last executing test programs: 45.571033462s ago: executing program 1 (id=651): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000580)={0x8, [0xc, 0x2, 0x200, 0x4, 0x9, 0x7, 0x4, 0x9, 0xfff8, 0x5, 0x1, 0x4, 0x9, 0xa4e, 0x5, 0x400, 0x9, 0x0, 0xb19, 0x2, 0x7, 0x6, 0x3, 0x7acb, 0x6, 0x1, 0x1, 0xf801, 0x1000, 0x5, 0x1, 0x2da, 0xc, 0x76c2, 0x7, 0x8000, 0x9, 0x7ff, 0x8000, 0x9, 0x63, 0x0, 0x8, 0x3, 0x3, 0x7d, 0x7, 0x6], 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x7272ec73125c0e1f, @win={{0x9, 0x7ff, 0x0, 0x8}, 0x3, 0x3f, &(0x7f0000000400)={{0x7c2d9adb, 0x2, 0x7, 0x3}, &(0x7f0000000280)={{0xfffffffd, 0x10000, 0x40, 0x1}, &(0x7f0000000100)={{0x1, 0x1f, 0x0, 0x9}}}}, 0x3ff, &(0x7f0000000440)="1e5a1bef2123e217b4069b", 0x2}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r2 = socket$inet(0x2, 0x4, 0xfffffffe) eventfd(0x402005) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r4}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4040800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000600), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x35315241}}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) 38.313696084s ago: executing program 1 (id=659): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "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"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)=0x85000) 38.13380916s ago: executing program 1 (id=661): r0 = epoll_create(0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x15}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10002000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0xc, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendmsg$alg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="c35a3f0175fae781", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000070001c0"]) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x1000012, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0xb, [0x38, 0xa, 0xe, 0xc, 0x33, 0x2, 0x38, 0x2e, 0x29, 0x1a, 0x18, 0xf, 0x1f, 0x26, 0x19, 0x1a], 0x1, 0x3fc0, 0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 33.658265945s ago: executing program 1 (id=668): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000580)={0x8, [0xc, 0x2, 0x200, 0x4, 0x9, 0x7, 0x4, 0x9, 0xfff8, 0x5, 0x1, 0x4, 0x9, 0xa4e, 0x5, 0x400, 0x9, 0x0, 0xb19, 0x2, 0x7, 0x6, 0x3, 0x7acb, 0x6, 0x1, 0x1, 0xf801, 0x1000, 0x5, 0x1, 0x2da, 0xc, 0x76c2, 0x7, 0x8000, 0x9, 0x7ff, 0x8000, 0x9, 0x63, 0x0, 0x8, 0x3, 0x3, 0x7d, 0x7, 0x6], 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x7272ec73125c0e1f, @win={{0x9, 0x7ff, 0x0, 0x8}, 0x3, 0x3f, &(0x7f0000000400)={{0x7c2d9adb, 0x2, 0x7, 0x3}, &(0x7f0000000280)={{0xfffffffd, 0x10000, 0x40, 0x1}, &(0x7f0000000100)={{0x1, 0x1f, 0x0, 0x9}}}}, 0x3ff, &(0x7f0000000440)="1e5a1bef2123e217b4069b", 0x2}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r2 = socket$inet(0x2, 0x4, 0xfffffffe) eventfd(0x402005) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r4}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4040800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000600), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x35315241}}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) 28.387811569s ago: executing program 1 (id=677): socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x3) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x18}, 0xc) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x200, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=@raw=[@map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb043}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x5}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x67f3, 0xa}, 0x10, 0x2f190, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x0, 0x5}, {0x2, 0x4, 0xf}], 0x10, 0x2}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x420106}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0xb, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ',\xc8\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '^\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x404c000) r4 = syz_open_dev$vivid(&(0x7f0000000600), 0x2, 0x2) r5 = dup3(r3, r4, 0x0) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000640)=0x6, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000680)={0x603, 0xffff19e9, 0x1, {0x1, @raw_data="0a8a41f1c2b5080833cb839587d3a5112fa91b7321de420d34c1e2f61d76e19f15fdcc204e8e0316b0e674421167fc244ce3c06b38b544284d8e582814842c695cd42e3d6f765c189f9c364aa797141a809061ee08697be681d62a18594f43fecbe923c471060bc11d08de361c5629cf3a50d504f0123bcf7dada08de7400e00c20eca261e2312edd8f6aa3cf5a40b273283395715fd23c8941b9d6472f1dac45eeef8ca33b5c777ecba14933eacbeffecb01f7e3c0f03c9bdb1d8f64107023bf26c0faac0f78676"}, 0xe1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000900)={0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000b40)={0x2, {0x2, 0x400, 0x0, 0x40, 0x0, 0x10}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x400, {{0x13, 0x4, 0x3, 0x20, 0x4c, 0x68, 0x0, 0xc, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @timestamp_addr={0x44, 0x34, 0x98, 0x1, 0x5, [{@broadcast, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x8c}, {@multicast2, 0xc1}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x1b, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf}, @alu={0x7, 0x1, 0x1, 0xa, 0x0, 0x10, 0x4}, @generic={0x9, 0x8, 0x1, 0x93, 0x7}, @call={0x85, 0x0, 0x0, 0x24}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0xfffffff1, 0xe1, &(0x7f0000000d00)=""/225, 0x41100, 0x0, '\x00', r8, 0x32, r5, 0x8, &(0x7f0000000ec0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x6, 0x0, 0xfffffff8}, 0x10, r9, r3, 0x4, &(0x7f0000000f80)=[r2, r6], &(0x7f0000000fc0)=[{0x1, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0x8, 0xe}, {0x1, 0x3, 0x10, 0xb}], 0x10, 0x7fffffff}, 0x90) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x6) 28.096002111s ago: executing program 1 (id=680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000001380)=ANY=[@ANYBLOB="1915000d00f62674db6500c40001", @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000012c0)={0x10000, 0x2, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) fanotify_mark(r1, 0x1, 0x4800105a, r3, 0x0) r5 = memfd_create(&(0x7f0000002280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x01k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3F\x958\xf7\xa1c\x81k\'^&\xd9\x82]\x18]\xb2\xbe\xdc\xcd\xe4j\xad;\xd1q$\xb2\xe4\xec\xa9\x15\xbfy\xb7\xe1\xedq\xed\x13F\x85T\xe39\xa4R^#\xc0K\xcd\xe5\xf2\x9a@^\n(\xd5\n5\xcb\xe7~V\xc9\x8b@r\x1c1\xc7.,E\x82L\xf6\xd5\xfe\x9a\x84\xc3\xea\xa4*\xa2\xa3\x12\xce\xb9{X\va\\\xa2\xc6\x88\x9c\xc7%\x0e\x16(\v\xc3\xeam:\xc3@\xa6S|\xe9\xf1$\x11+Y\x1f\xecQ\x86\a\xf3', 0x0) r6 = dup(r5) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) pread64(r6, &(0x7f0000000200)=""/4096, 0x1000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x9, 0x400, 0x401, 0x0, 0xffffffffffffffff, 0xde, '\x00', r9, r6, 0x2, 0x0, 0x0, 0x5}, 0x48) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r9, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 10.453954053s ago: executing program 2 (id=708): r0 = epoll_create(0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000300), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x15}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10002000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0xc, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendmsg$alg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="c35a3f0175fae781", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000070001c0"]) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x1000012, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0xb, [0x38, 0xa, 0xe, 0xc, 0x33, 0x2, 0x38, 0x2e, 0x29, 0x1a, 0x18, 0xf, 0x1f, 0x26, 0x19, 0x1a], 0x1, 0x3fc0, 0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 9.276645334s ago: executing program 2 (id=709): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) socket(0x26, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0xffffffffffffff36, 0x0, 0x0, 0x10, 0x1}, 0x90) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) 8.634591138s ago: executing program 0 (id=710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000c002b80080004"], 0x40}}, 0x0) 8.208848267s ago: executing program 3 (id=711): setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(r1, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x1, 0xa9, 0x8000000000000000, 0x3, 0x0, 0xe215, 0x0, 0x40, 0x169, 0xa3, 0x2, 0x38, 0x0, 0x0, 0x101}, [{0x4, 0x0, 0x0, 0x0, 0x10001, 0x5, 0x8, 0x7}], "6b98a8aff8b4c6df6574084a96ea1f2dda95d0a33cb1e3ccb89119c18ad48ffd147312c74406408a8afb74e403b9f9acb279954ce27fff0322d93fa430fc8dcf5b8700432a976ae507f2d1965a5c907ac8ca6dd4ffeaf1e4872bde22e637de0d8998dc714d67e2fd96a7694971175f97c4b736b603f28abd1168a2c66b3f8240350cc677a86a5e2302c764c8e6700f26920d15978ea3132a546c8438f428a48cc6e8bb9bee4a5ce079dd17f86da5e1a1f8f37fc6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, 0x0) 7.361061591s ago: executing program 2 (id=712): socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x3) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x18}, 0xc) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x200, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=@raw=[@map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb043}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x5}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x67f3, 0xa}, 0x10, 0x2f190, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x0, 0x5}, {0x2, 0x4, 0xf}], 0x10, 0x2}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x420106}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0xb, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ',\xc8\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '^\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x404c000) r4 = syz_open_dev$vivid(&(0x7f0000000600), 0x2, 0x2) r5 = dup3(r3, r4, 0x0) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000640)=0x6, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000680)={0x603, 0xffff19e9, 0x1, {0x1, @raw_data="0a8a41f1c2b5080833cb839587d3a5112fa91b7321de420d34c1e2f61d76e19f15fdcc204e8e0316b0e674421167fc244ce3c06b38b544284d8e582814842c695cd42e3d6f765c189f9c364aa797141a809061ee08697be681d62a18594f43fecbe923c471060bc11d08de361c5629cf3a50d504f0123bcf7dada08de7400e00c20eca261e2312edd8f6aa3cf5a40b273283395715fd23c8941b9d6472f1dac45eeef8ca33b5c777ecba14933eacbeffecb01f7e3c0f03c9bdb1d8f64107023bf26c0faac0f78676"}, 0xe1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000900)={0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000b40)={0x2, {0x2, 0x400, 0x0, 0x40, 0x0, 0x10}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x400, {{0x13, 0x4, 0x3, 0x20, 0x4c, 0x68, 0x0, 0xc, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @timestamp_addr={0x44, 0x34, 0x98, 0x1, 0x5, [{@broadcast, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x8c}, {@multicast2, 0xc1}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x1d, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf}, @alu={0x7, 0x1, 0x1, 0xa, 0x0, 0x10, 0x4}, @generic={0x9, 0x8, 0x1, 0x93, 0x7}, @call={0x85, 0x0, 0x0, 0x24}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0xfffffff1, 0xe1, &(0x7f0000000d00)=""/225, 0x41100, 0x0, '\x00', r8, 0x32, r5, 0x8, &(0x7f0000000ec0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x6, 0x0, 0xfffffff8}, 0x10, r9, r3, 0x4, &(0x7f0000000f80)=[r2, r6], &(0x7f0000000fc0)=[{0x1, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0x8, 0xe}, {0x1, 0x3, 0x10, 0xb}], 0x10, 0x7fffffff}, 0x90) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x6) 7.317015413s ago: executing program 0 (id=713): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f70c1b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520220ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295cba0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783f287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4fe5b7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e45df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x101c}}, 0x20002046) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) 7.206889259s ago: executing program 3 (id=715): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40)="4a29bd560f", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x88) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c", 0x2d9}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c", 0x1da}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000640)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad5", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xa, 0x4, 0x3, 0x200}, 0x48) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x4c, r7, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x5}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) syz_open_dev$vim2m(&(0x7f0000000240), 0x100000000, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) 7.122466815s ago: executing program 2 (id=716): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0x0, 0x9}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x24, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x24}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_get_implied_cluster_alloc_exit\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6128}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x4, 0x309, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0x1c, 0x8d, 0xaf, 0x10, 0xbdb, 0x1002, 0x3e0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f7, 0x3, 0x3, 0xe, 0x40, 0x7, [{{0x9, 0x4, 0xee, 0x2, 0x3, 0xc1, 0x31, 0x53, 0x5, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "4250f81833"}, {0x5, 0x24, 0x0, 0xc78}, {0xd, 0x24, 0xf, 0x1, 0x8be, 0xe17b, 0xb, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x68}, [@mdlm={0x15, 0x24, 0x12, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xaa}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x8, 0x9, 0x9, 0x9, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xb6c, 0x5, 0x7, 0x8, 0xb3}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x5, 0xfa0a}, @obex={0x5, 0x24, 0x15, 0x5}]}, @hid_hid={0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0xb23}}], [{{0x9, 0x5, 0x5, 0x0, 0x3f7, 0x4, 0xa7, 0x7, [@generic={0x79, 0x8, "0780fe3dc3adc14b4fbef3d11e34085c33696a99b105a6b3403547b92e1cc4fb3f282c95bfbbcb84f71972becaeacb6c2071a5e1681bc50fea19ca8a33a208436c4c2254cdddc10d6655e5b48157d824bd8ac994612599ec28d67c342d4086db3a9562abbc20fb54c6f63e35b94d8314906e9b87c6e316"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xed, 0x5f26}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0x8, 0x5, [@generic={0x15, 0x10, "57a4432d032cec6e46040dc3c1916a722b4fa3"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0xa, 0xd}}]}}, {{0x9, 0x4, 0x5c, 0x7, 0x2, 0x76, 0x6f, 0x7b, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1}}, @generic={0xe0, 0x8, "bc1eea9aec523079aa8760eaf27ba74f4a2ef9f52d898f7497050eaf6e6a12772eed2a0d43cb6ff7ca155e3a07ca1b72b62d0b5d170ccc6383b4be4fa2b92fcdaf7f6611d8f07bf9524d8b905501381257b4dad9b2036bf6a2bd59f1446c43c1f45190941dda22b085d6624b4dde2a8fef70f56f6e7855b5ad119b20cf0e68f4c62b0c7ce8926dec5141b1d02eeafd22ba3058e0fc1f62fec3d71ad120e06ca4e9bdf053b0c536bf9b31372b607c4eed0b3f87aa9942ba211762c22e386800a39a1fe81392ae3a3601c4983f1717c2a610dd181b9e30348fac0e3a984165"}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x6, 0x7, [@generic={0x6, 0x21, "96cef6d9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x9, 0x2, 0x0, [@generic={0x32, 0x5, "9f9e85f1b29d3c4f0b672d2b2da06e91d72d3ea71399db4f49d3564660100d431d9c1cfc487199278c2571ddb84cd0bc"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x9}]}}]}}, {{0x9, 0x4, 0x9a, 0xb, 0x8, 0x9e, 0xb6, 0x8f, 0x6, [@uac_as], [{{0x9, 0x5, 0x2, 0xf051e716c4e87f91, 0x20, 0xf3, 0xf7, 0x7, [@generic={0x9, 0x9, "1834ca81052dd8"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x40, 0xf8, 0x21, [@generic={0x4, 0xc, "1f27"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x4, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xa1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8}]}}, {{0x9, 0x5, 0x19, 0x1, 0x40, 0x2, 0x1, 0x7c}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x46, 0x9}]}}, {{0x9, 0x5, 0x74e7c64d8ab92a90, 0x10, 0x10, 0x80, 0xfd, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x3, 0x1, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x5, 0xff, 0x1}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x81, 0x9, 0x20, 0x40, 0x40}, 0x3c, &(0x7f0000000600)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0x9, 0x800}, @wireless={0xb, 0x10, 0x1, 0x2, 0x82, 0x6, 0x54, 0x5, 0xb}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x8, 0x1, 0x100, 0xfe}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ded7e92dbaeab3268741f84b468ba7cd"}, @ptm_cap={0x3}]}, 0x3, [{0x25, &(0x7f00000006c0)=@string={0x25, 0x3, "ba121c512077474e197be6be58d2f8853cf1dbe7e463fe0c37381ee77bd40262990899"}}, {0x8c, &(0x7f0000000700)=@string={0x8c, 0x3, "549214ecf2109ccc47ec25532e1349826161d0e077bb5c54a7a1df2cd265fcdb07be5e981c326629d0f1f7bd2c8b76b8ccd8eb4d491a4a3517e20c6edf56c4a7cffdd0f675e741df3f05f73bbfb0e30777ce633b83610c700379c1aed63802e042167ed7c3ad6d4a70b3147e2da53f0a7668857b3c14a74d7fcf171954303ee60f39d19d25e450519207"}}, {0x6a, &(0x7f00000007c0)=@string={0x6a, 