last executing test programs: 13.784548659s ago: executing program 4 (id=438): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xb, 0x20, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @global=@item_4={0x3, 0x1, 0x5, "42974060"}]}}, 0x0}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000300)="a451f091f012eb2f06559ff1a9c0b3b9f683b31d80922d374e4f72869b", 0x1d}, {&(0x7f0000000280)="b3f64dbe90d71d8edd0e5d9d66f974", 0xf}, {&(0x7f0000000a80)="5b6f06389b", 0x5}, {&(0x7f0000000440)="b5b03f8c4ac82553f239b9168666e1c434879824ed9307759c549033cb7eac993024c5e437d7e1a9aa227bcad5d4edbb5193a986634f6d05ad43af74f2f67e3f4437f82963b7a088fd6b38d09a4515a465453a357e2215421499c271e48e326c8e9969a9c337cc1899725f66675a5f5f53e9ed968372289b6fa2929942c325051c34139ac205a1a5abe80af317412f4749f47d837cf06f8314a1ffd70106e7a112c46bc2e116bc5cccaebcaa54fa6acdc475c85fcff5", 0xb6}, {&(0x7f0000000980)='=', 0x1}], 0x5) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) accept$alg(r3, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) 12.365079837s ago: executing program 3 (id=442): openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0, 0xe0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x6, 0x80, 0x2d4a5a96, 0x4, 0x49, 0x1}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r5) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000017c0)={0x0, {}, 0x0, {}, 0x4, 0x5, 0x9, 0x18, "5fe10041926d04581646393a8121884f52394fc2820b48ec6e6c963dc0b3e39a47afef9cf2754f336b63b8e0ab99874deea6013269a33aaa3d7dd600465d9613", "b404756dd622837446f551a9fc8398ac6ef0d77fb9cbae33fefcb85e58cd5be0", [0x5, 0xc0]}) 12.259457409s ago: executing program 2 (id=444): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) set_mempolicy(0x4005, 0x0, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 11.920520679s ago: executing program 2 (id=446): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) syz_io_uring_setup(0x36d5, &(0x7f0000000000)={0x0, 0x2817, 0x400, 0x1, 0x70}, &(0x7f0000000700), &(0x7f00000007c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) 10.568260364s ago: executing program 4 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4910090", 0x8) ioperm(0x0, 0x9, 0x5) epoll_pwait(0xffffffffffffffff, &(0x7f0000000800)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r6, @ANYBLOB="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"], 0x114}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xfffffffffffffe4a, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) 10.149490532s ago: executing program 1 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x40c0000) 10.10535185s ago: executing program 3 (id=449): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x20000007, 0x26d}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x2004, @fd_index=0x1, 0x1, &(0x7f0000001b80)=[{0x0}, {0x0}, {&(0x7f0000001ac0)="e3ead1fa2809052aff234150ffed9780a33da8c231e7dcf0a0edd219818a2937b6a518a1332b99826becc60359550a46acd1ed01c0279a6e54788da840b0b97390fa91f5fa0534dda18d384144e408ff674eaf342533557814835aff9858c841d51ead6875af3e5964d773d32b9fb7947bc9f9f3f4ae69cc2ae1986c1cb07d588e4366b5c8bdc83a574d9d18a2e2200f348d083b4bc2eee5b04d1e55cac7ece435e630d23737c6d6b95e64cc10", 0xad}, {&(0x7f0000000200)="4623a36b0333a0f8cf4f3193958e1eba87fdf1cce1edbf0a1dc7581a9f0d74981363ead3b1e16384b2af7fceccfa9b", 0x2f}], 0x4, 0x1c, 0x0, {0x3}}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000007440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="b4698cce78493d6a79f3591d927e35d499023f6e430645084cbb5b5297a431404605886bef4b45bd3a7e9ba63c28b4fedec8aeae7254b38fdd81f9c719afcd6981227e01370185d4c416db037baa0855af84a3beba34165e71eb149214fe91f998799553a80eebe27464bd3ff1d8c2514b994ad330bea911f46404026e877f22ddde9085cdbbdb020e0b14dd35da79cb62f5", 0x92}, {&(0x7f0000000200)="5fdcc9c3f9eb914446ce4b4e17d75e43af33bbae21aa0ac71222d5422ca52bb6dca44d741534e5c7d5b537df901c20f3bb5cc4c26514c8d8fd24c01dfdb2c375db56f43b8e94aba14b83568616a69e2ba5bef0ba37deb53130dffbd000d1e8192bab5ff954fc4020af9a2417a3feb4fe206c92bf0b85d83c760d122d6eb627a73b1f8c7b3ceb8cb2c22b86595daa419b106efa9877bb01a629ad8155240fddf82d5c0c99aa6e7652", 0xa8}, {&(0x7f0000001440)="26c45d4deaf710ad96bfde781cc7e281e75e84f564e9d47cbbda1fd10144717333af7b8862620af6f6074e82d31c80fa92cdf2837cd2424e02c6d26e1660eabab330df6e10fefcbc99ee6f12674fb2355dfd260705360854f402bd97c8df63460b764b7004dc7042e0c0f522a5857962b4dbf1fb39e004dda8d303f164c4654e8e36ba8366c9860d20d544b263af268985020a5c65af84eed2536382a3c9fdeb9d6429f2a921cdf5418486b7f843e030bf9ccd460d0b4042a91b0a4860e7f21702924b80cdd232ffce987fc87c5bd0c855e185bcfe98ef8ff209fb263b8e80efd2045bc27fda58f2d6", 0xe9}, {&(0x7f0000000000)="4c948b312302b547c8421ce947cc365af4287c1b787fac0c4b410290edf7122a1bc9c0ee74b0f00dc0d12035c259b8253b265997eb742dfd3f", 0x39}, {&(0x7f00000002c0)="7014f7b15036190a75731dbf8fa86a56b25259e526055dc7ff1a38e1cfc28f7dcc9d6c0f97cb5fc88362df51c3c38ed93d92b689c234b83458dcfe5d088b0bcd6bd0053942d13512cbae3505a41a", 0x4e}], 0x7, 0x0, 0x0, 0x7400}, 0x0) 9.486123349s ago: executing program 0 (id=450): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x2, 0x8a100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000000300)={0x0, [0x9, 0x1, 0xc15a], [{0x401, 0x7, 0x0, 0x0, 0x1}, {0xb, 0xaf, 0x1, 0x0, 0x1, 0x1}, {0x80000000, 0x40, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x2cf, 0x0, 0x1, 0x1}, {0x3, 0x10, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x18000000, 0x297, 0x1, 0x1, 0x0, 0x1}, {0x5a, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x3ff, 0x7fff, 0x1, 0x1}, {0x4, 0xffffff81, 0x1, 0x1, 0x1}, {0x40, 0x5, 0x0, 0x1, 0x1, 0x1}], 0x5}) r7 = dup2(r5, r0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0x7, 0x6, 0x1989, 0xa985, 0x10, "2daa9a7199abeff1"}) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) dup(r3) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x2, 0x8a100) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000000300)={0x0, [0x9, 0x1, 0xc15a], [{0x401, 0x7, 0x0, 0x0, 0x1}, {0xb, 0xaf, 0x1, 0x0, 0x1, 0x1}, {0x80000000, 0x40, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x2cf, 0x0, 0x1, 0x1}, {0x3, 0x10, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x18000000, 0x297, 0x1, 0x1, 0x0, 0x1}, {0x5a, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x3ff, 0x7fff, 0x1, 0x1}, {0x4, 0xffffff81, 0x1, 0x1, 0x1}, {0x40, 0x5, 0x0, 0x1, 0x1, 0x1}], 0x5}) (async) dup2(r5, r0) (async) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0x7, 0x6, 0x1989, 0xa985, 0x10, "2daa9a7199abeff1"}) (async) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) (async) 8.731440469s ago: executing program 4 (id=451): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0xffffffff80000000, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) 8.216221522s ago: executing program 1 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x40}], 0x1c) r3 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000300)={0x0, [], 0x7}) sendmmsg$inet6(r2, 0x0, 0x0, 0x20040840) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0d, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x3, 0xf407}, 0x9, 0x0, 0x2, 0x5, 0x1, 0x1a, 0x5, 0x11, 0x3, 0x1ff, {0x4, 0x0, 0x0, 0x803, 0x30000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.116507906s ago: executing program 3 (id=453): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x1a7, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 7.968747431s ago: executing program 2 (id=454): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x1a7, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 7.925049248s ago: executing program 0 (id=455): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0xc0049364, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) open(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x48c1) r2 = io_uring_setup(0x177f, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8000000, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x9e) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.642582836s ago: executing program 1 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xde3c, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x4}) 6.606419369s ago: executing program 0 (id=457): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000016000000b40000007f000000000000007f538b5afb6aa1ffc8c0aa1a018d450a3e0d1b79b2d7782ee87a257129f2e5257ef203a6cf231b73425bbfcc156ad0ec1fac34c1edeae5d9f8cb5715dc19cb32fe7084f4f68a0cfb9f5d6f174bb6c09414849450a8b46458a9e95bbbeb727bee71e2d0f18238b7984f7ff3bc65881a28e0019b9aa2cb993fbb2db84ae79fc637aa3be317df98619a7c74f917ffc7d732e7e754c6dd62db2a7d461194770aa067f0585caa32884badeaa2835c5e46e1d09582459ca508e772b12701000000a8f92ca580d070eef0c5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) gettid() timer_create(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000000700000095000000000000009500a50500000000d86f894ddd8ca6ff240a54d810057bb4b9e974dfdc1217c7306fa9c1697d91424e6d4249f617e13229998cf6bef567cc3704aae2f47a6b8c921e40c2fe45003ec86aa697187fe8d6646dd363a5cf9175691ebcb28b38f794ca6fe9846379c5cfac7100dc5a37fcc756451d39"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x7, 0x1, {{0x0, 0xfffffffd, 0x0, 0x0, 0xfffffc00}}}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x20000844) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) 5.586573138s ago: executing program 3 (id=458): mount$fuseblk(0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.473620532s ago: executing program 1 (id=459): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x1000000000d) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 5.468413844s ago: executing program 2 (id=460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000120097022dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000f7"], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x795700f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000]}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffd, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x97, 0x0, 0x7ffc0002}]}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x80000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x4028840, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x5, 0x5ca, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0x9, 0x10, 0xd7, 0x16}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x400a}}]}) listen(r3, 0x5) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @remote, 0x6}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1, 0x0, 0x5a}}], 0x1, 0x40000) 5.03825905s ago: executing program 4 (id=461): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4910090", 0x8) ioperm(0x0, 0x9, 0x5) epoll_pwait(0xffffffffffffffff, &(0x7f0000000800)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r6, @ANYBLOB="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"], 0x114}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xfffffffffffffe4a, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) 4.087465346s ago: executing program 1 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x40c0000) 3.269891866s ago: executing program 3 (id=463): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6900000010000305000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe40, 0xe40, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0xfffffffe, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x3000000}, 0x23) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) 3.269056103s ago: executing program 4 (id=464): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) syz_io_uring_setup(0x36d5, &(0x7f0000000000)={0x0, 0x2817, 0x400, 0x1, 0x70}, &(0x7f0000000700), &(0x7f00000007c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) 3.208943795s ago: executing program 0 (id=465): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xfffe}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0xeff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x7, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xd, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x5, 0x6cfd, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x80000006, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$sndctrl(&(0x7f0000007380), 0xd55c, 0x2000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.960870547s ago: executing program 1 (id=466): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0x62, 0xac, 0x40, 0xaf0, 0x7201, 0xad9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd5, 0x5b}}]}}]}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usbip_server_init(0x2) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x541b) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000003400)=ANY=[@ANYBLOB="00000003"], 0x2c5d) 1.871754989s ago: executing program 0 (id=467): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="f923242d197bd8884ba4959386720de010f55f3719c17163824d531d0523762a48b7a5c4bdb5f0e38d017e4e06363f210c023e7543317a0a7599101666a013e8d8ea968b537d2ad25e0d5407e6225419bc450f9ddaaf112b44", @ANYRES64=0x0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYBLOB="a33479cfee1230485f37666cb0d19bf7c8cb44e8a361fc1e5f9b61ec0ede5ee1914e303e6525560878522ef333a2431f53dc59f15abbc5a41342d6be53445bc5f2518bf5a6932a9a4188c83a58d70191a7687a9d44a8d6b0c34b921d32e1c77a96467c9382f24798ae0e680f4ae24d4a04360d0c5cb21d9b1101c4cd3178881c839dc08967a0f10844888c5fc48e8ab3520373b360db8be50d1fbd0c152a9449a84829eb767c75cbe13ca874cb7aea122c09fd057ab5c0b0bd9b93315675532434ce8d90658a7a701781669889eed86164e891", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="08000000010000", 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r6, 0x1000, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073"], 0xc4}}, 0x4000040) 1.655257196s ago: executing program 3 (id=468): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0xc0049364, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x48c1) r2 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8000000, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x9e) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.168049403s ago: executing program 2 (id=469): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x1a7, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 147.196126ms ago: executing program 2 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x5fe1a8f34c7f1361) ioctl$BLKRRPART(r6, 0x125f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.253853ms ago: executing program 0 (id=471): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000200000005000000"], 0x14}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {r2, r3+60000000}}, 0x0) 0s ago: executing program 4 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x40, &(0x7f0000000480)={&(0x7f0000000000)=@newtclass={0x50, 0x28, 0x7b556aacaa341da4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0x8, 0x4}, {0x4, 0xffe0}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3b, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x1000000000d) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 73.695205][ T5806] cgroup: Unknown subsys name 'net' [ 73.815882][ T5806] cgroup: Unknown subsys name 'cpuset' [ 