller1: entered allmulticast mode [ 389.403012][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1309'. [ 389.746669][T10688] lo speed is unknown, defaulting to 1000 [ 389.937838][ T46] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 390.053454][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 390.122502][ T46] usb 6-1: config 0 has no interfaces? [ 390.128564][ T46] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 390.167941][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.206786][ T46] usb 6-1: config 0 descriptor?? [ 390.247690][ C1] net_ratelimit: 5 callbacks suppressed [ 390.247711][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.304569][ T25] usb 2-1: USB disconnect, device number 31 [ 390.328193][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.514645][T10078] usb 6-1: USB disconnect, device number 19 [ 390.647752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.287678][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.367697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.687742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.327761][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.407695][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.713082][T10796] 9pnet_fd: Insufficient options for proto=fd [ 392.727730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.367737][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.486784][T10805] tipc: Enabled bearer , priority 0 [ 393.529676][T10805] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 393.537256][T10805] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 393.577088][T10805] tipc: Resetting bearer [ 393.926538][T10823] vlan0: entered promiscuous mode [ 393.964300][T10823] team0: Port device vlan0 added [ 394.599551][T10831] 9pnet_fd: Insufficient options for proto=fd [ 394.794505][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1379'. [ 394.814032][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1379'. [ 394.824224][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1379'. [ 394.834000][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1379'. [ 395.125592][ T29] audit: type=1400 audit(1732314057.442:19): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=10856 comm="syz.1.1387" daddr=ff01::1 [ 395.423451][T10872] netlink: 'syz.1.1394': attribute type 4 has an invalid length. [ 395.447794][ C1] net_ratelimit: 5 callbacks suppressed [ 395.447814][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.527825][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.541770][T10878] 9pnet_fd: Insufficient options for proto=fd [ 395.817010][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.847730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.883161][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.895798][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.185499][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 396.210351][T10903] tipc: Enabling of bearer rejected, already enabled [ 396.487690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.567736][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.887764][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.166846][T10927] lo speed is unknown, defaulting to 1000 [ 397.308351][T10931] tipc: Enabling of bearer rejected, already enabled [ 397.397139][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1423'. [ 397.527686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.592137][ T29] audit: type=1400 audit(1732314059.912:20): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=10946 comm="syz.0.1428" daddr=fc01::8 [ 397.609005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.927729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.111988][T10966] tipc: Enabling of bearer rejected, already enabled [ 398.338601][ T5887] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 398.530444][ T5887] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.567673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 398.575198][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.599958][ T5887] usb 6-1: Product: syz [ 398.608269][ T5887] usb 6-1: Manufacturer: syz [ 398.612915][ T5887] usb 6-1: SerialNumber: syz [ 398.642339][ T5887] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 398.666915][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 398.680724][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.125490][T11002] tipc: Started in network mode [ 399.145170][T11002] tipc: Node identity ac1414aa, cluster identity 4711 [ 399.174062][T11002] tipc: Enabled bearer , priority 10 [ 399.428168][T11004] team0: Mode changed to "roundrobin" [ 400.287975][ T25] tipc: Node number set to 2886997162 [ 400.647677][ C1] net_ratelimit: 6 callbacks suppressed [ 400.647700][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 400.728499][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.810719][T11027] tipc: Enabling of bearer rejected, already enabled [ 400.845250][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 400.894407][T11032] team0: No ports can be present during mode change [ 401.048721][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.215420][T11035] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 401.687699][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.768456][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.088805][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.349886][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 402.727686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.808880][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.955220][T11067] tipc: Enabling of bearer rejected, already enabled [ 403.129654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.150968][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1479'. [ 403.675359][T11076] team0: Port device vlan0 added [ 403.767985][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.144454][T11082] lo speed is unknown, defaulting to 1000 [ 404.180545][T11085] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 404.238638][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 404.793226][T11098] tipc: Enabling of bearer rejected, already enabled [ 404.998057][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 405.005098][ T9] ath9k_htc: Failed to initialize the device [ 405.847699][ C1] net_ratelimit: 5 callbacks suppressed [ 405.847722][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 405.927987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.248886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.355567][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 406.778778][T11132] tipc: Enabling of bearer rejected, already enabled [ 406.887681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.968113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.289724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.927688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.998688][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 408.007817][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.328507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.542055][T11163] team0: Port device vlan0 removed [ 408.569506][T11164] tipc: Enabling of bearer rejected, already enabled [ 408.967673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.810777][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 410.716387][T11198] tipc: Enabling of bearer rejected, already enabled [ 411.047692][ C1] net_ratelimit: 5 callbacks suppressed [ 411.047712][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.128319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.448178][T11210] netlink: 'syz.1.1539': attribute type 4 has an invalid length. [ 411.449447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.087725][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.167919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.317866][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 412.328445][T11222] tipc: Enabling of bearer rejected, already enabled [ 412.488878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.515233][ T25] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 412.552708][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.601740][ T25] usb 4-1: config 0 has no interfaces? [ 412.628231][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 412.679603][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.812695][ T25] usb 4-1: config 0 descriptor?? [ 413.127672][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 413.218407][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.529143][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.167676][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.281335][T11247] tipc: Enabling of bearer rejected, already enabled [ 415.184000][ T25] usb 4-1: USB disconnect, device number 20 [ 415.408264][T11263] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 416.034514][T11276] bond0: (slave syz_tun): Releasing backup interface [ 416.149828][T11276] tipc: Resetting bearer [ 416.248787][ C1] net_ratelimit: 5 callbacks suppressed [ 416.248810][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.311025][T11279] team0: Mode changed to "loadbalance" [ 416.327884][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.490905][T11276] vlan0: entered promiscuous mode [ 416.537953][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 416.586323][T11276] team0: Port device vlan0 added [ 416.649541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.957241][T11285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.214565][T11279] team0: Port device vlan0 removed [ 417.287749][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.367980][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.689835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.327682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.408421][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.647763][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 418.728737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.827869][ T25] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 418.853384][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.874384][ T25] usb 4-1: config 0 has no interfaces? [ 418.883322][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 418.902529][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.930045][ T25] usb 4-1: config 0 descriptor?? [ 419.367678][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.447681][ C1] net_ratelimit: 5 callbacks suppressed [ 421.447705][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.501562][ T25] usb 4-1: USB disconnect, device number 21 [ 421.528813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.849623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.487688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 422.569161][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.577951][T11307] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 422.888597][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.527669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.609486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.929464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.987763][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 424.160203][ T25] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 424.177877][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.199265][ T25] usb 4-1: config 0 has no interfaces? [ 424.205010][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 424.223802][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.248637][ T25] usb 4-1: config 0 descriptor?? [ 424.567691][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.468340][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.497489][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.507388][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.520082][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.711836][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.719516][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.855109][T11323] lo speed is unknown, defaulting to 1000 [ 426.225903][T11323] chnl_net:caif_netlink_parms(): no params data found [ 426.647677][ C1] net_ratelimit: 5 callbacks suppressed [ 426.647697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.728028][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.797987][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.805408][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.813489][T11323] bridge_slave_0: entered allmulticast mode [ 426.821428][T11323] bridge_slave_0: entered promiscuous mode [ 426.833794][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.856024][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.871331][T11323] bridge_slave_1: entered allmulticast mode [ 426.905958][ T46] usb 4-1: USB disconnect, device number 22 [ 426.926698][T11323] bridge_slave_1: entered promiscuous mode [ 427.048893][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.072346][T11323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.144887][T11323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.155068][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1592'. [ 427.278418][ T5887] usb 6-1: USB disconnect, device number 20 [ 427.342655][ T5887] usb 6-1: ath9k_htc: USB layer deinitialized [ 427.426166][T11346] team0: No ports can be present during mode change [ 427.461367][T11323] team0: Port device team_slave_0 added [ 427.476446][T11350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 427.500435][T11323] team0: Port device team_slave_1 added [ 427.602135][T11323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.647769][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.687665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.717082][T11323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.739567][T11323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.757661][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.787660][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.795337][T11323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.843877][ T5851] Bluetooth: hci2: command tx timeout [ 427.879150][ T5887] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 428.077749][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 428.084665][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 428.094640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.121354][ T5887] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 428.131113][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.145182][T11371] lo speed is unknown, defaulting to 1000 [ 428.151365][ T5887] usb 7-1: Product: syz [ 428.157693][ T5887] usb 7-1: Manufacturer: syz [ 428.166321][ T5887] usb 7-1: SerialNumber: syz [ 428.200305][ T5887] usb 7-1: config 0 descriptor?? [ 428.222016][ T5887] hub 7-1:0.0: bad descriptor, ignoring hub [ 428.230430][ T5887] hub 7-1:0.0: probe with driver hub failed with error -5 [ 428.254932][ T5887] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 428.281169][ T5956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.369396][T11323] hsr_slave_0: entered promiscuous mode [ 428.409038][T11323] hsr_slave_1: entered promiscuous mode [ 428.427832][T11323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.435493][T11323] Cannot create hsr debugfs directory [ 428.473929][T11373] lo speed is unknown, defaulting to 1000 [ 428.543364][ T5956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.679225][ T5956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.727815][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.773746][ T5848] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 428.807720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.855141][ T5956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.868005][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 429.127819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.772889][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.830038][ T5956] bond0 (unregistering): Released all slaves [ 429.859767][ T5956] bond1 (unregistering): Released all slaves [ 429.907261][T11323] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 429.938180][ T5851] Bluetooth: hci2: command tx timeout [ 429.947013][T11323] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 429.996064][ T5956] tipc: Disabling bearer [ 430.032723][ T5956] tipc: Left network mode [ 430.042662][T11406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.066892][T11401] lo speed is unknown, defaulting to 1000 [ 430.072384][T11323] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.099808][T11323] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.025750][ T5956] hsr_slave_0: left promiscuous mode [ 431.054414][ T5956] hsr_slave_1: left promiscuous mode [ 431.061180][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1626'. [ 431.084588][ T5956] veth1_macvtap: left promiscuous mode [ 431.090556][ T5956] veth0_macvtap: left promiscuous mode [ 431.096225][ T5956] veth1_vlan: left promiscuous mode [ 431.102129][ T5956] veth0_vlan: left promiscuous mode [ 431.194514][ T5956] pim6reg (unregistering): left allmulticast mode [ 431.345675][ T5956] team0 (unregistering): Port device vlan0 removed [ 431.849231][ C1] net_ratelimit: 4 callbacks suppressed [ 431.849255][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.014931][ T5851] Bluetooth: hci2: command tx timeout [ 432.247833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.325744][T11449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 432.572735][T11447] team0: Port device vlan0 removed [ 432.595603][ T25] usb 7-1: USB disconnect, device number 6 [ 432.773130][T11323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.789646][T11323] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.821728][T11323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.832248][T11323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.847969][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.855187][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.868666][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.875928][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.887655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.118764][ T5920] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 433.297696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.333753][ T5920] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 433.348723][ T5956] IPVS: stop unused estimator thread 0... [ 433.354812][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.393984][ T5920] usb 2-1: config 0 has no interfaces? [ 433.416833][ T5920] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 433.482718][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.517141][ T5920] usb 2-1: config 0 descriptor?? [ 433.656982][T11323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.927745][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.089323][ T5851] Bluetooth: hci2: command tx timeout [ 434.244726][T11323] veth0_vlan: entered promiscuous mode [ 434.292471][T11323] veth1_vlan: entered promiscuous mode [ 434.327764][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.372911][T11323] veth0_macvtap: entered promiscuous mode [ 434.390366][T11323] veth1_macvtap: entered promiscuous mode [ 434.433776][T11323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.470665][T11323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.516718][T11323] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.554754][T11323] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.577738][T11323] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.586479][T11323] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.777262][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.790323][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.885122][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.907799][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.967653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.971857][T11538] bond0: (slave macvlan2): Opening