last executing test programs: 9.725258824s ago: executing program 2 (id=4789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 8.793056291s ago: executing program 2 (id=4794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 8.560409451s ago: executing program 3 (id=4795): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 8.277023704s ago: executing program 0 (id=4798): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="278ccad80010b15bf557e680f6a967e3687043908568789de8f39c7ca80b2ab5959ce9b24bd1d54ccc1b07ee08ebaf131b171f1fda0b51dc2c81bdbf8f3ccfc633928da35a369273a0c1534b103e6fb08e133f02d99a7a2e40e6b9c32be1881eb0d9046fb70e1d845657fd9fad455af067d5478c34cf9a757d4fcb9ebcc947a0cb87e890df4e35d249ae", @ANYRES16=r5, @ANYBLOB="01000000000000000000030000000c0009800800020034000000"], 0x20}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10008000}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r11, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xabd2, 0x3c}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) 8.22268962s ago: executing program 3 (id=4799): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000001740), 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="5100330080040000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020202020202010004060000000000000602000025030000003c0400000000720603030303030300000038fa2c9005479b83b9c80f8669377f9c80fc6f2de6c7fb98da5b01564f25717853ed18ec36f841c301a469c66a39ee2fd25aa5f040198aa30ad4d5831a541712bd77b4cc8b142dead23f58bc37871107002cb2c1916d976c9fd32b4deca7cc37703bd8c6ee9636a996c169984c5e5d3612945ca9f2065ac9a8ed28870251e902c4471c3d6dbe978bfad0bde5a59d0a3c20389ed376f7f6a1da9650b6"], 0x70}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050009"], 0x24}}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) 7.895502484s ago: executing program 3 (id=4803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000da74f9438af818bf66609c481fa33ddab0df17c8fce0d4cd7e9b92e935c980db3846714361051852be23b2b993241df7aa460f4f76aeb07d1163b25958a12bcc123c775d2fdd9d062c264d3cb91d181306e242b1fc2562e4d4e870b905eb57f90bef9e9de518f04855f6fa69d6f9ff926398bccfbb95fed300000000", @ANYRES16=r3, @ANYBLOB="090300000000000000001d000000"], 0x14}}, 0x0) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000040), 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x4}, 0x1, 0x2, 0x0, 0x0, "7a4be044dc7880d2"}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x3, &(0x7f0000000200)=[{0x4, 0x0, 0x6}, {0x34, 0x4, 0x4, 0x100d1b8}, {0x6, 0x8}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080000004958cb433c1750b680e9b755a924ec47e1836eb65faad7ba64b0058c3091a892d54a0ee2436b"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x68060200) unshare(0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x48044) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x2e, "fbc521aaeb61473d5c9cd2861a2d5bfbdf91edfd4501a7dc929a3cd57af0bcff68c7f07953a6eae1ac0c37f8378d"}, &(0x7f0000000100)=0x36) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.720206998s ago: executing program 2 (id=4804): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 7.613603542s ago: executing program 0 (id=4806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) close_range(0xffffffffffffffff, r5, 0x0) syz_clone(0x40a68180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_usbip_server_init(0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) write$usbip_server(r7, &(0x7f0000000000)=@ret_unlink, 0x30) 7.308369189s ago: executing program 4 (id=4807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x0, 0x0, &(0x7f0000000000)) 6.436092885s ago: executing program 2 (id=4808): prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, 0x0, 0xaf) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) dup3(r3, r2, 0x0) socket(0x11, 0x800000003, 0x0) r4 = eventfd2(0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xf8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6d]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x5c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xf8}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) 6.414484645s ago: executing program 4 (id=4810): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7f}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000a2220840d219bc75819b0102c5f809021200010000000009040000000202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0xe64, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xd, {0xd, 0x12, "6e21d5a0a4fb2a356a4791"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0xc, 0x8a, "b950b2f65d7c0427f3ff2421f0689c9c659cf8114d719951cc9787303dae2611dcc40a71b0ee92e58102e19905d22066185a2a6c51297a008689ec27b3852800274b75900331610634b7117237e85e87783b149174edb5595fc4d584c05613a3f31bff79f24240ccfc3e7d270b1b80925316a30012e2eb20c7cae250955cbff07ddea9cfb714ad5cd9ad"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x7f5c, 0x659, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x15}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.891717934s ago: executing program 1 (id=4812): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 5.246878912s ago: executing program 0 (id=4813): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000001740), 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="5100330080040000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020202020202010004060000000000000602000025030000003c0400000000720603030303030300000038fa2c9005479b83b9c80f8669377f9c80fc6f2de6c7fb98da5b01564f25717853ed18ec36f841c301a469c66a39ee2fd25aa5f040198aa30ad4d5831a541712bd77b4cc8b142dead23f58bc37871107002cb2c1916d976c9fd32b4deca7cc37703bd8c6ee9636a996c169984c5e5d3612945ca9f2065ac9a8ed28870251e902c4471c3d6dbe978bfad0bde5a59d0a3c20389ed376f7f6a1da9650b6"], 0x70}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050009"], 0x24}}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) 5.206839703s ago: executing program 1 (id=4814): syz_clone3(&(0x7f0000002440)={0x200000, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240), {0xa}, &(0x7f0000002280)=""/201, 0xc9, &(0x7f0000002380)=""/68, &(0x7f0000002400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000002180)={0x7, 0x1, 0x7, 0x1, 0xfffffff9, 0xffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) 5.015491267s ago: executing program 0 (id=4815): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 4.943954954s ago: executing program 3 (id=4816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 4.852550119s ago: executing program 3 (id=4817): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="567eec5677d3", 'veth1_to_hsr\x00'}}, 0x1e) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x16ec7077c8c871d9}, 0x38) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) close(r1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x4, "f38dcb55cb5ae8aa42ee1acd1126da324e87e81c"}]}}}}}}}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r12}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x2000) 3.946558299s ago: executing program 1 (id=4818): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x9, 0x2a8, &(0x7f0000000500)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r4}, 0x1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='dmask=00000000000020000000000,allow_utime=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c696f636861727365743d6b6f69382d752c6572726f72733d636f6e74696e14652c757466382c696f636861727365743d69736f383835392d392c696f636861727365743d63703433372c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000003c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@data_writeback}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r5) 3.926286282s ago: executing program 0 (id=4819): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$search(0xa, r1, 0x0, &(0x7f0000000180)={'syz', 0x3}, r0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.swap.events\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1c463000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000540)=0x3bc8, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r3, 0x0, 0x20000023893) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xd, 0x13}}) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003806168e91601800000002000000c000100a1000000c84200000c0001000800000008000000340004804c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7], 0xb4}}, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000100)=0x3) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.74592255s ago: executing program 3 (id=4820): r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x100842) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000380)={0x14, &(0x7f00000004c0)={0x40, 0x0, 0xd1, {0xd1, 0xb, "a9e7c9b5dac5f6fb0e7955566181de0aee263b029e15290f514a20652f2a988605ef7292ffede64061aad88737b49c54db73274672bdff2303fde5ab65bffa7530b41d4fdaa918fe7778ae2873df952891fa0c3b6417c761ddad58aaf935a5f3f0d0a0d9981d5fb8e280ed09df34fa591a73a46a34caaa01c64d3423f4cb6fcfdfeb4e5adb08beca25ee71d151ccd89c95a61959db0bc642a878b4fc24fe8a4f5d1e3b84055c35ca50b372b0d42ce5e173fbfc5e53a757fc223e02cad70def80ce600b214104c11b59bdbf0adc1c66"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000800)={0x34, &(0x7f00000005c0)={0x40, 0xd, 0xed, "63e101af81e4c90f46473c8f0fedb4e784e3d0e01a634b53622b6470e99dacf238d6b32a6c9078ec9b9b31f6eed833a8b609801d8d97d6135c5c179fdceaf0ea0dbfd73774fd5d912489a8dd78913a89366941662cb8715651b4e22a07563573dc8e52f7071673f5d059736a4ae1bd3f11019251d6fc5d587137cab6fc24be318e7b9fbfafbeb85997bbf6f4356da83354212854b37bca9aa12e97d4ecc0a0828947205acbdf311e292be6724c7807e749354c963ed57cc655da8be5c603be309b5b2e0bad9cfa5d958543c14be1eb8e0519be3d91def96500b4172c0d3fb5f69e6f132ff6185db941c8b28fc1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x91}, &(0x7f00000006c0)={0x20, 0x0, 0x89, {0x87, "5d91824a87d6553fb3629a42c4138ab46ae3a4376d0fcb2d07aaaa03110695f6a739524ecb545f0c0a101ccb18f8033ddd2f78493ad4acc1748977328f2961430e930544efde490e238a22164614ee0a46df2957b498268ba62daf1a0ca6c21e8f42ea15700b208bca32962a422eb11f00dec57c7bfa7878c4919eb822294410d8b84e8a57e8b2"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x3}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b}, 0x20) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x2}) pwrite64(r0, &(0x7f0000000300)='_', 0x1, 0x10000000005) open(&(0x7f0000000480)='./bus\x00', 0xe0101, 0x0) pwrite64(r0, &(0x7f0000000440)="35873712d0c8", 0x6, 0x4010000bffb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r6, &(0x7f0000000080)=0x800407fd, 0xfdd5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0), 0xffffff85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x6611) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x7, 0x19, &(0x7f0000000000)="cf4f6e8a1e2d25391ad2a33110e0614e4773f0f1f44d86ac51", 0x0, 0x1}]}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) fallocate(r8, 0x3, 0x4010000afff, 0x4410000bfbe) 2.69870355s ago: executing program 1 (id=4821): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x0, 0x0, &(0x7f0000000000)) 2.534222916s ago: executing program 2 (id=4822): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.404977139s ago: executing program 1 (id=4823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) close_range(0xffffffffffffffff, r5, 0x0) syz_clone(0x40a68180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_usbip_server_init(0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) write$usbip_server(r7, &(0x7f0000000000)=@ret_unlink, 0x30) 2.297111005s ago: executing program 4 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0xd10, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xcf4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4a0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xd10}}, 0x0) 2.247732432s ago: executing program 2 (id=4825): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) keyctl$describe(0x1e, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getegid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x9}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.058589897s ago: executing program 4 (id=4826): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x172, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400080, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) close(r6) 481.939008ms ago: executing program 4 (id=4827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) fcntl$lock(r1, 0x25, &(0x7f0000000180)) 81.26136ms ago: executing program 1 (id=4828): syz_clone3(&(0x7f0000002440)={0x200000, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240), {0xa}, &(0x7f0000002280)=""/201, 0xc9, &(0x7f0000002380)=""/68, &(0x7f0000002400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000002180)={0x7, 0x1, 0x7, 0x1, 0xfffffff9, 0xffff}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) 42.588684ms ago: executing program 4 (id=4829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x6) r1 = socket$packet(0x11, 0x0, 0x300) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) read(r2, &(0x7f00000002c0)=""/200, 0x39) 0s ago: executing program 0 (id=4830): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95e24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000fcff0000000000000000008500000030000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x9, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x10d, 0x10, &(0x7f0000000000)={@empty}, 0x14) kernel console output (not intermixed with test programs): ] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 934.023534][ T5140] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 934.043678][ T9] usb 1-1: USB disconnect, device number 42 [ 934.052459][T14776] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 934.220181][T21052] netlink: 'syz.2.4350': attribute type 10 has an invalid length. [ 934.502463][ T25] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 934.531847][ T5091] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 934.749785][ T5091] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.774746][ T5091] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 934.791527][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 934.847363][ T5091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.869632][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.888146][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 934.926921][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.937204][ T5091] usb 2-1: SerialNumber: syz [ 934.981695][ T5091] usb 2-1: bad CDC descriptors [ 934.988624][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 935.031352][ T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 935.068712][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 935.127388][ T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 935.196080][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.224481][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.236049][T21072] loop4: detected capacity change from 0 to 16 [ 935.250395][ T25] usb 4-1: Product: syz [ 935.272754][ T25] usb 4-1: Manufacturer: syz [ 935.281272][T21072] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported [ 935.296697][ T25] usb 4-1: SerialNumber: syz [ 935.307484][T21054] loop1: detected capacity change from 0 to 256 [ 935.381849][T18467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 935.465207][T21072] loop4: detected capacity change from 0 to 2048 [ 935.923130][ T9] usb 2-1: USB disconnect, device number 75 [ 935.961114][ T25] cdc_ncm 4-1:1.0: bind() failure [ 936.031230][ T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 936.115027][ T25] cdc_ncm 4-1:1.1: bind() failure [ 936.139141][ T25] usb 4-1: USB disconnect, device number 48 [ 936.933863][ T25] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 937.219947][ T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 937.256488][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.276599][ T25] usb 2-1: config 0 descriptor?? [ 937.617846][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 937.655307][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 937.701455][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 937.742748][ T25] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 937.765152][ T25] [drm] Initialized udl on minor 2 [ 937.776225][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 937.796002][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 937.814554][ T5091] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 937.835681][ T25] usb 2-1: USB disconnect, device number 76 [ 937.857804][ T5091] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 937.946743][T21115] netlink: 'syz.0.4372': attribute type 10 has an invalid length. [ 938.807060][ T5091] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 939.021235][ T5091] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.041768][ T5091] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.089766][ T5091] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 939.131534][ T5091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.151828][ T5091] usb 5-1: SerialNumber: syz [ 939.174746][ T5091] usb 5-1: bad CDC descriptors [ 939.596219][T21123] loop4: detected capacity change from 0 to 256 [ 939.660278][T21151] loop1: detected capacity change from 0 to 128 [ 939.705714][T18467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 939.821893][ T5140] usb 5-1: USB disconnect, device number 64 [ 940.318111][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 940.687038][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 940.720052][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 940.759001][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 940.827062][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 940.873657][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.904791][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.934960][ T25] usb 1-1: Product:  [ 940.960818][ T25] usb 1-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 941.066655][ T25] usb 1-1: SerialNumber: syz [ 941.113536][T21160] loop4: detected capacity change from 0 to 512 [ 941.161001][T21160] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 941.223747][T21160] EXT4-fs (loop4): 1 truncate cleaned up [ 941.265452][T21160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.346437][T21160] net_ratelimit: 620 callbacks suppressed [ 941.346506][T21160] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 941.498238][ T29] audit: type=1800 audit(1719293741.295:198): pid=21160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4391" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 941.590807][T21149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.591105][T21149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.597769][ T25] cdc_ncm 1-1:1.0: bind() failure [ 941.602439][ T25] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 941.602486][ T25] cdc_ncm 1-1:1.1: bind() failure [ 941.626818][ T25] usb 1-1: USB disconnect, device number 43 [ 941.917901][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.398868][T21183] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 942.405553][T21183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 942.413891][T21183] vhci_hcd vhci_hcd.0: Device attached [ 942.477087][T21184] vhci_hcd: cannot find the pending unlink 0 [ 942.897270][T21184] vhci_hcd: connection closed [ 943.064991][ T2807] vhci_hcd: stop threads [ 943.139666][ T2807] vhci_hcd: release socket [ 943.208960][ T2807] vhci_hcd: disconnect device [ 943.273104][ T5139] usb 12-1: enqueue for inactive port 0 [ 943.568994][T21204] loop1: detected capacity change from 0 to 1024 [ 943.597553][T21204] hfsplus: unable to parse mount options [ 943.840171][ T5139] usb usb12-port1: attempt power cycle [ 944.035030][T21210] loop1: detected capacity change from 0 to 2048 [ 945.129711][T21210] loop1: p3 < > p4 < > [ 945.144349][T21210] loop1: partition table partially beyond EOD, truncated [ 945.167463][ T5139] usb usb12-port1: unable to enumerate USB device [ 945.199639][T21210] loop1: p3 start 4284289 is beyond EOD, truncated [ 947.530260][T21247] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 947.530297][T21247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 947.530480][T21247] vhci_hcd vhci_hcd.0: Device attached [ 947.539305][T21250] vhci_hcd: connection closed [ 947.542726][ T2807] vhci_hcd: stop threads [ 947.542828][ T2807] vhci_hcd: release socket [ 947.543050][ T2807] vhci_hcd: disconnect device [ 948.017790][T21257] loop1: detected capacity change from 0 to 128 [ 948.112994][T21257] ext4: Unknown parameter 'fsmagic' [ 948.581972][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4420'. [ 948.594081][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4422'. [ 948.881672][T21281] loop4: detected capacity change from 0 to 512 [ 948.916941][ T29] audit: type=1326 audit(1719293748.795:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21282 comm="syz.0.4425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47f775d39 code=0x0 [ 948.955491][T21281] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 949.008939][T21286] loop1: detected capacity change from 0 to 128 [ 949.083496][T21281] EXT4-fs (loop4): 1 truncate cleaned up [ 949.103187][T21288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4425'. [ 949.249597][T21281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.066516][T21281] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 950.092389][ T29] audit: type=1800 audit(1719293749.985:200): pid=21281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4423" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 950.243238][T21300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'. [ 950.430396][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.590449][T21308] loop1: detected capacity change from 0 to 128 [ 950.669361][T21313] loop4: detected capacity change from 0 to 128 [ 950.706992][T21313] ext4: Unknown parameter 'fsmagic' [ 951.867961][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4435'. [ 952.182873][T21331] loop1: detected capacity change from 0 to 512 [ 952.916665][T21331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.030058][T21331] ext4 filesystem being mounted at /root/syzkaller.XguSsh/564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.189266][T21331] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4441: corrupted inode contents [ 953.210770][T21347] loop4: detected capacity change from 0 to 512 [ 953.230752][T21331] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4441: mark_inode_dirty error [ 953.255697][T21347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 953.277889][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 953.299114][T21331] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4441: corrupted inode contents [ 953.316671][T21347] EXT4-fs (loop4): 1 truncate cleaned up [ 953.326340][T21347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.330752][T21331] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4441: mark_inode_dirty error [ 953.364384][T21347] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 953.476436][ T29] audit: type=1800 audit(1719293753.388:201): pid=21347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4443" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 953.631705][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.863909][T21355] can0: slcan on ptm0. [ 953.989161][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.326042][T21366] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4448'. [ 954.465344][T21366] xt_TPROXY: Can be used only with -p tcp or -p udp [ 954.501130][T21353] can0 (unregistered): slcan off ptm0. [ 954.669230][T21371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4449'. [ 954.875388][ T29] audit: type=1326 audit(1719293754.787:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.4.4452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70f575d39 code=0x0 [ 954.999562][T21394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4452'. [ 955.143133][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4453'. [ 955.612532][T21409] loop1: detected capacity change from 0 to 512 [ 955.695999][T21409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.724633][T21409] ext4 filesystem being mounted at /root/syzkaller.XguSsh/568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.847026][T21409] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4457: corrupted inode contents [ 955.900145][T21409] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4457: mark_inode_dirty error [ 955.986033][T21409] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4457: corrupted inode contents [ 956.077202][T21409] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4457: mark_inode_dirty error [ 956.268900][T21433] loop0: detected capacity change from 0 to 512 [ 956.282160][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.301903][T21433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 956.306479][T21433] EXT4-fs (loop0): 1 truncate cleaned up [ 956.307926][T21433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.391901][T21433] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 956.411036][ T29] audit: type=1800 audit(1719293756.345:203): pid=21433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4458" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 957.076679][T18331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.118112][T21444] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4460'. [ 957.138566][T21446] loop4: detected capacity change from 0 to 1024 [ 957.172782][T21446] hfsplus: unable to parse mount options [ 957.296296][T21444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 957.312607][T21449] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4464'. [ 957.331325][T18615] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 957.350914][T21449] netlink: zone id is out of range [ 957.376044][T21449] netlink: zone id is out of range [ 957.389709][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 957.434715][T21449] netlink: zone id is out of range [ 957.460823][T21449] netlink: zone id is out of range [ 957.503172][T21449] netlink: zone id is out of range [ 957.516703][T21449] netlink: zone id is out of range [ 957.543747][T21449] netlink: zone id is out of range [ 957.574340][T21449] netlink: zone id is out of range [ 957.593827][T21449] netlink: zone id is out of range [ 958.475702][T21457] loop4: detected capacity change from 0 to 2048 [ 958.569944][T14776] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 958.601195][T21457] loop4: p3 < > p4 < > [ 958.642269][T21457] loop4: partition table partially beyond EOD, truncated [ 958.663502][T21457] loop4: p3 start 4284289 is beyond EOD, truncated [ 958.701325][T21472] loop1: detected capacity change from 0 to 512 [ 958.810336][T14776] usb 3-1: config 215 has too many interfaces: 152, using maximum allowed: 32 [ 958.844711][T14776] usb 3-1: config 215 has an invalid descriptor of length 255, skipping remainder of the config [ 958.899309][T21472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.915768][T14776] usb 3-1: config 215 has 0 interfaces, different from the descriptor's value: 152 [ 958.945511][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 958.997909][T14776] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 959.018097][T21472] ext4 filesystem being mounted at /root/syzkaller.XguSsh/572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.054855][T14776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.065978][T21472] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4469: corrupted inode contents [ 959.130308][T21472] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4469: mark_inode_dirty error [ 959.185152][T21472] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4469: corrupted inode contents [ 959.207083][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 959.223956][T21472] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4469: mark_inode_dirty error [ 959.287286][ T9] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 959.307886][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 959.354899][ T9] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 959.401951][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.433510][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.467485][ T9] usb 4-1: config 0 descriptor?? [ 959.579621][T21480] loop4: detected capacity change from 0 to 2048 [ 959.650792][T21480] GPT:first_usable_lbas don't match. [ 959.665049][T21480] GPT:34 != 290 [ 959.679093][T21480] GPT: Use GNU Parted to correct GPT errors. [ 959.707625][T21480] loop4: p1 p2 p3 [ 959.712350][T21470] netlink: 'syz.3.4467': attribute type 33 has an invalid length. [ 959.756901][T21470] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4467'. [ 959.826437][ T29] audit: type=1326 audit(1719293759.771:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21484 comm="syz.1.4471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb1375d39 code=0x0 [ 960.055167][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4471'. [ 960.073525][ T9] usb 4-1: string descriptor 0 read error: -71 [ 960.083957][T14776] usb 3-1: string descriptor 0 read error: -71 [ 960.911191][T21494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 960.917842][T21494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 960.925962][T21494] vhci_hcd vhci_hcd.0: Device attached [ 960.931979][T21495] vhci_hcd: connection closed [ 960.943223][ T78] vhci_hcd: stop threads [ 960.943262][ T78] vhci_hcd: release socket [ 960.943283][ T78] vhci_hcd: disconnect device [ 960.980065][ T9] usb 4-1: USB disconnect, device number 49 [ 960.989321][T14776] usb 3-1: USB disconnect, device number 42 [ 961.552319][T21501] loop4: detected capacity change from 0 to 512 [ 961.675654][T21501] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.4470: corrupted in-inode xattr: invalid ea_ino [ 961.692209][T21501] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4470: couldn't read orphan inode 15 (err -117) [ 961.718807][T21501] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.981974][ T29] audit: type=1800 audit(1719293761.919:205): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4474" name="bus" dev="sda1" ino=2002 res=0 errno=0 [ 962.098523][T18083] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 962.221102][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 963.499791][T21533] loop1: detected capacity change from 0 to 512 [ 963.590271][T21533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.644665][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 963.654305][T21533] ext4 filesystem being mounted at /root/syzkaller.XguSsh/575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.713914][T21533] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4481: corrupted inode contents [ 963.728515][T21533] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4481: mark_inode_dirty error [ 963.742314][T21533] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4481: corrupted inode contents [ 963.785020][T21533] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4481: mark_inode_dirty error [ 963.869814][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.283583][T21551] loop1: detected capacity change from 0 to 1024 [ 964.340005][T21551] hfsplus: unable to parse mount options [ 964.407994][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 964.458347][T21499] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 964.647363][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 964.701203][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 964.717344][ T9] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 964.727831][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 964.738092][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.749071][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 964.757807][ T9] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 964.767217][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 964.774524][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.784583][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 964.804915][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 964.817737][ T9] usb 4-1: config 0 descriptor?? [ 964.896638][T21557] loop1: detected capacity change from 0 to 2048 [ 964.928079][T21557] loop1: p3 < > p4 < > [ 964.932433][T21557] loop1: partition table partially beyond EOD, truncated [ 964.940141][T21557] loop1: p3 start 4284289 is beyond EOD, truncated [ 965.036928][ T4547] loop1: p3 < > p4 < > [ 965.041244][ T4547] loop1: partition table partially beyond EOD, truncated [ 965.113714][ T4547] loop1: p3 start 4284289 is beyond EOD, truncated [ 965.365154][ T5255] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 965.493407][T21565] loop4: detected capacity change from 0 to 1024 [ 965.579155][ T5255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.612468][T21547] netlink: 'syz.3.4484': attribute type 33 has an invalid length. [ 965.633227][T21547] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4484'. [ 965.634598][ T5255] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.681221][ T5255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.706075][T21565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.724492][ T9] usb 4-1: string descriptor 0 read error: -71 [ 965.732834][ T9] usb 4-1: USB disconnect, device number 50 [ 965.811104][ T5255] usb 1-1: config 0 descriptor?? [ 966.149437][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.231112][T21571] netlink: 'syz.1.4488': attribute type 10 has an invalid length. [ 966.293188][ T5255] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 966.322607][ T5255] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input31 [ 966.483706][T21561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.526194][T21561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.554420][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.577165][ T5255] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 