73.824617][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.420208][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.887501][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.896218][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.904338][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.906283][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.912831][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.928609][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.929248][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.944087][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.952316][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.959993][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.967306][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.976754][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.984703][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.993687][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.001225][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.012583][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.017255][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.027161][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.034753][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.042140][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.046905][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.058406][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.066173][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.073560][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.081202][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.090794][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.099470][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.107042][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.107833][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.122147][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.529550][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 78.551257][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 78.585243][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 78.697531][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.806357][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.816141][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.824545][ T5816] bridge_slave_0: entered allmulticast mode [ 78.831448][ T5816] bridge_slave_0: entered promiscuous mode [ 78.843051][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.850209][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.860604][ T5816] bridge_slave_1: entered allmulticast mode [ 78.867609][ T5816] bridge_slave_1: entered promiscuous mode [ 78.883476][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.890630][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.901213][ T5817] bridge_slave_0: entered allmulticast mode [ 78.908145][ T5817] bridge_slave_0: entered promiscuous mode [ 78.936573][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 78.977260][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.985496][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.993531][ T5817] bridge_slave_1: entered allmulticast mode [ 79.000392][ T5817] bridge_slave_1: entered promiscuous mode [ 79.015051][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.022346][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.029686][ T5822] bridge_slave_0: entered allmulticast mode [ 79.037216][ T5822] bridge_slave_0: entered promiscuous mode [ 79.053135][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.080801][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.088709][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.096596][ T5822] bridge_slave_1: entered allmulticast mode [ 79.103818][ T5822] bridge_slave_1: entered promiscuous mode [ 79.132669][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.161449][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.214657][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.235301][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.254955][ T5816] team0: Port device team_slave_0 added [ 79.261069][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268984][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.276513][ T5826] bridge_slave_0: entered allmulticast mode [ 79.284053][ T5826] bridge_slave_0: entered promiscuous mode [ 79.300823][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.336700][ T5816] team0: Port device team_slave_1 added [ 79.344172][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.351283][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.359247][ T5826] bridge_slave_1: entered allmulticast mode [ 79.367352][ T5826] bridge_slave_1: entered promiscuous mode [ 79.386385][ T5817] team0: Port device team_slave_0 added [ 79.394684][ T5817] team0: Port device team_slave_1 added [ 79.415337][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.423225][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.430475][ T5818] bridge_slave_0: entered allmulticast mode [ 79.438122][ T5818] bridge_slave_0: entered promiscuous mode [ 79.446107][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.453335][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.460602][ T5818] bridge_slave_1: entered allmulticast mode [ 79.467949][ T5818] bridge_slave_1: entered promiscuous mode [ 79.504775][ T5822] team0: Port device team_slave_0 added [ 79.540052][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.550249][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.557398][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.583846][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.597506][ T5822] team0: Port device team_slave_1 added [ 79.619957][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.627261][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.654403][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.668201][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.678035][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.691668][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.717790][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.745639][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.759351][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.769351][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.776828][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.803226][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.829284][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.839224][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.865389][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.878463][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.885552][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.911802][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.952543][ T5826] team0: Port device team_slave_0 added [ 79.985510][ T5817] hsr_slave_0: entered promiscuous mode [ 79.992395][ T5817] hsr_slave_1: entered promiscuous mode [ 80.005059][ T5818] team0: Port device team_slave_0 added [ 80.013169][ T5826] team0: Port device team_slave_1 added [ 80.020594][ T5818] team0: Port device team_slave_1 added [ 80.082520][ T5133] Bluetooth: hci1: command tx timeout [ 80.090961][ T5816] hsr_slave_0: entered promiscuous mode [ 80.098506][ T5816] hsr_slave_1: entered promiscuous mode [ 80.105660][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.114263][ T5816] Cannot create hsr debugfs directory [ 80.159563][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.166736][ T5133] Bluetooth: hci3: command tx timeout [ 80.172443][ T5133] Bluetooth: hci2: command tx timeout [ 80.173146][ T5835] Bluetooth: hci4: command tx timeout [ 80.184791][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.211609][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.224692][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.231961][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.258552][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.269397][ T5835] Bluetooth: hci0: command tx timeout [ 80.281173][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.288311][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.314309][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.328197][ T5822] hsr_slave_0: entered promiscuous mode [ 80.334818][ T5822] hsr_slave_1: entered promiscuous mode [ 80.341257][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.349555][ T5822] Cannot create hsr debugfs directory [ 80.356769][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.363970][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.391193][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.498461][ T5826] hsr_slave_0: entered promiscuous mode [ 80.505305][ T5826] hsr_slave_1: entered promiscuous mode [ 80.512822][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.520522][ T5826] Cannot create hsr debugfs directory [ 80.607176][ T5818] hsr_slave_0: entered promiscuous mode [ 80.616396][ T5818] hsr_slave_1: entered promiscuous mode [ 80.623263][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.630876][ T5818] Cannot create hsr debugfs directory [ 80.884135][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.915096][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.936953][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.954272][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.970859][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.980840][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.991054][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.022502][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.058762][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.070804][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.098531][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.131785][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.161319][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.174569][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.200941][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.212267][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.286162][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.319289][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.352650][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.375820][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.400739][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.429696][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.509651][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.529081][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.563740][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.576435][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.583800][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.594860][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.602085][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.610998][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618280][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.627511][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.634806][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.654841][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.703889][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.733985][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.741131][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.754804][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.780552][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.787885][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.798593][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.805775][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.834185][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.841314][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.918063][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.020339][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.053884][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.061023][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.106936][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.145134][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.152327][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.172709][ T5835] Bluetooth: hci1: command tx timeout [ 82.242234][ T5835] Bluetooth: hci4: command tx timeout [ 82.242581][ T5133] Bluetooth: hci2: command tx timeout [ 82.247701][ T5835] Bluetooth: hci3: command tx timeout [ 82.328016][ T5835] Bluetooth: hci0: command tx timeout [ 82.429277][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.454829][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.511073][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.581367][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.634787][ T5816] veth0_vlan: entered promiscuous mode [ 82.684540][ T5816] veth1_vlan: entered promiscuous mode [ 82.692790][ T5826] veth0_vlan: entered promiscuous mode [ 82.704088][ T5826] veth1_vlan: entered promiscuous mode [ 82.755534][ T5817] veth0_vlan: entered promiscuous mode [ 82.778891][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.824702][ T5822] veth0_vlan: entered promiscuous mode [ 82.851356][ T5817] veth1_vlan: entered promiscuous mode [ 82.895179][ T5822] veth1_vlan: entered promiscuous mode [ 82.914084][ T5826] veth0_macvtap: entered promiscuous mode [ 82.928537][ T5816] veth0_macvtap: entered promiscuous mode [ 82.953261][ T5826] veth1_macvtap: entered promiscuous mode [ 82.971395][ T5816] veth1_macvtap: entered promiscuous mode [ 83.011307][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.065937][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.077159][ T5817] veth0_macvtap: entered promiscuous mode [ 83.097872][ T5822] veth0_macvtap: entered promiscuous mode [ 83.108212][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124955][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.137149][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.146444][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.159818][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.170909][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.183454][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.204187][ T5817] veth1_macvtap: entered promiscuous mode [ 83.217186][ T5822] veth1_macvtap: entered promiscuous mode [ 83.229583][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.244497][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.258735][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.270170][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279194][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.288883][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.297851][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355306][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.366895][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.379984][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.390584][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.403431][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.415996][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.428098][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.438931][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.450960][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.461031][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.472207][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.483286][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.496577][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.507543][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.518215][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.530770][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.544509][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.595059][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609464][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.619156][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.628176][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647373][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.658174][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.672920][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.684098][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694093][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.704973][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.716694][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.755368][ T5818] veth0_vlan: entered promiscuous mode [ 83.763757][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.773605][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.782450][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791274][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.849723][ T5818] veth1_vlan: entered promiscuous mode [ 83.870865][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.889595][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.892087][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.899782][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.966832][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.973127][ T5818] veth0_macvtap: entered promiscuous mode [ 83.987813][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.017761][ T5818] veth1_macvtap: entered promiscuous mode [ 84.027357][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.039517][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.109228][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.120010][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.152745][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.165318][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.169441][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.195714][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.206482][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.217755][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.228270][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.239383][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.250328][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.260352][ T5835] Bluetooth: hci1: command tx timeout [ 84.263002][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.300091][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.324319][ T5835] Bluetooth: hci2: command tx timeout [ 84.329800][ T5835] Bluetooth: hci4: command tx timeout [ 84.335382][ T5133] Bluetooth: hci3: command tx timeout [ 84.356454][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.367665][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.378333][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.388222][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.398749][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.408897][ T5835] Bluetooth: hci0: command tx timeout [ 84.414416][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.424927][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.436073][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.476416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.485432][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569862][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.580655][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.589575][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.607385][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.617462][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627476][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643392][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.845496][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 84.927279][ T5869] usb 4-1: config 1 interface 0 altsetting 186 bulk endpoint 0x1 has invalid maxpacket 8 [ 85.004065][ T5869] usb 4-1: config 1 interface 0 has no altsetting 0 [ 85.077511][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.103038][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.135543][ T5869] usb 4-1: Product: syz [ 85.144699][ T5869] usb 4-1: Manufacturer: syz [ 85.149530][ T5869] usb 4-1: SerialNumber: syz [ 85.159767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.229552][ T5905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.342008][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.362182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.442434][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.483692][ T5905] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.625975][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.654959][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.683627][ T5910] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.892040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.914225][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.940091][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.031846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.322647][ T5835] Bluetooth: hci1: command tx timeout [ 86.410306][ T5823] Bluetooth: hci3: command tx timeout [ 86.416706][ T5133] Bluetooth: hci2: command tx timeout [ 86.423028][ T5835] Bluetooth: hci4: command tx timeout [ 86.483118][ T5823] Bluetooth: hci0: command tx timeout [ 86.491211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.593582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.723858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 86.732829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.851950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.386048][ T5869] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 186 proto 1 vid 0x0525 pid 0xA4A8 [ 87.516081][ T5935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 88.291865][ T5869] usb 4-1: USB disconnect, device number 2 [ 88.320569][ T5869] usblp0: removed [ 88.465080][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 88.539646][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 88.759645][ T5947] FAULT_INJECTION: forcing a failure. [ 88.759645][ T5947] name failslab, interval 1, probability 0, space 0, times 1 [ 88.802037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.863021][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.3.12 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 88.873591][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.883668][ T5947] Call Trace: [ 88.886955][ T5947] [ 88.889903][ T5947] dump_stack_lvl+0x241/0x360 [ 88.894623][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.899830][ T5947] ? __pfx__printk+0x10/0x10 [ 88.904440][ T5947] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 88.910429][ T5947] ? __pfx___might_resched+0x10/0x10 [ 88.915734][ T5947] should_fail_ex+0x3b0/0x4e0 [ 88.920429][ T5947] should_failslab+0xac/0x100 [ 88.925131][ T5947] kmem_cache_alloc_node_noprof+0x77/0x380 [ 88.930952][ T5947] ? __alloc_skb+0x1c3/0x440 [ 88.935552][ T5947] __alloc_skb+0x1c3/0x440 [ 88.939999][ T5947] ? __pfx___alloc_skb+0x10/0x10 [ 88.945059][ T5947] ? netlink_autobind+0xd6/0x2f0 [ 88.950020][ T5947] ? netlink_autobind+0x2b0/0x2f0 [ 88.955074][ T5947] netlink_sendmsg+0x638/0xcb0 [ 88.959944][ T5947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.965252][ T5947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.971153][ T5947] __sock_sendmsg+0x221/0x270 [ 88.975863][ T5947] ____sys_sendmsg+0x52a/0x7e0 [ 88.980638][ T5947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.985932][ T5947] ? __fget_files+0x2a/0x410 [ 88.990530][ T5947] ? __fget_files+0x2a/0x410 [ 88.995129][ T5947] __sys_sendmsg+0x269/0x350 [ 88.999729][ T5947] ? __pfx_lock_release+0x10/0x10 [ 89.004764][ T5947] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.009894][ T5947] ? __pfx_vfs_write+0x10/0x10 [ 89.014689][ T5947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.021119][ T5947] ? do_syscall_64+0x100/0x230 [ 89.025902][ T5947] ? do_syscall_64+0xb6/0x230 [ 89.030594][ T5947] do_syscall_64+0xf3/0x230 [ 89.035113][ T5947] ? clear_bhb_loop+0x35/0x90 [ 89.039950][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.045892][ T5947] RIP: 0033:0x7f03d2d85d29 [ 89.050327][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.070036][ T5947] RSP: 002b:00007f03d3b2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.078473][ T5947] RAX: ffffffffffffffda RBX: 00007f03d2f75fa0 RCX: 00007f03d2d85d29 [ 89.086457][ T5947] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 89.094435][ T5947] RBP: 00007f03d3b2b090 R08: 0000000000000000 R09: 0000000000000000 [ 89.102413][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.110386][ T5947] R13: 0000000000000000 R14: 00007f03d2f75fa0 R15: 00007ffd5423a8f8 [ 89.118375][ T5947] [ 90.251947][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.261356][ T3643] cfg80211: failed to load regulatory.db [ 92.336137][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.363202][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.418138][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.437088][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.702034][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 94.685853][ T6000] loop6: detected capacity change from 0 to 524287999 [ 94.735910][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.746215][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.769812][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.779252][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.249020][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.258518][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.358435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.367688][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.404091][ T5977] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 95.421934][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.431187][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.588019][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.597269][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.613289][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.622526][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.640039][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.649249][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.662281][ T6000] ldm_validate_partition_table(): Disk read failed. [ 95.679767][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.689128][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.734061][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.743445][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.781816][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 95.791178][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.802769][ T6000] Dev loop6: unable to read RDB block 0 [ 95.860041][ T6000] loop6: unable to read partition table [ 95.910377][ T6000] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 97.294205][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.527421][ T6018] loop6: detected capacity change from 0 to 524287999 [ 97.529959][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.574136][ T6018] ldm_validate_partition_table(): Disk read failed. [ 97.583148][ T6018] Dev loop6: unable to read RDB block 0 [ 98.692005][ T6018] loop6: unable to read partition table [ 98.712862][ T6018] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 98.793681][ T6029] Zero length message leads to an empty skb [ 99.025417][ T5997] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.075377][ T5997] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.092002][ T6033] netlink: 'syz.3.30': attribute type 177 has an invalid length. [ 99.141767][ T5997] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.161703][ T5997] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.694824][ T6038] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 99.847732][ T6038] netlink: 244 bytes leftover after parsing attributes in process `syz.3.30'. [ 100.022259][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 100.089461][ T6043] 9pnet_fd: Insufficient options for proto=fd [ 101.173647][ T5894] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.642864][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.654302][ T5894] usb 2-1: config 0 has no interfaces? [ 102.426345][ T5894] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 102.485507][ T6066] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure [ 102.501605][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.521697][ T5894] usb 2-1: Product: syz [ 102.525950][ T5894] usb 2-1: Manufacturer: syz [ 102.530631][ T5894] usb 2-1: SerialNumber: syz [ 102.564172][ T5894] usb 2-1: config 0 descriptor?? [ 102.897134][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.406403][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.604170][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.832891][ T5894] usb 5-1: device descriptor read/64, error -71 [ 103.938771][ T6084] netlink: 112 bytes leftover after parsing attributes in process `syz.0.42'. [ 103.978262][ T6087] MPI: mpi too large (187712 bits) [ 104.071867][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.212379][ T5894] usb 5-1: device descriptor read/64, error -71 [ 104.263558][ T6094] x_tables: duplicate underflow at hook 1 [ 104.302665][ T6094] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 104.342881][ T5894] usb usb5-port1: attempt power cycle [ 104.560071][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 104.830720][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.214303][ T5869] usb 2-1: USB disconnect, device number 2 [ 105.781900][ T5894] usb 5-1: device descriptor read/8, error -71 [ 106.122231][ T6119] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 106.321712][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.372347][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 106.383258][ T5894] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.391863][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.411670][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.421600][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.431680][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.444769][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.453942][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.500783][ T6132] loop6: detected capacity change from 0 to 524287999 [ 107.192870][ C0] blk_print_req_error: 24 callbacks suppressed [ 107.192897][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.210908][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.220856][ C0] buffer_io_error: 24 callbacks suppressed [ 107.220873][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 107.384431][ T30] audit: type=1326 audit(1735458523.411:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6128 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x0 [ 107.502257][ T6144] FAULT_INJECTION: forcing a failure. [ 107.502257][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.647456][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.2.62 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 107.658046][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.668152][ T6144] Call Trace: [ 107.671463][ T6144] [ 107.674435][ T6144] dump_stack_lvl+0x241/0x360 [ 107.679510][ T6144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.684768][ T6144] ? __pfx__printk+0x10/0x10 [ 107.689451][ T6144] ? __pfx_lock_release+0x10/0x10 [ 107.694532][ T6144] ? __lock_acquire+0x1397/0x2100 [ 107.699698][ T6144] should_fail_ex+0x3b0/0x4e0 [ 107.704447][ T6144] _copy_from_user+0x2f/0xc0 [ 107.709104][ T6144] do_ipv6_setsockopt+0x2f5/0x3640 [ 107.714281][ T6144] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 107.719880][ T6144] ? __pfx_lock_acquire+0x10/0x10 [ 107.724954][ T6144] ? get_pid_task+0x23/0x1f0 [ 107.729611][ T6144] ? __pfx_lock_release+0x10/0x10 [ 107.734695][ T6144] ? kstrtouint_from_user+0x128/0x190 [ 107.740131][ T6144] ? mark_lock+0x9a/0x360 [ 107.744518][ T6144] ? __lock_acquire+0x1397/0x2100 [ 107.749618][ T6144] ipv6_setsockopt+0x5d/0x170 [ 107.754346][ T6144] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.760293][ T6144] do_sock_setsockopt+0x3af/0x720 [ 107.765374][ T6144] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.770985][ T6144] ? __fget_files+0x395/0x410 [ 107.775715][ T6144] ? __fget_files+0x2a/0x410 [ 107.780370][ T6144] __x64_sys_setsockopt+0x1ee/0x280 [ 107.785632][ T6144] do_syscall_64+0xf3/0x230 [ 107.790345][ T6144] ? clear_bhb_loop+0x35/0x90 [ 107.795294][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.801342][ T6144] RIP: 0033:0x7f05bf785d29 [ 107.805802][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.825549][ T6144] RSP: 002b:00007f05c0601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.834140][ T6144] RAX: ffffffffffffffda RBX: 00007f05bf975fa0 RCX: 00007f05bf785d29 [ 107.842335][ T6144] RDX: 000000000000001f RSI: 0000000000000029 RDI: 0000000000000003 [ 107.850352][ T6144] RBP: 00007f05c0601090 R08: 0000000000000004 R09: 0000000000000000 [ 107.858373][ T6144] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.866393][ T6144] R13: 0000000000000000 R14: 00007f05bf975fa0 R15: 00007ffd69a2cce8 [ 107.874437][ T6144] [ 108.011652][ T5869] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 108.151793][ T5869] usb 4-1: device descriptor read/64, error -71 [ 108.170044][ T5894] usb 5-1: usb_control_msg returned -71 [ 108.175914][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 108.213015][ T59] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.232933][ T5894] usb 5-1: USB disconnect, device number 5 [ 108.288505][ T6158] mmap: syz.2.67 (6158): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 108.296039][ T6160] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.391844][ T5869] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 108.393605][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 108.416337][ T59] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.426332][ T59] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.435633][ T59] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 108.445641][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.459817][ T59] usb 1-1: config 0 descriptor?? [ 108.514939][ T6164] netlink: 'syz.1.69': attribute type 177 has an invalid length. [ 108.532156][ T5869] usb 4-1: device descriptor read/64, error -71 [ 108.642663][ T5869] usb usb4-port1: attempt power cycle [ 109.161684][ T5869] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 109.183119][ T5869] usb 4-1: device descriptor read/8, error -71 [ 109.307840][ T6170] tipc: Enabling of bearer rejected, failed to enable media [ 109.455791][ T5869] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 109.624361][ T5869] usb 4-1: device descriptor read/8, error -71 [ 109.854640][ T5869] usb usb4-port1: unable to enumerate USB device [ 110.174907][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.72'. [ 110.272000][ T6175] openvswitch: netlink: nsh attr 4 is out of range max 3 [ 110.279353][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.470566][ T30] audit: type=1326 audit(1735458526.521:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 110.517350][ T30] audit: type=1326 audit(1735458526.551:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 110.539424][ T30] audit: type=1326 audit(1735458526.551:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 110.561183][ T30] audit: type=1326 audit(1735458526.561:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 111.520006][ T6191] capability: warning: `syz.4.76' uses 32-bit capabilities (legacy support in use) [ 111.544570][ T30] audit: type=1400 audit(1735458527.601:7): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=6190 comm="syz.4.76" path="/10" dev="tmpfs" ino=65 [ 111.654297][ T30] audit: type=1400 audit(1735458527.621:8): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=6190 comm="syz.4.76" path="/10" dev="tmpfs" ino=65 [ 111.657189][ T59] usbhid 1-1:0.0: can't add hid device: -71 [ 111.732641][ T59] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.859947][ T6207] input: syz1 as /devices/virtual/input/input5 [ 111.869151][ T59] usb 1-1: USB disconnect, device number 2 [ 112.294969][ T6224] 9pnet_fd: Insufficient options for proto=fd [ 113.306996][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 113.336203][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 114.302969][ T6257] overlayfs: conflicting options: nfs_export=on,index=off [ 114.422069][ T6261] binder: 6259:6261 ioctl c0306201 0 returned -14 [ 114.472485][ T6261] FAULT_INJECTION: forcing a failure. [ 114.472485][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.531688][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.3.94 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 114.542284][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.552401][ T6261] Call Trace: [ 114.555716][ T6261] [ 114.558684][ T6261] dump_stack_lvl+0x241/0x360 [ 114.563417][ T6261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.568672][ T6261] ? __pfx__printk+0x10/0x10 [ 114.573320][ T6261] ? __pfx_lock_release+0x10/0x10 [ 114.578415][ T6261] should_fail_ex+0x3b0/0x4e0 [ 114.583159][ T6261] _copy_to_iter+0x440/0x1c50 [ 114.587913][ T6261] ? __pfx__copy_to_iter+0x10/0x10 [ 114.593076][ T6261] ? __virt_addr_valid+0x183/0x530 [ 114.598238][ T6261] ? __virt_addr_valid+0x183/0x530 [ 114.603399][ T6261] ? __virt_addr_valid+0x45f/0x530 [ 114.608554][ T6261] ? __phys_addr_symbol+0x2f/0x70 [ 114.613659][ T6261] seq_read_iter+0xb80/0xd70 [ 114.618326][ T6261] seq_read+0x3a9/0x4f0 [ 114.622538][ T6261] ? __pfx_seq_read+0x10/0x10 [ 114.627267][ T6261] ? __pfx___might_resched+0x10/0x10 [ 114.632616][ T6261] full_proxy_read+0x10d/0x1b0 [ 114.637418][ T6261] ? __pfx_full_proxy_read+0x10/0x10 [ 114.642760][ T6261] vfs_read+0x1fc/0xb70 [ 114.646960][ T6261] ? __pfx___mutex_lock+0x10/0x10 [ 114.652027][ T6261] ? __pfx_vfs_read+0x10/0x10 [ 114.656740][ T6261] ? __fget_files+0x2a/0x410 [ 114.661362][ T6261] ? __fget_files+0x395/0x410 [ 114.666069][ T6261] ? __fget_files+0x2a/0x410 [ 114.670690][ T6261] ksys_read+0x18f/0x2b0 [ 114.674988][ T6261] ? __pfx_ksys_read+0x10/0x10 [ 114.679773][ T6261] ? do_syscall_64+0x100/0x230 [ 114.684590][ T6261] ? do_syscall_64+0xb6/0x230 [ 114.689298][ T6261] do_syscall_64+0xf3/0x230 [ 114.693827][ T6261] ? clear_bhb_loop+0x35/0x90 [ 114.698542][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.704469][ T6261] RIP: 0033:0x7f03d2d85d29 [ 114.708901][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.728621][ T6261] RSP: 002b:00007f03d3b2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.737062][ T6261] RAX: ffffffffffffffda RBX: 00007f03d2f75fa0 RCX: 00007f03d2d85d29 [ 114.745050][ T6261] RDX: 0000000000002020 RSI: 0000000020006380 RDI: 0000000000000005 [ 114.753043][ T6261] RBP: 00007f03d3b2b090 R08: 0000000000000000 R09: 0000000000000000 [ 114.761041][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.769153][ T6261] R13: 0000000000000000 R14: 00007f03d2f75fa0 R15: 00007ffd5423a8f8 [ 114.777179][ T6261] [ 115.239773][ T6267] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.651763][ T6273] netlink: 'syz.3.99': attribute type 177 has an invalid length. [ 115.697807][ T6273] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 115.734576][ T6273] netlink: 244 bytes leftover after parsing attributes in process `syz.3.99'. [ 116.131844][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.381772][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 116.401859][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.442808][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.461662][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.479846][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.490066][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.525850][ T5869] usb 2-1: config 0 descriptor?? [ 116.738705][ T5869] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 116.762795][ T5869] microsoft 0003:045E:07DA.0001: parse failed [ 116.769175][ T5869] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 116.936357][ T5869] usb 2-1: USB disconnect, device number 3 [ 116.983802][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 116.997038][ T6283] process 'syz.4.103' launched './file0' with NULL argv: empty string added [ 118.573997][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'. [ 118.661743][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'. [ 118.733335][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.021908][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 119.161961][ T3643] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 119.523918][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.529466][ T5894] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.532322][ T3643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.641970][ T5894] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 119.651301][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 119.654964][ T3643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.661873][ T5894] usb 5-1: Product: syz [ 119.682312][ T5894] usb 5-1: Manufacturer: syz [ 119.687339][ T5894] usb 5-1: SerialNumber: syz [ 119.795699][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 120.071713][ T5869] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 120.082575][ T5869] usb 1-1: config 2 has no interface number 0 [ 120.088967][ T5869] usb 1-1: config 2 interface 31 has no altsetting 0 [ 120.096919][ T3643] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 120.104700][ T5894] usb 5-1: config 0 descriptor?? [ 120.110637][ T3643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.123751][ T5869] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 120.134090][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.134668][ T6294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.143527][ T5869] usb 1-1: Product: syz [ 120.162991][ T3643] usb 4-1: config 0 descriptor?? [ 120.217585][ T5869] usb 1-1: Manufacturer: syz [ 120.236818][ T5869] usb 1-1: SerialNumber: syz [ 120.560752][ T5894] usb 5-1: USB disconnect, device number 6 [ 120.580870][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 120.590833][ T6294] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.829444][ T3643] hid (null): unknown global tag 0x24 [ 120.842120][ T3643] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 120.873759][ T59] usb 4-1: USB disconnect, device number 7 [ 121.158464][ T6335] syz.2.114 uses obsolete (PF_INET,SOCK_PACKET) [ 121.746627][ T5869] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 121.815389][ T5869] usb 1-1: USB disconnect, device number 3 [ 122.302965][ T6346] FAULT_INJECTION: forcing a failure. [ 122.302965][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.316302][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.0.120 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 122.326961][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.337061][ T6346] Call Trace: [ 122.340377][ T6346] [ 122.343430][ T6346] dump_stack_lvl+0x241/0x360 [ 122.348136][ T6346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.353358][ T6346] ? __pfx__printk+0x10/0x10 [ 122.357965][ T6346] ? tomoyo_path_number_perm+0x6f9/0x860 [ 122.363614][ T6346] ? __pfx_lock_release+0x10/0x10 [ 122.368651][ T6346] ? tomoyo_path_number_perm+0x206/0x860 [ 122.374307][ T6346] should_fail_ex+0x3b0/0x4e0 [ 122.379012][ T6346] _copy_from_user+0x2f/0xc0 [ 122.383656][ T6346] video_usercopy+0x378/0x1180 [ 122.388474][ T6346] ? __pfx___video_do_ioctl+0x10/0x10 [ 122.393979][ T6346] ? __pfx_video_usercopy+0x10/0x10 [ 122.399212][ T6346] ? smack_file_ioctl+0x2f7/0x3a0 [ 122.404277][ T6346] ? __fget_files+0x2a/0x410 [ 122.408889][ T6346] ? __fget_files+0x2a/0x410 [ 122.413494][ T6346] v4l2_ioctl+0x189/0x1e0 [ 122.417854][ T6346] ? __pfx_v4l2_ioctl+0x10/0x10 [ 122.422820][ T6346] __se_sys_ioctl+0xf5/0x170 [ 122.427466][ T6346] do_syscall_64+0xf3/0x230 [ 122.431998][ T6346] ? clear_bhb_loop+0x35/0x90 [ 122.436699][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.442623][ T6346] RIP: 0033:0x7fc283385d29 [ 122.447065][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.466690][ T6346] RSP: 002b:00007fc28411e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.475143][ T6346] RAX: ffffffffffffffda RBX: 00007fc283575fa0 RCX: 00007fc283385d29 [ 122.483135][ T6346] RDX: 0000000020000080 RSI: 00000000c040565f RDI: 0000000000000003 [ 122.491138][ T6346] RBP: 00007fc28411e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.499127][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.507111][ T6346] R13: 0000000000000000 R14: 00007fc283575fa0 R15: 00007fff9fca9438 [ 122.515123][ T6346] [ 122.553096][ T6348] overlay: ./file0 is not a directory [ 122.576217][ T6352] binder: 6351:6352 ioctl c0306201 0 returned -14 [ 123.879852][ T30] audit: type=1800 audit(1735458539.931:9): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.123" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 124.795395][ T6383] Bluetooth: MGMT ver 1.23 [ 124.845798][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 125.060398][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 125.754941][ T6400] netlink: 'syz.2.130': attribute type 177 has an invalid length. [ 125.764243][ T6400] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 125.774189][ T6400] netlink: 244 bytes leftover after parsing attributes in process `syz.2.130'. [ 125.791863][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.954351][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 126.645940][ T5869] usb 5-1: config 4 has an invalid interface number: 71 but max is 0 [ 126.662630][ T5869] usb 5-1: config 4 has no interface number 0 [ 126.669028][ T5869] usb 5-1: config 4 interface 71 has no altsetting 0 [ 126.710870][ T5869] usb 5-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=9e.80 [ 126.756673][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.768329][ T5869] usb 5-1: Product: syz [ 126.777859][ T5869] usb 5-1: Manufacturer: syz [ 126.785974][ T5869] usb 5-1: SerialNumber: syz [ 127.954657][ T5869] usb 5-1: can't set config #4, error -71 [ 128.821119][ T5869] usb 5-1: USB disconnect, device number 7 [ 129.767522][ T6431] FAULT_INJECTION: forcing a failure. [ 129.767522][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 129.839729][ T6433] overlayfs: failed to resolve './file0': -2 [ 129.912880][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.4.138 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 129.923561][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.934106][ T6431] Call Trace: [ 129.937439][ T6431] [ 129.940446][ T6431] dump_stack_lvl+0x241/0x360 [ 129.945178][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.950427][ T6431] ? __pfx__printk+0x10/0x10 [ 129.955070][ T6431] ? fs_reclaim_acquire+0x93/0x130 [ 129.960246][ T6431] ? __pfx___might_resched+0x10/0x10 [ 129.965594][ T6431] should_fail_ex+0x3b0/0x4e0 [ 129.970334][ T6431] should_failslab+0xac/0x100 [ 129.975501][ T6431] __kmalloc_noprof+0xdd/0x4c0 [ 129.980289][ T6431] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 129.986035][ T6431] tomoyo_realpath_from_path+0xcf/0x5e0 [ 129.991638][ T6431] tomoyo_mount_permission+0x3bf/0xb80 [ 129.997132][ T6431] ? stack_depot_save_flags+0x37/0x940 [ 130.002609][ T6431] ? tomoyo_mount_permission+0x298/0xb80 [ 130.008323][ T6431] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 130.014400][ T6431] ? hook_sb_mount+0x10b/0x420 [ 130.019218][ T6431] ? security_sb_mount+0x22/0x2f0 [ 130.024445][ T6431] security_sb_mount+0xe0/0x2f0 [ 130.029324][ T6431] path_mount+0xb9/0xfa0 [ 130.033594][ T6431] ? kmem_cache_free+0x195/0x410 [ 130.038546][ T6431] ? user_path_at+0x44/0x60 [ 130.043092][ T6431] __se_sys_mount+0x2d6/0x3c0 [ 130.047896][ T6431] ? __pfx___se_sys_mount+0x10/0x10 [ 130.053123][ T6431] ? do_syscall_64+0x100/0x230 [ 130.058176][ T6431] ? __x64_sys_mount+0x20/0xc0 [ 130.062957][ T6431] do_syscall_64+0xf3/0x230 [ 130.067508][ T6431] ? clear_bhb_loop+0x35/0x90 [ 130.072234][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.078256][ T6431] RIP: 0033:0x7f7301985d29 [ 130.082888][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.102702][ T6431] RSP: 002b:00007f730286c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.111143][ T6431] RAX: ffffffffffffffda RBX: 00007f7301b75fa0 RCX: 00007f7301985d29 [ 130.119138][ T6431] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 130.127134][ T6431] RBP: 00007f730286c090 R08: 00000000200000c0 R09: 0000000000000000 [ 130.135134][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.143145][ T6431] R13: 0000000000000000 R14: 00007f7301b75fa0 R15: 00007ffdcc46e048 [ 130.151235][ T6431] [ 131.141665][ T6431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.167905][ T6440] No control pipe specified [ 132.787091][ T6464] netlink: 'syz.1.144': attribute type 177 has an invalid length. [ 132.812671][ T6464] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 132.820728][ T6464] netlink: 244 bytes leftover after parsing attributes in process `syz.1.144'. [ 133.205153][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205307][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.061212][ T6511] loop9: detected capacity change from 0 to 6 [ 142.535423][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 144.253237][ T3643] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 144.368563][ T6553] FAULT_INJECTION: forcing a failure. [ 144.368563][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 144.388035][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: syz.4.168 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 144.398704][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.408822][ T6553] Call Trace: [ 144.412140][ T6553] [ 144.415143][ T6553] dump_stack_lvl+0x241/0x360 [ 144.419871][ T6553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.425118][ T6553] ? __pfx__printk+0x10/0x10 [ 144.429765][ T6553] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 144.435800][ T6553] ? __pfx___might_resched+0x10/0x10 [ 144.441148][ T6553] ? ima_get_action+0x75/0xb0 [ 144.445889][ T6553] should_fail_ex+0x3b0/0x4e0 [ 144.450816][ T6553] should_failslab+0xac/0x100 [ 144.455822][ T6553] kmem_cache_alloc_node_noprof+0x77/0x380 [ 144.461685][ T6553] ? __alloc_skb+0x1c3/0x440 [ 144.466342][ T6553] __alloc_skb+0x1c3/0x440 [ 144.470818][ T6553] ? __pfx___alloc_skb+0x10/0x10 [ 144.475800][ T6553] ? __lock_acquire+0x1397/0x2100 [ 144.480866][ T6553] alloc_skb_with_frags+0xc3/0x820 [ 144.486048][ T6553] sock_alloc_send_pskb+0x91a/0xa60 [ 144.491326][ T6553] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 144.493683][ T3643] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.497165][ T6553] ? __lock_acquire+0x1397/0x2100 [ 144.512320][ T6553] ? dev_get_by_index+0x23/0x2d0 [ 144.517398][ T6553] packet_sendmsg+0x3fe8/0x6a40 [ 144.517850][ T3643] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.522287][ T6553] ? __lock_acquire+0x1397/0x2100 [ 144.522339][ T6553] ? smack_socket_sendmsg+0x1bb/0x540 [ 144.545700][ T6553] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 144.551474][ T6553] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 144.557943][ T6553] ? __pfx_packet_sendmsg+0x10/0x10 [ 144.562184][ T3643] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.563172][ T6553] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 144.572356][ T3643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.578942][ T6553] ? __fget_files+0x2a/0x410 [ 144.591560][ T6553] ? __might_fault+0xaa/0x120 [ 144.596284][ T6553] ? __pfx_packet_sendmsg+0x10/0x10 [ 144.597308][ T3643] usb 1-1: SerialNumber: syz [ 144.601500][ T6553] __sock_sendmsg+0x221/0x270 [ 144.601543][ T6553] __sys_sendto+0x363/0x4c0 [ 144.601575][ T6553] ? __pfx___sys_sendto+0x10/0x10 [ 144.620550][ T6553] ? __mutex_unlock_slowpath+0x21e/0x790 [ 144.626259][ T6553] ? __fget_files+0x2a/0x410 [ 144.630918][ T6553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.636961][ T6553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.643357][ T6553] __x64_sys_sendto+0xde/0x100 [ 144.648181][ T6553] do_syscall_64+0xf3/0x230 [ 144.652741][ T6553] ? clear_bhb_loop+0x35/0x90 [ 144.657469][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.663435][ T6553] RIP: 0033:0x7f7301985d29 [ 144.667897][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.687615][ T6553] RSP: 002b:00007f730286c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.696093][ T6553] RAX: ffffffffffffffda RBX: 00007f7301b75fa0 RCX: 00007f7301985d29 [ 144.704112][ T6553] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 0000000000000003 [ 144.712124][ T6553] RBP: 00007f730286c090 R08: 0000000020000140 R09: 0000000000000014 [ 144.720146][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.728164][ T6553] R13: 0000000000000000 R14: 00007f7301b75fa0 R15: 00007ffdcc46e048 [ 144.736203][ T6553] [ 145.049739][ T6558] tun0: tun_chr_ioctl cmd 1074812117 [ 146.267496][ T6565] batadv_slave_0: entered promiscuous mode [ 146.273469][ T6565] batadv_slave_0: entered allmulticast mode [ 147.350203][ T6558] ======================================================= [ 147.350203][ T6558] WARNING: The mand mount option has been deprecated and [ 147.350203][ T6558] and is ignored by this kernel. Remove the mand [ 147.350203][ T6558] option from the mount to silence this warning. [ 147.350203][ T6558] ======================================================= [ 147.397668][ T5873] usb 1-1: USB disconnect, device number 4 [ 147.442244][ T6573] netlink: 56 bytes leftover after parsing attributes in process `syz.3.173'. [ 147.655979][ T5902] hid-generic 0005:7FFF:0008.0003: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 152.669514][ T6617] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 152.754328][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.796900][ T6617] team0: Port device bond0 added [ 153.177377][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.480918][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.624284][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 153.917726][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.006701][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.160253][ T5873] usb 5-1: config 0 descriptor?? [ 154.172186][ T3643] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.197094][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 154.382555][ T3643] usb 4-1: Using ep0 maxpacket: 8 [ 154.408311][ T3643] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 154.426005][ T3643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.472318][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.631748][ T5869] usb 1-1: device descriptor read/64, error -71 [ 154.717116][ T3643] usb 4-1: Product: syz [ 154.721355][ T3643] usb 4-1: Manufacturer: syz [ 154.761939][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.783986][ T3643] usb 4-1: SerialNumber: syz [ 154.787605][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.369410][ T6651] FAULT_INJECTION: forcing a failure. [ 155.369410][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 155.416926][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.3.194 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 155.427616][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.437721][ T6651] Call Trace: [ 155.441291][ T6651] [ 155.444338][ T6651] dump_stack_lvl+0x241/0x360 [ 155.449161][ T6651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.454405][ T6651] ? __pfx__printk+0x10/0x10 [ 155.459729][ T6651] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 155.465745][ T6651] ? __pfx___might_resched+0x10/0x10 [ 155.471089][ T6651] should_fail_ex+0x3b0/0x4e0 [ 155.475825][ T6651] should_failslab+0xac/0x100 [ 155.480559][ T6651] kmem_cache_alloc_node_noprof+0x77/0x380 [ 155.481457][ T3643] usb 4-1: config 0 descriptor?? [ 155.486388][ T6651] ? __alloc_skb+0x1c3/0x440 [ 155.486422][ T6651] __alloc_skb+0x1c3/0x440 [ 155.486450][ T6651] ? __pfx___alloc_skb+0x10/0x10 [ 155.486483][ T6651] pfkey_sendmsg+0x1da/0x1050 [ 155.486525][ T6651] ? smack_socket_sendmsg+0x178/0x540 [ 155.493978][ T3643] usb 4-1: can't set config #0, error -71 [ 155.496148][ T6651] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 155.503623][ T3643] usb 4-1: USB disconnect, device number 8 [ 155.505699][ T6651] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 155.538285][ T6651] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 155.544740][ T6651] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 155.551638][ T6651] ? __might_fault+0xaa/0x120 [ 155.556374][ T6651] ? __pfx_lock_release+0x10/0x10 [ 155.561455][ T6651] ? __import_iovec+0x590/0x870 [ 155.566364][ T6651] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 155.571497][ T6651] __sock_sendmsg+0x221/0x270 [ 155.576331][ T6651] ____sys_sendmsg+0x52a/0x7e0 [ 155.581227][ T6651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.586726][ T6651] ? __fget_files+0x2a/0x410 [ 155.591348][ T6651] ? __fget_files+0x2a/0x410 [ 155.595966][ T6651] __sys_sendmsg+0x269/0x350 [ 155.600584][ T6651] ? __pfx_lock_release+0x10/0x10 [ 155.605636][ T6651] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.610801][ T6651] ? __pfx_vfs_write+0x10/0x10 [ 155.615678][ T6651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.622035][ T6651] ? do_syscall_64+0x100/0x230 [ 155.626836][ T6651] ? do_syscall_64+0xb6/0x230 [ 155.631568][ T6651] do_syscall_64+0xf3/0x230 [ 155.636138][ T6651] ? clear_bhb_loop+0x35/0x90 [ 155.640853][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.646786][ T6651] RIP: 0033:0x7f03d2d85d29 [ 155.651236][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.670855][ T6651] RSP: 002b:00007f03d3b2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.679291][ T6651] RAX: ffffffffffffffda RBX: 00007f03d2f75fa0 RCX: 00007f03d2d85d29 [ 155.687293][ T6651] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 155.695279][ T6651] RBP: 00007f03d3b2b090 R08: 0000000000000000 R09: 0000000000000000 [ 155.703376][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.711480][ T6651] R13: 0000000000000000 R14: 00007f03d2f75fa0 R15: 00007ffd5423a8f8 [ 155.719510][ T6651] [ 155.723927][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.875703][ T5869] usb 1-1: device descriptor read/64, error -71 [ 156.008196][ T5869] usb usb1-port1: attempt power cycle [ 157.296487][ T3643] usb 5-1: USB disconnect, device number 8 [ 159.296900][ T6690] netlink: 120 bytes leftover after parsing attributes in process `syz.4.203'. [ 160.872141][ T6696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.206'. [ 161.266468][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 161.275568][ T6708] openvswitch: netlink: Message has 16 unknown bytes. [ 161.317010][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 162.278335][ T6710] sctp: failed to load transform for md5: -2 [ 162.922177][ T6729] team_slave_0: entered promiscuous mode [ 162.928881][ T6729] team_slave_1: entered promiscuous mode [ 166.081649][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.278635][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 166.287710][ T5872] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 166.302806][ T5872] usb 2-1: config 0 has no interface number 0 [ 166.365019][ T5872] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 166.381683][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.416688][ T5872] usb 2-1: Product: syz [ 166.421082][ T5872] usb 2-1: Manufacturer: syz [ 166.439847][ T5872] usb 2-1: SerialNumber: syz [ 166.464047][ T5872] usb 2-1: config 0 descriptor?? [ 166.503402][ T5872] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 166.716696][ T5872] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 166.777091][ T5872] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 166.973212][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.982361][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.091129][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 168.183829][ T6782] FAULT_INJECTION: forcing a failure. [ 168.183829][ T6782] name failslab, interval 1, probability 0, space 0, times 0 [ 168.196844][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.0.223 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 168.207470][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.217627][ T6782] Call Trace: [ 168.220933][ T6782] [ 168.223881][ T6782] dump_stack_lvl+0x241/0x360 [ 168.228582][ T6782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.233818][ T6782] ? __pfx__printk+0x10/0x10 [ 168.238516][ T6782] ? __kmalloc_cache_noprof+0x48/0x390 [ 168.244013][ T6782] ? __pfx___might_resched+0x10/0x10 [ 168.249336][ T6782] should_fail_ex+0x3b0/0x4e0 [ 168.254161][ T6782] should_failslab+0xac/0x100 [ 168.258889][ T6782] __kmalloc_cache_noprof+0x70/0x390 [ 168.264214][ T6782] ? io_ring_ctx_alloc+0x53/0x18b0 [ 168.269371][ T6782] io_ring_ctx_alloc+0x53/0x18b0 [ 168.274374][ T6782] ? io_uring_fill_params+0x442/0x840 [ 168.279775][ T6782] io_uring_create+0x40/0xc00 [ 168.284462][ T6782] __se_sys_io_uring_setup+0x2ba/0x330 [ 168.289940][ T6782] ? __pfx_sched_clock_cpu+0x10/0x10 [ 168.295243][ T6782] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 168.301235][ T6782] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 168.307188][ T6782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.313531][ T6782] ? __irq_exit_rcu+0x105/0x220 [ 168.318414][ T6782] ? do_syscall_64+0xb6/0x230 [ 168.323131][ T6782] do_syscall_64+0xf3/0x230 [ 168.327651][ T6782] ? clear_bhb_loop+0x35/0x90 [ 168.332336][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.338247][ T6782] RIP: 0033:0x7fc283385d29 [ 168.342760][ T6782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.362918][ T6782] RSP: 002b:00007fc2840fcfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 168.371356][ T6782] RAX: ffffffffffffffda RBX: 00007fc283576080 RCX: 00007fc283385d29 [ 168.379364][ T6782] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000003665 [ 168.387345][ T6782] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000000000000 [ 168.395324][ T6782] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 168.403374][ T6782] R13: 0000000000000000 R14: 0000000000003665 R15: 0000000000000000 [ 168.411397][ T6782] [ 168.880907][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.889519][ T5872] usb 2-1: USB disconnect, device number 4 [ 168.985628][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 169.053912][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 169.265423][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 170.878078][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 170.890862][ T5872] quatech2 2-1:0.51: device disconnected [ 171.193207][ T6788] delete_channel: no stack [ 171.617766][ T5872] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 171.820505][ T5872] usb 2-1: device descriptor read/64, error -71 [ 172.072728][ T5872] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 172.251660][ T5872] usb 2-1: device descriptor read/64, error -71 [ 172.471819][ T5872] usb usb2-port1: attempt power cycle [ 172.811734][ T5872] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 172.864061][ T5872] usb 2-1: device descriptor read/8, error -71 [ 173.987302][ T5872] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 174.101774][ T5902] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 174.253525][ T5902] usb 3-1: No LPM exit latency info found, disabling LPM. [ 174.269490][ T5902] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 174.301624][ T5902] usb 3-1: config 0 has an invalid interface number: 73 but max is 1 [ 174.351203][ T5902] usb 3-1: config 0 has no interface number 