slave failed [ 435.377790][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.612843][T11567] tipc: Enabling of bearer rejected, already enabled [ 435.688306][ T46] IPVS: starting estimator thread 0... [ 435.713901][T11569] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 435.807976][T11571] IPVS: using max 30 ests per chain, 72000 per kthread [ 435.858702][ T46] usb 2-1: USB disconnect, device number 32 [ 435.909699][T11580] tipc: Enabling of bearer rejected, failed to enable media [ 435.997094][T11584] vimc link validate: Sensor B:src:256x16 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:4096x2160 (0x47425247, 8, 0, 0, 0) [ 436.007654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.063998][T11586] lo speed is unknown, defaulting to 1000 [ 436.577706][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 436.577780][T11613] tipc: Enabling of bearer rejected, already enabled [ 436.713528][T11618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 436.759923][ T9] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 436.781688][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.808231][ T9] usb 8-1: Product: syz [ 436.812460][ T9] usb 8-1: Manufacturer: syz [ 436.817083][ T9] usb 8-1: SerialNumber: syz [ 436.839897][ T9] usb 8-1: config 0 descriptor?? [ 436.846573][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 436.873802][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 436.895458][T11620] vlan2: entered promiscuous mode [ 436.914257][T11620] vlan2: entered allmulticast mode [ 436.933976][ T9] f81232 8-1:0.0: f81534a converter detected [ 436.944083][T11620] hsr_slave_1: entered allmulticast mode [ 437.041589][T11627] tipc: Enabling of bearer rejected, failed to enable media [ 437.050680][ C1] net_ratelimit: 1 callbacks suppressed [ 437.050701][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.090109][ T9] usb 8-1: f81534a converter now attached to ttyUSB0 [ 437.127707][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 437.207658][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 437.219289][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 437.290212][ T46] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 437.332677][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.364225][ T46] usb 4-1: config 0 has no interfaces? [ 437.373971][ T46] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 437.397021][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.407921][ T9] usb 8-1: USB disconnect, device number 2 [ 437.439121][ T46] usb 4-1: config 0 descriptor?? [ 437.457743][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.495360][ T9] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 437.517933][ T9] f81232 8-1:0.0: device disconnected [ 438.013010][T11661] tipc: Started in network mode [ 438.027894][T11661] tipc: Node identity ac1414aa, cluster identity 4711 [ 438.046132][T11661] tipc: Enabled bearer , priority 10 [ 438.087663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.368843][T11676] tipc: Enabling of bearer rejected, failed to enable media [ 438.429311][T11680] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 438.487728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.921783][T11705] netlink: 'syz.7.1703': attribute type 10 has an invalid length. [ 438.982762][T11705] syz_tun: entered promiscuous mode [ 439.012696][T11705] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 439.116469][T11709] bond0: (slave syz_tun): Releasing backup interface [ 439.127675][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.169183][T10077] tipc: Node number set to 2886997162 [ 439.477888][ T46] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 439.527767][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.639784][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 439.655826][ T46] usb 7-1: config 0 has no interfaces? [ 439.680943][ T46] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 439.705004][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.733728][ T46] usb 7-1: Product: syz [ 439.743844][ T46] usb 7-1: Manufacturer: syz [ 439.758339][ T46] usb 7-1: SerialNumber: syz [ 439.793028][ T46] usb 7-1: config 0 descriptor?? [ 439.944262][T10078] usb 4-1: USB disconnect, device number 23 [ 440.131069][ T5887] usb 7-1: USB disconnect, device number 7 [ 440.167653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.253020][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327835][T10077] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.347794][T10078] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.488041][T10078] usb 4-1: device descriptor read/64, error -71 [ 440.496847][T10077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.518910][T10077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.538522][T10077] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 440.545520][T11774] tipc: Enabling of bearer rejected, already enabled [ 440.557550][T10077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.567746][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.589438][T10077] usb 8-1: config 0 descriptor?? [ 440.727734][T10078] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 440.868269][T10078] usb 4-1: device descriptor read/64, error -71 [ 440.922126][ T29] audit: type=1400 audit(1732314103.242:21): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 440.980046][T10078] usb usb4-port1: attempt power cycle [ 441.042020][ T29] audit: type=1400 audit(1732314103.362:22): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 441.097841][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 441.178740][T11794] tipc: Resetting bearer [ 441.203809][T11794] team0: Unable to change to the same mode the team is in [ 441.211323][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.233720][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 441.249431][ T9] usb 7-1: device descriptor read/64, error -71 [ 441.337811][T10078] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 441.379647][T10078] usb 4-1: device descriptor read/8, error -71 [ 441.388217][ T25] IPVS: starting estimator thread 0... [ 441.410095][T10077] hid-led 0003:27B8:01ED.0014: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.7-1/input0 [ 441.445554][T10077] hid-led 0003:27B8:01ED.0014: ThingM blink(1) initialized [ 441.489842][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 441.497860][T11803] IPVS: using max 26 ests per chain, 62400 per kthread [ 441.594577][T11810] tipc: Enabled bearer , priority 0 [ 441.604417][T11810] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 441.614497][T10077] usb 8-1: USB disconnect, device number 3 [ 441.620552][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.620793][T11810] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 441.635717][T10078] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 441.647703][ T9] usb 7-1: device descriptor read/64, error -71 [ 441.680942][T10078] usb 4-1: device descriptor read/8, error -71 [ 441.763127][ T9] usb usb7-port1: attempt power cycle [ 441.788328][T10078] usb usb4-port1: unable to enumerate USB device [ 442.015406][ T29] audit: type=1400 audit(1732314104.332:23): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 442.117977][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 442.149107][ T9] usb 7-1: device descriptor read/8, error -71 [ 442.247649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.406155][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 442.448282][ T9] usb 7-1: device descriptor read/8, error -71 [ 442.507823][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 442.557996][ T9] usb usb7-port1: unable to enumerate USB device [ 442.647718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.661148][ T25] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 442.671209][ T29] audit: type=1400 audit(1732314104.982:24): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 442.689741][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.702066][ T25] usb 8-1: Product: syz [ 442.706382][ T25] usb 8-1: Manufacturer: syz [ 442.712663][ T25] usb 8-1: SerialNumber: syz [ 442.719509][ T25] usb 8-1: config 0 descriptor?? [ 442.729729][ T25] hub 8-1:0.0: bad descriptor, ignoring hub [ 442.735865][ T25] hub 8-1:0.0: probe with driver hub failed with error -5 [ 442.743852][ T25] f81232 8-1:0.0: f81534a converter detected [ 442.942531][ T25] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 442.960321][ T25] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 443.008569][ T25] usb 8-1: USB disconnect, device number 4 [ 443.040420][ T25] f81232 8-1:0.0: device disconnected [ 443.287652][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.345326][T11859] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1752'. [ 443.677873][T11868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.697713][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.719613][T11868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.741503][T11868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.024185][T11881] UHID_CREATE from different security context by process 383 (syz.6.1763), this is not allowed. [ 444.029116][T11883] lo speed is unknown, defaulting to 1000 [ 444.038106][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 444.104054][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.327651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.549418][T11893] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1767'. [ 444.728096][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.927995][ T29] audit: type=1400 audit(1732314107.252:25): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 445.062719][ T29] audit: type=1400 audit(1732314107.382:26): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 445.368491][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 445.767699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.064842][ T29] audit: type=1400 audit(1732314108.382:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 446.407645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.631148][T11943] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 