0x3, "31084594b4c1718174ebbd4f77cae2a93d482b346f6f49b34aad87ea880939acac81f984b7ec14c296d31bb19928bc4388c7e1ec40afe7f9d386c3c9c7ce642d754a6a8a4ec69f49ac7665f1a94066426bef36380eb0bc8ed753d470424853ccb3563351a313da4f"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x80) 6.125252826s ago: executing program 3 (id=717): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "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"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000380)=0x85000) 6.004716626s ago: executing program 3 (id=718): r0 = epoll_create(0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000300), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x15}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10002000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0xc, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendmsg$alg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="c35a3f0175fae781", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000070001c0"]) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x1000012, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0xb, [0x38, 0xa, 0xe, 0xc, 0x33, 0x2, 0x38, 0x2e, 0x29, 0x1a, 0x18, 0xf, 0x1f, 0x26, 0x19, 0x1a], 0x1, 0x3fc0, 0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 5.631872109s ago: executing program 0 (id=719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000001380)=ANY=[@ANYBLOB="1915000d00f62674db6500c40001", @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000012c0)={0x10000, 0x2, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) fanotify_mark(r1, 0x1, 0x4800105a, r3, 0x0) r5 = memfd_create(&(0x7f0000002280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x01k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3F\x958\xf7\xa1c\x81k\'^&\xd9\x82]\x18]\xb2\xbe\xdc\xcd\xe4j\xad;\xd1q$\xb2\xe4\xec\xa9\x15\xbfy\xb7\xe1\xedq\xed\x13F\x85T\xe39\xa4R^#\xc0K\xcd\xe5\xf2\x9a@^\n(\xd5\n5\xcb\xe7~V\xc9\x8b@r\x1c1\xc7.,E\x82L\xf6\xd5\xfe\x9a\x84\xc3\xea\xa4*\xa2\xa3\x12\xce\xb9{X\va\\\xa2\xc6\x88\x9c\xc7%\x0e\x16(\v\xc3\xeam:\xc3@\xa6S|\xe9\xf1$\x11+Y\x1f\xecQ\x86\a\xf3', 0x0) r6 = dup(r5) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) pread64(r6, &(0x7f0000000200)=""/4096, 0x1000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x9, 0x400, 0x401, 0x0, 0xffffffffffffffff, 0xde, '\x00', r9, r6, 0x2, 0x0, 0x0, 0x5}, 0x48) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r9, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 5.503361737s ago: executing program 3 (id=720): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000580)={0x8, [0xc, 0x2, 0x200, 0x4, 0x9, 0x7, 0x4, 0x9, 0xfff8, 0x5, 0x1, 0x4, 0x9, 0xa4e, 0x5, 0x400, 0x0, 0x1000, 0xb19, 0x2, 0x7, 0x6, 0x3, 0x7acb, 0x6, 0x1, 0x1, 0xf801, 0x1000, 0x5, 0x1, 0x2da, 0xc, 0x76c2, 0x7, 0x8000, 0x9, 0x7ff, 0x8000, 0x9, 0x63, 0x0, 0x8, 0x3, 0x3, 0x7d, 0x7, 0x6], 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0x7272ec73125c0e1f, @win={{0x9, 0x7ff, 0x0, 0x8}, 0x3, 0x3f, &(0x7f0000000400)={{0x7c2d9adb, 0x2, 0x7, 0x3}, &(0x7f0000000280)={{0xfffffffd, 0x10000, 0x40, 0x1}, &(0x7f0000000100)={{0x1, 0x1f, 0x0, 0x9}}}}, 0x3ff, &(0x7f0000000440)="1e5a1bef2123e217b4069b", 0x2}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r2 = socket$inet(0x2, 0x4, 0xfffffffe) eventfd(0x402005) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r4}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4040800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000600), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x35315241}}) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) 3.215078404s ago: executing program 4 (id=721): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) socket(0x26, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0xffffffffffffff36, 0x0, 0x0, 0x10, 0x1}, 0x90) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) 3.176369897s ago: executing program 2 (id=722): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x6b965000) r1 = syz_open_procfs(0x0, 0x0) fchownat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x100) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000040)={r9, r7, r8}) bind$unix(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000a00)={r9, r7, r8}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2.107253995s ago: executing program 2 (id=723): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x150, 0x0, &(0x7f0000000140)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902610002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000a144986269dfa877da227a2f4e4b9e9aa2751a488007d0fa2c099ba2ec570b8238eb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) readahead(r3, 0x3, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1eb4}, {&(0x7f00000000c0)=""/250, 0x84}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="b98700000000000000000b00000004000180"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff2e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r8 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(r8, 0x88, 0x1, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r7}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.950512243s ago: executing program 0 (id=724): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001140)='net/wireless\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000009980)={0x2020}, 0xfe36) preadv2(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r6], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f00000003c0)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x200}, 0x10, 0x0, r5}, 0x90) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x10000000, 0x8, 0x1, 0x0, 0x0, r5}, &(0x7f0000000380)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 1.786198089s ago: executing program 4 (id=725): socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x3) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x18}, 0xc) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x200, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=@raw=[@map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb043}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x5}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x67f3, 0xa}, 0x10, 0x2f190, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x0, 0x5}, {0x2, 0x4, 0xf}], 0x10, 0x2}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x420106}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0xb, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ',\xc8\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '^\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x404c000) r4 = syz_open_dev$vivid(&(0x7f0000000600), 0x2, 0x2) r5 = dup3(r3, r4, 0x0) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000640)=0x6, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000680)={0x603, 0xffff19e9, 0x1, {0x1, @raw_data="0a8a41f1c2b5080833cb839587d3a5112fa91b7321de420d34c1e2f61d76e19f15fdcc204e8e0316b0e674421167fc244ce3c06b38b544284d8e582814842c695cd42e3d6f765c189f9c364aa797141a809061ee08697be681d62a18594f43fecbe923c471060bc11d08de361c5629cf3a50d504f0123bcf7dada08de7400e00c20eca261e2312edd8f6aa3cf5a40b273283395715fd23c8941b9d6472f1dac45eeef8ca33b5c777ecba14933eacbeffecb01f7e3c0f03c9bdb1d8f64107023bf26c0faac0f78676"}, 0xe1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000900)={0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000b40)={0x2, {0x2, 0x400, 0x0, 0x40, 0x0, 0x10}}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x400, {{0x13, 0x4, 0x3, 0x20, 0x4c, 0x68, 0x0, 0xc, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @timestamp_addr={0x44, 0x34, 0x98, 0x1, 0x5, [{@broadcast, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x8c}, {@multicast2, 0xc1}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x1d, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf}, @alu={0x7, 0x1, 0x1, 0xa, 0x0, 0x10, 0x4}, @generic={0x9, 0x8, 0x1, 0x93, 0x7}, @call={0x85, 0x0, 0x0, 0x24}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0xfffffff1, 0xe1, &(0x7f0000000d00)=""/225, 0x41100, 0x0, '\x00', r8, 0x32, r5, 0x8, &(0x7f0000000ec0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x6, 0x0, 0xfffffff8}, 0x10, r9, r3, 0x4, &(0x7f0000000f80)=[r2, r6], &(0x7f0000000fc0)=[{0x1, 0x3, 0x6, 0x7}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0x8, 0xe}, {0x1, 0x3, 0x10, 0xb}], 0x10, 0x7fffffff}, 0x90) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x6) 1.600708404s ago: executing program 4 (id=726): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40)="4a29bd560f", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x88) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1da}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000640)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad5", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xa, 0x4, 0x3, 0x200}, 0x48) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x4c, r7, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x5}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) syz_open_dev$vim2m(&(0x7f0000000240), 0x100000000, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) 1.220596232s ago: executing program 0 (id=727): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "7da0bc12f946dc02e5b62e78c14b727ca7f19907a99aab4810bf037efc2530653612031ae2e2d4cecf208a26257d61e08edbf63439944da1206a4a75c61e590f68d3d0e72bc39efb072acdd44a1270eaa016ca30e85907bb70f16ffe70d35c68edc4fdc288f58a7d2a0677a02540e8cc1fbb1694fe895b64ab35393a673ab55deeb9417944f40f2bac62a80455c3337fcf066013ea47b949388dd6bf4b81eff76dd1c5bba45307d0809ca1120534fb2a5124265025939596973af5ab9e78a8141bfb3de12f87c5dc2735fa999e49df4393de21c0b21c0250f07399415841c344949a51f4d4dcfa4613f922654a9f382837c7fde6dd61c862fecebe93619a8229"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000380)=0x85000) 475.010185ms ago: executing program 4 (id=728): socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1) 368.406445ms ago: executing program 3 (id=729): r0 = epoll_create(0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000300), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x15}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10002000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0xc, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendmsg$alg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="c35a3f0175fae781", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000070001c0"]) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x1000012, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0xb, [0x38, 0xa, 0xe, 0xc, 0x33, 0x2, 0x38, 0x2e, 0x29, 0x1a, 0x18, 0xf, 0x1f, 0x26, 0x19, 0x1a], 0x1, 0x3fc0, 0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 306.75976ms ago: executing program 0 (id=730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564", 0x14}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001300290a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x77475647}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000fcff08000000"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x10, 0x1951}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x1, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xc}, {0x3, 0x5, 0xd, 0x8}, {0x0, 0x3, 0xf, 0x1}, {0x2, 0x2, 0xa}, {0x3, 0x3, 0xa, 0xb}, {0x0, 0x4, 0x2, 0xc}, {0x0, 0x2, 0x8, 0x8}, {0x0, 0x5, 0xd, 0x6}, {0x3, 0x1, 0x5, 0x8}], 0x10, 0x1}, 0x90) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000080)={0x32}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r7 = dup2(r5, r6) ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r8, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 220.34522ms ago: executing program 4 (id=731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1d, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe78a77561ba119e5}]}}}]}, 0x70}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x0) r6 = memfd_create(&(0x7f00000003c0)='/dev/cpu/#/msr\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000700)={0x1, 0x9, [{r4, 0x0, 0x1000000, 0x10000}, {r4, 0x0, 0x1000000, 0x1000000}, {r6, 0x0, 0x100000000, 0x1000}, {r4, 0x0, 0x4000, 0x2000}, {r4, 0x0, 0x1000, 0x1000000000000}, {r4, 0x0, 0x1000, 0x100000000}, {r4, 0x0, 0x100000000, 0x1000}, {r4, 0x0, 0xfffffffff0000000, 0x2000}, {r4, 0x0, 0x2000, 0xfffffffff0000000}]}) fsopen(&(0x7f00000002c0)='ocfs2\x00', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x40db, 0x0) read$msr(r8, &(0x7f0000000140)=""/179, 0xb3) r9 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) io_uring_enter(0xffffffffffffffff, 0x705a, 0xef83, 0x14, &(0x7f0000000000)={[0x9]}, 0x8) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000200)=0x5, 0x4) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 0s ago: executing program 4 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/102, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0xae03, 0x20) r7 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000000)={0x1, r7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000500000000000000140003"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): rface descriptor's value: 3 [ 196.594020][ T5268] usb 4-1: config 0 has no interface number 1 [ 196.596233][ T5305] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.623346][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.625632][ T5268] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.631521][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.684567][ T5305] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 196.735302][ T5268] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 196.760509][ T5268] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 196.781497][ T5268] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 196.823112][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.834888][ T5268] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.834914][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 196.859277][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.861845][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 196.872409][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 196.929663][ T46] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 196.957749][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.962159][ T46] usb 5-1: Manufacturer: syz [ 197.013886][ T46] usb 5-1: config 0 descriptor?? [ 197.023240][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.034829][ T46] appledisplay 5-1:0.0: Could not find int-in endpoint [ 197.056732][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 197.061312][ T5268] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 197.086865][ T6656] chnl_net:caif_netlink_parms(): no params data found [ 197.102910][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.154674][ T5268] usb 4-1: Product: syz [ 197.160542][ T5268] usb 4-1: Manufacturer: syz [ 197.167525][ T5268] usb 4-1: SerialNumber: syz [ 197.177214][ T5268] usb 4-1: config 0 descriptor?? [ 197.193424][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.513978][ T6655] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.526381][ T5268] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.561464][ T5268] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.160654][ T5229] Bluetooth: hci0: command tx timeout [ 199.459619][ T8] usb 5-1: USB disconnect, device number 10 [ 199.470830][ T5268] usb 4-1: invalid MIDI in EP 0 [ 199.499281][ T5268] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 199.886065][ T6681] dlm: no local IP address has been set [ 199.892780][ T6681] dlm: cannot start dlm midcomms -107 [ 200.073081][ T5305] usb 4-1: USB disconnect, device number 8 [ 200.179690][ T5229] Bluetooth: hci0: command tx timeout [ 200.215608][ T25] usb 1-1: USB disconnect, device number 8 [ 200.256895][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.315026][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.369792][ T6656] bridge_slave_0: entered allmulticast mode [ 200.555772][ T6656] bridge_slave_0: entered promiscuous mode [ 200.612584][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.667210][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.725355][ T6656] bridge_slave_1: entered allmulticast mode [ 200.758691][ T6656] bridge_slave_1: entered promiscuous mode [ 200.773572][ T6684] udevd[6684]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.093154][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.284321][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.437132][ T35] bridge_slave_1: left allmulticast mode [ 201.454471][ T35] bridge_slave_1: left promiscuous mode [ 201.468091][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.553897][ T35] bridge_slave_0: left allmulticast mode [ 201.576600][ T35] bridge_slave_0: left promiscuous mode [ 201.608574][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.715360][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 202.458135][ T5229] Bluetooth: hci0: command tx timeout [ 203.459555][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.829751][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 203.838161][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.855868][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 204.429479][ T25] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 204.437522][ T25] usb 1-1: Manufacturer: syz [ 204.460149][ T25] usb 1-1: config 0 descriptor?? [ 204.481461][ T25] appledisplay 1-1:0.0: Could not find int-in endpoint [ 204.489326][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 204.543916][ T5229] Bluetooth: hci0: command tx timeout [ 204.614948][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.643603][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.664548][ T35] bond0 (unregistering): Released all slaves [ 207.150401][ T5219] usb 1-1: USB disconnect, device number 9 [ 207.383329][ T6656] team0: Port device team_slave_0 added [ 207.434006][ T6656] team0: Port device team_slave_1 added [ 207.818607][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.837125][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.886085][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.210314][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.238183][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.296671][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 208.331041][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.447658][ T35] hsr_slave_0: left promiscuous mode [ 209.479730][ T35] hsr_slave_1: left promiscuous mode [ 209.494112][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.509535][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.629758][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.655838][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.724316][ T35] veth1_macvtap: left promiscuous mode [ 209.739618][ T58] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.740392][ T35] veth0_macvtap: left promiscuous mode [ 209.752868][ T35] veth1_vlan: left promiscuous mode [ 209.758192][ T35] veth0_vlan: left promiscuous mode [ 210.643542][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 210.656191][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 210.670016][ T58] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 210.679256][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.687840][ T58] usb 4-1: Product: syz [ 210.692232][ T58] usb 4-1: Manufacturer: syz [ 210.696847][ T58] usb 4-1: SerialNumber: syz [ 210.712664][ T58] usb 4-1: config 0 descriptor?? [ 210.720260][ T6790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.730025][ T58] hub 4-1:0.0: bad descriptor, ignoring hub [ 210.735980][ T58] hub 4-1:0.0: probe with driver hub failed with error -5 [ 210.755503][ T58] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 210.849682][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 210.943101][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.960230][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.012414][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 211.022167][ T5305] usb 4-1: USB disconnect, device number 9 [ 211.030411][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 211.042550][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.061704][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 211.087521][ T25] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 211.107078][ T25] usb 5-1: Manufacturer: syz [ 211.127170][ T25] usb 5-1: config 0 descriptor?? [ 211.136460][ T25] appledisplay 5-1:0.0: Could not find int-in endpoint [ 211.145958][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 211.155057][ T35] team0 (unregistering): Port device team_slave_1 removed [ 211.196512][ T35] team0 (unregistering): Port device team_slave_0 removed [ 212.979520][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 213.803719][ T6656] hsr_slave_0: entered promiscuous mode [ 213.830972][ T6656] hsr_slave_1: entered promiscuous mode [ 213.852692][ T6656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.869821][ T6656] Cannot create hsr debugfs directory [ 214.591327][ T5305] usb 5-1: USB disconnect, device number 11 [ 214.783084][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 215.863523][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 216.239737][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 216.279644][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.322524][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 216.365219][ T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 216.414930][ T8] usb 4-1: Manufacturer: syz [ 216.448021][ T8] usb 4-1: config 0 descriptor?? [ 216.464247][ T8] appledisplay 4-1:0.0: Could not find int-in endpoint [ 216.491109][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 216.672201][ T6656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.683064][ T5305] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.715653][ T6656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.756518][ T6656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.937901][ T6656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.989534][ T5305] usb 3-1: Using ep0 maxpacket: 32 [ 217.277722][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.454147][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.596384][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.603648][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.733147][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.740389][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.176248][ T6656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.341448][ T5305] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 218.367641][ T58] usb 4-1: USB disconnect, device number 10 [ 218.390678][ T5305] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 218.414745][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.443217][ T5305] usb 3-1: Product: syz [ 218.456380][ T5305] usb 3-1: Manufacturer: syz [ 219.106009][ T5305] usb 3-1: SerialNumber: syz [ 219.121637][ T5305] usb 3-1: config 0 descriptor?? [ 219.135420][ T6853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 219.156848][ T5305] hub 3-1:0.0: bad descriptor, ignoring hub [ 219.173008][ T5305] hub 3-1:0.0: probe with driver hub failed with error -5 [ 219.208027][ T5305] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 219.593724][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.737918][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.266714][ T5266] usb 3-1: USB disconnect, device number 5 [ 220.266756][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 220.273017][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.416816][ T6656] veth0_vlan: entered promiscuous mode [ 220.468417][ T6656] veth1_vlan: entered promiscuous mode [ 220.597602][ T6656] veth0_macvtap: entered promiscuous mode [ 220.623214][ T6895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.665056][ T6656] veth1_macvtap: entered promiscuous mode [ 220.812538][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.869564][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.903877][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.952200][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.978253][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.990900][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.001560][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.013538][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.043583][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.096143][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.115121][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.147656][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.178098][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.201853][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.216472][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.227882][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.245251][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.405887][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.572856][ T6656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.633385][ T6656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.677110][ T6656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.680066][ T6912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.391'. [ 221.711481][ T6656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.000161][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.008327][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.200080][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.256332][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.341847][ T5229] Bluetooth: hci3: command 0x0405 tx timeout [ 222.469868][ T943] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 222.729493][ T943] usb 4-1: Using ep0 maxpacket: 8 [ 222.738986][ T943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.751906][ T943] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.762206][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.783916][ T943] usb 4-1: config 0 descriptor?? [ 222.801025][ T943] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 223.022651][ T5219] usb 4-1: USB disconnect, device number 11 [ 224.513303][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 226.993202][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.299727][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 227.314978][ T8] usb 3-1: config 38 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 227.444484][ T8] usb 3-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.589026][ T8] usb 3-1: config 38 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 227.669976][ T8] usb 3-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.681690][ T8] usb 3-1: config 38 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 157, changing to 7 [ 227.693265][ T8] usb 3-1: config 38 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 227.711474][ T8] usb 3-1: string descriptor 0 read error: -22 [ 227.718038][ T8] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 227.728650][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.741858][ T6967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.753461][ T8] usb 3-1: no audio or video endpoints found [ 228.884925][ T5219] usb 3-1: USB disconnect, device number 6 [ 229.299648][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 229.361005][ T7013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.711917][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 229.768834][ T46] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.818812][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.862196][ T46] usb 5-1: Product: syz [ 229.866409][ T46] usb 5-1: Manufacturer: syz [ 229.902200][ T46] usb 5-1: SerialNumber: syz [ 230.139975][ T46] usb 5-1: config 0 descriptor?? [ 230.362471][ T46] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.380955][ T46] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 230.421766][ T5266] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 230.470808][ T7031] netlink: 104 bytes leftover after parsing attributes in process `syz.3.408'. [ 230.640325][ T5266] usb 1-1: Using ep0 maxpacket: 8 [ 230.652486][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.700363][ T5266] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 230.719853][ T5266] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 230.738052][ T5266] usb 1-1: Manufacturer: syz [ 230.747755][ T5266] usb 1-1: config 0 descriptor?? [ 230.763915][ T5266] appledisplay 1-1:0.0: Could not find int-in endpoint [ 230.772174][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 232.311329][ T58] usb 5-1: USB disconnect, device number 12 [ 232.970844][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 233.196913][ T5219] usb 1-1: USB disconnect, device number 10 [ 238.684468][ T58] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.889646][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 238.908800][ T58] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 238.922474][ T58] usb 1-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.945247][ T58] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 238.957644][ T58] usb 1-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.973138][ T58] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 157, changing to 7 [ 238.989871][ T58] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 239.021229][ T58] usb 1-1: string descriptor 0 read error: -22 [ 239.027814][ T58] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 239.038371][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.092835][ T7098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.124456][ T58] usb 1-1: no audio or video endpoints found [ 239.269756][ T5268] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 239.479826][ T5266] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.586057][ T5268] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.595434][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.611502][ T5268] usb 2-1: config 0 descriptor?? [ 239.620740][ T46] usb 1-1: USB disconnect, device number 11 [ 239.636824][ T5268] cp210x 2-1:0.0: cp210x converter detected [ 239.679639][ T5266] usb 4-1: Using ep0 maxpacket: 8 [ 239.713950][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.746187][ T5266] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 239.761755][ T5266] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 239.773234][ T5266] usb 4-1: Manufacturer: syz [ 239.792774][ T5266] usb 4-1: config 0 descriptor?? [ 239.818629][ T5266] appledisplay 4-1:0.0: Could not find int-in endpoint [ 239.840672][ T5266] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 241.737111][ T7120] x_tables: duplicate underflow at hook 3 [ 242.638441][ T943] usb 4-1: USB disconnect, device number 12 [ 242.658706][ T5268] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 242.711289][ T5268] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 242.719116][ T5268] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 242.761459][ T5268] usb 2-1: cp210x converter now attached to ttyUSB0 [ 242.916871][ T5268] usb 2-1: USB disconnect, device number 4 [ 242.945350][ T5268] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.960765][ T5268] cp210x 2-1:0.0: device disconnected [ 245.053607][ T7143] FAULT_INJECTION: forcing a failure. [ 245.053607][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 245.066336][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.4.435 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 245.077022][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 245.087083][ T7143] Call Trace: [ 245.090367][ T7143] [ 245.093309][ T7143] dump_stack_lvl+0x241/0x360 [ 245.098006][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.103217][ T7143] ? __pfx__printk+0x10/0x10 [ 245.107819][ T7143] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 245.113738][ T7143] ? __pfx___might_resched+0x10/0x10 [ 245.119031][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.125114][ T7143] should_fail_ex+0x3b0/0x4e0 [ 245.129806][ T7143] should_failslab+0xac/0x100 [ 245.134497][ T7143] __kmalloc_cache_node_noprof+0x74/0x300 [ 245.140230][ T7143] ? __get_vm_area_node+0x113/0x270 [ 245.145440][ T7143] __get_vm_area_node+0x113/0x270 [ 245.150486][ T7143] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 245.156396][ T7143] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.161961][ T7143] ? kasan_save_track+0x51/0x80 [ 245.166823][ T7143] ? kasan_save_track+0x3f/0x80 [ 245.171689][ T7143] ? __kasan_kmalloc+0x98/0xb0 [ 245.176459][ T7143] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 245.182036][ T7143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.188377][ T7143] ? __asan_memset+0x23/0x50 [ 245.192975][ T7143] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.198530][ T7143] __vmalloc_noprof+0x79/0x90 [ 245.203219][ T7143] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.208776][ T7143] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.214157][ T7143] ? bpf_prog_alloc+0x28/0x1b0 [ 245.218931][ T7143] bpf_prog_alloc+0x3a/0x1b0 [ 245.223536][ T7143] bpf_prog_create_from_user+0xa4/0x3e0 [ 245.229099][ T7143] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.234831][ T7143] do_seccomp+0x90d/0xf90 [ 245.239179][ T7143] ? __pfx_do_seccomp+0x10/0x10 [ 245.244037][ T7143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.250034][ T7143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.256373][ T7143] ? do_syscall_64+0x100/0x230 [ 245.261151][ T7143] ? do_syscall_64+0xb6/0x230 [ 245.265838][ T7143] do_syscall_64+0xf3/0x230 [ 245.270354][ T7143] ? clear_bhb_loop+0x35/0x90 [ 245.275045][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.280959][ T7143] RIP: 0033:0x7fcb0cf773b9 [ 245.285381][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.304996][ T7143] RSP: 002b:00007fcb0c9bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.313435][ T7143] RAX: ffffffffffffffda RBX: 00007fcb0d106130 RCX: 00007fcb0cf773b9 [ 245.321425][ T7143] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 245.329406][ T7143] RBP: 00007fcb0c9bd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 245.337469][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.345445][ T7143] R13: 000000000000006e R14: 00007fcb0d106130 R15: 00007ffdb412ff68 [ 245.353444][ T7143] [ 245.362250][ T7143] syz.4.435: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 245.378651][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.4.435 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 245.389248][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 245.399307][ T7143] Call Trace: [ 245.402595][ T7143] [ 245.405530][ T7143] dump_stack_lvl+0x241/0x360 [ 245.410319][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.415540][ T7143] ? __pfx__printk+0x10/0x10 [ 245.420152][ T7143] ? __rcu_read_unlock+0xa1/0x110 [ 245.425192][ T7143] warn_alloc+0x278/0x410 [ 245.429541][ T7143] ? __pfx_warn_alloc+0x10/0x10 [ 245.434405][ T7143] ? __get_vm_area_node+0x113/0x270 [ 245.439616][ T7143] ? __get_vm_area_node+0x261/0x270 [ 245.444829][ T7143] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 245.450736][ T7143] ? kasan_save_track+0x51/0x80 [ 245.455595][ T7143] ? kasan_save_track+0x3f/0x80 [ 245.460454][ T7143] ? __kasan_kmalloc+0x98/0xb0 [ 245.465242][ T7143] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 245.470816][ T7143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.477158][ T7143] ? __asan_memset+0x23/0x50 [ 245.481757][ T7143] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.487315][ T7143] __vmalloc_noprof+0x79/0x90 [ 245.492003][ T7143] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.497562][ T7143] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 245.502960][ T7143] ? bpf_prog_alloc+0x28/0x1b0 [ 245.507756][ T7143] bpf_prog_alloc+0x3a/0x1b0 [ 245.512369][ T7143] bpf_prog_create_from_user+0xa4/0x3e0 [ 245.517932][ T7143] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.523669][ T7143] do_seccomp+0x90d/0xf90 [ 245.528013][ T7143] ? __pfx_do_seccomp+0x10/0x10 [ 245.532871][ T7143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.538865][ T7143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.545207][ T7143] ? do_syscall_64+0x100/0x230 [ 245.549984][ T7143] ? do_syscall_64+0xb6/0x230 [ 245.554676][ T7143] do_syscall_64+0xf3/0x230 [ 245.559195][ T7143] ? clear_bhb_loop+0x35/0x90 [ 245.563893][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.569799][ T7143] RIP: 0033:0x7fcb0cf773b9 [ 245.574220][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.593831][ T7143] RSP: 002b:00007fcb0c9bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.602260][ T7143] RAX: ffffffffffffffda RBX: 00007fcb0d106130 RCX: 00007fcb0cf773b9 [ 245.610238][ T7143] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 245.618212][ T7143] RBP: 00007fcb0c9bd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 245.626191][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.634254][ T7143] R13: 000000000000006e R14: 00007fcb0d106130 R15: 00007ffdb412ff68 [ 245.642251][ T7143] [ 245.658950][ T7143] Mem-Info: [ 245.667042][ T7143] active_anon:275 inactive_anon:7573 isolated_anon:0 [ 245.667042][ T7143] active_file:5025 inactive_file:37665 isolated_file:0 [ 245.667042][ T7143] unevictable:768 dirty:126 writeback:2 [ 245.667042][ T7143] slab_reclaimable:8925 slab_unreclaimable:95344 [ 245.667042][ T7143] mapped:25079 shmem:4115 pagetables:852 [ 245.667042][ T7143] sec_pagetables:0 bounce:0 [ 245.667042][ T7143] kernel_misc_reclaimable:0 [ 245.667042][ T7143] free:1384476 free_pcp:361 free_cma:0 [ 245.714156][ T7143] Node 0 active_anon:1100kB inactive_anon:30292kB active_file:20020kB inactive_file:150660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100316kB dirty:500kB writeback:8kB shmem:14924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:3408kB sec_pagetables:0kB all_unreclaimable? no [ 245.747046][ T7143] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 245.784263][ T7143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.811579][ T7143] lowmem_reserve[]: 0 2563 2565 0 0 [ 245.817216][ T7143] Node 0 DMA32 free:1570008kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1096kB inactive_anon:30248kB active_file:18508kB inactive_file:150596kB unevictable:1536kB writepending:408kB present:3129332kB managed:2653296kB mlocked:0kB bounce:0kB free_pcp:1884kB local_pcp:1168kB free_cma:0kB [ 245.848122][ T7143] lowmem_reserve[]: 0 0 1 0 0 [ 245.853334][ T7143] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1512kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 245.892151][ T7143] lowmem_reserve[]: 0 0 0 0 0 [ 245.897226][ T7143] Node 1 Normal free:3952080kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.926279][ T7143] lowmem_reserve[]: 0 0 0 0 0 [ 245.931459][ T7143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.945166][ T7143] Node 0 DMA32: 458*4kB (UME) 522*8kB (UME) 427*16kB (UME) 222*32kB (UME) 164*64kB (UME) 95*128kB (UME) 38*256kB (UME) 26*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 366*4096kB (UM) = 1569896kB [ 245.966027][ T7143] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 245.979032][ T7143] Node 1 Normal: 4*4kB (U) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (U) 8*128kB (U) 3*256kB (UM) 4*512kB (UM) 5*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3952080kB [ 245.995681][ T7143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.005276][ T7143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.014604][ T7143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.024452][ T7143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.033775][ T7143] 46902 total pagecache pages [ 246.038449][ T7143] 97 pages in swap cache [ 246.042752][ T7143] Free swap = 123996kB [ 246.046911][ T7143] Total swap = 124996kB [ 246.051089][ T7143] 2097051 pages RAM [ 246.054891][ T7143] 0 pages HighMem/MovableOnly [ 246.059608][ T7143] 402197 pages reserved [ 246.063759][ T7143] 0 pages cma reserved [ 246.453360][ T7146] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 247.650013][ T7171] x_tables: duplicate underflow at hook 3 [ 247.660400][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 247.973176][ T46] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.747279][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.866953][ T46] usb 1-1: config 0 descriptor?? [ 248.905798][ T46] cp210x 1-1:0.0: cp210x converter detected [ 250.409580][ T5266] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.640445][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 250.901458][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.918969][ T5266] usb 2-1: device descriptor read/all, error -71 [ 250.966144][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.021736][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.053022][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.172310][ T5268] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.482122][ T7211] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 251.506828][ T7211] netlink: 168 bytes leftover after parsing attributes in process `syz.2.455'. [ 251.989683][ T5222] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 252.248125][ T46] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 252.296603][ T46] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 252.322192][ T5222] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 252.331792][ T5222] usb 3-1: config 0 has no interface number 0 [ 252.338644][ T46] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 252.349683][ T5222] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.373736][ T46] usb 1-1: cp210x converter now attached to ttyUSB0 [ 252.399743][ T5222] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.424711][ T46] usb 1-1: USB disconnect, device number 12 [ 252.458938][ T5222] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 252.487083][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.499471][ T5222] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 252.524203][ T46] cp210x 1-1:0.0: device disconnected [ 252.535912][ T5222] usb 3-1: Manufacturer: syz [ 252.547851][ T5222] usb 3-1: config 0 descriptor?? [ 254.729913][ T7238] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 254.804175][ T7238] netlink: 168 bytes leftover after parsing attributes in process `syz.2.462'. [ 254.839836][ T5222] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0002/input/input11 [ 255.004696][ T5222] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 255.087203][ T5222] usb 3-1: USB disconnect, device number 7 [ 255.214282][ T5266] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 255.419733][ T5266] usb 4-1: Using ep0 maxpacket: 32 [ 255.443791][ T5266] usb 4-1: config 38 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 255.476844][ T5266] usb 4-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.515318][ T5266] usb 4-1: config 38 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 255.563988][ T5266] usb 4-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.598234][ T5266] usb 4-1: config 38 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 157, changing to 7 [ 255.623849][ T5266] usb 4-1: config 38 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 255.640946][ T5266] usb 4-1: string descriptor 0 read error: -22 [ 255.647816][ T5266] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 255.657154][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.688012][ T7239] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.702500][ T5266] usb 4-1: no audio or video endpoints found [ 256.095212][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102021][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.429273][ T943] usb 4-1: USB disconnect, device number 14 [ 256.564132][ T5266] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.773057][ T5266] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.804190][ T5268] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.817380][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.867453][ T5266] usb 5-1: config 0 descriptor?? [ 256.921553][ T5266] cp210x 5-1:0.0: cp210x converter detected [ 257.151813][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.174676][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.197295][ T5268] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 257.220484][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.233616][ T5268] usb 1-1: config 0 descriptor?? [ 257.480266][ T7275] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 257.524829][ T7275] netlink: 168 bytes leftover after parsing attributes in process `syz.3.473'. [ 257.758769][ T5268] appletouch 1-1:0.0: Geyser mode initialized. [ 257.784632][ T5268] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 258.884110][ T5222] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.293103][ T943] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 259.319481][ T5222] usb 2-1: Using ep0 maxpacket: 8 [ 259.335739][ T5222] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 259.355366][ T5222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.368737][ T5222] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 259.386280][ T5222] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 259.404090][ T5222] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 259.426007][ T5222] usb 2-1: Manufacturer: syz [ 259.426066][ T5266] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 259.444065][ T5222] usb 2-1: config 0 descriptor?? [ 259.451270][ T5266] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 259.458032][ T5222] appledisplay 2-1:0.0: Could not find int-in endpoint [ 259.458964][ T5266] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 259.474517][ T5222] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 259.561941][ T6683] udevd[6683]: Error opening device "/dev/input/event4": Input/output error [ 259.588707][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 259.607152][ T5266] usb 5-1: cp210x converter now attached to ttyUSB0 [ 259.617690][ T943] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 259.638793][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 259.659554][ T943] usb 4-1: config 0 has no interface number 0 [ 259.665699][ T943] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.678750][ T5266] usb 5-1: USB disconnect, device number 13 [ 259.718297][ T943] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.733782][ T5266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.749996][ T5266] cp210x 5-1:0.0: device disconnected [ 259.756814][ T943] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 259.776411][ T943] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 259.796361][ T943] usb 4-1: Manufacturer: syz [ 260.202788][ T5268] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 260.274274][ T943] usb 4-1: config 0 descriptor?? [ 260.409700][ C0] hrtimer: interrupt took 45123 ns [ 260.438520][ T5268] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 260.549827][ T943] usbhid 4-1:0.18: can't add hid device: -71 [ 260.561264][ T943] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 260.572724][ T5268] usb 3-1: Dual-Role OTG device on HNP port [ 260.579499][ T5268] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 260.592226][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.602377][ T943] usb 4-1: USB disconnect, device number 15 [ 260.619181][ T5268] usb 3-1: Product: syz [ 260.650905][ T5268] usb 3-1: Manufacturer: syz [ 260.694326][ T5268] usb 3-1: SerialNumber: syz [ 260.720252][ T5268] usb 3-1: config 0 descriptor?? [ 260.727114][ T5305] usb 1-1: USB disconnect, device number 13 [ 260.776698][ T5305] appletouch 1-1:0.0: input: appletouch disconnected [ 260.776970][ T5268] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 261.288379][ T5268] usb 3-1: USB disconnect, device number 8 [ 262.012580][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'. [ 263.417026][ T943] usb 2-1: USB disconnect, device number 7 [ 263.489619][ T5268] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 263.711749][ T5268] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.735907][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.776177][ T5268] usb 1-1: config 0 descriptor?? [ 263.808078][ T5268] cp210x 1-1:0.0: cp210x converter detected [ 263.879609][ T5222] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.042479][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 264.109586][ T5222] usb 3-1: Using ep0 maxpacket: 8 [ 264.123111][ T5222] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.139701][ T5222] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.179503][ T5222] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 264.221421][ T5222] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 264.429690][ T5222] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.555959][ T5222] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.593186][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.649641][ T5222] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 266.208777][ T5229] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 266.350812][ T5268] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 266.364868][ T5222] usb 3-1: USB disconnect, device number 9 [ 266.374819][ T5268] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 266.419483][ T5268] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 266.454109][ T58] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 266.457041][ T5268] usb 1-1: cp210x converter now attached to ttyUSB0 [ 266.511578][ T5268] usb 1-1: USB disconnect, device number 14 [ 266.563324][ T5268] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.616196][ T5268] cp210x 1-1:0.0: device disconnected [ 266.671328][ T58] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 266.697811][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.744168][ T58] usb 5-1: config 0 descriptor?? [ 266.771840][ T58] cp210x 5-1:0.0: cp210x converter detected [ 266.859713][ T5305] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.026113][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 267.049548][ T5266] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 267.051520][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 267.092404][ T5305] usb 4-1: Dual-Role OTG device on HNP port [ 267.098730][ T5305] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 267.107960][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.129460][ T5305] usb 4-1: Product: syz [ 267.133738][ T5305] usb 4-1: Manufacturer: syz [ 267.138338][ T5305] usb 4-1: SerialNumber: syz [ 267.154580][ T5305] usb 4-1: config 0 descriptor?? [ 267.172746][ T5305] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 267.252450][ T5266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.270400][ T5266] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.284694][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.298629][ T5266] usb 2-1: config 0 descriptor?? [ 267.312861][ T5266] pwc: Askey VC010 type 2 USB webcam detected. [ 267.529589][ T5266] pwc: send_video_command error -71 [ 267.539148][ T5266] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 267.558683][ T5266] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 267.596706][ T5266] usb 2-1: USB disconnect, device number 8 [ 267.733264][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.499'. [ 267.770160][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 268.216446][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.235954][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.544073][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 269.793261][ T58] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 269.809558][ T58] cp210x 5-1:0.0: querying part number failed [ 269.828443][ T58] usb 5-1: cp210x converter now attached to ttyUSB0 [ 269.850436][ T58] usb 5-1: USB disconnect, device number 14 [ 269.862043][ T58] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.890206][ T58] cp210x 5-1:0.0: device disconnected [ 269.962942][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 269.986412][ T7401] x_tables: unsorted entry at hook 2 [ 270.379615][ T58] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.581485][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 270.617968][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.643722][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.656949][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 270.695141][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 270.745590][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.761440][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.770695][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.784322][ T58] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 271.198264][ T29] audit: type=1326 audit(1722519936.338:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7416 comm="syz.2.