last executing test programs: 1m46.88772169s ago: executing program 3 (id=16): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x160) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) 1m45.251207647s ago: executing program 3 (id=19): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x24008040) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) getpeername$packet(r1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x6140c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x1}}}}, 0x30}}, 0x4000040) 1m44.867118483s ago: executing program 3 (id=23): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x7, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a00a9, 0x0) 1m44.66926866s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x7fff, 0x40880) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000300)={0xb0, ""/176}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r4 = open(&(0x7f0000000500)='./file0/file0\x00', 0x204000, 0x0) fchdir(r4) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a0700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000001b38b131213df90fec9a03e17ba7e51af20f77a9ddcef19116da926cee247942925289090002ed53497e92dacff55b5a0473da8cd0ce68ca238cdc1bcd7b288e2f3ae68c3f91846cff287c4fe611d6a43de91bc64aa35fa2bf6d132d77b7531d15d7241d2f07fc6d64edf3206d56f25c8bb057d68c8f486f2272a68335e8747237455d306e101e61ab9c068d47a23c216ad316d067ec0df15b6a0ed9af80f96f0bdde93551d654082e95135c024f77a76274794f15d2ffad"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072011a000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m43.932436029s ago: executing program 3 (id=26): r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={0x0, 0xb}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x9, 0x8}, 0x90) r3 = getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000003800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000037c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000003840)={0x7, 0x8, 0xfa00, {r6, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000003880)={0x7, 0x8, 0xfa00, {r6}}, 0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/19, 0x13}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000018000000630a02000000000085000000010000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m42.537693322s ago: executing program 3 (id=31): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='pvfs2\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='cgroup\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m41.711157945s ago: executing program 32 (id=31): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='pvfs2\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='cgroup\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.09677917s ago: executing program 0 (id=275): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x81, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x22020400) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x2249e8e1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b700c8000000"], 0x2c}}, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0x2, 0xafae}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000100000000000fcffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000000000000100000000000000000000000044000500ac1414aa000000000000000000100000000000003c"], 0xfc}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none, 0xf5, 0x1}, 0xe) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x4e31}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000180)={r11, 0x8, 0x20}, 0xc) sendfile(r10, r9, 0x0, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000003ffffffffee0cad16f155ffff86dd6001070000101100fc010000000000000000000000000000ff02000000000000000000000000000100000e22001090784204"], 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r12, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="280000000000000029000000370000005c01000000000000010900000000000000000001010000001400000000000000290087ea080000001f0d00000000000024000000000000002900000032000000fe8000"/93, @ANYBLOB="0000000014000000000000002900"], 0x278}}], 0x2, 0x0) 17.309263869s ago: executing program 0 (id=279): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030002200000000000006a261a1e0012000800080400005450675e1b5e0cd6ff125e5355fd20a6282877b1d4c07f53e27dec21601fc5aec267962edbdab2623d8be42e82b6cf6701809ef85336ea07459301cf61b1f172d1f9ffffffffffffffec538b2d0eb0d9ce0b00d89d57d7c5a45bc4ca93791ded006fb378447f96aa2980ff99776652897947890ba4b4a985a44c8e3fee5f2edc490000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000000000200010000000000000006000000000005000500000700000a"], 0x100}, 0x1, 0x7}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x2, 0x6}) socket(0x1, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) close(r6) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x7) 12.290978117s ago: executing program 0 (id=296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x2b4fb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1, 0x0, 0x0, 0x40000000000, 0x0, 0x2, 0x8, 0x7c}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0xa, 0x0, &(0x7f0000000240)="61ea712bc89ffef05327", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan0\x00'}) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) 10.652985746s ago: executing program 4 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0x8, 0x8000, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r10, &(0x7f0000000240)=""/4096, 0xfffffdef) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x10, 0x2, 0x0, 0x7, 0xa, 0x0, 0x80, 0x9, 0x9, 0x8, 0x3, 0x0, 0x8, 0x5, 0xfe, 0x13, 0x70, 0x5, '\x00', 0xfd, 0x400}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280000, 0x0) fchown(r12, 0x0, 0x0) read$msr(r12, &(0x7f0000000100)=""/48, 0x30) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x80a0000, 0x401, 0x4, 0x8264, 0x0, [{0x2, 0x5, 0xf8, '\x00', 0x7}, {0x81, 0x1, 0x9, '\x00', 0x6c}, {0x4, 0x6c, 0xa, '\x00', 0x1}, {0x4, 0x5, 0x4d, '\x00', 0xb}, {0x2, 0x7f}, {0x10, 0xc0, 0x0, '\x00', 0x8}, {0x4, 0xf9, 0x8d, '\x00', 0x11}, {0x2, 0xa, 0xc2, '\x00', 0xc}, {0x1, 0x5, 0xd, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x7}, {0xfa, 0x2, 0x4}, {0xf, 0x7f, 0x5, '\x00', 0xde}, {0x5, 0xff, 0x1, '\x00', 0x2}, {0xfa, 0x8, 0x6, '\x00', 0x3}, {0x4, 0x3, 0x0, '\x00', 0xb}, {0xf, 