446.672807][ T29] audit: type=1400 audit(1732314108.992:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 446.807712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.447653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.847705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.382291][T11994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.435990][T11994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.487656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.887716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.527710][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.872549][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 449.927704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.233930][ T29] audit: type=1400 audit(1732314112.552:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 450.258796][ T29] audit: type=1400 audit(1732314112.582:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 450.275480][ T29] audit: type=1400 audit(1732314112.582:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 450.354941][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.399455][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.567645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.968037][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.607650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.669734][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1838'. [ 451.914921][T12106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.929522][T12106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.940949][ T29] audit: type=1400 audit(1732314114.262:32): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="exfat" requested=w pid=5503 comm="dhcpcd" daddr=ff02::2 [ 451.983008][T12110] fuse: Unknown parameter 'grou00000000000000000000' [ 452.007691][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.647667][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.058363][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.687796][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.087727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.627271][ T29] audit: type=1400 audit(1732314116.942:33): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="*" requested=r pid=12215 comm="syz.1.1876" path="socket:[34929]" dev="sockfs" ino=34929 [ 454.686550][ T5842] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.686736][T11323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.693236][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.693268][ C0] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 454.693284][ C0] audit: backlog limit exceeded [ 454.719837][ T5191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.726374][ T5191] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 454.727666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.741496][T12219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.127693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.767718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.167690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.178399][T10077] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 456.347770][T10077] usb 2-1: Using ep0 maxpacket: 32 [ 456.375942][T10077] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 456.399635][T10077] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 456.445746][T10077] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 456.497864][T10077] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 456.564155][T10077] usb 2-1: config 0 interface 0 has no altsetting 0 [ 456.601854][T10077] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 456.627711][T10077] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 456.661722][T10077] usb 2-1: Product: syz [ 456.665946][T10077] usb 2-1: Manufacturer: syz [ 456.695970][T10077] usb 2-1: SerialNumber: syz [ 456.735976][T10077] usb 2-1: config 0 descriptor?? [ 456.765583][T10077] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 456.807654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.827403][T10077] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 456.950792][ T29] kauditd_printk_skb: 24315 callbacks suppressed [ 456.950808][ T29] audit: type=1400 audit(1732314119.232:8107): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5209 comm="udevd" path="/sys/devices/virtual/block/loop6/uevent" dev="sysfs" ino=15396 [ 456.980936][ T5931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 456.987456][ T5931] audit: audit_lost=5433 audit_rate_limit=0 audit_backlog_limit=64 [ 456.995632][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.002379][ T5209] audit: audit_lost=5434 audit_rate_limit=0 audit_backlog_limit=64 [ 457.012694][T12281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.019236][ T5209] audit: backlog limit exceeded [ 457.024815][ T5931] audit: backlog limit exceeded [ 457.028511][T12282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.030046][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.156366][ T6628] usb 2-1: USB disconnect, device number 33 [ 457.170090][ T6628] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 457.207687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.847636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.257709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.547781][ T6628] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 458.610923][T12328] tipc: Enabled bearer , priority 0 [ 458.707737][ T6628] usb 8-1: Using ep0 maxpacket: 16 [ 458.732340][ T6628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 458.772339][T12328] syzkaller0: entered promiscuous mode [ 458.778170][T12328] syzkaller0: entered allmulticast mode [ 458.785592][T12328] tipc: Resetting bearer [ 458.786818][ T6628] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 458.810891][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.823842][T12326] tipc: Resetting bearer [ 458.857087][ T6628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.875146][T12336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.887648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.903890][ T6628] usb 8-1: Product: syz [ 458.905065][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.937916][ T6628] usb 8-1: Manufacturer: syz [ 458.942656][ T6628] usb 8-1: SerialNumber: syz [ 458.997247][ T6628] usb 8-1: config 0 descriptor?? [ 459.026160][ T6628] hub 8-1:0.0: bad descriptor, ignoring hub [ 459.036425][ T6628] hub 8-1:0.0: probe with driver hub failed with error -5 [ 459.064127][ T6628] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input23 [ 459.289363][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.481531][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.519288][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.927638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 460.327702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.637799][ T5848] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 460.661244][ T5848] usb 8-1: device reset changed ep0 maxpacket size! [ 460.694948][T10077] usb 8-1: USB disconnect, device number 5 [ 460.907951][T10077] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 460.970861][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 461.073579][T10077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.088634][T10077] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.098999][T10077] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.112175][T10077] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.121662][T10077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.132887][T10077] usb 8-1: config 0 descriptor?? [ 461.378226][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.573606][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.582156][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.602012][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.609683][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.618045][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.636986][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.644639][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.663348][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.671512][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.690659][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.699150][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.720062][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.727505][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.735228][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.754144][T10077] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 461.772025][T10077] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 461.795634][T10077] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 461.959659][ T29] kauditd_printk_skb: 36199 callbacks suppressed [ 461.959677][ T29] audit: type=1400 audit(1732314124.272:20702): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5848 comm="udevd" name="/" dev="sysfs" ino=1 [ 461.987120][ T5848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.987153][ T5931] audit: audit_backlog=66 > audit_backlog_limit=64 [ 462.000496][ T5931] audit: audit_lost=13425 audit_rate_limit=0 audit_backlog_limit=64 [ 462.008899][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 462.017306][ T5848] audit: audit_lost=13426 audit_rate_limit=0 audit_backlog_limit=64 [ 462.020534][ T29] audit: type=1400 audit(1732314124.302:20703): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5848 comm="udevd" name="devices" dev="sysfs" ino=7 [ 462.035669][ T5848] audit: backlog limit exceeded [ 462.044862][ T5931] audit: backlog limit exceeded [ 462.054151][ T5931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 462.061321][ T5931] audit: audit_lost=13427 audit_rate_limit=0 audit_backlog_limit=64 [ 462.412248][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.047688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.232777][T12326] tipc: Disabling bearer [ 