0 [ 174.365076][ T5902] usb 3-1: config 0 has no interface number 1 [ 174.383946][ T5902] usb 3-1: config 0 interface 151 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 174.432179][ T5902] usb 3-1: config 0 interface 151 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 174.484297][ T5902] usb 3-1: config 0 interface 151 altsetting 7 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 174.511844][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 174.542488][ T5872] usb 2-1: device descriptor read/8, error -71 [ 174.572686][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0x2 has invalid maxpacket 16, setting to 0 [ 174.597768][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 174.628503][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 174.646005][ T5902] usb 3-1: config 0 interface 73 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 174.651939][ T5872] usb usb2-port1: unable to enumerate USB device [ 174.660490][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 174.724622][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 174.753977][ T5902] usb 3-1: config 0 interface 73 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 174.772687][ T5902] usb 3-1: config 0 interface 73 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 174.784139][ T5902] usb 3-1: config 0 interface 73 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 174.795472][ T5902] usb 3-1: config 0 interface 73 altsetting 1 endpoint 0xB is Bulk; changing to Interrupt [ 174.806233][ T5902] usb 3-1: config 0 interface 73 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 174.817583][ T5902] usb 3-1: config 0 interface 151 has no altsetting 0 [ 174.826023][ T5902] usb 3-1: config 0 interface 73 has no altsetting 0 [ 174.860172][ T5902] usb 3-1: New USB device found, idVendor=13d3, idProduct=3223, bcdDevice=d8.6c [ 174.887830][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.928387][ T5902] usb 3-1: Product: Ð’ [ 174.947686][ T5902] usb 3-1: Manufacturer: Щ [ 174.968156][ T5902] usb 3-1: SerialNumber: ц [ 174.983423][ T5902] usb 3-1: config 0 descriptor?? [ 175.239443][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.348147][ T3643] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.456907][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 175.505587][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.545184][ T3643] usb 5-1: Using ep0 maxpacket: 16 [ 175.563282][ T5872] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 175.657194][ T3643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.704005][ T3643] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.772555][ T3643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.834099][ T3643] usb 5-1: config 0 descriptor?? [ 175.912713][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.921121][ T5872] usb 2-1: Product: syz [ 175.925486][ T5872] usb 2-1: Manufacturer: syz [ 175.930132][ T5872] usb 2-1: SerialNumber: syz [ 175.942333][ T5872] usb 2-1: config 0 descriptor?? [ 175.953794][ T5872] usb 2-1: bad CDC descriptors [ 175.959257][ T5872] usb 2-1: unsupported MDLM descriptors [ 176.173086][ T5869] usb 2-1: USB disconnect, device number 9 [ 176.204888][ T6870] vlan0: entered promiscuous mode [ 176.362582][ T3643] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.369720][ T3643] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 176.377221][ T3643] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 2/5 [ 176.385892][ T3643] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 176.392941][ T3643] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 176.415159][ T5902] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in cold state, will try to load a firmware [ 176.441192][ T5902] usb 3-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 176.456474][ T5902] usb 3-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 176.559062][ T6877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.585816][ T6878] input: syz1 as /devices/virtual/input/input11 [ 176.795532][ T5872] usb 5-1: USB disconnect, device number 9 [ 177.029240][ T6889] delete_channel: no stack [ 183.562795][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.853058][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.877933][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.901290][ T5869] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.931245][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.947717][ T5869] usb 4-1: config 0 descriptor?? [ 184.193870][ T5873] IPVS: starting estimator thread 0... [ 184.503402][ T6966] IPVS: using max 20 ests per chain, 48000 per kthread [ 186.059861][ T5869] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input13 [ 186.292043][ T5869] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input14 [ 186.315780][ T5869] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input15 [ 186.333312][ T5869] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input16 [ 186.377000][ T5869] uclogic 0003:256C:006D.0005: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 187.466119][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 188.202067][ T7008] xt_CT: No such helper "snmp_trap" [ 188.255392][ T5869] usb 4-1: USB disconnect, device number 9 [ 190.468161][ T7045] netlink: 'syz.3.294': attribute type 11 has an invalid length. [ 191.081722][ T7050] team0: entered promiscuous mode [ 191.086851][ T7050] team_slave_0: entered promiscuous mode [ 191.115651][ T7050] team_slave_1: entered promiscuous mode [ 191.122889][ T7050] bond0: entered promiscuous mode [ 191.128132][ T7050] bond_slave_0: entered promiscuous mode [ 191.134918][ T7050] bond_slave_1: entered promiscuous mode [ 191.200794][ T7049] team0: left promiscuous mode [ 191.219970][ T7049] team_slave_0: left promiscuous mode [ 191.242033][ T7049] team_slave_1: left promiscuous mode [ 191.260174][ T7049] bond0: left promiscuous mode [ 191.288551][ T7049] bond_slave_0: left promiscuous mode [ 191.303757][ T7049] bond_slave_1: left promiscuous mode [ 191.331958][ T7058] netlink: 'syz.1.298': attribute type 10 has an invalid length. [ 191.475816][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.597784][ T7058] bond_slave_0: entered promiscuous mode [ 191.604867][ T7058] bond_slave_1: entered promiscuous mode [ 191.663177][ T7066] nfs: Unknown parameter 'frcontekÿÿ' [ 191.694285][ T3643] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.943448][ T7058] team0: Port device bond0 added [ 192.170346][ T3643] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.236965][ T3643] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 192.304893][ T3643] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.350734][ T3643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.437359][ T3643] usb 2-1: config 0 descriptor?? [ 192.489716][ T3643] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 192.695158][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.764443][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.644572][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.652294][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.965310][ T59] usb 2-1: USB disconnect, device number 10 [ 195.033249][ T30] audit: type=1326 audit(1735458611.091:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.081572][ T30] audit: type=1326 audit(1735458611.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.131640][ T30] audit: type=1326 audit(1735458611.091:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.181575][ T30] audit: type=1326 audit(1735458611.091:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.272075][ T30] audit: type=1326 audit(1735458611.091:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.321692][ T30] audit: type=1326 audit(1735458611.091:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.328608][ T7097] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 195.374953][ T30] audit: type=1326 audit(1735458611.091:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.401985][ T30] audit: type=1326 audit(1735458611.141:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.429656][ T30] audit: type=1326 audit(1735458611.141:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.431916][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 195.458898][ T30] audit: type=1326 audit(1735458611.141:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7091 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d0f785d29 code=0x7ffc0000 [ 195.620733][ T7101] binder: 7100:7101 ioctl c020f509 200002c0 returned -22 [ 195.629933][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.310'. [ 195.631749][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 195.648813][ T5913] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 195.658060][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.668596][ T5913] usb 2-1: config 0 has no interface number 0 [ 195.675010][ T5913] usb 2-1: config 0 interface 84 altsetting 246 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 195.697337][ T5913] usb 2-1: config 0 interface 84 altsetting 246 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.707743][ T3643] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.721593][ T5913] usb 2-1: config 0 interface 84 altsetting 246 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 195.741276][ T5913] usb 2-1: config 0 interface 84 has no altsetting 0 [ 195.754494][ T5913] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 195.763901][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.772303][ T5913] usb 2-1: Product: syz [ 195.776835][ T5913] usb 2-1: Manufacturer: syz [ 195.785371][ T5913] usb 2-1: SerialNumber: syz [ 195.793785][ T5913] usb 2-1: config 0 descriptor?? [ 195.843393][ T5901] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.874728][ T3643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.885189][ T3643] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 195.898755][ T3643] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.907945][ T3643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.920692][ T3643] usb 5-1: config 0 descriptor?? [ 195.931255][ T3643] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 196.002134][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 196.016670][ T5901] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 196.019769][ T7092] 9pnet_fd: Insufficient options for proto=fd [ 196.031679][ T5901] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 196.040399][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 196.049921][ T5901] usb 1-1: config 1 has no interface number 0 [ 196.056352][ T5901] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.069928][ T5901] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 196.083141][ T5901] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.092301][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.107896][ T5901] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 196.910463][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.049816][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.059255][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.061946][ T5913] comedi comedi0: Wrong number of endpoints [ 197.087669][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.114602][ T5913] dt9812 2-1:0.84: driver 'dt9812' failed to auto-configure device. [ 197.154214][ T5913] usb 2-1: USB disconnect, device number 11 [ 197.167444][ T5901] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 197.177343][ T5819] udevd[5819]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: No such file or directory [ 198.373598][ T5913] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 199.293019][ T5913] usb 1-1: USB disconnect, device number 8 [ 199.299906][ T5913] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 200.099222][ T5894] usb 5-1: USB disconnect, device number 10 [ 200.966866][ T5901] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.141687][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 201.190235][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 201.208917][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.312697][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.420938][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.614634][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.696865][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.731639][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.975149][ T5901] usb 2-1: usb_control_msg returned -32 [ 201.986222][ T5901] usbtmc 2-1:16.0: can't read capabilities [ 202.004341][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 202.010582][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 202.010632][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 202.016848][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 202.524964][ T7158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.537181][ T7158] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.819173][ T5913] usb 2-1: USB disconnect, device number 12 [ 205.399091][ T7195] new mount options do not match the existing superblock, will be ignored [ 207.796818][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 208.669329][ T7216] vivid-000: disconnect [ 209.104906][ T7215] vivid-000: reconnect [ 209.888380][ T7233] bridge0: port 3(hsr_slave_0) entered blocking state [ 209.919141][ T7233] bridge0: port 3(hsr_slave_0) entered disabled state [ 209.940852][ T7233] hsr_slave_0: entered allmulticast mode [ 209.955346][ T7233] hsr_slave_0: left allmulticast mode [ 210.570782][ T7240] bond0: entered promiscuous mode [ 210.577549][ T7240] bond_slave_0: entered promiscuous mode [ 210.583577][ T7240] bond_slave_1: entered promiscuous mode [ 212.424175][ T5901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.983839][ T5901] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 212.999938][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.017510][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.035130][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.058556][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.127043][ T7271] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.350'. [ 213.145133][ T5901] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.462735][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.474388][ T5901] usb 4-1: config 0 descriptor?? [ 213.481225][ T7258] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.059503][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.112022][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.119499][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.167899][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.187296][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.227797][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.245939][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.272417][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.279984][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.321742][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.322079][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.535207][ T5901] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 214.549557][ T5901] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 215.558629][ T5873] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.568713][ T5873] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.738294][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.765221][ T7280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.777094][ T5901] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 215.806362][ T5873] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.821022][ T7295] FAULT_INJECTION: forcing a failure. [ 215.821022][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 