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b00b773b9 code=0x0 [ 271.435025][ T7429] netlink: 'syz.3.517': attribute type 7 has an invalid length. [ 271.448425][ T943] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.467752][ T7429] netlink: 'syz.3.517': attribute type 6 has an invalid length. [ 271.479559][ T7427] tipc: Started in network mode [ 271.491085][ T7427] tipc: Node identity 7f000001, cluster identity 4711 [ 271.519739][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.529772][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.546930][ T7427] tipc: Enabled bearer , priority 30 [ 271.629558][ T5266] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.659516][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 271.685677][ T943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 271.708906][ T943] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 271.719564][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.727751][ T943] usb 1-1: Product: syz [ 271.733898][ T943] usb 1-1: Manufacturer: syz [ 271.738629][ T943] usb 1-1: SerialNumber: syz [ 271.770125][ T943] usb 1-1: config 0 descriptor?? [ 271.779197][ T7419] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 271.805802][ T943] hub 1-1:0.0: bad descriptor, ignoring hub [ 271.814347][ T943] hub 1-1:0.0: probe with driver hub failed with error -5 [ 271.839581][ T943] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 271.850695][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 271.888637][ T5266] usb 2-1: Dual-Role OTG device on HNP port [ 271.895923][ T5266] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 271.928814][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.956880][ T5266] usb 2-1: Product: syz [ 271.974399][ T5266] usb 2-1: Manufacturer: syz [ 271.992225][ T5266] usb 2-1: SerialNumber: syz [ 272.041924][ T5266] usb 2-1: config 0 descriptor?? [ 272.085503][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.092674][ T5266] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 272.130139][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.174672][ T5266] usb 1-1: USB disconnect, device number 15 [ 272.180610][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 272.322497][ T7432] FAULT_INJECTION: forcing a failure. [ 272.322497][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 272.348210][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.3.518 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 272.358845][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 272.368922][ T7432] Call Trace: [ 272.372218][ T7432] [ 272.375160][ T7432] dump_stack_lvl+0x241/0x360 [ 272.379860][ T7432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.385078][ T7432] ? __pfx__printk+0x10/0x10 [ 272.389687][ T7432] ? _copy_from_iter+0x26b/0x1960 [ 272.394730][ T7432] should_fail_ex+0x3b0/0x4e0 [ 272.399428][ T7432] ? build_skb+0x52/0x2a0 [ 272.403775][ T7432] should_failslab+0xac/0x100 [ 272.408468][ T7432] ? build_skb+0x52/0x2a0 [ 272.412817][ T7432] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 272.418216][ T7432] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 272.424222][ T7432] build_skb+0x52/0x2a0 [ 272.428406][ T7432] ? __tun_build_skb+0x25/0x2f0 [ 272.433272][ T7432] __tun_build_skb+0x33/0x2f0 [ 272.437966][ T7432] tun_get_user+0x20bb/0x4720 [ 272.442663][ T7432] ? tun_get_user+0x871/0x4720 [ 272.447444][ T7432] ? __lock_acquire+0x137a/0x2040 [ 272.452495][ T7432] ? __pfx_tun_get_user+0x10/0x10 [ 272.457546][ T7432] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 272.463019][ T7432] ? tun_get+0x1e/0x2f0 [ 272.467182][ T7432] ? __pfx_lock_release+0x10/0x10 [ 272.472238][ T7432] ? tun_get+0x1e/0x2f0 [ 272.476405][ T7432] ? tun_get+0x27d/0x2f0 [ 272.480657][ T7432] tun_chr_write_iter+0x113/0x1f0 [ 272.485694][ T7432] vfs_write+0xa72/0xc90 [ 272.489955][ T7432] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 272.495524][ T7432] ? __pfx_vfs_write+0x10/0x10 [ 272.500321][ T7432] ksys_write+0x1a0/0x2c0 [ 272.504748][ T7432] ? __pfx_ksys_write+0x10/0x10 [ 272.509628][ T7432] ? do_syscall_64+0x100/0x230 [ 272.514419][ T7432] ? do_syscall_64+0xb6/0x230 [ 272.519114][ T7432] do_syscall_64+0xf3/0x230 [ 272.523639][ T7432] ? clear_bhb_loop+0x35/0x90 [ 272.528340][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.534278][ T7432] RIP: 0033:0x7ff217b75e9f [ 272.538702][ T7432] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 272.541187][ T5266] tipc: Node number set to 2130706433 [ 272.558314][ T7432] RSP: 002b:00007ff218894010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 272.558339][ T7432] RAX: ffffffffffffffda RBX: 00007ff217d05f80 RCX: 00007ff217b75e9f [ 272.558353][ T7432] RDX: 000000000000004a RSI: 0000000020000380 RDI: 00000000000000c8 [ 272.558364][ T7432] RBP: 00007ff2188940a0 R08: 0000000000000000 R09: 0000000000000000 [ 272.558379][ T7432] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 272.558390][ T7432] R13: 000000000000000b R14: 00007ff217d05f80 R15: 00007fff6b9a4ee8 [ 272.558418][ T7432] [ 272.737069][ T5269] usb 5-1: USB disconnect, device number 15 [ 273.503247][ T7466] netlink: 'syz.4.528': attribute type 7 has an invalid length. [ 273.530088][ T7466] netlink: 'syz.4.528': attribute type 6 has an invalid length. [ 273.770993][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.790134][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.822746][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.849823][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.860051][ T5266] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 274.061427][ T5266] usb 5-1: config 1 has an invalid descriptor of length 18, skipping remainder of the config [ 274.072526][ T5266] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 274.083017][ T5266] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.176472][ T5266] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 274.216611][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.329627][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 274.467169][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 274.490790][ T5266] usb 5-1: string descriptor 0 read error: -71 [ 274.497765][ T5266] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 274.520211][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 274.548614][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.575962][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.616795][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 274.651194][ T5266] usb 5-1: USB disconnect, device number 16 [ 274.659811][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 274.688051][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.785068][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.825507][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.878322][ T46] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 275.688541][ T7505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.562993][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 277.847628][ T46] usb 3-1: USB disconnect, device number 10 [ 277.848623][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.864143][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.036344][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 278.056616][ T7519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.102983][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.116915][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.146533][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.157133][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.201279][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.241652][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 278.980868][ T7545] FAULT_INJECTION: forcing a failure. [ 278.980868][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 278.997535][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.0.553 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 279.008161][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 279.018237][ T7545] Call Trace: [ 279.021513][ T7545] [ 279.024439][ T7545] dump_stack_lvl+0x241/0x360 [ 279.029117][ T7545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.034310][ T7545] ? __pfx__printk+0x10/0x10 [ 279.038901][ T7545] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 279.044885][ T7545] ? __pfx___might_resched+0x10/0x10 [ 279.050183][ T7545] should_fail_ex+0x3b0/0x4e0 [ 279.054870][ T7545] should_failslab+0xac/0x100 [ 279.059550][ T7545] ? __alloc_skb+0x1c3/0x440 [ 279.064138][ T7545] kmem_cache_alloc_node_noprof+0x71/0x320 [ 279.069946][ T7545] __alloc_skb+0x1c3/0x440 [ 279.074365][ T7545] ? __pfx___alloc_skb+0x10/0x10 [ 279.079296][ T7545] ? __local_bh_enable_ip+0x168/0x200 [ 279.084664][ T7545] ? pppoe_sendmsg+0x51/0x750 [ 279.089334][ T7545] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.095056][ T7545] sock_wmalloc+0xab/0x120 [ 279.099477][ T7545] pppoe_sendmsg+0x1f7/0x750 [ 279.104078][ T7545] ? security_socket_sendmsg+0x87/0xb0 [ 279.109714][ T7545] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 279.114824][ T7545] __sock_sendmsg+0x221/0x270 [ 279.119498][ T7545] ____sys_sendmsg+0x525/0x7d0 [ 279.124261][ T7545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.129548][ T7545] __sys_sendmmsg+0x3b2/0x740 [ 279.134224][ T7545] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.139442][ T7545] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 279.145333][ T7545] ? ksys_write+0x23e/0x2c0 [ 279.149835][ T7545] ? __pfx_lock_release+0x10/0x10 [ 279.154873][ T7545] ? vfs_write+0x7c4/0xc90 [ 279.159286][ T7545] ? __mutex_unlock_slowpath+0x21d/0x750 [ 279.164915][ T7545] ? __pfx_vfs_write+0x10/0x10 [ 279.169696][ T7545] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.175673][ T7545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.182006][ T7545] ? do_syscall_64+0x100/0x230 [ 279.186770][ T7545] __x64_sys_sendmmsg+0xa0/0xb0 [ 279.191635][ T7545] do_syscall_64+0xf3/0x230 [ 279.196137][ T7545] ? clear_bhb_loop+0x35/0x90 [ 279.200813][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.206704][ T7545] RIP: 0033:0x7f00e7b773b9 [ 279.211115][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.230717][ T7545] RSP: 002b:00007f00e75ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.239126][ T7545] RAX: ffffffffffffffda RBX: 00007f00e7d05f80 RCX: 00007f00e7b773b9 [ 279.247092][ T7545] RDX: 0000000000000001 RSI: 0000000020002880 RDI: 0000000000000003 [ 279.255059][ T7545] RBP: 00007f00e75ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.263021][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.270982][ T7545] R13: 000000000000000b R14: 00007f00e7d05f80 R15: 00007fffe1808d88 [ 279.278954][ T7545] [ 279.843158][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.873303][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.942387][ T7563] FAULT_INJECTION: forcing a failure. [ 279.942387][ T7563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.962201][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.0.558 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 279.972827][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 279.982883][ T7563] Call Trace: [ 279.986164][ T7563] [ 279.989095][ T7563] dump_stack_lvl+0x241/0x360 [ 279.993770][ T7563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.998962][ T7563] ? __pfx__printk+0x10/0x10 [ 280.003561][ T7563] ? __pfx_lock_release+0x10/0x10 [ 280.008601][ T7563] ? _raw_spin_unlock_irq+0x2e/0x50 [ 280.013885][ T7563] should_fail_ex+0x3b0/0x4e0 [ 280.018568][ T7563] _copy_from_user+0x2f/0xe0 [ 280.023154][ T7563] restore_sigcontext+0xd8/0x7d0 [ 280.028086][ T7563] ? __pfx_restore_sigcontext+0x10/0x10 [ 280.033638][ T7563] ? __pfx___set_current_blocked+0x10/0x10 [ 280.039449][ T7563] ? __task_pid_nr_ns+0x28/0x450 [ 280.044397][ T7563] __do_sys_rt_sigreturn+0x17f/0x270 [ 280.049701][ T7563] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 280.055507][ T7563] ? do_syscall_64+0x100/0x230 [ 280.060289][ T7563] ? do_syscall_64+0xb6/0x230 [ 280.064961][ T7563] do_syscall_64+0xf3/0x230 [ 280.069470][ T7563] ? clear_bhb_loop+0x35/0x90 [ 280.074161][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.080048][ T7563] RIP: 0033:0x7f00e7b12d09 [ 280.084449][ T7563] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 280.104048][ T7563] RSP: 002b:00007f00e75ddac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 280.112454][ T7563] RAX: ffffffffffffffda RBX: 00007f00e7d06058 RCX: 00007f00e7b12d09 [ 280.120417][ T7563] RDX: 00007f00e75ddac0 RSI: 00007f00e75ddbf0 RDI: 0000000000000021 [ 280.128376][ T7563] RBP: 00007f00e75de0a0 R08: 0000010000008ebc R09: 0000000000000000 [ 280.136340][ T7563] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 280.144298][ T7563] R13: 000000000000006e R14: 00007f00e7d06058 R15: 00007fffe1808d88 [ 280.152269][ T7563] [ 280.189511][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 280.259819][ T5229] Bluetooth: hci0: command tx timeout [ 280.439518][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 280.471742][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.499629][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.518262][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 280.564715][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 280.616177][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.711955][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.758308][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.801796][ T46] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 282.089641][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 282.319526][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 282.328143][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 282.362207][ T46] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 282.379613][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.399668][ T46] usb 1-1: Product: syz [ 282.409908][ T46] usb 1-1: Manufacturer: syz [ 282.435089][ T46] usb 1-1: SerialNumber: syz [ 282.467850][ T46] usb 1-1: config 0 descriptor?? [ 282.494633][ T7580] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 282.553600][ T46] hub 1-1:0.0: bad descriptor, ignoring hub [ 282.570818][ T46] hub 1-1:0.0: probe with driver hub failed with error -5 [ 282.591117][ T46] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 282.653246][ T46] usb 5-1: USB disconnect, device number 17 [ 282.926347][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.956975][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.989298][ T5269] usb 1-1: USB disconnect, device number 16 [ 282.989439][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 286.649879][ T7590] tmpfs: Invalid uid '0x00000000ffffffff' [ 286.831946][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'. [ 289.001439][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.054908][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.225408][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 290.679671][ T5269] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 290.800243][ T5305] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 292.469605][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 292.891397][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.932381][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.973289][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 292.994723][ T5269] usb 1-1: Using ep0 maxpacket: 32 [ 293.009748][ T5269] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 293.033801][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 293.036355][ T5269] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 293.061588][ T5305] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.740527][ T7658] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 295.748752][ T7658] netlink: 'syz.3.582': attribute type 3 has an invalid length. [ 295.756830][ T7658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.582'. [ 296.424449][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.432652][ T5269] usb 1-1: Product: syz [ 296.436841][ T5269] usb 1-1: Manufacturer: syz [ 296.441659][ T5269] usb 1-1: SerialNumber: syz [ 296.448749][ T5269] usb 1-1: config 0 descriptor?? [ 296.492348][ T5305] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.585224][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.599567][ T5269] usb 1-1: can't set config #0, error -71 [ 296.649501][ T5269] usb 1-1: USB disconnect, device number 17 [ 296.652026][ T5305] usb 3-1: can't set config #16, error -71 [ 296.705536][ T5305] usb 3-1: USB disconnect, device number 11 [ 296.712348][ T7665] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 296.739716][ T7665] netlink: 168 bytes leftover after parsing attributes in process `syz.3.584'. [ 296.821602][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.890355][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.655783][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.686821][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.813776][ T7708] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 304.821534][ T7708] netlink: 'syz.3.594': attribute type 3 has an invalid length. [ 304.829180][ T7708] netlink: 224 bytes leftover after parsing attributes in process `syz.3.594'. [ 305.449449][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.459039][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.583254][ T29] audit: type=1326 audit(1722519970.728:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7706 comm="syz.2.