463.447741][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.704904][ T5920] usb 8-1: USB disconnect, device number 6 [ 464.087646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 464.407303][T12401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.487735][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.582526][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.665229][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.705205][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.069693][T12416] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 465.102072][T12416] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 465.127641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.527726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.937822][ T6628] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 466.112904][ T6628] usb 2-1: Using ep0 maxpacket: 8 [ 466.131047][ T6628] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.146927][ T6628] usb 2-1: config 0 has no interface number 0 [ 466.162835][ T6628] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.173905][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.233128][ T6628] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 466.295876][ T6628] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.317538][ T6628] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.348082][ T6628] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 466.357343][ T6628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.391068][ T6628] usb 2-1: config 0 descriptor?? [ 466.402294][ T6628] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 466.450979][T12451] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 466.498974][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 466.567720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.667789][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 466.772205][ T9] usb 7-1: config 0 has no interfaces? [ 466.810161][ T9] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 466.868746][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.947641][ T9] usb 7-1: Product: syz [ 466.968016][ T29] kauditd_printk_skb: 21404 callbacks suppressed [ 466.968059][ T29] audit: type=1400 audit(1732314129.292:32611): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 466.973232][ T7758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 466.974697][ T5931] audit: audit_backlog=66 > audit_backlog_limit=64 [ 466.997758][ T9] usb 7-1: Manufacturer: syz [ 467.007360][ T5848] audit: audit_backlog=66 > audit_backlog_limit=64 [ 467.015520][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 467.025739][ T29] audit: type=1400 audit(1732314129.292:32612): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="tmpfs" ino=1 [ 467.043753][ T5848] audit: audit_lost=16618 audit_rate_limit=0 audit_backlog_limit=64 [ 467.043814][ T5848] audit: backlog limit exceeded [ 467.043850][ T5848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.043863][ T5848] audit: audit_lost=16619 audit_rate_limit=0 audit_backlog_limit=64 [ 467.128202][ T9] usb 7-1: SerialNumber: syz [ 467.201712][ T6628] usb 2-1: USB disconnect, device number 34 [ 467.207813][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.241614][ T9] usb 7-1: config 0 descriptor?? [ 467.243348][ T6628] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 467.526746][ T5844] usb 7-1: USB disconnect, device number 12 [ 468.187056][T12482] netlink: 'syz.6.1965': attribute type 10 has an invalid length. [ 468.247647][ C1] net_ratelimit: 1 callbacks suppressed [ 468.247690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.259645][T12484] siw: device registration error -23 [ 468.647857][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.167700][ T5920] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 469.287638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.323418][T12516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.358115][ T5920] usb 8-1: Using ep0 maxpacket: 16 [ 469.430021][ T5920] usb 8-1: config 0 has no interfaces? [ 469.455236][ T5920] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 469.522604][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.755503][ T5920] usb 8-1: Product: syz [ 469.804060][ T5920] usb 8-1: Manufacturer: syz [ 469.831895][ T5920] usb 8-1: SerialNumber: syz [ 469.860390][ T5920] usb 8-1: config 0 descriptor?? [ 470.096871][ T5920] usb 8-1: USB disconnect, device number 7 [ 470.224888][T12538] netlink: 'syz.6.1992': attribute type 10 has an invalid length. [ 470.257534][T12538] lo: entered promiscuous mode [ 470.285114][T12538] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.327647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.367639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.872722][T10077] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 471.977959][ T29] kauditd_printk_skb: 52014 callbacks suppressed [ 471.977979][ T29] audit: type=1400 audit(1732314134.302:51307): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12589 comm="syz.1.2014" name="12590-4" dev="debugfs" ino=36292 [ 471.983324][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.988129][T12588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.004318][ T5209] audit: audit_lost=27848 audit_rate_limit=0 audit_backlog_limit=64 [ 472.004344][ T5209] audit: backlog limit exceeded [ 472.011939][ T29] audit: type=1400 audit(1732314134.302:51308): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12589 comm="syz.1.2014" name="12590-4" dev="debugfs" ino=36292 [ 472.018041][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.018056][ T5209] audit: audit_lost=27849 audit_rate_limit=0 audit_backlog_limit=64 [ 472.018071][ T5209] audit: backlog limit exceeded [ 472.018090][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.159180][T12592] tipc: Enabled bearer , priority 0 [ 472.225167][T12587] tipc: Disabling bearer [ 472.267659][T10077] usb 8-1: Using ep0 maxpacket: 16 [ 472.274978][T10077] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.288329][T10077] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 472.297841][T10077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.305863][T10077] usb 8-1: Product: syz [ 472.379496][T10077] usb 8-1: Manufacturer: syz [ 472.397650][T10077] usb 8-1: SerialNumber: syz [ 472.407639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.417752][T10077] usb 8-1: config 0 descriptor?? [ 472.690012][T10077] usb 8-1: USB disconnect, device number 8 [ 473.447632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.267883][ T5920] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 474.428537][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 474.438254][T12633] lo speed is unknown, defaulting to 1000 [ 474.443771][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 474.465801][ T5920] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 474.481654][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.489958][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.515113][ T5920] usb 7-1: Product: syz [ 474.522026][ T5920] usb 7-1: Manufacturer: syz [ 474.526743][ T5920] usb 7-1: SerialNumber: syz [ 474.543181][ T5920] usb 7-1: config 0 descriptor?? [ 474.550129][ T5920] hub 7-1:0.0: bad descriptor, ignoring hub [ 474.557166][ T5920] hub 7-1:0.0: probe with driver hub failed with error -5 [ 474.564581][ T6628] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 474.586649][ T5920] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 474.739480][ T6628] usb 2-1: Using ep0 maxpacket: 16 [ 474.788960][ T6628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.851386][ T6628] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 474.902717][ T6628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.926388][ T6628] usb 2-1: Product: syz [ 474.949846][ T6628] usb 2-1: Manufacturer: syz [ 474.972686][ T6628] usb 2-1: SerialNumber: syz [ 475.012081][ T6628] usb 2-1: config 0 descriptor?? [ 475.098129][ T5194] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 475.401172][ T46] usb 2-1: USB disconnect, device number 35 [ 475.527843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.690709][ T6628] usb 7-1: USB disconnect, device number 13 [ 476.545621][T12668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.567821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 476.987700][ T29] kauditd_printk_skb: 37371 callbacks suppressed [ 476.987726][ T29] audit: type=1400 audit(1732314139.302:67776): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 476.992929][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 477.014919][ T5191] audit: audit_backlog=66 > audit_backlog_limit=64 [ 477.018739][ T5209] audit: audit_lost=34869 audit_rate_limit=0 audit_backlog_limit=64 [ 477.018763][ T5209] audit: backlog limit exceeded [ 477.018791][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 477.018802][ T5209] audit: audit_lost=34870 audit_rate_limit=0 audit_backlog_limit=64 [ 477.018816][ T5209] audit: backlog limit exceeded [ 477.018836][ T5209] audit: audit_backlog=66 > audit_backlog_limit=64 [ 477.018848][ T5209] audit: audit_lost=34871 audit_rate_limit=0 audit_backlog_limit=64 [ 477.087668][T10077] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 477.237861][T10077] usb 8-1: Using ep0 maxpacket: 16 [ 477.246405][T10077] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.298975][T10077] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 477.345819][T10077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.381859][T10077] usb 8-1: Product: syz [ 477.400425][T10077] usb 8-1: Manufacturer: syz [ 477.429437][T10077] usb 8-1: SerialNumber: syz [ 477.461379][T10077] usb 8-1: config 0 descriptor?? [ 477.607812][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.779036][ T5920] usb 8-1: USB disconnect, device number 9 [ 478.338433][T12719] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 478.394650][T12719] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 478.591510][T12719] bond0: (slave syz_tun): Releasing backup interface [ 479.247642][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 