215.890621][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.1.358 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 215.901282][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.911349][ T7295] Call Trace: [ 215.914674][ T7295] [ 215.917633][ T7295] dump_stack_lvl+0x241/0x360 [ 215.922370][ T7295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.927605][ T7295] ? __pfx__printk+0x10/0x10 [ 215.932238][ T7295] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 215.938362][ T7295] ? __pfx___might_resched+0x10/0x10 [ 215.943690][ T7295] should_fail_ex+0x3b0/0x4e0 [ 215.948436][ T7295] should_failslab+0xac/0x100 [ 215.953177][ T7295] kmem_cache_alloc_node_noprof+0x77/0x380 [ 215.959034][ T7295] ? __alloc_skb+0x1c3/0x440 [ 215.963681][ T7295] __alloc_skb+0x1c3/0x440 [ 215.968178][ T7295] ? validate_chain+0x11e/0x5920 [ 215.973139][ T7295] ? __pfx___alloc_skb+0x10/0x10 [ 215.978213][ T7295] ? reacquire_held_locks+0x5c0/0x690 [ 215.983648][ T7295] ? __pfx_lock_release+0x10/0x10 [ 215.988724][ T7295] alloc_skb_with_frags+0xc3/0x820 [ 215.993982][ T7295] ? mark_lock+0x9a/0x360 [ 215.998348][ T7295] ? __pfx_validate_chain+0x10/0x10 [ 216.003569][ T7295] ? __lock_acquire+0x1397/0x2100 [ 216.008625][ T7295] sock_alloc_send_pskb+0x91a/0xa60 [ 216.014099][ T7295] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 216.019897][ T7295] ? smack_socket_sendmsg+0x178/0x540 [ 216.025295][ T7295] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 216.031039][ T7295] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 216.037668][ T7295] hci_sock_sendmsg+0x22b/0x11c0 [ 216.042638][ T7295] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 216.049459][ T7295] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 216.054880][ T7295] ? get_pid_task+0x23/0x1f0 [ 216.059493][ T7295] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 216.064910][ T7295] __sock_sendmsg+0x221/0x270 [ 216.069636][ T7295] sock_write_iter+0x2d7/0x3f0 [ 216.074429][ T7295] ? __pfx_sock_write_iter+0x10/0x10 [ 216.079743][ T7295] ? bpf_lsm_file_permission+0x9/0x10 [ 216.085132][ T7295] ? security_file_permission+0x74/0x280 [ 216.090782][ T7295] vfs_write+0xaeb/0xd30 [ 216.095059][ T7295] ? __pfx_sock_write_iter+0x10/0x10 [ 216.100408][ T7295] ? __pfx_vfs_write+0x10/0x10 [ 216.105233][ T7295] ? __fget_files+0x2a/0x410 [ 216.109872][ T7295] ? __fget_files+0x2a/0x410 [ 216.114534][ T7295] ksys_write+0x18f/0x2b0 [ 216.118903][ T7295] ? __pfx_ksys_write+0x10/0x10 [ 216.123769][ T7295] ? do_syscall_64+0x100/0x230 [ 216.128556][ T7295] ? do_syscall_64+0xb6/0x230 [ 216.133258][ T7295] do_syscall_64+0xf3/0x230 [ 216.137779][ T7295] ? clear_bhb_loop+0x35/0x90 [ 216.142465][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.148383][ T7295] RIP: 0033:0x7f9d0f785d29 [ 216.152830][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.172455][ T7295] RSP: 002b:00007f9d10695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.180890][ T7295] RAX: ffffffffffffffda RBX: 00007f9d0f975fa0 RCX: 00007f9d0f785d29 [ 216.188875][ T7295] RDX: 0000000000000006 RSI: 0000000020000100 RDI: 0000000000000004 [ 216.196856][ T7295] RBP: 00007f9d10695090 R08: 0000000000000000 R09: 0000000000000000 [ 216.204869][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.212859][ T7295] R13: 0000000000000000 R14: 00007f9d0f975fa0 R15: 00007ffcf6cb4e08 [ 216.220872][ T7295] [ 216.244609][ T5901] usb 4-1: USB disconnect, device number 10 [ 216.424464][ T7300] FAULT_INJECTION: forcing a failure. [ 216.424464][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.438042][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.4.360 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 216.448688][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.458800][ T7300] Call Trace: [ 216.462116][ T7300] [ 216.462973][ T7280] kAFS: No cell specified [ 216.465061][ T7300] dump_stack_lvl+0x241/0x360 [ 216.474157][ T7300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.479440][ T7300] ? __pfx__printk+0x10/0x10 [ 216.484133][ T7300] should_fail_ex+0x3b0/0x4e0 [ 216.488872][ T7300] _copy_from_iter+0x1e9/0x1c20 [ 216.493775][ T7300] ? __virt_addr_valid+0x183/0x530 [ 216.498945][ T7300] ? __alloc_skb+0x28f/0x440 [ 216.503589][ T7300] ? __pfx__copy_from_iter+0x10/0x10 [ 216.508924][ T7300] ? __virt_addr_valid+0x183/0x530 [ 216.514085][ T7300] ? __virt_addr_valid+0x183/0x530 [ 216.519247][ T7300] ? __virt_addr_valid+0x45f/0x530 [ 216.524406][ T7300] ? __phys_addr_symbol+0x2f/0x70 [ 216.529497][ T7300] ? __check_object_size+0x47a/0x730 [ 216.534931][ T7300] netlink_sendmsg+0x73d/0xcb0 [ 216.539764][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.545142][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.550561][ T7300] __sock_sendmsg+0x221/0x270 [ 216.555289][ T7300] sock_write_iter+0x2d7/0x3f0 [ 216.560106][ T7300] ? __pfx_sock_write_iter+0x10/0x10 [ 216.565483][ T7300] ? bpf_lsm_file_permission+0x9/0x10 [ 216.570906][ T7300] ? security_file_permission+0x74/0x280 [ 216.576687][ T7300] vfs_write+0xaeb/0xd30 [ 216.580999][ T7300] ? __pfx_sock_write_iter+0x10/0x10 [ 216.586356][ T7300] ? __pfx_vfs_write+0x10/0x10 [ 216.591183][ T7300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.597575][ T7300] ksys_write+0x18f/0x2b0 [ 216.601961][ T7300] ? __pfx_ksys_write+0x10/0x10 [ 216.606891][ T7300] do_syscall_64+0xf3/0x230 [ 216.611448][ T7300] ? clear_bhb_loop+0x35/0x90 [ 216.616166][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.622136][ T7300] RIP: 0033:0x7f7301985d29 [ 216.626605][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.646304][ T7300] RSP: 002b:00007f730284b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.654950][ T7300] RAX: ffffffffffffffda RBX: 00007f7301b76080 RCX: 00007f7301985d29 [ 216.662988][ T7300] RDX: 0000000000000014 RSI: 0000000020000080 RDI: 0000000000000008 [ 216.670995][ T7300] RBP: 00007f730284b090 R08: 0000000000000000 R09: 0000000000000000 [ 216.679091][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.687114][ T7300] R13: 0000000000000000 R14: 00007f7301b76080 R15: 00007ffdcc46e048 [ 216.695164][ T7300] [ 218.461052][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 218.539941][ T7312] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 219.232135][ T5873] usb 1-1: USB disconnect, device number 9 [ 222.806167][ T7350] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 222.864402][ T7350] veth0_macvtap: left promiscuous mode [ 222.947758][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 223.711582][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 223.759374][ T7350] batman_adv: batadv0: Adding interface: macvtap0 [ 223.770719][ T7350] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.833452][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.871237][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.935087][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.965704][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.991846][ T7350] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 224.027502][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.075394][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.376280][ T5873] usb 5-1: GET_CAPABILITIES returned 0 [ 225.381948][ T5873] usbtmc 5-1:16.0: can't read capabilities [ 225.621627][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.635979][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.690142][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 226.356630][ T5873] usb 5-1: USB disconnect, device number 11 [ 226.731857][ T7402] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 226.818812][ T7402] bond_slave_0: left promiscuous mode [ 226.831712][ T7402] bond_slave_1: left promiscuous mode [ 227.254242][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.445303][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 227.478814][ T5901] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.509263][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.548737][ T5901] usb 2-1: config 0 descriptor?? [ 227.603283][ T5901] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 227.827841][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.852231][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.432380][ T7419] binder: 7418:7419 ioctl c0306201 20000380 returned -14 [ 228.683333][ T7424] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 228.728467][ T7424] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 228.754745][ T7425] qrtr: Invalid version 164 [ 230.866456][ T59] usb 2-1: USB disconnect, device number 13 [ 232.431809][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.595291][ T5873] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.605508][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.662569][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.674314][ T7471] vivid-004: disconnect [ 232.698132][ T7454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.722135][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.971391][ T7454] kAFS: No cell specified [ 233.067689][ T7481] FAULT_INJECTION: forcing a failure. [ 233.067689][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.081250][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.3.411 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 233.091891][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.101982][ T7481] Call Trace: [ 233.105292][ T7481] [ 233.108251][ T7481] dump_stack_lvl+0x241/0x360 [ 233.112983][ T7481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.118224][ T7481] ? __pfx__printk+0x10/0x10 [ 233.122865][ T7481] ? __pfx_lock_release+0x10/0x10 [ 233.127984][ T7481] should_fail_ex+0x3b0/0x4e0 [ 233.132732][ T7481] _copy_from_user+0x2f/0xc0 [ 233.137369][ T7481] copy_msghdr_from_user+0xae/0x680 [ 233.142620][ T7481] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.148469][ T7481] ? __fget_files+0x2a/0x410 [ 233.153106][ T7481] ? __fget_files+0x2a/0x410 [ 233.157738][ T7481] __sys_sendmsg+0x209/0x350 [ 233.162370][ T7481] ? __pfx_lock_release+0x10/0x10 [ 233.167435][ T7481] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.172688][ T7481] ? __pfx_vfs_write+0x10/0x10 [ 233.177521][ T7481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.183887][ T7481] ? do_syscall_64+0x100/0x230 [ 233.188701][ T7481] ? do_syscall_64+0xb6/0x230 [ 233.193438][ T7481] do_syscall_64+0xf3/0x230 [ 233.197998][ T7481] ? clear_bhb_loop+0x35/0x90 [ 233.202725][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.208651][ T7481] RIP: 0033:0x7f03d2d85d29 [ 233.213091][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.232721][ T7481] RSP: 002b:00007f03d3b2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.241156][ T7481] RAX: ffffffffffffffda RBX: 00007f03d2f75fa0 RCX: 00007f03d2d85d29 [ 233.249145][ T7481] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 233.257137][ T7481] RBP: 00007f03d3b2b090 R08: 0000000000000000 R09: 0000000000000000 [ 233.265121][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.273106][ T7481] R13: 0000000000000000 R14: 00007f03d2f75fa0 R15: 00007ffd5423a8f8 [ 233.281106][ T7481] [ 233.322786][ T7458] vivid-004: reconnect [ 234.195727][ T7487] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 234.292858][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.333376][ T7487] team0: Port device bond0 added [ 234.441688][ T3643] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.601909][ T3643] usb 5-1: Using ep0 maxpacket: 8 [ 234.617122][ T3643] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 234.631261][ T3643] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.712064][ T3643] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.730892][ T3643] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.911169][ T3643] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.939618][ T3643] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.956281][ T3643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.233984][ T5873] usb 2-1: USB disconnect, device number 14 [ 235.392193][ T3643] usb 5-1: usb_control_msg returned -32 [ 235.397842][ T3643] usbtmc 5-1:16.0: can't read capabilities [ 236.863564][ T7524] dccp_invalid_packet: pskb_may_pull failed [ 237.444087][ T7516] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 237.751375][ T7538] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 239.662135][ T59] usb 5-1: USB disconnect, device number 12 [ 240.862985][ T5902] dvb-usb: did not find the firmware file 'dvb-usb-vp7045-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 240.973116][ T5902] dvb_usb_vp7045 3-1:0.151: probe with driver dvb_usb_vp7045 failed with error -110 [ 241.043969][ T5902] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in cold state, will try to load a firmware [ 241.079460][ T5902] usb 3-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 241.098946][ T5902] usb 3-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 241.381878][ T7575] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 241.412504][ T7575] bond0: left promiscuous mode [ 241.435981][ T7575] bond_slave_0: left promiscuous mode [ 241.443267][ T7575] bond_slave_1: left promiscuous mode [ 241.711646][ T5901] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.893559][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.923322][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.028502][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.102392][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.292786][ T5901] usb 5-1: config 0 descriptor?? [ 242.463244][ T5901] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 242.476393][ T59] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.598925][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.635404][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.809766][ T7597] loop6: detected capacity change from 0 to 524287999 [ 242.821314][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.830662][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.849518][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.858843][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.872823][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.882141][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.891770][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.901030][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.909169][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.918488][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.962387][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.971733][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.022031][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.031573][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.040124][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.049475][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.057598][ T7597] ldm_validate_partition_table(): Disk read failed. [ 243.070176][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.079530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.087756][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.097027][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.113496][ T7597] Dev loop6: unable to read RDB block 0 [ 243.126693][ T7597] loop6: unable to read partition table [ 243.137447][ T7597] loop_reread_partitions: partition scan of loop6 (_á) failed (rc=-5) [ 243.171061][ T7601] ldm_validate_partition_table(): Disk read failed. [ 243.200384][ T7601] Dev loop6: unable to read RDB block 0 [ 243.219947][ T7601] loop6: unable to read partition table [ 243.229502][ T7601] loop_reread_partitions: partition scan of loop6 (_á) failed (rc=-5) [ 243.298628][ T5194] ldm_validate_partition_table(): Disk read failed. [ 243.318188][ T5194] Dev loop6: unable to read RDB block 0 [ 244.445453][ T5194] loop6: unable to read partition table [ 245.451134][ T5901] usb 5-1: USB disconnect, device number 13 [ 246.555355][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.449'. [ 248.590556][ T7663] serio: Serial port ptm0 [ 249.978637][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 250.028605][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 250.643013][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 250.643033][ T30] audit: type=1326 audit(1735458666.701:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bf785d29 code=0x7ffc0000 [ 250.920478][ T30] audit: type=1326 audit(1735458666.971:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f05bf785d29 code=0x7ffc0000 [ 250.963529][ T30] audit: type=1326 audit(1735458666.971:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bf785d29 code=0x7ffc0000 [ 250.985239][ T30] audit: type=1326 audit(1735458666.971:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bf785d29 code=0x7ffc0000 [ 251.006972][ T30] audit: type=1326 audit(1735458666.981:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7674 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f05bf785d29 code=0x7ffc0000 [ 251.202902][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'. [ 252.102651][ T7698] netlink: 'syz.3.463': attribute type 3 has an invalid length. [ 252.110557][ T7698] netlink: 666 bytes leftover after parsing attributes in process `syz.3.463'. [ 253.762490][ T7707] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 253.769519][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.778372][ T7707] vhci_hcd vhci_hcd.0: Device attached [ 253.972068][ T5873] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 254.119125][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 254.876833][ T5894] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 254.983493][ T5873] usb 2-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 254.996164][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.097164][ T5873] usb 2-1: config 0 descriptor?? [ 360.351432][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 360.358505][ C1] rcu: 0-...!: (1 GPs behind) idle=490c/1/0x4000000000000000 softirq=23132/23148 fqs=3 [ 360.369476][ C1] rcu: (detected by 1, t=10502 jiffies, g=20485, q=239 ncpus=2) [ 360.377280][ C1] Sending NMI from CPU 1 to CPUs 0: [ 360.377322][ C0] NMI backtrace for cpu 0 [ 360.377344][ C0] CPU: 0 UID: 0 PID: 7732 Comm: syz.4.472 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 360.377364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.377382][ C0] RIP: 0010:__lock_acquire+0xc71/0x2100 [ 360.377416][ C0] Code: 00 00 48 c7 c0 c0 79 37 9a 48 c1 e8 03 48 bf 00 00 00 00 00 fc ff df 0f b6 04 38 84 c0 0f 85 24 0d 00 00 83 3d 6f b8 bc 18 00 <75> 39 48 63 9c 24 88 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 [ 360.377431][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00000046 [ 360.377448][ C0] RAX: 0000000000000004 RBX: 1ffff1100604c165 RCX: ffffffff9a377903 [ 360.377461][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 360.377473][ C0] RBP: ffff888030260b08 R08: ffffffff94270887 R09: 1ffffffff284e110 [ 360.377490][ C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: ffff888030260ac4 [ 360.377503][ C0] R13: ffff888030260000 R14: 0000000000000000 R15: ffff888030260b28 [ 360.377516][ C0] FS: 00007f730284b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 360.377532][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.377550][ C0] CR2: 0000001b2f918ff8 CR3: 0000000034f54000 CR4: 00000000003526f0 [ 360.377566][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.377577][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.377588][ C0] Call Trace: [ 360.377596][ C0] [ 360.377605][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 360.377630][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 360.377649][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.377678][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 360.377705][ C0] ? nmi_handle+0x14f/0x5a0 [ 360.377725][ C0] ? nmi_handle+0x2a/0x5a0 [ 360.377745][ C0] ? __lock_acquire+0xc71/0x2100 [ 360.377763][ C0] ? default_do_nmi+0x63/0x160 [ 360.377782][ C0] ? exc_nmi+0x123/0x1f0 [ 360.377802][ C0] ? end_repeat_nmi+0xf/0x53 [ 360.377823][ C0] ? __lock_acquire+0xc71/0x2100 [ 360.377842][ C0] ? __lock_acquire+0xc71/0x2100 [ 360.377861][ C0] ? __lock_acquire+0xc71/0x2100 [ 360.377880][ C0] [ 360.377886][ C0] [ 360.377900][ C0] lock_acquire+0x1ed/0x550 [ 360.377917][ C0] ? debug_object_deactivate+0x158/0x390 [ 360.377949][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 360.377971][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.378000][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 360.378024][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 360.378045][ C0] ? debug_object_deactivate+0x158/0x390 [ 360.378072][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 360.378098][ C0] debug_object_deactivate+0x158/0x390 [ 360.378127][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 360.378156][ C0] ? timerqueue_add+0x260/0x290 [ 360.378174][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 360.378199][ C0] debug_deactivate+0x1b/0x220 [ 360.378224][ C0] __hrtimer_run_queues+0x305/0xd30 [ 360.378256][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 360.378278][ C0] ? sched_clock+0x4a/0x70 [ 360.378303][ C0] ? read_tsc+0x9/0x20 [ 360.378326][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 360.378349][ C0] hrtimer_interrupt+0x403/0xa40 [ 360.378382][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 360.378404][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 360.378428][ C0] [ 360.378434][ C0] [ 360.378440][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.378469][ C0] RIP: 0010:unwind_next_frame+0x4cc/0x22d0 [ 360.378488][ C0] Code: 16 00 00 41 0f b7 1f c1 eb 0b 80 e3 01 48 8b 44 24 28 42 0f b6 04 20 84 c0 4c 8b 74 24 78 0f 85 8d 16 00 00 48 8b 04 24 88 18 <41> 0f b7 1f 83 e3 0f 83 fb 05 0f 8f 89 00 00 00 83 fb 03 0f 8f 09 [ 360.378503][ C0] RSP: 0018:ffffc900051cf810 EFLAGS: 00000246 [ 360.378519][ C0] RAX: ffffc900051cf915 RBX: 0000000000000000 RCX: ffffffff90335e74 [ 360.378532][ C0] RDX: ffffffff90add8a2 RSI: ffffffff90add88a RDI: ffffffff814ba930 [ 360.378585][ C0] RBP: ffffc900051cf930 R08: 000000000000000a R09: ffffc900051cf9d0 [ 360.378598][ C0] R10: ffffc900051cf930 R11: ffffffff818b39d0 R12: dffffc0000000000 [ 360.378612][ C0] R13: ffffc900051cf8e0 R14: ffffc900051cf918 R15: ffffffff90add8a6 [ 360.378628][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.378657][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 360.378682][ C0] ? kasan_save_track+0x3f/0x80 [ 360.378706][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.378734][ C0] arch_stack_walk+0x11c/0x150 [ 360.378757][ C0] ? kasan_save_track+0x3f/0x80 [ 360.378781][ C0] stack_trace_save+0x118/0x1d0 [ 360.378810][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 360.378835][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.378855][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.378877][ C0] ? security_file_alloc+0x32/0x310 [ 360.378897][ C0] kasan_save_track+0x3f/0x80 [ 360.378919][ C0] ? kasan_save_track+0x3f/0x80 [ 360.378965][ C0] __kasan_slab_alloc+0x66/0x80 [ 360.378989][ C0] ? security_file_permission+0x221/0x280 [ 360.379008][ C0] kmem_cache_alloc_noprof+0x1d9/0x380 [ 360.379039][ C0] security_file_alloc+0x32/0x310 [ 360.379059][ C0] init_file+0x91/0x280 [ 360.379078][ C0] alloc_empty_file+0xb8/0x1d0 [ 360.379096][ C0] alloc_file_pseudo+0x1da/0x290 [ 360.379116][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 360.379141][ C0] anon_inode_getfd+0xce/0x1e0 [ 360.379169][ C0] __se_sys_fanotify_init+0x792/0x900 [ 360.379191][ C0] do_syscall_64+0xf3/0x230 [ 360.379219][ C0] ? clear_bhb_loop+0x35/0x90 [ 360.379236][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.379262][ C0] RIP: 0033:0x7f7301985d29 [ 360.379279][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.379294][ C0] RSP: 002b:00007f730284b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 360.379313][ C0] RAX: ffffffffffffffda RBX: 00007f7301b76080 RCX: 00007f7301985d29 [ 360.379326][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.379337][ C0] RBP: 00007f7301a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 360.379349][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.379360][ C0] R13: 0000000000000000 R14: 00007f7301b76080 R15: 00007ffdcc46e048 [ 360.379380][ C0] [ 360.380315][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g20485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 361.013253][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 361.023261][ C1] rcu: RCU grace-period kthread stack dump: [ 361.029176][ C1] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 361.040979][ C1] Call Trace: [ 361.044281][ C1] [ 361.047241][ C1] __schedule+0x17fb/0x4be0 [ 361.051815][ C1] ? __pfx___schedule+0x10/0x10 [ 361.056795][ C1] ? __pfx_lock_release+0x10/0x10 [ 361.061867][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.068232][ C1] ? schedule+0x90/0x320 [ 361.072533][ C1] schedule+0x14b/0x320 [ 361.076732][ C1] schedule_timeout+0x15a/0x290 [ 361.081619][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 361.087028][ C1] ? __pfx_process_timeout+0x10/0x10 [ 361.092360][ C1] ? prepare_to_swait_event+0x330/0x350 [ 361.097946][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 361.102837][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 361.108126][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 361.114345][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 361.119695][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 361.125662][ C1] ? finish_swait+0xd4/0x1e0 [ 361.130297][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 361.134949][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.140198][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 361.146719][ C1] ? __kthread_parkme+0x169/0x1d0 [ 361.151796][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.157386][ C1] kthread+0x2f0/0x390 [ 361.161672][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.166908][ C1] ? __pfx_kthread+0x10/0x10 [ 361.171532][ C1] ret_from_fork+0x4b/0x80 [ 361.175975][ C1] ? __pfx_kthread+0x10/0x10 [ 361.180597][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.185425][ C1] [ 361.188642][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 361.194990][ C1] CPU: 1 UID: 0 PID: 7727 Comm: syz.4.472 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 361.205603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.215689][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 361.222495][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 361.242151][ C1] RSP: 0000:ffffc9000b32f3e0 EFLAGS: 00000293 [ 361.248278][ C1] RAX: ffffffff81938efb RBX: 1ffff110170c8c65 RCX: ffff888030189e00 [ 361.256285][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 361.264287][ C1] RBP: ffffc9000b32f5e0 R08: ffffffff81938eca R09: 1ffffffff284e110 [ 361.272290][ C1] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000 [ 361.280294][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 361.288294][ C1] FS: 0000555577506500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 361.297253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.303899][ C1] CR2: 000000002000b680 CR3: 0000000034f54000 CR4: 00000000003526f0 [ 361.311903][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.319929][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.327985][ C1] Call Trace: [ 361.331315][ C1] [ 361.334184][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 361.340668][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 361.346408][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 361.352275][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 361.357705][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 361.363989][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 361.369409][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 361.375094][ C1] ? update_process_times+0x242/0x2f0 [ 361.380504][ C1] ? tick_nohz_handler+0x37c/0x500 [ 361.385659][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 361.391160][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 361.396589][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 361.402347][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 361.407328][ C1] ? read_tsc+0x9/0x20 [ 361.411433][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 361.417556][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 361.422727][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 361.428921][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 361.434768][ C1] [ 361.437723][ C1] [ 361.440677][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.446877][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 361.453069][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 361.459267][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 361.465465][ C1] ? mark_lock+0x9a/0x360 [ 361.469831][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 361.475154][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 361.480494][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 361.486868][ C1] ? rcu_is_watching+0x15/0xb0 [ 361.491667][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 361.497168][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 361.502490][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 361.507637][ C1] flush_tlb_mm_range+0x329/0x5c0 [ 361.512880][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 361.518466][ C1] ? page_ext_get+0x1d6/0x2a0 [ 361.523190][ C1] ptep_clear_flush+0x11a/0x170 [ 361.528073][ C1] do_wp_page+0x1c64/0x49b0 [ 361.532607][ C1] ? do_wp_page+0x163e/0x49b0 [ 361.537324][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 361.542206][ C1] ? __lock_acquire+0x1397/0x2100 [ 361.547268][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 361.552319][ C1] ? rcu_is_watching+0x15/0xb0 [ 361.557122][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 361.562187][ C1] ? __pfx____pte_offset_map+0x10/0x10 [ 361.567696][ C1] handle_pte_fault+0xfa5/0x5ed0 [ 361.572680][ C1] ? __free_object+0x548/0x760 [ 361.577504][ C1] ? mark_lock+0x9a/0x360 [ 361.581862][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 361.587098][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 361.592510][ C1] ? __lock_acquire+0x1397/0x2100 [ 361.597582][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 361.602984][ C1] ? lock_vma_under_rcu+0x34b/0x790 [ 361.608267][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 361.614058][ C1] handle_mm_fault+0x1053/0x1ad0 [ 361.619069][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 361.624388][ C1] ? lock_vma_under_rcu+0x602/0x790 [ 361.629712][ C1] ? lock_vma_under_rcu+0x1dd/0x790 [ 361.634959][ C1] ? exc_page_fault+0x113/0x8b0 [ 361.639854][ C1] exc_page_fault+0x459/0x8b0 [ 361.644576][ C1] asm_exc_page_fault+0x26/0x30 [ 361.649475][ C1] RIP: 0033:0x7f730185c6d9 [ 361.653919][ C1] Code: 01 64 48 8b 04 25 00 00 00 00 48 8d b8 c8 fe ff ff e8 db 55 0c 00 85 c0 75 17 48 8b 84 24 88 00 00 00 48 8b b4 24 a8 00 00 00 <48> 89 b0 00 00 00 20 64 f0 83 2c 25 90 ff ff ff 01 48 8b 84 24 80 [ 361.673575][ C1] RSP: 002b:00007ffdcc46e1b0 EFLAGS: 00010246 [ 361.679706][ C1] RAX: 000000000000b680 RBX: 0000000000000002 RCX: ffffffffe0000000 [ 361.687713][ C1] RDX: 7c6039dd88fe3c4b RSI: 0000000000000000 RDI: 00005555775063c8 [ 361.695823][ C1] RBP: 00007f7301b77ba0 R08: 00007f7301800000 R09: 0000000000000003 [ 361.704011][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: 000000000003e5b7 [ 361.712008][ C1] R13: 00007f7301b76160 R14: 0000000000000032 R15: fffffffffffffffe [ 361.720033][ C1]