966.594347][T21573] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4489'. [ 966.703545][T21576] xt_TPROXY: Can be used only with -p tcp or -p udp [ 967.020711][ T5105] Bluetooth: hci2: command tx timeout [ 967.137983][ T29] audit: type=1800 audit(1719293767.105:206): pid=21578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4490" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 967.348605][ T5139] usb 1-1: USB disconnect, device number 44 [ 967.785490][T21587] loop1: detected capacity change from 0 to 512 [ 967.831115][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.842971][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.914537][T21587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.956772][T21587] ext4 filesystem being mounted at /root/syzkaller.XguSsh/579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.009578][ T5139] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 968.123395][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.136722][T21587] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4492: corrupted inode contents [ 968.168173][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 968.245829][T21587] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4492: mark_inode_dirty error [ 968.289833][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.333366][T21587] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4492: corrupted inode contents [ 968.345862][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.381712][T21587] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4492: mark_inode_dirty error [ 968.388691][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 968.436649][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 968.486869][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.504483][ T5139] usb 4-1: Product: syz [ 968.526827][ T5139] usb 4-1: Manufacturer: syz [ 968.531708][ T5139] usb 4-1: SerialNumber: syz [ 968.578604][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.790011][T21585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 969.040669][ T5255] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 969.106687][ T5105] Bluetooth: hci2: command tx timeout [ 969.146554][T21554] chnl_net:caif_netlink_parms(): no params data found [ 969.249229][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 969.266809][ T5255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.283561][ T52] bridge_slave_0: left allmulticast mode [ 969.299726][ T52] bridge_slave_0: left promiscuous mode [ 969.300444][ T5255] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 969.318476][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.338537][ T5255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.369409][ T5255] usb 5-1: config 0 descriptor?? [ 969.443115][ T5139] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 969.489178][ T5139] cdc_ncm 4-1:1.0: bind() failure [ 969.518217][ T5139] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 969.549078][T21618] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4501'. [ 969.565189][ T5139] cdc_ncm 4-1:1.1: bind() failure [ 969.601047][ T5139] usb 4-1: USB disconnect, device number 51 [ 969.654076][T21619] xt_TPROXY: Can be used only with -p tcp or -p udp [ 969.802295][ T5255] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 969.845722][ T5255] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input32 [ 969.980363][ T5255] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 970.002953][T21604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.026601][T21604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.353212][ T52] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 970.403877][ T52] bridge0 (unregistering): left allmulticast mode [ 971.127851][ T9] usb 5-1: USB disconnect, device number 65 [ 971.181949][ T5105] Bluetooth: hci2: command tx timeout [ 971.413724][ T52] bond0 (unregistering): left allmulticast mode [ 971.430461][ T52] bond_slave_0: left allmulticast mode [ 971.436007][ T52] bond_slave_1: left allmulticast mode [ 971.464120][ T52] bond0 (unregistering): left promiscuous mode [ 971.477128][ T52] bond_slave_0: left promiscuous mode [ 971.488679][ T52] bond_slave_1: left promiscuous mode [ 971.550836][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.607417][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.627344][ T52] bond0 (unregistering): Released all slaves [ 971.690114][T21616] netlink: 'syz.0.4500': attribute type 10 has an invalid length. [ 971.976121][T21638] netlink: 182736 bytes leftover after parsing attributes in process `syz.1.4504'. [ 972.067535][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4504'. [ 972.280091][T21647] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4503'. [ 972.294854][T21642] can0: slcan on ptm0. [ 972.342000][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4503'. [ 972.349951][T21647] net_ratelimit: 117 callbacks suppressed [ 972.349972][T21647] netlink: zone id is out of range [ 972.539375][ T52] mac80211_hwsim hwsim67 wlan1 (unregistering): left allmulticast mode [ 972.552490][T21647] netlink: zone id is out of range [ 972.574178][T21647] netlink: zone id is out of range [ 972.785049][T21647] netlink: zone id is out of range [ 972.820294][T21647] netlink: zone id is out of range [ 972.825491][T21647] netlink: zone id is out of range [ 972.863707][T21647] netlink: zone id is out of range [ 972.919848][T21647] netlink: zone id is out of range [ 972.973069][T21647] netlink: zone id is out of range [ 973.067549][T21647] netlink: zone id is out of range [ 973.180190][T21636] can0 (unregistered): slcan off ptm0. [ 973.322766][ T5105] Bluetooth: hci2: command tx timeout [ 973.509972][T21554] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.536328][T21554] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.554765][T21554] bridge_slave_0: entered allmulticast mode [ 973.578294][T21554] bridge_slave_0: entered promiscuous mode [ 973.994177][T21678] loop1: detected capacity change from 0 to 1024 [ 974.051693][T21667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4510'. [ 974.062510][T21678] hfsplus: unable to parse mount options [ 974.116265][T21554] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.136595][T21554] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.160413][T21554] bridge_slave_1: entered allmulticast mode [ 974.178680][T21554] bridge_slave_1: entered promiscuous mode [ 974.183287][T21499] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 974.560571][T21680] loop1: detected capacity change from 0 to 2048 [ 974.564125][T21554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.612250][T21688] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4514'. [ 974.624862][T21680] loop1: p3 < > p4 < > [ 974.629564][T21680] loop1: partition table partially beyond EOD, truncated [ 974.640285][T21680] loop1: p3 start 4284289 is beyond EOD, truncated [ 974.683566][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.691340][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4514'. [ 974.720964][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.775368][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.811105][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.049647][ T52] veth1_macvtap: left promiscuous mode [ 975.080095][ T52] veth0_macvtap: left promiscuous mode [ 975.102710][ T52] veth1_vlan: left promiscuous mode [ 975.153342][ T52] veth0_vlan: left promiscuous mode [ 977.933088][ T52] team0 (unregistering): Port device team_slave_1 removed [ 978.150224][ T52] team0 (unregistering): Port device team_slave_0 removed [ 979.733348][ C0] DEBUG: waiting rtnl_mutex for 508 jiffies. [ 979.739521][ C0] task:syz-executor state:D stack:21024 pid:21554 tgid:21554 ppid:21538 flags:0x00000000 [ 979.749838][ C0] Call Trace: [ 979.753158][ C0] [ 979.756122][ C0] __schedule+0x17e8/0x4a20 [ 979.760764][ C0] ? __pfx___schedule+0x10/0x10 [ 979.765650][ C0] ? __pfx_lock_release+0x10/0x10 [ 979.770752][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 979.776271][ C0] ? schedule+0x90/0x320 [ 979.780592][ C0] schedule+0x14b/0x320 [ 979.784788][ C0] schedule_preempt_disabled+0x13/0x30 [ 979.790322][ C0] __mutex_lock+0x6a4/0xd70 [ 979.794867][ C0] ? __mutex_lock+0x527/0xd70 [ 979.799625][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 979.804870][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 979.809989][ C0] ? rtnl_lock+0xe7/0x130 [ 979.814359][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 979.819458][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 979.824701][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 979.830231][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 979.835550][ C0] ? __pfx_validate_chain+0x10/0x10 [ 979.840829][ C0] ? __pfx_validate_chain+0x10/0x10 [ 979.846067][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 979.851095][ C0] ? mark_lock+0x9a/0x360 [ 979.855492][ C0] ? __pfx_validate_chain+0x10/0x10 [ 979.860791][ C0] ? __lock_acquire+0x1359/0x2000 [ 979.865890][ C0] ? mark_lock+0x9a/0x360 [ 979.870394][ C0] ? __lock_acquire+0x1359/0x2000 [ 979.875489][ C0] netlink_rcv_skb+0x1e3/0x430 [ 979.880346][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 979.885853][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 979.891244][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.896495][ C0] netlink_unicast+0x7f0/0x990 [ 979.901378][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 979.906720][ C0] ? __virt_addr_valid+0x183/0x520 [ 979.911914][ C0] ? __check_object_size+0x49c/0x900 [ 979.917253][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 979.922470][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 979.927288][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.932783][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 979.938938][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 979.943922][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 979.949285][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 979.954787][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.960141][ C0] __sock_sendmsg+0x221/0x270 [ 979.964877][ C0] __sys_sendto+0x3a4/0x4f0 [ 979.969474][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 979.974568][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 979.981187][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 979.987588][ C0] __x64_sys_sendto+0xde/0x100 [ 979.992400][ C0] do_syscall_64+0xf3/0x230 [ 979.996933][ C0] ? clear_bhb_loop+0x35/0x90 [ 980.001686][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.007734][ C0] RIP: 0033:0x7f4236577acc [ 980.012181][ C0] RSP: 002b:00007ffd145f3860 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 980.020759][ C0] RAX: ffffffffffffffda RBX: 00007f4237234620 RCX: 00007f4236577acc [ 980.028847][ C0] RDX: 0000000000000028 RSI: 00007f4237234670 RDI: 0000000000000003 [ 980.036852][ C0] RBP: 0000000000000000 R08: 00007ffd145f38b4 R09: 000000000000000c [ 980.044984][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 980.053026][ C0] R13: 0000000000000000 R14: 00007f4237234670 R15: 0000000000000000 [ 980.061098][ C0] [ 980.064139][ C0] DEBUG: holding rtnl_mutex for 540 jiffies. [ 980.070207][ C0] task:kworker/u8:3 state:R running task stack:20240 pid:52 tgid:52 ppid:2 flags:0x00004008 [ 980.082069][ C0] Workqueue: netns cleanup_net [ 980.086875][ C0] Call Trace: [ 980.090222][ C0] [ 980.093085][ C0] sched_show_task+0x578/0x740 [ 980.097908][ C0] ? report_rtnl_holders+0x183/0x2d0 [ 980.103220][ C0] ? __pfx__printk+0x10/0x10 [ 980.107871][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 980.113204][ C0] report_rtnl_holders+0x1ba/0x2d0 [ 980.118381][ C0] ? report_rtnl_holders+0x20/0x2d0 [ 980.124145][ C0] call_timer_fn+0x18e/0x650 [ 980.128894][ C0] ? call_timer_fn+0xc0/0x650 [ 980.133596][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 980.139288][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 980.144459][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 980.150181][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 980.155850][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 980.161558][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 980.166801][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 980.172092][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 980.177806][ C0] __run_timer_base+0x66a/0x8e0 [ 980.182713][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 980.188185][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 980.194582][ C0] run_timer_softirq+0xb7/0x170 [ 980.199537][ C0] handle_softirqs+0x2c4/0x970 [ 980.204374][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 980.209228][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 980.214584][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 980.219896][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 980.224521][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 980.229799][ C0] irq_exit_rcu+0x9/0x30 [ 980.234092][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 980.239815][ C0] [ 980.242768][ C0] [ 980.245741][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 980.251787][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 980.257234][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 15 50 80 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 980.276920][ C0] RSP: 0018:ffffc90000bc7678 EFLAGS: 00000206 [ 980.283082][ C0] RAX: dffffc0000000000 RBX: 1ffff92000178ed8 RCX: ffffffff947dc803 [ 980.291132][ C0] RDX: 0000000000000001 RSI: ffffffff8bcad500 RDI: ffffffff8c2074e0 [ 980.299217][ C0] RBP: ffffc90000bc7758 R08: ffffffff947d2ae7 R09: 1ffffffff28fa55c [ 980.307270][ C0] R10: dffffc0000000000 R11: fffffbfff28fa55d R12: ffffffff947cfe08 [ 980.315288][ C0] R13: 1ffff92000178ed4 R14: 0000000000000a06 R15: ffffc90000bc76c0 [ 980.323360][ C0] lockdep_unregister_key+0x4b7/0x540 [ 980.328818][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 980.334764][ C0] ? rcu_is_watching+0x15/0xb0 [ 980.339615][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 980.344259][ C0] __qdisc_destroy+0x165/0x410 [ 980.349107][ C0] dev_shutdown+0x9b/0x440 [ 980.353570][ C0] unregister_netdevice_many_notify+0x977/0x16b0 [ 980.359995][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 980.366893][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 980.372863][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 980.379186][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 980.385387][ C0] default_device_exit_batch+0xa0f/0xa90 [ 980.391108][ C0] ? __pfx___might_resched+0x10/0x10 [ 980.396483][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 980.402732][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 980.408103][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 980.414310][ C0] cleanup_net+0x89d/0xcc0 [ 980.418819][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 980.423809][ C0] ? process_scheduled_works+0x945/0x1830 [ 980.429606][ C0] process_scheduled_works+0xa2c/0x1830 [ 980.435237][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 980.441333][ C0] ? assign_work+0x364/0x3d0 [ 980.445966][ C0] worker_thread+0x86d/0xd40 [ 980.450654][ C0] ? __kthread_parkme+0x169/0x1d0 [ 980.455721][ C0] ? __pfx_worker_thread+0x10/0x10 [ 980.460913][ C0] kthread+0x2f0/0x390 [ 980.465030][ C0] ? __pfx_worker_thread+0x10/0x10 [ 980.470220][ C0] ? __pfx_kthread+0x10/0x10 [ 980.474857][ C0] ret_from_fork+0x4b/0x80 [ 980.479365][ C0] ? __pfx_kthread+0x10/0x10 [ 980.484005][ C0] ret_from_fork_asm+0x1a/0x30 [ 980.488880][ C0] [ 980.491965][ C0] DEBUG: waiting rtnl_mutex for 594 jiffies. [ 980.497990][ C0] task:dhcpcd state:D stack:20672 pid:4761 tgid:4761 ppid:4760 flags:0x00004002 [ 980.508232][ C0] Call Trace: [ 980.511540][ C0] [ 980.514494][ C0] __schedule+0x17e8/0x4a20 [ 980.519096][ C0] ? __pfx___schedule+0x10/0x10 [ 980.523986][ C0] ? __pfx_lock_release+0x10/0x10 [ 980.529086][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 980.534685][ C0] ? schedule+0x90/0x320 [ 980.539006][ C0] schedule+0x14b/0x320 [ 980.543202][ C0] schedule_preempt_disabled+0x13/0x30 [ 980.548825][ C0] __mutex_lock+0x6a4/0xd70 [ 980.553376][ C0] ? __mutex_lock+0x527/0xd70 [ 980.558133][ C0] ? rtnl_dumpit+0x1bd/0x300 [ 980.562927][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 980.568038][ C0] ? __alloc_skb+0x28f/0x440 [ 980.572670][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 980.577777][ C0] rtnl_dumpit+0x1bd/0x300 [ 980.582242][ C0] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 980.587702][ C0] netlink_dump+0x647/0xd80 [ 980.592257][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 980.597352][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 980.603386][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 980.608669][ C0] ? netlink_recvmsg+0x60a/0x11d0 [ 980.613731][ C0] ? kmem_cache_free+0x145/0x350 [ 980.618748][ C0] netlink_recvmsg+0x6bb/0x11d0 [ 980.623639][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 