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b00b773b9 code=0x0 [ 305.663058][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.673793][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.692223][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.702699][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.713275][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 305.720924][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.876491][ T7722] FAULT_INJECTION: forcing a failure. [ 305.876491][ T7722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.908713][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.0.598 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 305.919354][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 305.929436][ T7722] Call Trace: [ 305.932734][ T7722] [ 305.935674][ T7722] dump_stack_lvl+0x241/0x360 [ 305.940376][ T7722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.945589][ T7722] ? __pfx__printk+0x10/0x10 [ 305.950203][ T7722] ? snprintf+0xda/0x120 [ 305.954468][ T7722] should_fail_ex+0x3b0/0x4e0 [ 305.959165][ T7722] _copy_to_user+0x2f/0xb0 [ 305.963610][ T7722] simple_read_from_buffer+0xca/0x150 [ 305.969014][ T7722] proc_fail_nth_read+0x1e9/0x250 [ 305.974066][ T7722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.979638][ T7722] ? rw_verify_area+0x520/0x6b0 [ 305.984517][ T7722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.990091][ T7722] vfs_read+0x204/0xbc0 [ 305.994266][ T7722] ? __pfx_lock_release+0x10/0x10 [ 305.999319][ T7722] ? __pfx_vfs_read+0x10/0x10 [ 306.004010][ T7722] ? __fget_files+0x29/0x470 [ 306.008624][ T7722] ? __fget_files+0x3f6/0x470 [ 306.013332][ T7722] ksys_read+0x1a0/0x2c0 [ 306.017596][ T7722] ? __pfx_ksys_read+0x10/0x10 [ 306.022377][ T7722] ? do_syscall_64+0x100/0x230 [ 306.027169][ T7722] ? do_syscall_64+0xb6/0x230 [ 306.031876][ T7722] do_syscall_64+0xf3/0x230 [ 306.036390][ T7722] ? clear_bhb_loop+0x35/0x90 [ 306.041057][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.046946][ T7722] RIP: 0033:0x7f00e7b75dfc [ 306.051345][ T7722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 306.070944][ T7722] RSP: 002b:00007f00e75ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.079356][ T7722] RAX: ffffffffffffffda RBX: 00007f00e7d05f80 RCX: 00007f00e7b75dfc [ 306.087361][ T7722] RDX: 000000000000000f RSI: 00007f00e75ff0b0 RDI: 0000000000000004 [ 306.095332][ T7722] RBP: 00007f00e75ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.103300][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.111254][ T7722] R13: 000000000000000b R14: 00007f00e7d05f80 R15: 00007fffe1808d88 [ 306.119225][ T7722] [ 306.147353][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.161617][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.455651][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.651665][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.716041][ T7734] netlink: 'syz.0.601': attribute type 2 has an invalid length. [ 306.724032][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 306.818010][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.957293][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.977320][ T7738] overlay: ./file0 is not a directory [ 307.030795][ T7715] chnl_net:caif_netlink_parms(): no params data found [ 307.298634][ T7744] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 307.318587][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.343153][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.353342][ T7744] netlink: 168 bytes leftover after parsing attributes in process `syz.0.603'. [ 307.368640][ T7715] bridge_slave_0: entered allmulticast mode [ 307.387767][ T7715] bridge_slave_0: entered promiscuous mode [ 307.426367][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.435654][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.463198][ T7715] bridge_slave_1: entered allmulticast mode [ 307.491306][ T7715] bridge_slave_1: entered promiscuous mode [ 307.620035][ T5229] Bluetooth: hci0: command tx timeout [ 307.669616][ T5222] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 307.708633][ T7715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.739541][ T7715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.749293][ T52] bridge_slave_1: left allmulticast mode [ 307.766086][ T52] bridge_slave_1: left promiscuous mode [ 307.779521][ T5229] Bluetooth: hci5: command tx timeout [ 307.788091][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.826659][ T52] bridge_slave_0: left allmulticast mode [ 307.847485][ T52] bridge_slave_0: left promiscuous mode [ 307.864378][ T5222] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 307.864417][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.880928][ T5222] usb 1-1: config 0 has no interface number 0 [ 307.887189][ T5222] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.901314][ T5222] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.915386][ T5222] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 307.926019][ T5222] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 307.935736][ T5222] usb 1-1: Manufacturer: syz [ 307.943942][ T5222] usb 1-1: config 0 descriptor?? [ 308.504302][ T5222] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0003/input/input17 [ 308.579966][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.606204][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.622678][ T52] bond0 (unregistering): Released all slaves [ 308.634217][ T5222] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 308.681369][ T7752] pimreg: entered allmulticast mode [ 308.702586][ T7753] pimreg: left allmulticast mode [ 309.859529][ T5229] Bluetooth: hci5: command tx timeout [ 309.882665][ T7715] team0: Port device team_slave_0 added [ 309.965111][ T7715] team0: Port device team_slave_1 added [ 310.117424][ T46] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 311.949750][ T5229] Bluetooth: hci5: command tx timeout [ 312.189493][ T5229] Bluetooth: hci0: command tx timeout [ 312.404526][ T7788] FAULT_INJECTION: forcing a failure. [ 312.404526][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.522949][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.3.612 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 312.533596][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 312.543674][ T7788] Call Trace: [ 312.546966][ T7788] [ 312.549909][ T7788] dump_stack_lvl+0x241/0x360 [ 312.554783][ T7788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.560009][ T7788] ? __pfx__printk+0x10/0x10 [ 312.564620][ T7788] ? __pfx_lock_release+0x10/0x10 [ 312.569666][ T7788] ? __lock_acquire+0x137a/0x2040 [ 312.574707][ T7788] should_fail_ex+0x3b0/0x4e0 [ 312.579397][ T7788] _copy_from_user+0x2f/0xe0 [ 312.584175][ T7788] io_submit_one+0xc1/0x18b0 [ 312.588794][ T7788] ? __pfx_io_submit_one+0x10/0x10 [ 312.593914][ T7788] ? __might_fault+0xaa/0x120 [ 312.598604][ T7788] ? __pfx_lock_release+0x10/0x10 [ 312.603655][ T7788] ? lookup_ioctx+0x94/0x6a0 [ 312.608259][ T7788] ? __might_fault+0xaa/0x120 [ 312.612945][ T7788] ? __might_fault+0xc6/0x120 [ 312.617639][ T7788] __se_sys_io_submit+0x179/0x2f0 [ 312.622682][ T7788] ? __pfx___se_sys_io_submit+0x10/0x10 [ 312.628239][ T7788] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.634242][ T7788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.640596][ T7788] ? do_syscall_64+0x100/0x230 [ 312.645395][ T7788] ? do_syscall_64+0xb6/0x230 [ 312.650088][ T7788] do_syscall_64+0xf3/0x230 [ 312.654603][ T7788] ? clear_bhb_loop+0x35/0x90 [ 312.659298][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.665206][ T7788] RIP: 0033:0x7ff217b773b9 [ 312.669625][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.689237][ T7788] RSP: 002b:00007ff218894048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 312.697649][ T7788] RAX: ffffffffffffffda RBX: 00007ff217d05f80 RCX: 00007ff217b773b9 [ 312.705614][ T7788] RDX: 0000000020000380 RSI: 0000000000000002 RDI: 00007ff218873000 [ 312.713575][ T7788] RBP: 00007ff2188940a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.721537][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.729497][ T7788] R13: 000000000000000b R14: 00007ff217d05f80 R15: 00007fff6b9a4ee8 [ 312.737473][ T7788] [ 312.758466][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.780009][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.807977][ T7715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.963389][ T52] hsr_slave_0: left promiscuous mode [ 312.971209][ T52] hsr_slave_1: left promiscuous mode [ 312.978595][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.994800][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.026356][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.062709][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.160583][ T52] veth1_macvtap: left promiscuous mode [ 313.176476][ T52] veth0_macvtap: left promiscuous mode [ 313.208212][ T52] veth1_vlan: left promiscuous mode [ 313.217246][ T7801] FAULT_INJECTION: forcing a failure. [ 313.217246][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 313.233801][ T52] veth0_vlan: left promiscuous mode [ 313.245305][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.3.615 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 313.255934][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 313.266007][ T7801] Call Trace: [ 313.269309][ T7801] [ 313.272259][ T7801] dump_stack_lvl+0x241/0x360 [ 313.276966][ T7801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.282193][ T7801] ? __pfx__printk+0x10/0x10 [ 313.286806][ T7801] ? __kmalloc_node_noprof+0xb7/0x440 [ 313.292205][ T7801] ? __pfx___might_resched+0x10/0x10 [ 313.297524][ T7801] should_fail_ex+0x3b0/0x4e0 [ 313.302222][ T7801] should_failslab+0xac/0x100 [ 313.306903][ T7801] __kmalloc_node_noprof+0xdf/0x440 [ 313.312100][ T7801] ? __kvmalloc_node_noprof+0x72/0x190 [ 313.317557][ T7801] __kvmalloc_node_noprof+0x72/0x190 [ 313.322839][ T7801] __kvm_mmu_topup_memory_cache+0x4d9/0x6b0 [ 313.328723][ T7801] ? __pfx_lock_release+0x10/0x10 [ 313.333750][ T7801] ? rcu_is_watching+0x15/0xb0 [ 313.338511][ T7801] kvm_mmu_load+0x115/0x26e0 [ 313.343102][ T7801] ? __mutex_unlock_slowpath+0x21d/0x750 [ 313.348822][ T7801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.354813][ T7801] ? __pfx_kvm_mmu_load+0x10/0x10 [ 313.359842][ T7801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.365822][ T7801] ? __asan_memset+0x23/0x50 [ 313.370403][ T7801] ? vmx_flush_tlb_guest+0x1e5/0x310 [ 313.375679][ T7801] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 313.381303][ T7801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.387275][ T7801] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 313.392821][ T7801] vcpu_run+0x6c3d/0x88b0 [ 313.397143][ T7801] ? __lock_acquire+0x137a/0x2040 [ 313.402225][ T7801] ? __pfx_vcpu_run+0x10/0x10 [ 313.406901][ T7801] ? __local_bh_enable_ip+0x168/0x200 [ 313.412268][ T7801] ? lockdep_hardirqs_on+0x99/0x150 [ 313.417462][ T7801] ? __pfx_lock_acquire+0x10/0x10 [ 313.422478][ T7801] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 313.427753][ T7801] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.433462][ T7801] ? xfd_validate_state+0x6e/0x150 [ 313.438568][ T7801] ? rcu_is_watching+0x15/0xb0 [ 313.443328][ T7801] ? rcu_is_watching+0x15/0xb0 [ 313.448096][ T7801] kvm_arch_vcpu_ioctl_run+0xa73/0x19d0 [ 313.453660][ T7801] ? mark_lock+0x9a/0x350 [ 313.457999][ T7801] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0 [ 313.463729][ T7801] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 313.469727][ T7801] ? __pfx_lock_acquire+0x10/0x10 [ 313.474746][ T7801] ? get_task_pid+0x23/0x310 [ 313.479327][ T7801] ? __pfx_lock_release+0x10/0x10 [ 313.484355][ T7801] ? kvm_vcpu_ioctl+0x1dd/0xea0 [ 313.489211][ T7801] ? get_task_pid+0x23/0x310 [ 313.493796][ T7801] kvm_vcpu_ioctl+0x91d/0xea0 [ 313.498472][ T7801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 313.503672][ T7801] ? smack_file_ioctl+0x356/0x3a0 [ 313.508688][ T7801] ? __pfx_smack_file_ioctl+0x10/0x10 [ 313.514055][ T7801] ? __fget_files+0x29/0x470 [ 313.518635][ T7801] ? __fget_files+0x3f6/0x470 [ 313.523300][ T7801] ? __fget_files+0x29/0x470 [ 313.527904][ T7801] ? bpf_lsm_file_ioctl+0x9/0x10 [ 313.532849][ T7801] ? security_file_ioctl+0x87/0xb0 [ 313.537958][ T7801] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 313.543155][ T7801] __se_sys_ioctl+0xfc/0x170 [ 313.547743][ T7801] do_syscall_64+0xf3/0x230 [ 313.552249][ T7801] ? clear_bhb_loop+0x35/0x90 [ 313.556929][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.562820][ T7801] RIP: 0033:0x7ff217b773b9 [ 313.567312][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.586918][ T7801] RSP: 002b:00007ff218894048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.595327][ T7801] RAX: ffffffffffffffda RBX: 00007ff217d05f80 RCX: 00007ff217b773b9 [ 313.603296][ T7801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 313.611257][ T7801] RBP: 00007ff2188940a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.619219][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.627179][ T7801] R13: 000000000000000b R14: 00007ff217d05f80 R15: 00007fff6b9a4ee8 [ 313.635155][ T7801] [ 313.693514][ T5222] usb 1-1: USB disconnect, device number 18 [ 314.019793][ T5229] Bluetooth: hci5: command tx timeout [ 314.551343][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 314.714971][ T52] team0 (unregistering): Port device team_slave_1 removed [ 314.740484][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 314.748082][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.777659][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.809981][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 314.819676][ T52] team0 (unregistering): Port device team_slave_0 removed [ 314.819949][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 314.838453][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.884363][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.898049][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.932617][ T46] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 315.503844][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.514179][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.543418][ T7715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.802882][ T7715] hsr_slave_0: entered promiscuous mode [ 315.831713][ T7715] hsr_slave_1: entered promiscuous mode [ 316.219492][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 317.741326][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.747704][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.049929][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.199513][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 318.206820][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.227218][ T46] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 318.570756][ T46] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 318.599506][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 318.618857][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.694915][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.713221][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.729668][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.745667][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.813834][ T943] usb 3-1: USB disconnect, device number 12 [ 318.825211][ T46] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 318.858692][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.899220][ T46] usb 1-1: config 0 descriptor?? [ 318.913387][ T46] usb 1-1: can't set config #0, error -71 [ 318.961922][ T46] usb 1-1: USB disconnect, device number 19 [ 319.196788][ T7861] FAULT_INJECTION: forcing a failure. [ 319.196788][ T7861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.238099][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.2.628 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 319.248739][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 319.258812][ T7861] Call Trace: [ 319.262095][ T7861] [ 319.265031][ T7861] dump_stack_lvl+0x241/0x360 [ 319.269756][ T7861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.275140][ T7861] ? __pfx__printk+0x10/0x10 [ 319.279723][ T7861] ? __pfx_lock_release+0x10/0x10 [ 319.284747][ T7861] should_fail_ex+0x3b0/0x4e0 [ 319.289424][ T7861] _copy_from_user+0x2f/0xe0 [ 319.294021][ T7861] copy_from_sockptr_offset+0x6b/0xb0 [ 319.299394][ T7861] do_ipt_set_ctl+0xbdd/0x1250 [ 319.304159][ T7861] ? __pfx___might_resched+0x10/0x10 [ 319.309438][ T7861] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 