479.408102][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 479.428685][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.457785][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 479.474399][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.506204][ T9] usb 8-1: config 0 descriptor?? [ 479.765810][ T9] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 479.985770][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 479.999945][ T9] usb 8-1: USB disconnect, device number 10 [ 480.108786][ T9] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 481.732717][T12796] kvm: kvm [12795]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x1 [ 482.017089][ T29] kauditd_printk_skb: 37233 callbacks suppressed [ 482.017149][ T29] audit: type=1400 audit(1732314144.332:83533): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5209 comm="udevd" path="/sys/devices/virtual/block/loop3/mq/0/cpu0" dev="sysfs" ino=15137 [ 482.021756][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.025494][T12808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.060590][T12808] audit: audit_lost=42061 audit_rate_limit=0 audit_backlog_limit=64 [ 482.069020][T12808] audit: backlog limit exceeded [ 482.075822][T12808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.075844][ T29] audit: type=1400 audit(1732314144.332:83534): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="/" dev="sda1" ino=2 [ 482.100621][T12808] audit: audit_lost=42062 audit_rate_limit=0 audit_backlog_limit=64 [ 482.109661][T12808] audit: backlog limit exceeded [ 482.112606][T12809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 483.688992][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 483.877840][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 483.901745][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.924877][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.971450][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 483.986652][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.017874][ T9] usb 4-1: Product: syz [ 484.027755][ T9] usb 4-1: Manufacturer: syz [ 484.047723][ T9] usb 4-1: SerialNumber: syz [ 484.058926][ T9] usb 4-1: config 0 descriptor?? [ 484.077347][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 484.083582][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 484.438171][T10078] usb 4-1: USB disconnect, device number 28 [ 485.194271][T12895] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 486.099689][T12928] lo speed is unknown, defaulting to 1000 [ 487.020963][ T29] kauditd_printk_skb: 42596 callbacks suppressed [ 487.020979][ T29] audit: type=1400 audit(1732314149.342:100568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12962 comm="modprobe" name="/" dev="sda1" ino=2 [ 487.043374][ T9054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.046548][T12962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.046644][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.065997][ C0] audit: audit_lost=50632 audit_rate_limit=0 audit_backlog_limit=64 [ 487.074065][ C0] audit: backlog limit exceeded [ 487.079348][T12962] audit: audit_lost=50633 audit_rate_limit=0 audit_backlog_limit=64 [ 487.080558][ T5502] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.087427][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.087443][ C0] audit: audit_lost=50634 audit_rate_limit=0 audit_backlog_limit=64 [ 487.169917][T12965] siw: device registration error -23 [ 488.138634][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 488.300893][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.332706][ T5844] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.366140][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.397671][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.422429][T13009] fuse: Unknown parameter 'group_id00000000000000000000' [ 488.450089][ T5844] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.464069][ T5844] usb 2-1: invalid MIDI out EP 0 [ 488.544438][ T5844] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 488.688474][ T9] usb 2-1: USB disconnect, device number 36 [ 488.879225][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.900883][T13053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.943105][T13056] fuse: Unknown parameter 'group_id00000000000000000000' [ 490.738915][T13086] fuse: Bad value for 'fd' [ 491.479027][T13116] fuse: Bad value for 'fd' [ 491.488321][ T6628] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 491.658635][ T6628] usb 8-1: Using ep0 maxpacket: 8 [ 491.676117][ T6628] usb 8-1: config 0 has no interfaces? [ 491.684294][ T6628] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.746828][ T6628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.753203][T13130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.809188][ T6628] usb 8-1: config 0 descriptor?? [ 492.028566][ T6628] usb 8-1: USB disconnect, device number 11 [ 492.034642][ T29] kauditd_printk_skb: 44937 callbacks suppressed [ 492.034659][ T29] audit: type=1400 audit(1732314154.352:121342): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13137 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 492.068544][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.068649][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.075518][ T5848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.088790][ T5931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.088813][ T5931] audit: audit_lost=58747 audit_rate_limit=0 audit_backlog_limit=64 [ 492.088837][ T5931] audit: backlog limit exceeded [ 492.088866][ T5931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.120567][ T5209] audit: audit_lost=58748 audit_rate_limit=0 audit_backlog_limit=64 [ 492.127779][ T27] audit: audit_lost=58749 audit_rate_limit=0 audit_backlog_limit=64 [ 492.322789][T13146] fuse: Bad value for 'fd' [ 492.528852][T13156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.707646][ T6628] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 492.872542][ T6628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.890542][ T6628] usb 4-1: config 0 has no interfaces? [ 492.916231][ T6628] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 492.945144][ T6628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.975221][ T6628] usb 4-1: Product: syz [ 492.997784][ T6628] usb 4-1: Manufacturer: syz [ 493.002529][ T6628] usb 4-1: SerialNumber: syz [ 493.020040][ T6628] usb 4-1: config 0 descriptor?? [ 493.130034][T13177] siw: device registration error -23 [ 493.361370][T13185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.442015][T13187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.152066][T13219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.627429][T13234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.875730][T13245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.282279][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2312'. [ 495.292112][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2312'. [ 495.433071][T13264] lo speed is unknown, defaulting to 1000 [ 495.506175][ T6628] usb 4-1: USB disconnect, device number 29 [ 495.548614][T13267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.707967][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2320'. [ 496.410741][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 496.897526][ T46] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 497.037694][ T29] kauditd_printk_skb: 39168 callbacks suppressed [ 497.037713][ T29] audit: type=1400 audit(1732314159.352:141645): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5209 comm="udevd" path="/sys/devices/virtual/block/loop3/uevent" dev="sysfs" ino=15042 [ 497.042772][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.044181][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.065739][ T5209] audit: audit_lost=65078 audit_rate_limit=0 audit_backlog_limit=64 [ 497.071780][ C0] audit: audit_lost=65079 audit_rate_limit=0 audit_backlog_limit=64 [ 497.071806][ C0] audit: backlog limit exceeded [ 497.072597][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.079045][ T5209] audit: backlog limit exceeded [ 497.086642][ C0] audit: audit_lost=65080 audit_rate_limit=0 audit_backlog_limit=64 [ 497.086672][ C0] audit: backlog limit exceeded [ 497.238226][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.249995][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.260006][ T46] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 497.270177][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.279619][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.297894][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.346156][ T46] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 497.476455][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.510749][ T5844] usb 2-1: USB disconnect, device number 37 [ 497.585917][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2345'. [ 498.570213][T13354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.680201][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 498.839923][T13363] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2361'. [ 499.556872][T13387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.691617][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 499.791228][T13393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2373'. [ 500.084630][T13402] lo speed is unknown, defaulting to 1000 [ 500.548783][T13418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.646981][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 500.803978][T13424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2385'. [ 501.230480][T13437] lo speed is unknown, defaulting to 1000 [ 501.691388][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.813090][T13460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2399'. [ 501.897962][ T6628] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 502.051901][ T29] kauditd_printk_skb: 40808 callbacks suppressed [ 502.051919][ T29] audit: type=1400 audit(1732314164.372:165761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="virtual" dev="sysfs" ino=1348 [ 502.058884][ T6628] usb 8-1: Using ep0 maxpacket: 16 [ 502.077500][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.093500][ T29] audit: type=1400 audit(1732314164.372:165762): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5209 comm="udevd" name="block" dev="sysfs" ino=12961 [ 502.098002][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.121464][ T5209] audit: audit_lost=70706 audit_rate_limit=0 audit_backlog_limit=64 [ 502.129907][ T5209] audit: backlog limit exceeded [ 502.131122][T13471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.134844][ T5209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.148488][ T5209] audit: audit_lost=70707 audit_rate_limit=0 audit_backlog_limit=64 [ 502.149473][T13471] audit: audit_lost=70708 audit_rate_limit=0 audit_backlog_limit=64 [ 502.156775][T13456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.183528][T13472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.193314][ T6628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 502.224005][ T6628] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 502.238143][ T6628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.246332][ T6628] usb 8-1: Product: syz [ 502.272970][ T6628] usb 8-1: Manufacturer: syz [ 502.282810][ T6628] usb 8-1: SerialNumber: syz [ 502.298558][ T6628] usb 8-1: config 0 descriptor?? [ 502.309909][ T6628] hub 8-1:0.0: bad descriptor, ignoring hub [ 502.315960][ T6628] hub 8-1:0.0: probe with driver hub failed with error -5 [ 502.364099][ T6628] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input25 [ 502.992357][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 503.016065][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 503.065890][T13456] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 503.083624][T13496] gretap0: entered promiscuous mode [ 503.146982][T13496] gretap0: left promiscuous mode [ 503.176336][T13502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.295121][T13456] usb 8-1: device firmware changed [ 503.327920][ T6628] usb 8-1: USB disconnect, device number 12 [ 503.522494][ T6628] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 503.717841][ T6628] usb 8-1: Using ep0 maxpacket: 16 [ 503.725762][ T6628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 503.774320][ T6628] usb 8-1: string descriptor 0 read error: -22 [ 503.787922][ T6628] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 503.808895][ T6628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.847162][ T6628] usb 8-1: config 0 descriptor?? [ 503.878708][ T6628] hub 8-1:0.0: bad descriptor, ignoring hub [ 503.884770][ T6628] hub 8-1:0.0: probe with driver hub failed with error -5 [ 503.920782][ T6628] input: USB Touchscreen 134c:0002 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input26 [ 504.057877][ T6628] input: failed to attach handler mousedev to device input26, error: -5 [ 504.258022][ T6628] usb 8-1: USB disconnect, device number 13 [ 504.565585][T13555] netlink: 'syz.3.2437': attribute type 10 has an invalid length. [ 504.599830][T13555] siw: device registration error -23 [ 504.669038][T13555] lo speed is unknown, defaulting to 1000 [ 620.170874][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 620.177884][ C1] rcu: 0-...!: (1 GPs behind) idle=899c/1/0x4000000000000000 softirq=50703/50704 fqs=11 [ 620.189301][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5955/1:b..l [ 620.197268][ C1] rcu: (detected by 1, t=10502 jiffies, g=52933, q=334 ncpus=2) [ 620.205011][ C1] Sending NMI from CPU 1 to CPUs 0: [ 620.205049][ C0] NMI backtrace for cpu 0 [ 620.205064][ C0] CPU: 0 UID: 0 PID: 13593 Comm: syz.3.2453 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 620.205083][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 620.205093][ C0] RIP: 0010:kasan_check_range+0x86/0x290 [ 620.205123][ C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 620.205137][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00000046 [ 620.205151][ C0] RAX: 0000000000000001 RBX: 1ffffffff20391a6 RCX: ffffffff8170b390 [ 620.205163][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901c8d30 [ 620.205174][ C0] RBP: ffffffffffffffff R08: ffffffff901c8d37 R09: 1ffffffff20391a6 [ 620.205187][ C0] R10: dffffc0000000000 R11: fffffbfff20391a6 R12: 1ffff92000000f70 [ 620.205200][ C0] R13: ffffffff89c14722 R14: dffffc0000000001 R15: fffffbfff20391a7 [ 620.205212][ C0] FS: 00007f6ff1bf66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 620.205226][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.205238][ C0] CR2: 0000001b3051fffc CR3: 000000005b218000 CR4: 00000000003526f0 [ 620.205253][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.205263][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.205274][ C0] Call Trace: [ 620.205281][ C0] [ 620.205291][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 620.205316][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 620.205334][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 620.205361][ C0] ? nmi_handle+0x2a/0x5a0 [ 620.205385][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 620.205405][ C0] ? nmi_handle+0x14f/0x5a0 [ 620.205421][ C0] ? nmi_handle+0x2a/0x5a0 [ 620.205437][ C0] ? kasan_check_range+0x86/0x290 [ 620.205457][ C0] ? default_do_nmi+0x63/0x160 [ 620.205473][ C0] ? exc_nmi+0x123/0x1f0 [ 620.205487][ C0] ? end_repeat_nmi+0xf/0x53 [ 620.205506][ C0] ? advance_sched+0xa02/0xca0 [ 620.205524][ C0] ? lock_release+0xb0/0xa30 [ 620.205539][ C0] ? kasan_check_range+0x86/0x290 [ 620.205559][ C0] ? kasan_check_range+0x86/0x290 [ 620.205580][ C0] ? kasan_check_range+0x86/0x290 [ 620.205601][ C0] [ 620.205606][ C0] [ 620.205613][ C0] lock_release+0xb0/0xa30 [ 620.205630][ C0] ? advance_sched+0xa02/0xca0 [ 620.205645][ C0] ? __netif_schedule+0xc4/0x310 [ 620.205666][ C0] ? __pfx_lock_release+0x10/0x10 [ 620.205681][ C0] ? __pfx___netif_schedule+0x10/0x10 [ 620.205703][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 620.205722][ C0] ? taprio_set_budgets+0x32c/0x370 [ 620.205738][ C0] ? advance_sched+0xa02/0xca0 [ 620.205752][ C0] ? advance_sched+0xa02/0xca0 [ 620.205767][ C0] advance_sched+0xb32/0xca0 [ 620.205789][ C0] ? __pfx_advance_sched+0x10/0x10 [ 620.205803][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 620.205831][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 620.205849][ C0] ? sched_clock+0x4a/0x70 [ 620.205869][ C0] ? read_tsc+0x9/0x20 [ 620.205887][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 620.205906][ C0] hrtimer_interrupt+0x403/0xa40 [ 620.205935][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 620.205953][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 620.205971][ C0] [ 620.205977][ C0] [ 620.205983][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.206002][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 620.206020][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 4e bc 34 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 43 9b f5 65 8b 05 34 b5 3b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 620.206033][ C0] RSP: 0018:ffffc9000565f920 EFLAGS: 00000206 [ 620.206047][ C0] RAX: 5316215cc4fe3400 RBX: 1ffff92000acbf28 RCX: ffffffff8171043a [ 620.206059][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad300 RDI: 0000000000000001 [ 620.206071][ C0] RBP: ffffc9000565f9b0 R08: ffffffff942ba887 R09: 1ffffffff2857510 [ 620.206083][ C0] R10: dffffc0000000000 R11: fffffbfff2857511 R12: dffffc0000000000 [ 620.206095][ C0] R13: 1ffff92000acbf24 R14: ffffc9000565f940 R15: 0000000000000246 [ 620.206111][ C0] ? mark_lock+0x9a/0x360 [ 620.206131][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 620.206148][ C0] ? read_tsc+0x9/0x20 [ 620.206169][ C0] clock_was_set+0x686/0x810 [ 620.206190][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 620.206208][ C0] ? timekeeping_inject_offset+0x3b7/0x520 [ 620.206230][ C0] ? timekeeping_update_from_shadow+0x308/0x3b0 [ 620.206253][ C0] timekeeping_inject_offset+0x3d2/0x520 [ 620.206277][ C0] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 620.206299][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 620.206322][ C0] ? bpf_lsm_capable+0x9/0x10 [ 620.206340][ C0] do_adjtimex+0x5b1/0xb10 [ 620.206368][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 620.206383][ C0] ? __pfx___might_resched+0x10/0x10 [ 620.206404][ C0] ? __might_fault+0xaa/0x120 [ 620.206421][ C0] ? __pfx_lock_release+0x10/0x10 [ 620.206441][ C0] ? __might_fault+0xc6/0x120 [ 620.206461][ C0] __x64_sys_clock_adjtime+0x1e1/0x290 [ 620.206478][ C0] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 620.206505][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 620.206522][ C0] ? do_syscall_64+0x100/0x230 [ 620.206541][ C0] ? do_syscall_64+0xb6/0x230 [ 620.206560][ C0] do_syscall_64+0xf3/0x230 [ 620.206584][ C0] ? clear_bhb_loop+0x35/0x90 [ 620.206604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.206623][ C0] RIP: 0033:0x7f6ff3d7e819 [ 620.206637][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.206650][ C0] RSP: 002b:00007f6ff1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 620.206666][ C0] RAX: ffffffffffffffda RBX: 00007f6ff3f35fa0 RCX: 00007f6ff3d7e819 [ 620.206677][ C0] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 620.206689][ C0] RBP: 00007f6ff3df175e R08: 0000000000000000 R09: 0000000000000000 [ 620.206700][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.206710][ C0] R13: 0000000000000000 R14: 00007f6ff3f35fa0 R15: 00007ffc43068ef8 [ 620.206729][ C0] [ 620.207042][ C1] task:kworker/u8:9 state:R running task stack:21184 pid:5955 tgid:5955 ppid:2 flags:0x00004000 [ 620.833450][ C1] Workqueue: bat_events batadv_nc_worker [ 620.839114][ C1] Call Trace: [ 620.842402][ C1] [ 620.845353][ C1] __schedule+0x17fb/0x4be0 [ 620.849921][ C1] ? __pfx___schedule+0x10/0x10 [ 620.854793][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.860794][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 620.866093][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 620.871216][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 