980.629004][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 980.633898][ C0] ? __pfx___might_resched+0x10/0x10 [ 980.639239][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 980.644204][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 980.649565][ C0] ? security_socket_recvmsg+0x90/0xb0 [ 980.655061][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 980.660452][ C0] sock_recvmsg+0x22f/0x280 [ 980.665002][ C0] ____sys_recvmsg+0x1db/0x470 [ 980.669847][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 980.675188][ C0] __sys_recvmsg+0x2f0/0x3e0 [ 980.679864][ C0] ? __pfx_lock_release+0x10/0x10 [ 980.684943][ C0] ? __pfx___sys_recvmsg+0x10/0x10 [ 980.690222][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 980.696594][ C0] ? do_syscall_64+0x100/0x230 [ 980.701441][ C0] ? do_syscall_64+0xb6/0x230 [ 980.706198][ C0] do_syscall_64+0xf3/0x230 [ 980.710818][ C0] ? clear_bhb_loop+0x35/0x90 [ 980.715542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.721528][ C0] RIP: 0033:0x7f8db843691e [ 980.725974][ C0] RSP: 002b:00007ffca5bf1438 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 980.734481][ C0] RAX: ffffffffffffffda RBX: 00007ffca5bf2560 RCX: 00007f8db843691e [ 980.742540][ C0] RDX: 0000000000000000 RSI: 00007ffca5bf2480 RDI: 0000000000000011 [ 980.750587][ C0] RBP: 00007ffca5bf24f0 R08: 0000000000000000 R09: 0000000000000000 [ 980.758638][ C0] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000b94 [ 980.766764][ C0] R13: 00007ffca5bf2464 R14: 00007ffca5bf2480 R15: 00007ffca5bf2470 [ 980.774792][ C0] [ 980.777886][ C0] DEBUG: waiting rtnl_mutex for 620 jiffies. [ 980.783893][ C0] task:syz.4.4514 state:D stack:26416 pid:21683 tgid:21682 ppid:18083 flags:0x00004006 [ 980.794147][ C0] Call Trace: [ 980.797487][ C0] [ 980.800449][ C0] __schedule+0x17e8/0x4a20 [ 980.805018][ C0] ? __pfx___schedule+0x10/0x10 [ 980.809956][ C0] ? __pfx_lock_release+0x10/0x10 [ 980.815023][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 980.820581][ C0] ? schedule+0x90/0x320 [ 980.824860][ C0] schedule+0x14b/0x320 [ 980.829090][ C0] schedule_preempt_disabled+0x13/0x30 [ 980.834580][ C0] __mutex_lock+0x6a4/0xd70 [ 980.839172][ C0] ? __mutex_lock+0x527/0xd70 [ 980.843899][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 980.849204][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 980.854279][ C0] ? rtnl_lock+0xe7/0x130 [ 980.858696][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 980.863769][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 980.869063][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 980.874562][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 980.880629][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 980.887042][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 980.892470][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 980.897867][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 980.903287][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 980.908668][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 980.913808][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 980.919612][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 980.924757][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 980.930047][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 980.935203][ C0] ? ref_tracker_free+0x643/0x7e0 [ 980.940324][ C0] netlink_rcv_skb+0x1e3/0x430 [ 980.945130][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 980.950665][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.956015][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 980.961921][ C0] netlink_unicast+0x7f0/0x990 [ 980.966822][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 980.972169][ C0] ? __virt_addr_valid+0x183/0x520 [ 980.977372][ C0] ? __check_object_size+0x49c/0x900 [ 980.982720][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 980.987921][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 980.992743][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.998118][ C0] ? __import_iovec+0x536/0x820 [ 981.003012][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 981.008047][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 981.013391][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 981.018944][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.024266][ C0] __sock_sendmsg+0x221/0x270 [ 981.029020][ C0] ____sys_sendmsg+0x525/0x7d0 [ 981.033839][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.039311][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 981.043957][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.049199][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 981.055587][ C0] ? do_syscall_64+0x100/0x230 [ 981.060431][ C0] ? do_syscall_64+0xb6/0x230 [ 981.065144][ C0] do_syscall_64+0xf3/0x230 [ 981.069741][ C0] ? clear_bhb_loop+0x35/0x90 [ 981.074466][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.080444][ C0] RIP: 0033:0x7ff70f575d39 [ 981.084884][ C0] RSP: 002b:00007ff7103ec048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.093472][ C0] RAX: ffffffffffffffda RBX: 00007ff70f703fa0 RCX: 00007ff70f575d39 [ 981.101548][ C0] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 981.109589][ C0] RBP: 00007ff70f5f6766 R08: 0000000000000000 R09: 0000000000000000 [ 981.117651][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.125668][ C0] R13: 000000000000000b R14: 00007ff70f703fa0 R15: 00007ffd32a20e38 [ 981.133764][ C0] [ 981.136847][ C0] DEBUG: waiting rtnl_mutex for 642 jiffies. [ 981.142848][ C0] task:syz.4.4514 state:D stack:25472 pid:21688 tgid:21682 ppid:18083 flags:0x00004004 [ 981.153122][ C0] Call Trace: [ 981.156473][ C0] [ 981.159432][ C0] __schedule+0x17e8/0x4a20 [ 981.163993][ C0] ? __pfx___schedule+0x10/0x10 [ 981.168949][ C0] ? __pfx_lock_release+0x10/0x10 [ 981.174015][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 981.179590][ C0] ? schedule+0x90/0x320 [ 981.183876][ C0] schedule+0x14b/0x320 [ 981.188146][ C0] schedule_preempt_disabled+0x13/0x30 [ 981.193645][ C0] __mutex_lock+0x6a4/0xd70 [ 981.198240][ C0] ? __mutex_lock+0x527/0xd70 [ 981.202955][ C0] ? nl80211_pre_doit+0x5f/0x8b0 [ 981.207964][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 981.213037][ C0] ? rtnl_lock+0xe7/0x130 [ 981.217441][ C0] nl80211_pre_doit+0x5f/0x8b0 [ 981.222245][ C0] genl_rcv_msg+0xaaa/0xec0 [ 981.226825][ C0] ? mark_lock+0x9a/0x360 [ 981.231209][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.236346][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 981.241414][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 981.246876][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 981.252198][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 981.257851][ C0] ? __pfx___might_resched+0x10/0x10 [ 981.263178][ C0] netlink_rcv_skb+0x1e3/0x430 [ 981.268025][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 981.273088][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.278487][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 981.283993][ C0] genl_rcv+0x28/0x40 [ 981.288044][ C0] netlink_unicast+0x7f0/0x990 [ 981.292858][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 981.298270][ C0] ? __virt_addr_valid+0x183/0x520 [ 981.303432][ C0] ? __check_object_size+0x49c/0x900 [ 981.308802][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 981.314047][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 981.319034][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.324381][ C0] ? __import_iovec+0x536/0x820 [ 981.329343][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 981.334319][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 981.339745][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 981.345255][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.350678][ C0] __sock_sendmsg+0x221/0x270 [ 981.355398][ C0] ____sys_sendmsg+0x525/0x7d0 [ 981.360257][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.365603][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 981.370291][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.375432][ C0] ? __schedule+0x17f0/0x4a20 [ 981.380221][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 981.386621][ C0] ? do_syscall_64+0x100/0x230 [ 981.391473][ C0] ? do_syscall_64+0xb6/0x230 [ 981.396233][ C0] do_syscall_64+0xf3/0x230 [ 981.400778][ C0] ? clear_bhb_loop+0x35/0x90 [ 981.405501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.411518][ C0] RIP: 0033:0x7ff70f575d39 [ 981.416008][ C0] RSP: 002b:00007ff7103cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.424457][ C0] RAX: ffffffffffffffda RBX: 00007ff70f704070 RCX: 00007ff70f575d39 [ 981.432545][ C0] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000008 [ 981.440604][ C0] RBP: 00007ff70f5f6766 R08: 0000000000000000 R09: 0000000000000000 [ 981.448672][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.456715][ C0] R13: 000000000000006e R14: 00007ff70f704070 R15: 00007ffd32a20e38 [ 981.464748][ C0] [ 981.467856][ C0] DEBUG: waiting rtnl_mutex for 624 jiffies. [ 981.473866][ C0] task:syz.0.4516 state:D stack:25960 pid:21698 tgid:21695 ppid:18331 flags:0x00000004 [ 981.484151][ C0] Call Trace: [ 981.487500][ C0] [ 981.490465][ C0] __schedule+0x17e8/0x4a20 [ 981.495031][ C0] ? __pfx___schedule+0x10/0x10 [ 981.500053][ C0] ? __pfx_lock_release+0x10/0x10 [ 981.505121][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 981.510714][ C0] ? schedule+0x90/0x320 [ 981.515015][ C0] schedule+0x14b/0x320 [ 981.519282][ C0] schedule_preempt_disabled+0x13/0x30 [ 981.524789][ C0] __mutex_lock+0x6a4/0xd70 [ 981.529393][ C0] ? __mutex_lock+0x527/0xd70 [ 981.534119][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 981.539406][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 981.544489][ C0] ? rtnl_lock+0xe7/0x130 [ 981.548930][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 981.553999][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 981.559273][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.564790][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 981.570894][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 981.577315][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 981.582731][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 981.588042][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 981.593459][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 981.598860][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 981.604020][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 981.609857][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 981.615007][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 981.620304][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 981.625463][ C0] ? ref_tracker_free+0x643/0x7e0 [ 981.630610][ C0] netlink_rcv_skb+0x1e3/0x430 [ 981.635415][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.640985][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.646381][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.651626][ C0] netlink_unicast+0x7f0/0x990 [ 981.656480][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 981.661795][ C0] ? __virt_addr_valid+0x183/0x520 [ 981.666978][ C0] ? __check_object_size+0x49c/0x900 [ 981.672299][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 981.677500][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 981.682329][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.687714][ C0] ? __import_iovec+0x536/0x820 [ 981.692620][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 981.697637][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 981.702967][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 981.708607][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.713938][ C0] __sock_sendmsg+0x221/0x270 [ 981.718731][ C0] ____sys_sendmsg+0x525/0x7d0 [ 981.723539][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.728944][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 981.733578][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.738843][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 981.745225][ C0] ? do_syscall_64+0x100/0x230 [ 981.750113][ C0] ? do_syscall_64+0xb6/0x230 [ 981.754829][ C0] do_syscall_64+0xf3/0x230 [ 981.759455][ C0] ? clear_bhb_loop+0x35/0x90 [ 981.764172][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.770157][ C0] RIP: 0033:0x7fb47f775d39 [ 981.774604][ C0] RSP: 002b:00007fb48057a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.783146][ C0] RAX: ffffffffffffffda RBX: 00007fb47f904070 RCX: 00007fb47f775d39 [ 981.791296][ C0] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000e [ 981.799381][ C0] RBP: 00007fb47f7f6766 R08: 0000000000000000 R09: 0000000000000000 [ 981.807428][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.815521][ C0] R13: 000000000000006e R14: 00007fb47f904070 R15: 00007ffc38728848 [ 981.823628][ C0] [ 981.826724][ C0] DEBUG: waiting rtnl_mutex for 627 jiffies. [ 981.832718][ C0] task:kworker/1:9 state:D stack:20504 pid:5255 tgid:5255 ppid:2 flags:0x00004000 [ 981.842983][ C0] Workqueue: events linkwatch_event [ 981.848347][ C0] Call Trace: [ 981.851658][ C0] [ 981.854619][ C0] __schedule+0x17e8/0x4a20 [ 981.859254][ C0] ? __pfx___schedule+0x10/0x10 [ 981.864148][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 981.870197][ C0] ? __pfx_lock_release+0x10/0x10 [ 981.875281][ C0] ? kick_pool+0x45c/0x620 [ 981.879822][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 981.885060][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 981.890362][ C0] ? schedule+0x90/0x320 [ 981.894647][ C0] schedule+0x14b/0x320 [ 981.898914][ C0] schedule_preempt_disabled+0x13/0x30 [ 981.904421][ C0] __mutex_lock+0x6a4/0xd70 [ 981.909015][ C0] ? __mutex_lock+0x527/0xd70 [ 981.913773][ C0] ? linkwatch_event+0xe/0x60 [ 981.918604][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 981.923690][ C0] ? process_scheduled_works+0x945/0x1830 [ 981.929560][ C0] ? rtnl_lock+0xe7/0x130 [ 981.933928][ C0] ? process_scheduled_works+0x945/0x1830 [ 981.939739][ C0] linkwatch_event+0xe/0x60 [ 981.944293][ C0] process_scheduled_works+0xa2c/0x1830 [ 981.949984][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.956053][ C0] ? assign_work+0x364/0x3d0 [ 981.960697][ C0] worker_thread+0x86d/0xd40 [ 981.965358][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 981.971420][ C0] ? __kthread_parkme+0x169/0x1d0 [ 981.976630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 981.981809][ C0] kthread+0x2f0/0x390 [ 981.985953][ C0] ? __pfx_worker_thread+0x10/0x10 [ 981.991100][ C0] ? __pfx_kthread+0x10/0x10 [ 981.995758][ C0] ret_from_fork+0x4b/0x80 [ 982.000206][ C0] ? __pfx_kthread+0x10/0x10 [ 982.004836][ C0] ret_from_fork_asm+0x1a/0x30 [ 982.009732][ C0] [ 982.012807][ C0] DEBUG: waiting rtnl_mutex for 629 jiffies. [ 982.018970][ C0] task:syz.3.4518 state:D stack:25224 pid:21707 tgid:21705 ppid:16993 flags:0x00000004 [ 982.029215][ C0] Call Trace: [ 982.032606][ C0] [ 982.035607][ C0] __schedule+0x17e8/0x4a20 [ 982.040182][ C0] ? __pfx___schedule+0x10/0x10 [ 982.045085][ C0] ? __pfx_lock_release+0x10/0x10 [ 982.050238][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 982.055793][ C0] ? schedule+0x90/0x320 [ 982.060078][ C0] schedule+0x14b/0x320 [ 982.064283][ C0] schedule_preempt_disabled+0x13/0x30 [ 982.069845][ C0] __mutex_lock+0x6a4/0xd70 [ 982.074405][ C0] ? __mutex_lock+0x527/0xd70 [ 982.079205][ C0] ? rtnl_dumpit+0x1bd/0x300 [ 982.083839][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 982.088993][ C0] ? __alloc_skb+0x28f/0x440 [ 982.093640][ C0] rtnl_dumpit+0x1bd/0x300 [ 982.098139][ C0] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 982.103476][ C0] netlink_dump+0x647/0xd80 [ 982.108124][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 982.113208][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 982.118381][ C0] __netlink_dump_start+0x59f/0x780 [ 982.123631][ C0] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 982.128999][ C0] rtnetlink_rcv_msg+0xd9c/0x1170 [ 982.134067][ C0] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 982.139437][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 982.144683][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.150227][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 982.156297][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 982.162760][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.168238][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 982.173485][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.178961][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 982.184296][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.189506][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 982.195300][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.200460][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 982.205763][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.210919][ C0] ? __pfx_rtnl_dumpit+0x10/0x10 [ 982.215949][ C0] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 982.221291][ C0] ? ref_tracker_free+0x643/0x7e0 [ 982.226424][ C0] netlink_rcv_skb+0x1e3/0x430 [ 982.231235][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.236799][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 982.242169][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 982.247473][ C0] netlink_unicast+0x7f0/0x990 [ 982.252312][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 982.257787][ C0] ? __virt_addr_valid+0x183/0x520 [ 982.262936][ C0] ? __check_object_size+0x49c/0x900 [ 982.268309][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 982.273469][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 982.278365][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.283695][ C0] ? __import_iovec+0x536/0x820 [ 982.288661][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 982.293636][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 982.298985][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 982.304475][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.309852][ C0] __sock_sendmsg+0x221/0x270 [ 982.314580][ C0] ____sys_sendmsg+0x525/0x7d0 [ 982.319472][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 982.324813][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 982.329516][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 982.334713][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 982.341160][ C0] ? do_syscall_64+0x100/0x230 [ 982.345994][ C0] ? do_syscall_64+0xb6/0x230 [ 982.350709][ C0] do_syscall_64+0xf3/0x230 [ 982.355296][ C0] ? clear_bhb_loop+0x35/0x90 [ 982.360040][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.366040][ C0] RIP: 0033:0x7fbc27175d39 [ 982.370492][ C0] RSP: 002b:00007fbc2800f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.379005][ C0] RAX: ffffffffffffffda RBX: 00007fbc27303fa0 RCX: 00007fbc27175d39 [ 982.387086][ C0] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 982.395117][ C0] RBP: 00007fbc271f6766 R08: 0000000000000000 R09: 0000000000000000 [ 982.403119][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.411205][ C0] R13: 000000000000000b R14: 00007fbc27303fa0 R15: 00007ffde6a943f8 [ 982.419287][ C0] [ 982.422342][ C0] DEBUG: waiting rtnl_mutex for 654 jiffies. [ 982.428426][ C0] task:syz.3.4518 state:D stack:26800 pid:21709 tgid:21705 ppid:16993 flags:0x00000004 [ 982.438665][ C0] Call Trace: [ 982.441969][ C0] [ 982.444927][ C0] __schedule+0x17e8/0x4a20 [ 982.449554][ C0] ? __pfx___schedule+0x10/0x10 [ 982.454456][ C0] ? __pfx_lock_release+0x10/0x10 [ 982.459586][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 982.465146][ C0] ? schedule+0x90/0x320 [ 982.469432][ C0] schedule+0x14b/0x320 [ 982.473631][ C0] schedule_preempt_disabled+0x13/0x30 [ 982.479302][ C0] __mutex_lock+0x6a4/0xd70 [ 982.483854][ C0] ? __mutex_lock+0x527/0xd70 [ 982.488616][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 982.493856][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 982.499022][ C0] ? rtnl_lock+0xe7/0x130 [ 982.503398][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 982.508542][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 982.513784][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.519370][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 982.525458][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 982.531845][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.537331][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 982.542578][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.548035][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 982.553414][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.558712][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 982.564478][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.569737][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 982.575004][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.580164][ C0] ? ref_tracker_free+0x643/0x7e0 [ 982.585287][ C0] netlink_rcv_skb+0x1e3/0x430 [ 982.590090][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.595634][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 982.601002][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 982.606306][ C0] netlink_unicast+0x7f0/0x990 [ 982.611117][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 982.616476][ C0] ? __virt_addr_valid+0x183/0x520 [ 982.621640][ C0] ? __check_object_size+0x49c/0x900 [ 982.627037][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 982.632187][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 982.637049][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.642377][ C0] ? __import_iovec+0x536/0x820 [ 982.647317][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 982.652282][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 982.657646][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 982.663153][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.668547][ C0] __sock_sendmsg+0x221/0x270 [ 982.673266][ C0] ____sys_sendmsg+0x525/0x7d0 [ 982.678128][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 982.683476][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 982.688179][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 982.693383][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 982.699846][ C0] ? do_syscall_64+0x100/0x230 [ 982.704656][ C0] ? do_syscall_64+0xb6/0x230 [ 982.709428][ C0] do_syscall_64+0xf3/0x230 [ 982.713990][ C0] ? clear_bhb_loop+0x35/0x90 [ 982.718789][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.724758][ C0] RIP: 0033:0x7fbc27175d39 [ 982.729214][ C0] RSP: 002b:00007fbc27fee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.737745][ C0] RAX: ffffffffffffffda RBX: 00007fbc27304070 RCX: 00007fbc27175d39 [ 982.745803][ C0] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 982.753835][ C0] RBP: 00007fbc271f6766 R08: 0000000000000000 R09: 0000000000000000 [ 982.761929][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.770013][ C0] R13: 000000000000006e R14: 00007fbc27304070 R15: 00007ffde6a943f8 [ 982.778126][ C0] [ 982.781173][ C0] DEBUG: waiting rtnl_mutex for 567 jiffies. [ 982.787220][ C0] task:syz.1.4520 state:D stack:26256 pid:21714 tgid:21712 ppid:12311 flags:0x00000004 [ 982.797504][ C0] Call Trace: [ 982.800806][ C0] [ 982.803761][ C0] __schedule+0x17e8/0x4a20 [ 982.808384][ C0] ? __pfx___schedule+0x10/0x10 [ 982.813284][ C0] ? __pfx_lock_release+0x10/0x10 [ 982.818428][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 982.823962][ C0] ? schedule+0x90/0x320 [ 982.828323][ C0] schedule+0x14b/0x320 [ 982.832529][ C0] schedule_preempt_disabled+0x13/0x30 [ 982.838127][ C0] __mutex_lock+0x6a4/0xd70 [ 982.842689][ C0] ? __mutex_lock+0x527/0xd70 [ 982.847487][ C0] ? rtnetlink_rcv_msg+0x839/0x1170 [ 982.852730][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 982.857858][ C0] ? rtnl_lock+0xe7/0x130 [ 982.862236][ C0] rtnetlink_rcv_msg+0x839/0x1170 [ 982.867391][ C0] ? rtnetlink_rcv_msg+0x208/0x1170 [ 982.872631][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.878332][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 982.884367][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 982.890802][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.896274][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 982.901534][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 982.906994][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 982.912331][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.917550][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 982.923323][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.928521][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 982.933777][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 982.939010][ C0] ? ref_tracker_free+0x643/0x7e0 [ 982.944148][ C0] netlink_rcv_skb+0x1e3/0x430 [ 982.949067][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.954606][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 982.959961][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 982.965271][ C0] netlink_unicast+0x7f0/0x990 [ 982.970093][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 982.975471][ C0] ? __virt_addr_valid+0x183/0x520 [ 982.980626][ C0] ? __check_object_size+0x49c/0x900 [ 982.986008][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 982.991175][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 982.996051][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.001372][ C0] ? __import_iovec+0x536/0x820 [ 983.006312][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 983.011299][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 983.016689][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 983.022193][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.027571][ C0] __sock_sendmsg+0x221/0x270 [ 983.032302][ C0] ____sys_sendmsg+0x525/0x7d0 [ 983.037185][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.042535][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 983.047217][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.052417][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 983.058865][ C0] ? do_syscall_64+0x100/0x230 [ 983.063666][ C0] ? do_syscall_64+0xb6/0x230 [ 983.068407][ C0] do_syscall_64+0xf3/0x230 [ 983.072948][ C0] ? clear_bhb_loop+0x35/0x90 [ 983.077740][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.083674][ C0] RIP: 0033:0x7f6fb1375d39 [ 983.088187][ C0] RSP: 002b:00007f6fb2100048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.096686][ C0] RAX: ffffffffffffffda RBX: 00007f6fb1504070 RCX: 00007f6fb1375d39 [ 983.104757][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 983.112755][ C0] RBP: 00007f6fb13f6766 R08: 0000000000000000 R09: 0000000000000000 [ 983.120831][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.128898][ C0] R13: 000000000000006e R14: 00007f6fb1504070 R15: 00007fff1b0c1048 [ 983.136996][ C0] [ 983.140053][ C0] [ 983.140053][ C0] Showing all locks held in the system: [ 983.147883][ C0] 7 locks held by kworker/u8:3/52: [ 983.153034][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 983.164037][ C0] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 983.174691][ C0] #2: ffffffff8f5ec210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 983.184173][ C0] #3: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 983.194496][ C0] #4: ffffc90000007c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 983.204706][ C0] #5: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 983.214546][ C0] #6: ffffffff8e335620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 983.224495][ C0] 2 locks held by dhcpcd/4761: [ 983.229284][ C0] #0: ffff888062c59678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 983.239013][ C0] #1: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x1bd/0x300 [ 983.248000][ C0] 2 locks held by getty/4844: [ 983.252695][ C0] #0: ffff88802a90e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 983.262589][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 983.272797][ C0] 3 locks held by kworker/1:9/5255: [ 983.278091][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 983.289163][ C0] #1: ffffc9000485fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 983.300290][ C0] #2: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 983.309393][ C0] 6 locks held by syz.2.3198/16649: [ 983.314668][ C0] 6 locks held by syz.3.3236/16881: [ 983.319902][ C0] 1 lock held by syz-executor/21554: [ 983.325264][ C0] #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 983.334840][ C0] 1 lock held by syz.4.4514/21683: [ 983.339974][ C0] #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 983.349621][ C0] 2 locks held by syz.4.4514/21688: [ 983.354874][ C0] #0: ffffffff8f662230 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 983.363130][ C0] #1: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 983.372522][ C0] 1 lock held by syz.0.4516/21698: [ 983.377712][ C0] #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 983.387354][ C0] 2 locks held by syz.3.4518/21707: [ 983.392572][ C0] #0: ffff88807d5f2678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 983.403048][ C0] #1: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x1bd/0x300 [ 983.412087][ C0] 1 lock held by syz.3.4518/21709: [ 983.417277][ C0] #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 983.426919][ C0] 1 lock held by syz.1.4520/21714: [ 983.432054][ C0] #0: ffffffff8f5f8ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 983.441668][ C0] [ 983.444055][ C0] ============================================= [ 983.444055][ C0] [ 983.966882][T21554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.102408][T21709] netlink: 'syz.3.4518': attribute type 10 has an invalid length. [ 984.301819][T21554] team0: Port device team_slave_0 added [ 984.337038][T21724] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4521'. [ 984.374426][T21724] net_ratelimit: 116 callbacks suppressed [ 984.374448][T21724] netlink: zone id is out of range [ 984.404881][T21724] netlink: zone id is out of range [ 984.410070][T21724] netlink: zone id is out of range [ 984.435230][T21724] netlink: zone id is out of range [ 984.443002][T21724] netlink: zone id is out of range [ 984.466808][T21724] netlink: zone id is out of range [ 984.482485][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4523'. [ 984.532500][T21724] netlink: zone id is out of range [ 984.543353][T21724] netlink: zone id is out of range [ 984.587565][T21724] netlink: zone id is out of range [ 984.603362][T21724] netlink: zone id is out of range [ 984.637175][T21554] team0: Port device team_slave_1 added [ 984.903366][T21737] loop1: detected capacity change from 0 to 128 [ 984.912455][T21741] loop0: detected capacity change from 0 to 1024 [ 984.948082][T21741] hfsplus: unable to parse mount options [ 984.963833][T21737] ext4: Unknown parameter 'fsmagic' [ 985.025568][T21718] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 985.084142][T21554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.091127][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.240058][T21554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.348080][T21554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.400206][T21751] loop0: detected capacity change from 0 to 2048 [ 985.402458][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.508892][T21751] loop0: p3 < > p4 < > [ 985.525931][T21751] loop0: partition table partially beyond EOD, truncated [ 985.531726][T21554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.546913][T21751] loop0: p3 start 4284289 is beyond EOD, truncated [ 985.648372][T21749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4528'. [ 985.695310][ T4547] loop0: p3 < > p4 < > [ 985.699556][ T4547] loop0: partition table partially beyond EOD, truncated [ 985.737718][ T4547] loop0: p3 start 4284289 is beyond EOD, truncated [ 986.127969][T21554] hsr_slave_0: entered promiscuous mode [ 986.141118][T21768] loop4: detected capacity change from 0 to 512 [ 986.196423][T21768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 986.221628][T21554] hsr_slave_1: entered promiscuous mode [ 986.251472][T21554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.297811][T21554] Cannot create hsr debugfs directory [ 986.340589][T21768] EXT4-fs (loop4): 1 truncate cleaned up [ 986.919244][T21768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.072675][ T29] audit: type=1800 audit(1719293787.074:207): pid=21768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4530" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 988.455319][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.605757][T21796] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4535'. [ 988.686389][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 988.865283][T21800] loop0: detected capacity change from 0 to 128 [ 988.874231][T14776] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 988.909423][T21800] ext4: Unknown parameter 'fsmagic' [ 989.080056][T14776] usb 4-1: Using ep0 maxpacket: 8 [ 989.279879][ T25] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 989.319554][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.442355][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.519926][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 989.538071][ T25] usb 2-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 989.592493][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.645046][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 989.689642][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.752175][ T25] usb 2-1: config 0 descriptor?? [ 989.784491][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 990.013830][T21802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.059768][T21802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.505758][T21826] loop4: detected capacity change from 0 to 512 [ 990.562049][T21826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 990.665311][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 990.696732][T21826] EXT4-fs (loop4): 1 truncate cleaned up [ 990.710599][T21827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4539'. [ 