0x2, 0xe, '\x00', 0x1}, {0x10, 0x7, 0x6, '\x00', 0x3}, {0x1, 0x5, 0x7f, '\x00', 0xf}, {0xe, 0x40, 0x5, '\x00', 0x4}, {0x8, 0x3, 0x3, '\x00', 0x4}, {0xe, 0x11, 0x81, '\x00', 0x1}, {0x1, 0x3, 0x53, '\x00', 0x5}, {0x8, 0x8, 0x1, '\x00', 0x4}, {0x86, 0x8c, 0x0, '\x00', 0x2}]}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000009f000040"]) 10.368055007s ago: executing program 1 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (fail_nth: 4) 9.889791992s ago: executing program 1 (id=307): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='task\x00') statx(r1, 0x0, 0x1000, 0x7ff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180ffffe9fd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}, 0x1, 0xd}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 9.133081812s ago: executing program 4 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x33be, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x1000001000001, 0x2) 9.00843293s ago: executing program 0 (id=309): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44094) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xea4, 0xd, 0x3, 0x9}) splice(r3, 0x0, r2, 0x0, 0x7ffff041, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 9.005850328s ago: executing program 1 (id=310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1}, 0x19}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x7f, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="15008f3f15183a0d869e0008003950323030302e4c"], 0x15) close_range(r3, 0xffffffffffffffff, 0x0) 8.014346902s ago: executing program 1 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x6, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0xc}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELTABLE={0x1d4, 0x2, 0xa, 0x703, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xb, 0x6, "7ad0f2ac66fa86"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x19, 0x6, "2802b7cfb9b0f5a49f0d9d0cd946b11728be3f069e"}, @NFTA_TABLE_USERDATA={0x67, 0x6, "9536e8129cc581801ff97a6a308e055a3c1804e6837bfd0b32e59136368428534544bfa31c5821be8d097db16ea53a493e6197a1f09db98c7521927f47c38767922b7902965f43ce41245c6d35b295e220d3614cdee1e93716e128676acd324d876f2e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x104, 0x6, "4196ce506ce53c1e1d873bb62f93d8c2d5da44214a0a9206190cedc27fab2239c4492330c7b3d71d67f68c105dfab329a2f238fd99f7a4a88728f4ac1274c41b145e14734c7ce56d812888d67745ff8772b751665f269c1accf814f3d33bc6afd1c4a49af9d97ebc178001c9187fdb62a6b42454f419476598ddfd03e6ca359304a5c4c71a75148c986b7799d18e9a8492c68374f42d54603ec83389015c9af0e66bf53cffce2295c0ced403eeb3996e8dea3a49b2698b871af3b597df0045bd231caba41d6cb843411eb0f58e34c5d9981c99ffa818d6ce727bfbf2c1e6a44314cca864cbcb0258e41e78095f3308e85671c5f799857e79d1fea82430049064"}]}], {0x14, 0x10}}, 0x1fc}}, 0x0) 7.830781026s ago: executing program 4 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 7.517389347s ago: executing program 5 (id=313): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0x5}, {0x5, 0x3ad, 0x2}}}}, 0xb) 6.509995323s ago: executing program 0 (id=314): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = io_uring_setup(0x184d, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0xffffd000) lseek(0xffffffffffffffff, 0x1000000, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x1, 0xc9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x4a1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0x2, 0x4, 0x0, 0xe}, 0x170, &(0x7f0000000340)={0x5, 0xf, 0x170, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x7, 0xf00f, 0x8000}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xf, 0xf0f, 0x9, [0x3ff0]}, @generic={0xd3, 0x10, 0x2, "d45b51cb3225ade7cf75f7f44dbf28f08be00f3e9fb8bf86aa00aa880ac93a63422e4575696d62108b72f51a6671b013d6221c7d71e878d80a372a3decf0dc2a0cb88adeb47a9ee95a9b64d262eaee861802e44d13a51167477bfb8237b9eb0f5b93c7adb353cd6311986b5f366032374133d9e36e81d32f42fc4c4e3ed80258822f52e632c1acfcf0fadc76674aac891f52185bc1c332dc826da4f9785fc3d767d59936d11664856475c20f52391ce35f587537d4ea157b0176fdaa493dac21cf991f6147663ba5757e3e86677e8326"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1000, 0xff00, 0x5, [0xff0030, 0x1fdf]}, @generic={0x61, 0x10, 0xb, "d4e9f0a2f7858d0106875baef68634e20be60111ecec3eeeee29ae6b72cc0b67dde153eb008a954c15773dd7ae8982397258f3e70a8311098fa56de10e8c2d82bac64e750a2272c4a038911d66198a265344276a4963a9af27f4492b7cfe"}]}, 0x5, [{0x6d, &(0x7f0000000140)=@string={0x6d, 0x3, "f95081c645b0b776305d2eba2eef80851ec5583672d765f3e3a8b1bfb9cafeaea4ed9a68ba692d1191f6831ac129b55a2f43153974e4e7a44e32f683b30a495a8a0d28205c64f7fe17685e533027e18333106c2fe4a8ed0b2f8d58eb70ff87211f8dd10f9a68a4e7e36e6e"}}, {0x38, &(0x7f0000000280)=@string={0x38, 0x3, "e0fc778886b8c0ead0c85ac760d0aad2903a59e0099d62a9287d2447db3cd8e83f1c30c413ce747edb3589042a9e7ed13c794bb55dc2"}}, {0x31, &(0x7f00000002c0)=@string={0x31, 0x3, "89bf7b50842b8cb0d2f39054da8351d800143093e8e062e3333bad529ef652db490795a0da9601341e57deb2a119dd"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x7d, &(0x7f00000005c0)=@string={0x7d, 0x3, "005681b831a9aaf3a23e267f424db0b19015bc2a1fa468dacee311c5e4c87b1211e2cf437ee3a8f710eb9842744b04fdff9bc7d2c425dc6d81bce496b630b86cd2099c341681942d3a9d2ef0a03ae8a7926b8694c1496a4c83d6b24b2a208ca1be9171c4a14a5144773c25dcf7b12199bc28cf65ec029525468c66"}}]}) syz_usb_control_io(r0, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) syz_open_dev$radio(0x0, 0x3, 0x2) setfsuid(0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.509023002s ago: executing program 1 (id=315): quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000083c0)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) 6.314918889s ago: executing program 4 (id=316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x0, 0x0, 0xffffffda, 0x0, 0x0, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x400000000000000) 6.236451397s ago: executing program 2 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 6.092028184s ago: executing program 2 (id=318): syz_open_dev$vim2m(0x0, 0x208, 0x2) (async) syz_open_dev$vim2m(0x0, 0x208, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @mcast2, @mcast2, {[], {0x40, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "cad928dcd5bd9666e5939945c71b428f7db1a2a747e3f20fb865858f7863bc88", "54fd444775c204dfe9cd403e28931a59", {"e5bae93365536b9c34c29a97e351c8fc", "37e1b0ae3714a3aa6b248e3f8c9c3601"}}}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6) 