620.876969][ C1] irqentry_exit+0x5e/0x90 [ 620.881402][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.887400][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 620.892699][ C1] Code: 2b 00 74 08 4c 89 f7 e8 5a 4f 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 620.912329][ C1] RSP: 0018:ffffc900047a79e0 EFLAGS: 00000206 [ 620.918412][ C1] RAX: 0000000000000001 RBX: 1ffff920008f4f48 RCX: ffff888028b764d8 [ 620.926397][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ae4e0 RDI: ffffffff8c5f9fe0 [ 620.934382][ C1] RBP: ffffc900047a7b40 R08: ffffffff942ba887 R09: 1ffffffff2857510 [ 620.942369][ C1] R10: dffffc0000000000 R11: fffffbfff2857511 R12: 1ffff920008f4f44 [ 620.950350][ C1] R13: dffffc0000000000 R14: ffffc900047a7a40 R15: 0000000000000246 [ 620.958358][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 620.963408][ C1] ? batadv_nc_worker+0xcb/0x610 [ 620.968365][ C1] ? __pfx_lock_release+0x10/0x10 [ 620.973408][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.979412][ C1] batadv_nc_worker+0xec/0x610 [ 620.984196][ C1] ? batadv_nc_worker+0xcb/0x610 [ 620.989149][ C1] ? batadv_nc_worker+0xcb/0x610 [ 620.994103][ C1] ? process_scheduled_works+0x976/0x1850 [ 620.999840][ C1] process_scheduled_works+0xa63/0x1850 [ 621.005429][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.011434][ C1] ? assign_work+0x364/0x3d0 [ 621.016051][ C1] worker_thread+0x870/0xd30 [ 621.020667][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.026575][ C1] ? __kthread_parkme+0x169/0x1d0 [ 621.031622][ C1] ? __pfx_worker_thread+0x10/0x10 [ 621.036753][ C1] kthread+0x2f0/0x390 [ 621.040834][ C1] ? __pfx_worker_thread+0x10/0x10 [ 621.045961][ C1] ? __pfx_kthread+0x10/0x10 [ 621.050565][ C1] ret_from_fork+0x4b/0x80 [ 621.054991][ C1] ? __pfx_kthread+0x10/0x10 [ 621.059594][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.064389][ C1] [ 621.067423][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g52933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 621.078628][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 621.088605][ C1] rcu: RCU grace-period kthread stack dump: [ 621.094501][ C1] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 621.106271][ C1] Call Trace: [ 621.109560][ C1] [ 621.112503][ C1] __schedule+0x17fb/0x4be0 [ 621.117043][ C1] ? __pfx___schedule+0x10/0x10 [ 621.121910][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.126958][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.133299][ C1] ? schedule+0x90/0x320 [ 621.137552][ C1] schedule+0x14b/0x320 [ 621.141721][ C1] schedule_timeout+0x15a/0x290 [ 621.146588][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 621.151979][ C1] ? __pfx_process_timeout+0x10/0x10 [ 621.157289][ C1] ? prepare_to_swait_event+0x330/0x350 [ 621.162861][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 621.167721][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 621.172947][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 621.179111][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 621.184404][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.190337][ C1] ? finish_swait+0xd4/0x1e0 [ 621.194947][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 621.199555][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.204766][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.210673][ C1] ? __kthread_parkme+0x169/0x1d0 [ 621.215720][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.220930][ C1] kthread+0x2f0/0x390 [ 621.225011][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.230222][ C1] ? __pfx_kthread+0x10/0x10 [ 621.234828][ C1] ret_from_fork+0x4b/0x80 [ 621.239273][ C1] ? __pfx_kthread+0x10/0x10 [ 621.243876][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.248667][ C1] [ 621.251694][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 621.258023][ C1] CPU: 1 UID: 0 PID: 13598 Comm: syz.6.2455 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 621.268443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 621.278505][ C1] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2ca0 [ 621.285285][ C1] Code: 89 e6 83 e6 01 31 ff e8 e6 e8 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 91 e4 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 75 e4 0b 00 eb e4 44 [ 621.304899][ C1] RSP: 0018:ffffc90003bcf2c0 EFLAGS: 00000246 [ 621.310996][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8c7d RCX: 0000000000080000 [ 621.318986][ C1] RDX: ffffc90005742000 RSI: 000000000007ffff RDI: 0000000000080000 [ 621.326970][ C1] RBP: ffffc90003bcf4c0 R08: ffffffff8189678a R09: 1ffffffff2857510 [ 621.334959][ C1] R10: dffffc0000000000 R11: fffffbfff2857511 R12: dffffc0000000000 [ 621.342947][ C1] R13: ffff8880b86463e8 R14: ffff8880b873fa80 R15: 0000000000000000 [ 621.350929][ C1] FS: 00007fd48639d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 621.359872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.366461][ C1] CR2: 00007fd485737bac CR3: 000000002cd8c000 CR4: 00000000003526f0 [ 621.374444][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.382438][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.390436][ C1] Call Trace: [ 621.393731][ C1] [ 621.396591][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 621.402941][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 621.408598][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 621.414420][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 621.419903][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 621.426161][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 621.431551][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 621.437205][ C1] ? update_process_times+0x242/0x2f0 [ 621.442591][ C1] ? tick_nohz_handler+0x37c/0x500 [ 621.447720][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 621.453193][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 621.458597][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 621.464333][ C1] ? sched_clock+0x4a/0x70 [ 621.468785][ C1] ? read_tsc+0x9/0x20 [ 621.472883][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 621.478988][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 621.484152][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 621.490331][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 621.496173][ C1] [ 621.499120][ C1] [ 621.502066][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.508242][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 621.514434][ C1] ? smp_call_function_many_cond+0x19f8/0x2ca0 [ 621.520621][ C1] ? __schedule+0x43a1/0x4be0 [ 621.525319][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 621.530375][ C1] ? __pfx___text_poke+0x10/0x10 [ 621.535353][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 621.541711][ C1] ? __pfx___might_resched+0x10/0x10 [ 621.547023][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 621.552944][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 621.557992][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 621.563124][ C1] text_poke_bp_batch+0x352/0xb30 [ 621.568171][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.574174][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 621.580351][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 621.585912][ C1] ? text_poke_queue+0x12c/0x180 [ 621.590868][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 621.597135][ C1] ? __jump_label_update+0x379/0x3a0 [ 621.602440][ C1] text_poke_finish+0x30/0x50 [ 621.607132][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 621.613127][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 621.619036][ C1] static_key_enable+0x1a/0x20 [ 621.623813][ C1] sched_core_get+0xae/0x180 [ 621.628420][ C1] sched_core_alloc_cookie+0x71/0xa0 [ 621.633719][ C1] sched_core_share_pid+0x298/0x7d0 [ 621.638936][ C1] ? sched_core_share_pid+0xe5/0x7d0 [ 621.644238][ C1] ? cap_task_prctl+0x1ef/0xbd0 [ 621.649097][ C1] ? yama_task_prctl+0x8c/0x500 [ 621.653966][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 621.659975][ C1] ? static_key_count+0x41/0x70 [ 621.664863][ C1] ? security_task_prctl+0x13c/0x160 [ 621.670180][ C1] __se_sys_prctl+0x956/0x3b50 [ 621.674979][ C1] ? handle_pte_fault+0x4c56/0x6820 [ 621.680204][ C1] ? handle_pte_fault+0x4ce1/0x6820 [ 621.685433][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.690645][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 621.696653][ C1] ? __pfx_validate_chain+0x10/0x10 [ 621.701875][ C1] ? __pfx___se_sys_prctl+0x10/0x10 [ 621.707088][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 621.712496][ C1] ? __pfx_validate_chain+0x10/0x10 [ 621.717709][ C1] ? mark_lock+0x9a/0x360 [ 621.722053][ C1] ? count_memcg_event_mm+0x94/0x420 [ 621.727351][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.732389][ C1] ? mark_lock+0x9a/0x360 [ 621.736735][ C1] ? __lock_acquire+0x1397/0x2100 [ 621.741784][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 621.747169][ C1] ? vma_end_read+0x18/0x170 [ 621.751791][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 621.757543][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 621.763536][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 621.769527][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.775864][ C1] ? exc_page_fault+0x590/0x8c0 [ 621.780734][ C1] ? __x64_sys_prctl+0x20/0xc0 [ 621.785517][ C1] do_syscall_64+0xf3/0x230 [ 621.790054][ C1] ? clear_bhb_loop+0x35/0x90 [ 621.794763][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.800674][ C1] RIP: 0033:0x7fd48557e819 [ 621.805111][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.824741][ C1] RSP: 002b:00007fd48639d038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 621.833178][ C1] RAX: ffffffffffffffda RBX: 00007fd485735fa0 RCX: 00007fd48557e819 [ 621.841163][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 621.849145][ C1] RBP: 00007fd4855f175e R08: 0000000000000000 R09: 0000000000000000 [ 621.857129][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 621.865114][ C1] R13: 0000000000000001 R14: 00007fd485735fa0 R15: 00007ffe246d7808 [ 621.873141][ C1]