990.738874][T21826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.808207][T21827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4539'. [ 990.820404][T21834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.847381][T21834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.926738][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.933457][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.941929][ T29] audit: type=1800 audit(1719293790.947:208): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4545" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 990.995305][T21554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 991.106106][T21554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 991.192770][T21554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 991.299552][T21554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 991.325708][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.806525][T14776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 991.880424][T14776] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 991.920179][T14776] usb 4-1: can't read configurations, error -71 [ 992.047249][T18962] usb 2-1: USB disconnect, device number 77 [ 992.195186][T21857] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4551'. [ 992.247934][T21857] xt_TPROXY: Can be used only with -p tcp or -p udp [ 992.307120][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4552'. [ 992.334617][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4552'. [ 992.387724][T21554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.780241][T21554] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.899883][T18962] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.907183][T18962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.969761][T18962] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.976945][T18962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.049591][T21881] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4561'. [ 993.081991][T21881] xt_TPROXY: Can be used only with -p tcp or -p udp [ 993.098088][ T5139] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 993.207998][ T5255] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 993.287787][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 993.417659][ T5255] usb 1-1: Using ep0 maxpacket: 16 [ 993.426917][ T5255] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 993.445830][ T5255] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 993.504068][ T5255] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 993.533432][T21892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.549457][ T5255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.561690][T21892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.591356][ T5255] usb 1-1: config 0 descriptor?? [ 993.603571][ T5255] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 993.812968][T21879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.845902][T21879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.090525][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4564'. [ 994.200359][T21903] bond1: entered promiscuous mode [ 994.533280][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 994.557003][T21911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4560'. [ 994.649202][T21911] vlan3: entered allmulticast mode [ 994.681573][T21915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.737300][T21911] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 994.761258][T21915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.844969][T21554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.247475][T21554] veth0_vlan: entered promiscuous mode [ 995.281201][T21554] veth1_vlan: entered promiscuous mode [ 995.290476][T21930] loop4: detected capacity change from 0 to 128 [ 995.324941][T21930] ext4: Unknown parameter 'fsmagic' [ 995.411702][T21748] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 995.630942][T21554] veth0_macvtap: entered promiscuous mode [ 995.689771][T21554] veth1_macvtap: entered promiscuous mode [ 995.778008][ T5139] usb 2-1: unable to get BOS descriptor or descriptor too short [ 995.812728][ T5139] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 995.854609][ T5139] usb 2-1: can't read configurations, error -71 [ 995.956011][T21933] can0: slcan on ptm0. [ 995.972715][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.036495][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.068933][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.111402][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.198988][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.258919][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.336744][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.372324][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.422817][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.484255][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.535697][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.558686][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.595770][T21554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.641563][T21883] usb 1-1: USB disconnect, device number 45 [ 996.866521][T21927] can0 (unregistered): slcan off ptm0. [ 996.988232][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.035986][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.096036][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.135897][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.183179][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.231218][ T5139] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 997.235873][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.302661][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.344011][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.376457][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.427943][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.435949][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 997.461419][ T5139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 997.468467][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.510640][ T5139] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 997.525418][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.557524][T21554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.559112][ T5139] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 997.593216][T21981] __nla_validate_parse: 1 callbacks suppressed [ 997.593241][T21981] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4579'. [ 997.633780][ T5139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 997.675999][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 997.684139][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.723962][ T5139] usb 2-1: Product:  [ 997.734157][ T5139] usb 2-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 997.792466][T21554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.825778][ T5139] usb 2-1: SerialNumber: syz [ 997.835738][T21554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.844509][T21554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.874597][T21987] loop0: detected capacity change from 0 to 128 [ 997.908652][T21987] ext4: Unknown parameter 'fsmagic' [ 997.923774][T21554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.032701][ T29] audit: type=1326 audit(1719293798.040:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.3.4581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc27175d39 code=0x0 [ 998.082772][T21806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 998.321346][T21961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.366040][T21961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.447579][ T5139] cdc_ncm 2-1:1.0: bind() failure [ 998.493248][ T5139] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 998.532126][ T5139] cdc_ncm 2-1:1.1: bind() failure [ 998.591928][ T5139] usb 2-1: USB disconnect, device number 80 [ 998.723558][T22009] loop4: detected capacity change from 0 to 128 [ 999.015340][ T5137] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 999.456819][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.694250][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.935083][ T5137] usb 1-1: Using ep0 maxpacket: 16 [ 999.947029][ T5137] usb 1-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 999.975095][ T5137] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1000.005250][ T5137] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1000.035141][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.075584][ T5137] usb 1-1: config 0 descriptor?? [ 1000.112512][T22021] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4585'. [ 1000.160308][T22021] net_ratelimit: 242 callbacks suppressed [ 1000.160331][T22021] netlink: zone id is out of range [ 1000.199821][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'. [ 1000.209394][T22021] netlink: zone id is out of range [ 1000.214545][T22021] netlink: zone id is out of range [ 1000.239548][T22021] netlink: zone id is out of range [ 1000.289183][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.299849][T22008] netlink: 'syz.0.4584': attribute type 33 has an invalid length. [ 1000.316776][T22008] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1000.328352][T22021] netlink: zone id is out of range [ 1000.333826][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.362078][T22021] netlink: zone id is out of range [ 1000.375217][T22021] netlink: zone id is out of range [ 1000.388388][T22021] netlink: zone id is out of range [ 1000.401537][T22021] netlink: zone id is out of range [ 1000.413941][T22021] netlink: zone id is out of range [ 1000.643678][ T5137] usb 1-1: string descriptor 0 read error: -71 [ 1000.670560][T22031] netlink: 'syz.1.4588': attribute type 10 has an invalid length. [ 1000.712144][ T5137] usb 1-1: USB disconnect, device number 46 [ 1001.001698][T22034] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4589'. [ 1001.158515][T22034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1001.310940][T22043] loop0: detected capacity change from 0 to 128 [ 1001.335683][T22043] ext4: Unknown parameter 'fsmagic' [ 1001.433532][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4597'. [ 1001.443706][T21748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1001.748114][T22046] bond2: entered promiscuous mode [ 1001.812082][T22052] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4598'. [ 1001.868938][T22052] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1001.877119][T21888] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1002.074969][T21888] usb 4-1: Using ep0 maxpacket: 16 [ 1002.106451][T21888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 1002.154870][T21888] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1002.178590][T21888] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1002.198817][T21888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.212235][T21888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.220978][T21888] usb 4-1: Product:  [ 1002.244502][T21888] usb 4-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 1002.371784][T21888] usb 4-1: SerialNumber: syz [ 1002.419282][T22067] netlink: 'syz.4.4599': attribute type 10 has an invalid length. [ 1002.478140][T22067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.656249][T22071] can0: slcan on ptm0. [ 1002.774290][ T29] audit: type=1326 audit(1719293802.771:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22072 comm="syz.1.4601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb1375d39 code=0x0 [ 1002.905988][T22049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.015885][T22049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.103272][T21888] cdc_ncm 4-1:1.0: bind() failure [ 1003.119773][ T5136] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1003.147740][T21888] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1003.177163][T21888] cdc_ncm 4-1:1.1: bind() failure [ 1003.206276][T21888] usb 4-1: USB disconnect, device number 54 [ 1003.354016][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 1003.367149][T22068] can0 (unregistered): slcan off ptm0. [ 1003.375665][ T5136] usb 3-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 1003.421857][ T5136] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1003.486118][ T5136] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1003.541942][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.667773][ T5136] usb 3-1: config 0 descriptor?? [ 1003.898579][T22096] syz_tun: entered promiscuous mode [ 1003.939993][T22096] macsec1: entered promiscuous mode [ 1003.984242][T22096] macsec1: entered allmulticast mode [ 1004.016115][T22096] syz_tun: entered allmulticast mode [ 1004.094588][T22096] syz_tun: left allmulticast mode [ 1004.100345][T22096] syz_tun: left promiscuous mode [ 1004.281295][T22078] netlink: 'syz.2.4603': attribute type 33 has an invalid length. [ 1004.401727][T22078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4603'. [ 1004.498675][ T5136] usb 3-1: string descriptor 0 read error: -71 [ 1004.505795][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1004.559521][ T5136] usb 3-1: USB disconnect, device number 43 [ 1004.629993][T22108] bond3: entered promiscuous mode [ 1005.140088][T22132] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4612'. [ 1005.209461][T22132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1005.262069][T22135] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4613'. [ 1005.310366][T22135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1005.462331][ T29] audit: type=1326 audit(1719293805.462:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22143 comm="syz.2.4615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4236575d39 code=0x0 [ 1006.252598][T22169] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4620'. [ 1006.333995][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4620'. [ 1006.637111][T22176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1006.672566][T22180] loop4: detected capacity change from 0 to 128 [ 1007.667740][T22176] bond1: entered promiscuous mode [ 1007.674724][T22180] ext4: Unknown parameter 'fsmagic' [ 1007.793450][T22175] can0: slcan on ptm0. [ 1007.953767][T22172] can0 (unregistered): slcan off ptm0. [ 1008.310929][T22203] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4630'. [ 1008.361900][T22203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1008.413019][T20626] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1008.498441][T22209] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1009.427401][T20626] usb 5-1: Using ep0 maxpacket: 8 [ 1009.451242][T20626] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.478197][T20626] usb 5-1: config 0 has no interface number 0 [ 1009.510916][T20626] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.544040][T20626] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1009.580429][T20626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.606564][T20626] usb 5-1: config 0 descriptor?? [ 1009.627569][T20626] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1009.690688][T22226] loop0: detected capacity change from 0 to 128 [ 1009.728908][T22226] ext4: Unknown parameter 'fsmagic' [ 1009.816754][T21748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1009.839830][T20626] usb 5-1: USB disconnect, device number 66 [ 1010.034269][T22230] can0: slcan on ptm0. [ 1010.544283][T22223] can0 (unregistered): slcan off ptm0. [ 1010.653608][T22236] can0: slcan on ptm1. [ 1011.572111][ T29] audit: type=1326 audit(1719293811.563:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22253 comm="syz.0.4645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47f775d39 code=0x0 [ 1012.702833][T22233] can0 (unregistered): slcan off ptm1. [ 1013.213922][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4652'. [ 1013.314392][T22292] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1013.354695][T22292] net_ratelimit: 116 callbacks suppressed [ 1013.354719][T22292] netlink: zone id is out of range [ 1013.386747][T22292] netlink: zone id is out of range [ 1013.404714][T22292] netlink: zone id is out of range [ 1013.433424][T22292] netlink: zone id is out of range [ 1013.501935][T22292] netlink: zone id is out of range [ 1013.532291][T22292] netlink: zone id is out of range [ 1013.534963][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1013.538739][T22292] netlink: zone id is out of range [ 1013.662287][T22292] netlink: zone id is out of range [ 1013.667482][T22292] netlink: zone id is out of range [ 1013.686962][T22292] netlink: zone id is out of range [ 1013.795961][T22311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1014.575533][T22341] syz_tun: entered promiscuous mode [ 1014.611711][T22341] macsec1: entered promiscuous mode [ 1014.670882][T22341] macsec1: entered allmulticast mode [ 1014.686686][T22341] syz_tun: entered allmulticast