5.825860619s ago: executing program 4 (id=319): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x2b4fb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1, 0x0, 0x0, 0x40000000000, 0x0, 0x2, 0x8, 0x7c}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0xa, 0x0, &(0x7f0000000240)="61ea712bc89ffef05327", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan0\x00'}) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) 5.377885125s ago: executing program 2 (id=320): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) fanotify_init(0x200, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xd8}], 0x1}, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc01864d0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)=ANY=[], 0x58) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x22) 4.411956793s ago: executing program 2 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1}, 0x19}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x7f, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="15008f3f15183a0d869e0008003950323030302e4c"], 0x15) close_range(r3, 0xffffffffffffffff, 0x0) 4.256144924s ago: executing program 5 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x33be, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x1000001000001, 0x2) 4.237151363s ago: executing program 2 (id=323): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad099b0d09f91b25090987f70e06d0f0e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010affe8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f19d684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f41181db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b771d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$TCSETSW(r0, 0x5403, 0x0) 3.128980597s ago: executing program 0 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRES16=r3], 0x5524}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'ip6gre0\x00'}) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8f) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='selinuxfs\x00', 0x8008, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f00000003c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000600)=""/142, 0x8e}], 0x2, &(0x7f00000006c0)=""/226, 0xe2}, 0x80000001}, {{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000840)=""/51, 0x33}], 0x1}, 0x1}, {{&(0x7f0000000880)=@xdp, 0x80, &(0x7f0000006680)=[{&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000580)=""/2, 0x2}], 0x3, &(0x7f0000000b00)=""/117, 0x75}, 0x2}, {{&(0x7f00000066c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c00)=""/252, 0xfc}, {&(0x7f0000000d00)=""/190, 0xbe}, {&(0x7f0000000dc0)=""/90, 0x5a}, {&(0x7f0000000e40)=""/208, 0xd0}, {&(0x7f0000000f40)=""/192, 0xc0}, {&(0x7f0000001000)=""/49, 0x31}], 0x6, &(0x7f00000010c0)=""/4096, 0x1000}, 0xfff}, {{&(0x7f00000020c0)=@can, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)=""/164, 0xa4}, {&(0x7f0000002200)=""/129, 0x81}, {&(0x7f00000022c0)}, {&(0x7f0000002300)=""/187, 0xbb}, {&(0x7f00000023c0)=""/154, 0x9a}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f0000004500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000006640)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/137, 0x89}], 0x3, &(0x7f0000006900)=""/256, 0x100}, 0x7}], 0x6, 0x40000003, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x149a82, 0x0) 3.128111027s ago: executing program 5 (id=325): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8d41, 0x0) flock(r0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r1, &(0x7f0000001680)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)=""/136, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r0, 0x3) dup3(r2, r0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xb018}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x2, 0x0, 0x2, 0x8, 0xffffffffffffffff}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400201, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f00000001c0)="6835e9ba2bf83f53961d9fca87e1fcc2a8528935d5d6b7516a0d1d692b4d7f97b4f4ac004c4a8ded9e1c4c4a2a1ec29b885af0a97aa8dc5c91828a46dbfb4198149574493b21cdb086f8eafeb26073bc2951d20e119a391b6878ebd8dc3ae7a2aac4fc1621fef258908ffa84333f14ef7404c25be973eb35b9ad584cec89afeac304156128d00b53f8c7a07ca5f2127741bf0903b81b005a960dcf181269e2dff83cc3e32828ca100ba16853a3acb15a69037cb02a80ac58da604081aebe47baf69509dd50821f7eaa85a7bdce825ef19b54c1dd84e3", 0xd6}) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090250000101000000090400000002060000052406000005240009000d00000000a200000900fcff07152412"], 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@map=r0, r2, 0x1c, 0x0, r0, @void, @value=r0}, 0x20) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='esdfs\x00', 0x0, 0x0) 2.845115811s ago: executing program 1 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f00000001c0), 0xfec8) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000400)=""/108, 0x6c}], 0x2, &(0x7f0000000280)}, 0x8}, {{&(0x7f0000000480)=@rc, 0x80, &(0x7f0000000280)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0x1}], 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 2.844436603s ago: executing program 2 (id=327): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x1, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x888, 0x438, 0xf0, 0x438, 0x878, 0x230, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8e8) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x43403d0e, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xfffe, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x4}, {0x0}, 0x0, 0x0, 0x1, 0xe0}}], 0x90, 0x8004}, 0x0) 2.276100747s ago: executing program 5 (id=328): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x40, 0x8, 0x200}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @local}, {0x1, @multicast}, 0x4e, {0x2, 0x4e22, @broadcast}, 'syz_tun\x00'}) 1.926039074s ago: executing program 5 (id=329): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x5925e9d1, 0x3}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={0x0, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "09bba7cb6a"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x88}}, 0x0) 264.900693ms ago: executing program 5 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00') chdir(&(0x7f0000000380)='./bus\x00') r0 = fanotify_init(0x8, 0x800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x60) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) fanotify_mark(r0, 0x1, 0x1, r1, &(0x7f0000000000)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r2, 0x0, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000200)={0x9, 0x40, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 0s ago: executing program 4 (id=331): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) fanotify_init(0x200, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200fe80000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6cedccf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3413394e690b5692304343e44e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xd8}], 0x1}, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc01864d0, &(0x7f0000000000)={0x0, 0x1}) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 62.292413][ T5807] cgroup: Unknown subsys name 'net' [ 62.401198][ T5807] cgroup: Unknown subsys name 'cpuset' [ 62.409324][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.713676][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.050253][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.058787][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.068981][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.073846][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.077143][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.084815][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.092134][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.099410][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.113184][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.120916][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.129747][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.129969][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.138273][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.151311][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.153571][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.160608][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.166107][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.173025][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.187258][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.195478][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.199102][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.212664][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.218030][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.229476][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.231393][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.239703][ T5134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.248050][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.251687][ T5134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.261122][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.278258][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.614241][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 66.669025][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 66.846796][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 66.857343][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.865972][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.873639][ T5829] bridge_slave_0: entered allmulticast mode [ 66.880412][ T5829] bridge_slave_0: entered promiscuous mode [ 66.916557][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.924160][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.931494][ T5829] bridge_slave_1: entered allmulticast mode [ 66.939445][ T5829] bridge_slave_1: entered promiscuous mode [ 66.989378][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 67.026085][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 67.051227][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.063721][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.096346][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.105343][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.113067][ T5830] bridge_slave_0: entered allmulticast mode [ 67.120520][ T5830] bridge_slave_0: entered promiscuous mode [ 67.134007][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.141665][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.148955][ T5830] bridge_slave_1: entered allmulticast mode [ 67.155862][ T5830] bridge_slave_1: entered promiscuous mode [ 67.216968][ T5829] team0: Port device team_slave_0 added [ 67.228713][ T5829] team0: Port device team_slave_1 added [ 67.260596][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.276740][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.284208][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.291910][ T5817] bridge_slave_0: entered allmulticast mode [ 67.299004][ T5817] bridge_slave_0: entered promiscuous mode [ 67.356991][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.366971][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.375303][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.382512][ T5817] bridge_slave_1: entered allmulticast mode [ 67.389558][ T5817] bridge_slave_1: entered promiscuous mode [ 67.396511][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.403690][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.429720][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.489401][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.496368][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.522629][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.538502][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.545631][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.553227][ T5818] bridge_slave_0: entered allmulticast mode [ 67.559933][ T5818] bridge_slave_0: entered promiscuous mode [ 67.567086][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.574373][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.581759][ T5819] bridge_slave_0: entered allmulticast mode [ 67.588602][ T5819] bridge_slave_0: entered promiscuous mode [ 67.606573][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.620960][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.628492][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.635643][ T5818] bridge_slave_1: entered allmulticast mode [ 67.642551][ T5818] bridge_slave_1: entered promiscuous mode [ 67.649405][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.656494][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.664006][ T5819] bridge_slave_1: entered allmulticast mode [ 67.670789][ T5819] bridge_slave_1: entered promiscuous mode [ 67.688577][ T5830] team0: Port device team_slave_0 added [ 67.696021][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.731784][ T5830] team0: Port device team_slave_1 added [ 67.754455][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.766870][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.784498][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.796963][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.851276][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.858500][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.884619][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.901998][ T5829] hsr_slave_0: entered promiscuous mode [ 67.909082][ T5829] hsr_slave_1: entered promiscuous mode [ 67.918960][ T5817] team0: Port device team_slave_0 added [ 67.937504][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.944482][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.971734][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.996559][ T5817] team0: Port device team_slave_1 added [ 68.013628][ T5818] team0: Port device team_slave_0 added [ 68.021923][ T5819] team0: Port device team_slave_0 added [ 68.030578][ T5819] team0: Port device team_slave_1 added [ 68.058340][ T5818] team0: Port device team_slave_1 added [ 68.064577][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.071596][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.097986][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.152806][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.160036][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.186844][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.203374][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.210766][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.238038][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.248830][ T5836] Bluetooth: hci3: command tx timeout [ 68.252672][ T53] Bluetooth: hci2: command tx timeout [ 68.256724][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.267051][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.293430][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.316248][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.323432][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.349625][ T53] Bluetooth: hci4: command tx timeout [ 68.349739][ T5836] Bluetooth: hci0: command tx timeout [ 68.355409][ T53] Bluetooth: hci1: command tx timeout [ 68.366937][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.387727][ T5830] hsr_slave_0: entered promiscuous mode [ 68.394524][ T5830] hsr_slave_1: entered promiscuous mode [ 68.400926][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.409025][ T5830] Cannot create hsr debugfs directory [ 68.418144][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.425146][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.451787][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.505820][ T5817] hsr_slave_0: entered promiscuous mode [ 68.512439][ T5817] hsr_slave_1: entered promiscuous mode [ 68.518808][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.526364][ T5817] Cannot create hsr debugfs directory [ 68.542699][ T5819] hsr_slave_0: entered promiscuous mode [ 68.551525][ T5819] hsr_slave_1: entered promiscuous mode [ 68.557771][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.565341][ T5819] Cannot create hsr debugfs directory [ 68.625827][ T5818] hsr_slave_0: entered promiscuous mode [ 68.632593][ T5818] hsr_slave_1: entered promiscuous mode [ 68.639108][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.646661][ T5818] Cannot create hsr debugfs directory [ 68.904182][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.933629][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.945647][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.965727][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.004680][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.026882][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.041604][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.061433][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.110222][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.121062][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.134519][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.155747][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.210144][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.221559][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.233759][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.252761][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.344322][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.387336][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.404576][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.420771][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.435853][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.446707][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.465198][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.493675][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.503364][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.510857][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.540879][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.548205][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.578654][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.585782][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.634012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.641180][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.673742][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.683543][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.714313][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.764173][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