319.314631][ T7861] ? __pfx_lock_release+0x10/0x10 [ 319.319660][ T7861] ? __mutex_unlock_slowpath+0x21d/0x750 [ 319.325370][ T7861] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 319.330736][ T7861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.336722][ T7861] ? module_put+0x13a/0x2d0 [ 319.341231][ T7861] nf_setsockopt+0x295/0x2c0 [ 319.345881][ T7861] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.351771][ T7861] do_sock_setsockopt+0x3af/0x720 [ 319.356790][ T7861] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 319.362321][ T7861] ? __fget_files+0x29/0x470 [ 319.366902][ T7861] ? __fget_files+0x3f6/0x470 [ 319.371577][ T7861] __sys_setsockopt+0x1ae/0x250 [ 319.376420][ T7861] __x64_sys_setsockopt+0xb5/0xd0 [ 319.381436][ T7861] do_syscall_64+0xf3/0x230 [ 319.385931][ T7861] ? clear_bhb_loop+0x35/0x90 [ 319.390606][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.396495][ T7861] RIP: 0033:0x7f3b00b773b9 [ 319.400903][ T7861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.420505][ T7861] RSP: 002b:00007f3b005ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.428911][ T7861] RAX: ffffffffffffffda RBX: 00007f3b00d05f80 RCX: 00007f3b00b773b9 [ 319.436873][ T7861] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 319.444831][ T7861] RBP: 00007f3b005ff0a0 R08: 0000000000000408 R09: 0000000000000000 [ 319.452790][ T7861] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.460752][ T7861] R13: 000000000000000b R14: 00007f3b00d05f80 R15: 00007ffef65019b8 [ 319.468809][ T7861] [ 319.737346][ T7865] netlink: 77696 bytes leftover after parsing attributes in process `syz.1.630'. [ 319.766225][ T7865] netlink: zone id is out of range [ 319.808337][ T7865] netlink: zone id is out of range [ 319.842007][ T7865] netlink: zone id is out of range [ 319.849718][ T7865] netlink: zone id is out of range [ 319.868577][ T7865] netlink: zone id is out of range [ 319.937882][ T7865] netlink: zone id is out of range [ 319.965215][ T7865] netlink: zone id is out of range [ 319.970784][ T7865] netlink: zone id is out of range [ 319.976467][ T7865] netlink: zone id is out of range [ 319.983773][ T7865] netlink: zone id is out of range [ 320.024575][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 323.677102][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.709111][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.758937][ T7715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.827864][ T7715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.871898][ T7715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.915017][ T7715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.109678][ T5222] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 324.251532][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.299622][ T5222] usb 3-1: Using ep0 maxpacket: 8 [ 324.323292][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.341487][ T5222] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.376400][ T5222] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 324.398552][ T5222] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 324.419720][ T5222] usb 3-1: Manufacturer: syz [ 324.438226][ T5222] usb 3-1: config 0 descriptor?? [ 324.441829][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.450344][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.456249][ T5222] appledisplay 3-1:0.0: Could not find int-in endpoint [ 324.508438][ T943] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.510665][ T5222] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 324.515617][ T943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.817925][ T7715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.340248][ T7715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.549043][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.963166][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.893528][ T5269] usb 3-1: USB disconnect, device number 13 [ 326.946656][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.041105][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.359932][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.574385][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.727233][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.748569][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.474858][ T5228] Bluetooth: hci1: command 0x0406 tx timeout [ 330.611391][ T46] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.639466][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.718884][ T46] usb 3-1: config 0 descriptor?? [ 330.738139][ T46] cp210x 3-1:0.0: cp210x converter detected [ 331.287535][ T7715] veth0_vlan: entered promiscuous mode [ 331.304491][ T7715] veth1_vlan: entered promiscuous mode [ 331.595606][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.605675][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.396127][ T46] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 334.404072][ T46] cp210x 3-1:0.0: querying part number failed [ 334.421418][ T46] usb 3-1: cp210x converter now attached to ttyUSB0 [ 334.441239][ T46] usb 3-1: USB disconnect, device number 14 [ 334.473176][ T7715] veth0_macvtap: entered promiscuous mode [ 334.492825][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.509785][ T46] cp210x 3-1:0.0: device disconnected [ 334.527097][ T7715] veth1_macvtap: entered promiscuous mode [ 335.374049][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.443714][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.478269][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.504671][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.522639][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.534341][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.545840][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.563768][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.578597][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.589519][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.605043][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.632830][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.656390][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.667772][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.689456][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 335.700647][ T8002] FAULT_INJECTION: forcing a failure. [ 335.700647][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 335.712802][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.723857][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.0.655 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 335.729312][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.734449][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 335.734464][ T8002] Call Trace: [ 335.734472][ T8002] [ 335.734481][ T8002] dump_stack_lvl+0x241/0x360 [ 335.744991][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.754912][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.754940][ T8002] ? __pfx__printk+0x10/0x10 [ 335.754963][ T8002] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 335.758787][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.761395][ T8002] ? __pfx___might_resched+0x10/0x10 [ 335.761427][ T8002] should_fail_ex+0x3b0/0x4e0 [ 335.766217][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.775881][ T8002] ? alloc_empty_file+0x9e/0x1d0 [ 335.775908][ T8002] should_failslab+0xac/0x100 [ 335.775930][ T8002] ? alloc_empty_file+0x9e/0x1d0 [ 335.775950][ T8002] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 335.775976][ T8002] alloc_empty_file+0x9e/0x1d0 [ 335.775999][ T8002] path_openat+0x105/0x3470 [ 335.776024][ T8002] ? mark_lock+0x9a/0x350 [ 335.776047][ T8002] ? __pfx_stack_trace_save+0x10/0x10 [ 335.776078][ T8002] ? __lock_acquire+0x137a/0x2040 [ 335.776112][ T8002] ? __lock_acquire+0x137a/0x2040 [ 335.776135][ T8002] ? __pfx_path_openat+0x10/0x10 [ 335.776171][ T8002] do_filp_open+0x235/0x490 [ 335.776197][ T8002] ? __pfx_do_filp_open+0x10/0x10 [ 335.776245][ T8002] ? _raw_spin_unlock+0x28/0x50 [ 335.776262][ T8002] ? alloc_fd+0x5a1/0x640 [ 335.776292][ T8002] do_sys_openat2+0x13e/0x1d0 [ 335.776314][ T8002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.776336][ T8002] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.776356][ T8002] ? __fget_files+0x3f6/0x470 [ 335.776388][ T8002] __x64_sys_openat+0x247/0x2a0 [ 335.776414][ T8002] ? __pfx___x64_sys_openat+0x10/0x10 [ 335.776441][ T8002] ? do_syscall_64+0x100/0x230 [ 335.776467][ T8002] ? do_syscall_64+0xb6/0x230 [ 335.776492][ T8002] do_syscall_64+0xf3/0x230 [ 335.776515][ T8002] ? clear_bhb_loop+0x35/0x90 [ 335.776542][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.776565][ T8002] RIP: 0033:0x7f00e7b75d50 [ 335.776584][ T8002] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 335.776601][ T8002] RSP: 002b:00007f00e75ddf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 335.776622][ T8002] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f00e7b75d50 [ 335.776636][ T8002] RDX: 0000000000000002 RSI: 00007f00e75ddfb0 RDI: 00000000ffffff9c [ 335.776649][ T8002] RBP: 00007f00e75ddfb0 R08: 0000000000000000 R09: 0000000000000000 [ 335.776662][ T8002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 335.776673][ T8002] R13: 000000000000006e R14: 00007f00e7d06058 R15: 00007fffe1808d88 [ 335.776703][ T8002] [ 336.156360][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.178280][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.195434][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.209438][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 336.216533][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 336.218290][ T7715] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.236457][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.253936][ T7715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.266438][ T7715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.271773][ T8] usb 3-1: config 0 descriptor?? [ 336.283158][ T7715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.308898][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.309138][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 336.334311][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.717476][ T8] gspca_sonixj: reg_r err -32 [ 336.738908][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.753764][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.539590][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 338.795385][ T8] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 338.869059][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.929492][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.985126][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 339.058288][ T46] usb 3-1: USB disconnect, device number 15 [ 343.151688][ T8040] x_tables: duplicate underflow at hook 3 [ 345.038959][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 345.269449][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 345.388545][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.413443][ T8059] net_ratelimit: 394 callbacks suppressed [ 345.413463][ T8059] sctp: failed to load transform for md5: -4 [ 345.430230][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 345.451386][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.462301][ T46] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 345.464109][ T8051] sctp: failed to load transform for md5: -2 [ 345.479588][ T46] usb 3-1: Manufacturer: syz [ 345.491674][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.530225][ T46] usb 3-1: config 0 descriptor?? [ 345.563891][ T46] appledisplay 3-1:0.0: Could not find int-in endpoint [ 345.593266][ T46] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 345.594017][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.620151][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.933286][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.942443][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.665801][ T5268] usb 3-1: USB disconnect, device number 16 [ 347.699465][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 348.043969][ T8088] kcapi: manufacturer command 0 unknown. [ 350.958732][ T46] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 351.018256][ T8098] x_tables: duplicate underflow at hook 3 [ 351.189559][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.248788][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.487043][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.517142][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.005841][ T5404] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 355.230995][ T5222] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 355.269814][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.362390][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.449520][ T5222] usb 1-1: Using ep0 maxpacket: 32 [ 357.473636][ T5222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.498110][ T5222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.523132][ T5222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.538518][ T5222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 357.554956][ T5222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.565410][ T5222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.591123][ T5222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.734649][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.755174][ T5222] usb 1-1: Product: syz [ 359.522088][ T5222] usb 1-1: Manufacturer: syz [ 359.526730][ T5222] usb 1-1: SerialNumber: syz [ 359.582564][ T5222] usb 1-1: can't set config #1, error -71 [ 359.595385][ T5222] usb 1-1: USB disconnect, device number 20 [ 359.659630][ T5404] usb 2-1: USB disconnect, device number 9 [ 359.863133][ T8167] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 360.139503][ T5222] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 360.343342][ T5222] usb 1-1: Using ep0 maxpacket: 8 [ 360.348925][ T5222] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.356335][ T5222] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 360.356366][ T5222] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 360.356388][ T5222] usb 1-1: Manufacturer: syz [ 360.359458][ T5268] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 360.362342][ T5222] usb 1-1: config 0 descriptor?? [ 360.394866][ T5222] appledisplay 1-1:0.0: Could not find int-in endpoint [ 360.397958][ T5222] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 360.539795][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 360.544357][ T5268] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 360.544389][ T5268] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 360.544402][ T5268] usb 3-1: Product: syz [ 360.544410][ T5268] usb 3-1: Manufacturer: syz [ 360.544419][ T5268] usb 3-1: SerialNumber: syz [ 360.548375][ T5268] usb 3-1: config 0 descriptor?? [ 360.556828][ T5268] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 360.841788][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.845177][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.846034][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.846821][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.849905][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 360.850169][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.880406][ T5268] gspca_zc3xx: reg_w_i err -71 [ 360.880465][ T5268] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 360.884339][ T5268] usb 3-1: USB disconnect, device number 18 [ 362.899711][ T5228] Bluetooth: hci4: command tx timeout [ 363.985550][ T5404] usb 1-1: USB disconnect, device number 21 [ 364.117516][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117631][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117658][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117684][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117709][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117734][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117760][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117785][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117811][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117841][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117867][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117893][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117918][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117943][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117969][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.117994][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118020][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118045][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118070][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118096][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118121][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118147][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118173][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118198][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118224][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118249][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118275][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118300][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.118326][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.124077][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.124107][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.124130][ T5222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 364.147097][ T5222] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.09 Device [syz0] on syz0 [ 364.494052][ T1118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.566200][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 364.580103][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 364.654297][ T1118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.709219][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.729417][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.751962][ T8175] bridge_slave_0: entered allmulticast mode [ 364.783120][ T8175] bridge_slave_0: entered promiscuous mode [ 364.817897][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.850153][ T46] usb 3-1: config 0 has no interfaces? [ 364.856901][ T46] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 364.869056][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.887337][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.888465][ T8175] bridge_slave_1: entered allmulticast mode [ 364.903960][ T8175] bridge_slave_1: entered promiscuous mode [ 364.918528][ T46] usb 3-1: config 0 descriptor?? [ 364.949555][ T5222] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 364.952604][ T1118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.980581][ T5228] Bluetooth: hci4: command tx timeout [ 365.072889][ T1118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.114359][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.134536][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.149501][ T5269] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 365.159538][ T5222] usb 5-1: Using ep0 maxpacket: 32 [ 365.173710][ T5222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.195450][ T5222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.215245][ T5222] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.235370][ T5222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 365.240200][ T8175] team0: Port device team_slave_0 added [ 365.262170][ T5222] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.284238][ T8175] team0: Port device team_slave_1 added [ 365.309414][ T5222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 365.333714][ T5222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.349420][ T5222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.357992][ T5269] usb 1-1: Using ep0 maxpacket: 32 [ 365.363642][ T5222] usb 5-1: Product: syz [ 365.379243][ T5222] usb 5-1: Manufacturer: syz [ 365.388940][ T5222] usb 5-1: SerialNumber: syz [ 365.389125][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.424772][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.435692][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.444908][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.473341][ T5269] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 365.483129][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.506411][ T5269] usb 1-1: config 0 descriptor?? [ 365.511619][ T8175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.532660][ T5269] hub 1-1:0.0: USB hub found [ 365.612369][ T8175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.639963][ T8175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.670818][ T5219] usb 3-1: USB disconnect, device number 19 [ 365.702482][ T8175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.819655][ T1118] bridge_slave_1: left allmulticast mode [ 365.828734][ T1118] bridge_slave_1: left promiscuous mode [ 365.845854][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.861205][ T1118] bridge_slave_0: left allmulticast mode [ 365.866902][ T1118] bridge_slave_0: left promiscuous mode [ 365.883214][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.942646][ T5269] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 366.383651][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.416615][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.070862][ T5228] Bluetooth: hci4: command tx timeout [ 367.116244][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.145093][ T8218] x_tables: duplicate underflow at hook 3 [ 367.176099][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.226465][ T1118] bond0 (unregistering): Released all slaves [ 367.388082][ T8175] hsr_slave_0: entered promiscuous mode [ 367.415762][ T8175] hsr_slave_1: entered promiscuous mode [ 367.436489][ T8175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.447512][ T8175] Cannot create hsr debugfs directory [ 367.968910][ T5269] usbhid 1-1:0.0: can't add hid device: -71 [ 367.997256][ T5269] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 368.124734][ T5269] usb 1-1: USB disconnect, device number 22 [ 368.262013][ T1118] hsr_slave_0: left promiscuous mode [ 368.284379][ T1118] hsr_slave_1: left promiscuous mode [ 368.307464][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.325154][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.353323][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.368784][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.475762][ T1118] veth1_macvtap: left promiscuous mode [ 368.483860][ T1118] veth0_macvtap: left promiscuous mode [ 368.501384][ T1118] veth1_vlan: left promiscuous mode [ 368.511773][ T1118] veth0_vlan: left promiscuous mode [ 369.142294][ T5228] Bluetooth: hci4: command tx timeout [ 369.355739][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 369.398592][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 369.806747][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.710'. [ 369.999706][ T5222] cdc_ncm 5-1:1.0: bind() failure [ 370.024965][ T5222] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 370.080419][ T5222] cdc_ncm 5-1:1.1: bind() failure [ 370.101665][ T5222] usb 5-1: USB disconnect, device number 19 [ 370.366595][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366632][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366660][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366686][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366711][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366737][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366761][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366787][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366812][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366837][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366862][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366886][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366912][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366937][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366962][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.366987][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367012][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367037][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367063][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367094][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367120][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367145][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367170][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367196][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367221][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367246][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367272][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367296][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367321][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367346][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367371][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.367395][ T58] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.379257][ T58] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.09 Device [syz0] on syz0 [ 370.639722][ T5269] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 370.827532][ T5269] usb 3-1: config 0 has no interfaces? [ 370.827686][ T5269] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 370.827756][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.912087][ T5269] usb 3-1: config 0 descriptor?? [ 371.269494][ T5222] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 371.376574][ T8264] x_tables: duplicate underflow at hook 3 [ 371.471174][ T5222] usb 5-1: Using ep0 maxpacket: 8 [ 371.590075][ T5222] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.603668][ T5222] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 371.613725][ T5222] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 371.624925][ T5222] usb 5-1: Manufacturer: syz [ 371.646162][ T58] usb 3-1: USB disconnect, device number 20 [ 371.658962][ T5222] usb 5-1: config 0 descriptor?? [ 371.668564][ T5222] appledisplay 5-1:0.0: Could not find int-in endpoint [ 371.694337][ T5222] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 371.706844][ T8175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.758456][ T7808] udevd[7808]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 371.786538][ T8175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.827880][ T8175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.859105][ T8175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.012476][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 373.803227][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.957845][ T25] usb 5-1: USB disconnect, device number 20 [ 374.015827][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.044519][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 374.074298][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.094774][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.105256][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.112484][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.137830][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 374.233457][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.240702][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.283969][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.295087][ T46] usb 1-1: config 0 descriptor?? [ 374.303959][ T46] hub 1-1:0.0: USB hub found [ 374.322584][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.340381][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.120516][ T8175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.131228][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.191318][ T46] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 375.208611][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 375.221812][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 375.305550][ T46] usb 1-1: USB disconnect, device number 23 [ 375.599464][ T5219] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 375.627827][ T8306] warning: `syz.0.724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 375.774901][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.799797][ T5219] usb 3-1: Using ep0 maxpacket: 32 [ 375.962545][ T5219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.755201][ T5219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.774690][ T5219] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.816186][ T5219] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.823421][ T8175] veth0_vlan: entered promiscuous mode [ 376.847504][ T5219] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 376.858461][ T5219] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 376.878183][ T5219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.899007][ T8175] veth1_vlan: entered promiscuous mode [ 376.929446][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.949884][ T5219] usb 3-1: Product: syz [ 376.969511][ T5219] usb 3-1: Manufacturer: syz [ 376.974536][ T5219] usb 3-1: SerialNumber: syz [ 377.057698][ T8175] veth0_macvtap: entered promiscuous mode [ 377.089093][ T8328] x_tables: duplicate underflow at hook 3 [ 377.117322][ T8175] veth1_macvtap: entered promiscuous mode [ 377.179674][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.222437][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.248112][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.258779][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.277189][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.288837][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.304666][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.315369][ T5404] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 377.323241][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.417854][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.446192][ T8175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.458751][ T8175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.429285][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 482.436266][ C0] rcu: (detected by 0, t=10502 jiffies, g=27737, q=483 ncpus=2) [ 482.443976][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294985329-4294974827), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 482.457326][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g27737 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 482.468603][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 482.478563][ C0] rcu: RCU grace-period kthread stack dump: [ 482.484437][ C0] task:rcu_preempt state:R running task stack:25808 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 482.496149][ C0] Call Trace: [ 482.499411][ C0] [ 482.502326][ C0] __schedule+0x17ae/0x4a10 [ 482.506825][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.513145][ C0] ? __pfx___schedule+0x10/0x10 [ 482.517979][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 482.523187][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 482.528305][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 482.534026][ C0] ? validate_chain+0x11e/0x5900 [ 482.538968][ C0] irqentry_exit+0x5e/0x90 [ 482.543462][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.549429][ C0] RIP: 0010:lock_acquire+0x26/0x550 [ 482.554623][ C0] Code: 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 4c 89 4c 24 28 4c 89 44 24 38 <48> 89 4c 24 30 89 54 24 1c 41 89 f6 48 89 7c 24 20 65 48 8b 04 25 [ 482.574216][ C0] RSP: 0018:ffffc90000167600 EFLAGS: 00000286 [ 482.580270][ C0] RAX: d82ee9d08db37f00 RBX: ffffffff84af4750 RCX: 0000000000000000 [ 482.588225][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8ee39800 [ 482.596194][ C0] RBP: ffffc90000167748 R08: 0000000000000001 R09: 0000000000000000 [ 482.604146][ C0] R10: ffffc90000167980 R11: fffff5200002cf32 R12: ffffc90000167bc0 [ 482.612104][ C0] R13: 1ffff9200002cf00 R14: dffffc0000000000 R15: ffffc90000167980 [ 482.620067][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 482.625609][ C0] ? mark_lock+0x9a/0x350 [ 482.629927][ C0] ? __lock_acquire+0x137a/0x2040 [ 482.634941][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 482.640473][ C0] debug_objects_fill_pool+0x9f/0x9b0 [ 482.645824][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 482.651349][ C0] ? __lock_acquire+0x137a/0x2040 [ 482.656369][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 482.662341][ C0] debug_object_assert_init+0x12e/0x440 [ 482.667871][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.674187][ C0] ? __pfx_debug_object_assert_init+0x10/0x10 [ 482.680236][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 482.685418][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.691293][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.697604][ C0] __mod_timer+0x10d/0xeb0 [ 482.702011][ C0] ? __asan_memset+0x23/0x50 [ 482.706581][ C0] ? __pfx___mod_timer+0x10/0x10 [ 482.711504][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 482.717298][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.723615][ C0] schedule_timeout+0x1b9/0x310 [ 482.728452][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 482.733833][ C0] ? __pfx_process_timeout+0x10/0x10 [ 482.739114][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 482.744648][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 482.749484][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 482.754670][ C0] ? rcu_gp_init+0x1256/0x1630 [ 482.759422][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 482.764342][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 482.770480][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 482.775745][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.781626][ C0] ? finish_swait+0xd4/0x1e0 [ 482.786200][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 482.790776][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.795954][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.801830][ C0] ? __kthread_parkme+0x169/0x1d0 [ 482.806836][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.812017][ C0] kthread+0x2f0/0x390 [ 482.816089][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.821272][ C0] ? __pfx_kthread+0x10/0x10 [ 482.825843][ C0] ret_from_fork+0x4b/0x80 [ 482.830682][ C0] ? __pfx_kthread+0x10/0x10 [ 482.835250][ C0] ret_from_fork_asm+0x1a/0x30 [ 482.840005][ C0] [ 482.843003][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 482.849321][ C0] Sending NMI from CPU 0 to CPUs 1: [ 482.854524][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30