mode [ 1014.877297][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 1014.921343][T22341] syz_tun: left allmulticast mode [ 1014.954149][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4666'. [ 1014.965512][T22341] syz_tun: left promiscuous mode [ 1015.155878][T22339] slcan: can't register candev [ 1015.180195][T22339] Falling back ldisc for ptm0. [ 1015.196985][T22350] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4666'. [ 1015.327316][T22350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1015.374076][ T29] audit: type=1326 audit(1719293815.384:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22356 comm="syz.1.4668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb1375d39 code=0x0 [ 1015.618458][T22362] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1015.769453][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1015.782882][T22369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1016.094531][T22379] loop4: detected capacity change from 0 to 128 [ 1016.129922][T22381] loop0: detected capacity change from 0 to 2048 [ 1016.321912][ T5139] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1017.108268][T22381] GPT:first_usable_lbas don't match. [ 1017.168266][T22381] GPT:34 != 290 [ 1017.181836][T22381] GPT: Use GNU Parted to correct GPT errors. [ 1017.189330][T22381] loop0: p1 p2 p3 [ 1017.282087][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 1017.428543][ T5139] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.455369][ T5139] usb 3-1: config 0 has no interface number 0 [ 1017.463964][ T5139] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1017.526247][T22399] ip6gretap0: entered promiscuous mode [ 1017.548645][T22399] macsec2: entered promiscuous mode [ 1017.572105][T22399] macsec2: entered allmulticast mode [ 1017.592005][ T5139] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1017.598241][T22399] ip6gretap0: entered allmulticast mode [ 1017.614129][ T4547] GPT:first_usable_lbas don't match. [ 1017.645999][ T4547] GPT:34 != 290 [ 1017.648213][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.662188][ T4547] GPT: Use GNU Parted to correct GPT errors. [ 1017.668372][ T4547] loop0: p1 p2 p3 [ 1017.688973][T22399] ip6gretap0: left allmulticast mode [ 1017.695351][T22385] slcan: can't register candev [ 1017.712516][T22399] ip6gretap0: left promiscuous mode [ 1017.737860][ T5139] usb 3-1: config 0 descriptor?? [ 1017.746672][T22385] Falling back ldisc for ptm0. [ 1017.843114][ T5139] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1018.180363][ T5136] usb 3-1: USB disconnect, device number 44 [ 1018.216366][T21718] udevd[21718]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1018.235428][ T5136] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1018.244103][T21722] udevd[21722]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1018.256587][T21748] udevd[21748]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1018.280564][T22406] __nla_validate_parse: 2 callbacks suppressed [ 1018.280584][T22406] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4683'. [ 1018.381913][T22402] syz_tun: entered promiscuous mode [ 1018.387272][T22402] macsec1: entered promiscuous mode [ 1018.420280][T22408] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1018.432821][T22402] macsec1: entered allmulticast mode [ 1018.438192][T22402] syz_tun: entered allmulticast mode [ 1018.522932][T22402] syz_tun: left allmulticast mode [ 1018.528275][T22402] syz_tun: left promiscuous mode [ 1018.886222][T22420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1019.027258][ T29] audit: type=1326 audit(1719293819.034:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22424 comm="syz.4.4689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70f575d39 code=0x0 [ 1019.049147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1020.123632][ T5139] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1020.139832][ T5139] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1020.150101][ T5139] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1020.167876][ T5139] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1020.201127][ T5139] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1020.293229][T22445] syz_tun: entered promiscuous mode [ 1020.333597][T22445] macsec1: entered promiscuous mode [ 1020.369856][T22445] macsec1: entered allmulticast mode [ 1020.394517][T22445] syz_tun: entered allmulticast mode [ 1020.423670][ T5136] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1020.448724][T22445] syz_tun: left allmulticast mode [ 1020.454377][T22445] syz_tun: left promiscuous mode [ 1020.625889][ T5136] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1020.641407][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.670001][ T5136] usb 1-1: Product: syz [ 1020.676376][ T5136] usb 1-1: Manufacturer: syz [ 1020.684396][ T5136] usb 1-1: SerialNumber: syz [ 1020.708021][ T5136] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1020.730183][T21888] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1021.130001][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1021.782305][T21888] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1021.809861][T21888] ath9k_htc: Failed to initialize the device [ 1021.870353][T21888] usb 1-1: ath9k_htc: USB layer deinitialized [ 1021.901460][T21883] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1022.146612][T21883] usb 2-1: Using ep0 maxpacket: 8 [ 1022.154037][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1022.183745][T21883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.205639][T21883] usb 2-1: config 0 has no interface number 0 [ 1022.221472][T21883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.265147][T21883] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1022.283734][T21883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.316805][T21883] usb 2-1: config 0 descriptor?? [ 1022.332468][T21883] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1022.416543][ T9] usb 5-1: config 215 has too many interfaces: 152, using maximum allowed: 32 [ 1022.448642][ T9] usb 5-1: config 215 has an invalid descriptor of length 255, skipping remainder of the config [ 1022.501474][ T9] usb 5-1: config 215 has 0 interfaces, different from the descriptor's value: 152 [ 1022.531283][ T5137] usb 1-1: USB disconnect, device number 47 [ 1022.580849][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 1022.611787][ T5136] usb 2-1: USB disconnect, device number 81 [ 1022.621282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.635010][ T5136] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1022.705502][T22467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1023.271692][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1023.362198][ T5136] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1023.371822][T22475] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1023.434356][T22475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1023.502946][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1023.527216][ T9] usb 5-1: USB disconnect, device number 67 [ 1023.585473][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 1023.593328][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 1023.627963][ T5136] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1023.661412][ T5136] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1023.693705][ T5136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1023.716673][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.737052][ T5136] usb 4-1: Product:  [ 1023.748647][ T5136] usb 4-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 1023.813973][ T5136] usb 4-1: SerialNumber: syz [ 1024.889437][T22473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.121503][T22473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.141268][ T5136] cdc_ncm 4-1:1.0: bind() failure [ 1025.253941][ T5136] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1025.260767][ T5136] cdc_ncm 4-1:1.1: bind() failure [ 1025.280140][ T5136] usb 4-1: USB disconnect, device number 55 [ 1025.288785][T22496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1026.141200][T21883] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1026.412606][T21883] usb 5-1: Using ep0 maxpacket: 8 [ 1026.448121][T21883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1026.470585][T21883] usb 5-1: config 0 has no interface number 0 [ 1026.494451][T21883] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.558289][T21883] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1026.579486][T21883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.646007][T21883] usb 5-1: config 0 descriptor?? [ 1027.375573][T21883] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1027.510991][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1027.601831][T21883] usb 5-1: USB disconnect, device number 68 [ 1027.638521][T21883] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 1027.722671][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.760537][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1027.800021][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.819278][ T9] usb 1-1: config 0 descriptor?? [ 1028.945013][ T9] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1029.079118][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input33 [ 1029.747356][T22511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.801248][T22511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.184924][ T9] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1030.371056][T22539] loop4: detected capacity change from 0 to 128 [ 1031.513621][ T5241] usb 1-1: USB disconnect, device number 48 [ 1031.587076][T22540] can0: slcan on ptm0. [ 1031.742119][T22548] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1031.800621][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1031.939188][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4734'. [ 1031.952780][T22536] can0 (unregistered): slcan off ptm0. [ 1036.150166][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1036.167680][T22596] netlink: 'syz.3.4746': attribute type 3 has an invalid length. [ 1036.197935][T22596] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1036.554231][T22608] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1036.616614][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1036.616685][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1038.059761][T22624] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1038.180795][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1038.545195][T22651] netlink: 'syz.1.4760': attribute type 3 has an invalid length. [ 1038.573574][T22651] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4760'. [ 1038.740723][T21883] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1038.744939][T22660] loop0: detected capacity change from 0 to 512 [ 1038.793113][T22659] netlink: 'syz.3.4762': attribute type 3 has an invalid length. [ 1038.810776][T22660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1038.861850][T22660] EXT4-fs (loop0): 1 truncate cleaned up [ 1038.870886][T22659] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4762'. [ 1038.887139][T22660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.013457][T21883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.078863][ T29] audit: type=1800 audit(1719293839.075:215): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4761" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1039.104594][T21883] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1039.128213][T21883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.163097][T21883] usb 5-1: config 0 descriptor?? [ 1039.488272][T22672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4765'. [ 1039.548671][T18331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.583485][T21883] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1039.630360][T22672] bond1: entered promiscuous mode [ 1039.700911][T21883] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input34 [ 1039.781549][T22648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.821325][T22648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.849686][T22679] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4766'. [ 1039.892996][T22679] net_ratelimit: 242 callbacks suppressed [ 1039.893018][T22679] netlink: zone id is out of range [ 1039.940514][T22679] netlink: zone id is out of range [ 1039.945750][T22679] netlink: zone id is out of range [ 1039.975767][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4766'. [ 1040.013043][T22683] netlink: 'syz.1.4767': attribute type 3 has an invalid length. [ 1040.013224][T22679] netlink: zone id is out of range [ 1040.041984][T22679] netlink: zone id is out of range [ 1040.048981][T22683] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4767'. [ 1040.055420][T22679] netlink: zone id is out of range [ 1040.200841][T22679] netlink: zone id is out of range [ 1040.263505][T22679] netlink: zone id is out of range [ 1040.322866][T22679] netlink: zone id is out of range [ 1040.341348][T22679] netlink: zone id is out of range [ 1041.579645][T21883] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1041.751543][T21883] usb 5-1: USB disconnect, device number 69 [ 1042.014748][T22711] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 1042.081827][T22706] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1042.179536][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1042.304912][T20626] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1042.522695][T20626] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.556506][T20626] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1042.605874][T20626] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1042.617094][T20626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.635366][T20626] usb 1-1: Product: syz [ 1042.652325][ T29] audit: type=1800 audit(1719293842.665:216): pid=22729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4776" name="bus" dev="sda1" ino=2023 res=0 errno=0 [ 1042.657239][T20626] usb 1-1: Manufacturer: syz [ 1042.741075][T20626] usb 1-1: SerialNumber: syz [ 1042.789604][T22734] bond1: entered promiscuous mode [ 1042.973659][T22720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1043.211174][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.273053][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.427421][T22741] __nla_validate_parse: 1 callbacks suppressed [ 1043.427454][T22741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1043.455310][T22744] netlink: 'syz.1.4780': attribute type 3 has an invalid length. [ 1043.489865][T22744] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4780'. [ 1043.734189][T22720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1043.735961][T22741] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1043.818483][T22741] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1043.945628][T22756] loop4: detected capacity change from 0 to 1024 [ 1044.330960][T22741] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1044.654501][T20626] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1044.751872][T22756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.824234][T20626] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1044.840411][T20626] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1045.690668][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1046.769901][T22767] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1046.776586][T22767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1046.784497][T22767] vhci_hcd vhci_hcd.0: Device attached [ 1046.800550][T22772] vhci_hcd: connection closed [ 1046.835036][ T2807] vhci_hcd: stop threads [ 1046.926014][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.938147][ T2807] vhci_hcd: release socket [ 1046.977536][ T2807] vhci_hcd: disconnect device [ 1047.113603][T20626] cdc_ncm 1-1:1.0: setting tx_max = 28 [ 1047.290427][T20626] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1047.375629][T20626] usb 1-1: USB disconnect, device number 49 [ 1047.419613][T20626] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1047.504063][T22779] can0: slcan on ptm0. [ 1047.673626][T22787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1047.946361][T22787] bond2: entered promiscuous mode [ 1048.184286][T22774] can0 (unregistered): slcan off ptm0. [ 1048.664621][T22810] netlink: 'syz.1.4797': attribute type 3 has an invalid length. [ 1048.681341][T22810] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4797'. [ 1049.054754][T22820] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1049.063503][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 1049.094980][T22820] net_ratelimit: 116 callbacks suppressed [ 1049.094995][T22820] netlink: zone id is out of range [ 1049.123308][T22821] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1049.134990][T22820] netlink: zone id is out of range [ 1049.148069][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1049.154351][T22820] netlink: zone id is out of range [ 1049.224086][T22820] netlink: zone id is out of range [ 1049.229283][T22820] netlink: zone id is out of range [ 1049.268732][ T29] audit: type=1326 audit(1719293849.275:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22822 comm="syz.3.4803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc27175d39 code=0x0 [ 1049.278578][T22820] netlink: zone id is out of range [ 1049.338767][T22820] netlink: zone id is out of range [ 1049.345262][T22820] netlink: zone id is out of range [ 1049.419507][T22833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 1049.497585][T22833] bond3: entered promiscuous mode [ 1049.503173][T22820] netlink: zone id is out of range [ 1050.414017][T22843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1050.420693][T22843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1050.429113][T22843] vhci_hcd vhci_hcd.0: Device attached [ 1050.436045][T22844] vhci_hcd: connection closed [ 1050.436627][T17492] vhci_hcd: stop threads [ 1050.470876][T17492] vhci_hcd: release socket [ 1050.475451][T17492] vhci_hcd: disconnect device [ 1050.648651][T22856] loop1: detected capacity change from 0 to 512 [ 1050.701904][ T5137] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1050.715357][T22856] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1050.733503][ T5137] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1050.749032][T22856] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1050.773063][ T5137] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1050.800843][ T5137] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1050.820794][ T5137] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1050.880311][T21883] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1051.072215][T21883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.098043][T21883] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1051.130642][T22859] loop1: detected capacity change from 0 to 2048 [ 1051.132257][T21883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1051.150341][ T5137] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1051.180326][T21883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.201370][T21883] usb 5-1: Product: syz [ 1051.207481][T21883] usb 5-1: Manufacturer: syz [ 1051.221558][T22859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.260682][T21883] usb 5-1: SerialNumber: syz [ 1051.417366][ T5137] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1051.429099][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.429840][ T5137] usb 3-1: Product: syz [ 1051.429861][ T5137] usb 3-1: Manufacturer: syz [ 1051.429877][ T5137] usb 3-1: SerialNumber: syz [ 1051.460145][ T5137] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1051.507250][T22853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1051.662703][ T5137] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1051.732523][T12311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.915155][T22853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.940406][T22853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.377787][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.384493][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.737321][T22853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1052.753392][ T5137] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1052.788808][ T5137] ath9k_htc: Failed to initialize the device [ 1052.829400][ T5137] usb 3-1: ath9k_htc: USB layer deinitialized [ 1052.890114][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1053.001504][T21883] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1053.119834][T21883] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1053.157443][T22884] loop1: detected capacity change from 0 to 128 [ 1053.230931][T21883] usb 5-1: USB disconnect, device number 70 [ 1053.258839][T21883] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1053.744849][T20626] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1054.335868][ T5136] usb 3-1: USB disconnect, device number 45 [ 1054.401101][T20626] usb 1-1: Using ep0 maxpacket: 16 [ 1054.433358][T20626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1054.449822][T20626] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1054.478985][T20626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.529534][T20626] usb 1-1: config 0 descriptor?? [ 1054.770267][ T5137] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1055.228416][T22898] cgroup: fork rejected by pids controller in /syz1 [ 1055.411983][T22912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.662993][ T5137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.674156][ T5137] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1055.683648][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.696120][ T5137] usb 4-1: config 0 descriptor?? [ 1055.702736][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1055.973933][T22912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.032531][T22887] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1056.040967][T20626] hid (null): unknown global tag 0x83 [ 1056.070691][T20626] hid (null): unknown global tag 0xc [ 1056.098358][T20626] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 1056.108922][T22887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1056.137037][T20626] hid-generic 0003:0158:0100.0019: unexpected long global item [ 1056.168517][T20626] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 1056.171034][ T5137] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 1056.259516][T20626] usb 1-1: USB disconnect, device number 50 [ 1056.315437][ T5137] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input35 [ 1056.449865][T22895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.555715][T22895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.606643][ T5137] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1056.740487][ T5094] Bluetooth: hci3: command 0x0406 tx timeout [ 1057.124119][T23031] netlink: 'syz.0.4830': attribute type 3 has an invalid length. [ 1090.269131][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 1113.787181][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1161.969991][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1161.970013][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22895/1:b..l [ 1161.970047][ C1] rcu: (detected by 1, t=10502 jiffies, g=150689, q=274 ncpus=2) [ 1161.970063][ C1] task:syz.3.4820 state:R running task stack:23800 pid:22895 tgid:22894 ppid:16993 flags:0x00004002 [ 1161.970087][ C1] Call Trace: [ 1161.970092][ C1] [ 1161.970100][ C1] __schedule+0x17e8/0x4a20 [ 1161.970140][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1161.970170][ C1] ? __pfx___schedule+0x10/0x10 [ 1161.970195][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1161.970227][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1161.970240][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1161.970253][ C1] ? bpf_prog_5b9792983222a4f6+0x61/0x66 [ 1161.970278][ C1] irqentry_exit+0x5e/0x90 [ 1161.970295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1161.970319][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 1161.970343][ C1] Code: 8b e8 c4 c8 36 0a 65 66 8b 05 24 e6 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 fd a1 0b 00 e8 b8 31 44 00 fb 65 8b 05 e8 e5 ac 7e <85> c0 75 05 e8 f7 c6 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 1161.970358][ C1] RSP: 0018:ffffc9000b4f78e0 EFLAGS: 00000282 [ 1161.970367][ C1] RAX: 0000000080000000 RBX: 1ffff9200169ef20 RCX: ffffffff947dc803 [ 1161.970375][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcac820 RDI: ffffffff8c2074e0 [ 1161.970382][ C1] RBP: ffffc9000b4f7990 R08: ffffffff8faeec6f R09: 1ffffffff1f5dd8d [ 1161.970389][ C1] R10: dffffc0000000000 R11: fffffbfff1f5dd8e R12: dffffc0000000000 [ 1161.970396][ C1] R13: 1ffff9200169ef24 R14: ffffc9000b4f7920 R15: 0000000000000200 [ 1161.970417][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1161.970437][ C1] ? bpf_test_run+0x31e/0x910 [ 1161.970460][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1161.970486][ C1] ? bpf_test_timer_continue+0x11a/0x350 [ 1161.970508][ C1] ? bpf_test_run+0x31e/0x910 [ 1161.970520][ C1] bpf_test_run+0x433/0x910 [ 1161.970540][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 1161.970551][ C1] ? eth_type_trans+0x3d1/0x7a0 [ 1161.970585][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 1161.970616][ C1] ? convert___skb_to_skb+0x41/0x620 [ 1161.970643][ C1] bpf_prog_test_run_skb+0xc97/0x1820 [ 1161.970671][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1161.970685][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1161.970698][ C1] bpf_prog_test_run+0x33a/0x3b0 [ 1161.970722][ C1] __sys_bpf+0x48d/0x810 [ 1161.970748][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1161.970785][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1161.970808][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1161.970821][ C1] ? do_syscall_64+0x100/0x230 [ 1161.970833][ C1] __x64_sys_bpf+0x7c/0x90 [ 1161.970845][ C1] do_syscall_64+0xf3/0x230 [ 1161.970859][ C1] ? clear_bhb_loop+0x35/0x90 [ 1161.970883][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.970904][ C1] RIP: 0033:0x7fbc27175d39 [ 1161.970919][ C1] RSP: 002b:00007fbc2800f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.970937][ C1] RAX: ffffffffffffffda RBX: 00007fbc27303fa0 RCX: 00007fbc27175d39 [ 1161.970950][ C1] RDX: 0000000000000050 RSI: 0000000020000900 RDI: 000000000000000a [ 1161.970956][ C1] RBP: 00007fbc271f6766 R08: 0000000000000000 R09: 0000000000000000 [ 1161.970962][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.970968][ C1] R13: 000000000000000b R14: 00007fbc27303fa0 R15: 00007ffde6a943f8 [ 1161.970984][ C1] [ 1162.306338][ C1] rcu: rcu_preempt kthread starved for 10347 jiffies! g150689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1162.306364][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1162.306373][ C1] rcu: RCU grace-period kthread stack dump: [ 1162.306380][ C1] task:rcu_preempt state:R running task stack:25200 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1162.306421][ C1] Call Trace: [ 1162.306429][ C1] [ 1162.306438][ C1] __schedule+0x17e8/0x4a20 [ 1162.306469][ C1] ? __pfx___schedule+0x10/0x10 [ 1162.306484][ C1] ? __pfx_lock_release+0x10/0x10 [ 1162.306505][ C1] ? __asan_memset+0x23/0x50 [ 1162.306538][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1162.306562][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.306583][ C1] ? schedule+0x90/0x320 [ 1162.306595][ C1] schedule+0x14b/0x320 [ 1162.306608][ C1] schedule_timeout+0x1be/0x310 [ 1162.306619][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1162.306632][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1162.306663][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1162.306691][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1162.306714][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1162.306740][ C1] ? rcu_gp_init+0x1256/0x1630 [ 1162.306755][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1162.306766][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1162.306780][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1162.306800][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1162.306829][ C1] ? finish_swait+0xd4/0x1e0 [ 1162.306854][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1162.306878][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1162.306889][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1162.306902][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1162.306917][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1162.306930][ C1] kthread+0x2f0/0x390 [ 1162.306954][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1162.306977][ C1] ? __pfx_kthread+0x10/0x10 [ 1162.307002][ C1] ret_from_fork+0x4b/0x80 [ 1162.307024][ C1] ? __pfx_kthread+0x10/0x10 [ 1162.307037][ C1] ret_from_fork_asm+0x1a/0x30 [ 1162.307057][ C1] [ 1162.307062][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1162.307079][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1162.307108][ C0] NMI backtrace for cpu 0 [ 1162.307128][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 [ 1162.307147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1162.307157][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 1162.307184][ C0] Code: cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d5 03 00 65 8b 05 f0 5f 70 7e a9 00 01 ff 00 74 [ 1162.307199][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000047 [ 1162.307214][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8180bfc0 [ 1162.307228][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1162.307239][ C0] RBP: ffffc90000007ea8 R08: ffffffff8180bfdd R09: 1ffffffff1f5dd8d [ 1162.307252][ C0] R10: dffffc0000000000 R11: fffffbfff1f5dd8e R12: 1ffff1101728592b [ 1162.307265][ C0] R13: 0000000000000000 R14: ffff8880237d7418 R15: 0000000000000001 [ 1162.307277][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1162.307291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.307304][ C0] CR2: 00007fb8effdbd5f CR3: 000000007d064000 CR4: 00000000003506f0 [ 1162.307319][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.307329][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.307340][ C0] Call Trace: [ 1162.307347][ C0] [ 1162.307354][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1162.307375][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1162.307398][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1162.307418][ C0] ? nmi_handle+0x2a/0x5a0 [ 1162.307442][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1162.307461][ C0] ? nmi_handle+0x14f/0x5a0 [ 1162.307477][ C0] ? nmi_handle+0x2a/0x5a0 [ 1162.307493][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 1162.307515][ C0] ? default_do_nmi+0x63/0x160 [ 1162.307536][ C0] ? exc_nmi+0x123/0x1f0 [ 1162.307556][ C0] ? end_repeat_nmi+0xf/0x53 [ 1162.307579][ C0] ? __hrtimer_run_queues+0x61d/0xd50 [ 1162.307596][ C0] ? __hrtimer_run_queues+0x600/0xd50 [ 1162.307614][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 1162.307637][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 1162.307661][ C0] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 1162.307684][ C0] [ 1162.307690][ C0] [ 1162.307696][ C0] __hrtimer_run_queues+0x61d/0xd50 [ 1162.307714][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1162.307746][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1162.307764][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1162.307790][ C0] hrtimer_interrupt+0x396/0x990 [ 1162.307821][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1162.307848][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1162.307872][ C0] [ 1162.307878][ C0] [ 1162.307885][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1162.307906][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1162.307925][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d c5 3f 9c 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1162.307939][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 1162.307953][ C0] RAX: ffffffff8e094680 RBX: ffff888019e85864 RCX: 0000000001381c71 [ 1162.307965][ C0] RDX: 0000000000000001 RSI: ffff888019e85800 RDI: ffff888019e85864 [ 1162.307986][ C0] RBP: 000000000003a678 R08: ffff8880b9437ccb R09: 1ffff11017286f99 [ 1162.307999][ C0] R10: dffffc0000000000 R11: ffffffff8b8dcc10 R12: ffff88801bf4b000 [ 1162.308011][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8ead8b80 [ 1162.308025][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1162.308051][ C0] acpi_idle_enter+0xe4/0x140 [ 1162.308071][ C0] cpuidle_enter_state+0x112/0x480 [ 1162.308089][ C0] ? __pfx_menu_select+0x10/0x10 [ 1162.308116][ C0] cpuidle_enter+0x5d/0xa0 [ 1162.308139][ C0] do_idle+0x375/0x5d0 [ 1162.308160][ C0] ? __pfx_do_idle+0x10/0x10 [ 1162.308178][ C0] ? poll_idle+0x60/0xb0 [ 1162.308202][ C0] ? rest_init+0x31/0x300 [ 1162.308219][ C0] cpu_startup_entry+0x42/0x60 [ 1162.308237][ C0] rest_init+0x2dc/0x300 [ 1162.308255][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1162.308279][ C0] start_kernel+0x47a/0x500 [ 1162.308299][ C0] x86_64_start_reservations+0x2a/0x30 [ 1162.308320][ C0] x86_64_start_kernel+0x9f/0xa0 [ 1162.308340][ C0] common_startup_64+0x13e/0x147 [ 1162.308366][ C0] [ 1162.955541][ C1] sched: RT throttling activated [ 1163.006618][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1163.020057][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P5137 P23025 P22895 } 7275 jiffies s: 219861 root: 0x0/T [ 1163.020134][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 1163.072376][ T4547] udevd[4547]: worker [22708] /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input35/event4 is taking a long time [ 1163.290558][T23031] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4830'. SYZFAIL: failed to send rpc fd=3 want=19272 sent=0 n=-1 (errno 32: Broken pipe) [ 1164.180268][T21884] usb 4-1: USB disconnect, device number 56