.774351][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.781489][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.813960][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.821164][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.851516][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.870349][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.877500][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.912193][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.919400][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.995236][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.056004][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.063210][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.104700][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.111879][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.136060][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.161214][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.197041][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.328168][ T53] Bluetooth: hci3: command tx timeout [ 70.328463][ T5836] Bluetooth: hci2: command tx timeout [ 70.336051][ T5829] veth0_vlan: entered promiscuous mode [ 70.363118][ T5818] veth0_vlan: entered promiscuous mode [ 70.399652][ T5829] veth1_vlan: entered promiscuous mode [ 70.407577][ T5836] Bluetooth: hci1: command tx timeout [ 70.408396][ T53] Bluetooth: hci0: command tx timeout [ 70.412993][ T5836] Bluetooth: hci4: command tx timeout [ 70.428505][ T5818] veth1_vlan: entered promiscuous mode [ 70.483588][ T5829] veth0_macvtap: entered promiscuous mode [ 70.494552][ T5829] veth1_macvtap: entered promiscuous mode [ 70.505086][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.556538][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.617008][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.630291][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.643616][ T5818] veth0_macvtap: entered promiscuous mode [ 70.660648][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.670461][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.682542][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692952][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.714374][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.724468][ T5818] veth1_macvtap: entered promiscuous mode [ 70.833543][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.844397][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.856597][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.879007][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.891284][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.904652][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.915489][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.925051][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.934302][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.943414][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.972980][ T5830] veth0_vlan: entered promiscuous mode [ 71.000887][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.015817][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.038477][ T5817] veth0_vlan: entered promiscuous mode [ 71.053424][ T5819] veth0_vlan: entered promiscuous mode [ 71.086129][ T5817] veth1_vlan: entered promiscuous mode [ 71.096372][ T5830] veth1_vlan: entered promiscuous mode [ 71.109625][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.118550][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.163951][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.173181][ T5819] veth1_vlan: entered promiscuous mode [ 71.180167][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.265227][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.267333][ T5819] veth0_macvtap: entered promiscuous mode [ 71.304712][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.305910][ T5819] veth1_macvtap: entered promiscuous mode [ 71.321980][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.336031][ T5830] veth0_macvtap: entered promiscuous mode [ 71.353428][ T5830] veth1_macvtap: entered promiscuous mode [ 71.398927][ T5903] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 71.421354][ T5817] veth0_macvtap: entered promiscuous mode [ 71.458011][ T5903] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 71.475245][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.486474][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.496714][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.507340][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.518820][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.526527][ T5817] veth1_macvtap: entered promiscuous mode [ 71.564131][ T5904] dccp_v6_rcv: dropped packet with invalid checksum [ 71.589251][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.603112][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.616479][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.627662][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.640303][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.652023][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.665478][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.683843][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.698824][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.699019][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.730676][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.744093][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.760742][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.778384][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.831701][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.850375][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.863337][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.874404][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.895222][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.917833][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.938604][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.953222][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.963900][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.979923][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.999083][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.026607][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.037606][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.055753][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.066496][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.082220][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.096753][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.112880][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.124546][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.637918][ T5836] Bluetooth: hci3: command tx timeout [ 72.643390][ T5836] Bluetooth: hci2: command tx timeout [ 72.649519][ T5836] Bluetooth: hci4: command tx timeout [ 72.654962][ T5836] Bluetooth: hci0: command tx timeout [ 72.660482][ T5836] Bluetooth: hci1: command tx timeout [ 72.687689][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.701024][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.732114][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.762367][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.795539][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.824760][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.854022][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.884843][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.916871][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.943640][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.050138][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075055][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.097486][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.123261][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.219960][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.266279][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.316061][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362227][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.463558][ T5916] evm: overlay not supported [ 74.140826][ T5920] usb usb8: usbfs: process 5920 (syz.0.8) did not claim interface 0 before use [ 74.267861][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.268929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.295745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.306578][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.422733][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.434799][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.498568][ T57] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.519137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.527851][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.579308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.585059][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.587150][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.607072][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.658568][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 74.675744][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.687066][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.700439][ T57] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 74.716253][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.724921][ T57] usb 4-1: Product: syz [ 74.730652][ T5838] Bluetooth: hci1: command tx timeout [ 74.736789][ T5836] Bluetooth: hci0: command tx timeout [ 74.742553][ T53] Bluetooth: hci4: command tx timeout [ 74.748131][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.756933][ T53] Bluetooth: hci2: command tx timeout [ 74.762643][ T5836] Bluetooth: hci3: command tx timeout [ 74.769083][ T57] usb 4-1: Manufacturer: syz [ 74.773719][ T57] usb 4-1: SerialNumber: syz [ 74.783577][ T57] usb 4-1: config 0 descriptor?? [ 74.793717][ T57] hub 4-1:0.0: bad descriptor, ignoring hub [ 74.800112][ T57] hub 4-1:0.0: probe with driver hub failed with error -5 [ 74.850215][ T5935] smc: net device bond0 applied user defined pnetid SYZ2 [ 74.860396][ T5935] smc: net device bond0 erased user defined pnetid SYZ2 [ 75.190514][ T57] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 75.203251][ T5870] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 75.228011][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.241027][ T5870] usb 1-1: config 0 has no interfaces? [ 75.291650][ T78] usb 4-1: Failed to submit usb control message: -71 [ 75.305646][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.310446][ T78] usb 4-1: unable to send the bmi data to the device: -71 [ 75.323133][ T78] usb 4-1: unable to get target info from device [ 75.330553][ T78] usb 4-1: could not get target info (-71) [ 75.337200][ T78] usb 4-1: could not probe fw (-71) [ 75.358043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.368517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.368589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.428789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.438489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.473768][ T5870] usb 1-1: config 0 has no interfaces? [ 75.607659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.628422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.687886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.778286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.857676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.237062][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.248803][ T5870] usb 1-1: config 0 has no interfaces? [ 76.274367][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.296408][ T5870] usb 1-1: config 0 has no interfaces? [ 76.557322][ T5945] No such timeout policy "syz1" [ 76.569186][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.579623][ T5870] usb 1-1: config 0 has no interfaces? [ 76.586623][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.599842][ T5870] usb 1-1: config 0 has no interfaces? [ 76.607284][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.618923][ T5870] usb 1-1: config 0 has no interfaces? [ 76.625350][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.635806][ T5870] usb 1-1: config 0 has no interfaces? [ 76.645684][ T5870] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.659156][ T5870] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.678074][ T5870] usb 1-1: Product: syz [ 76.686675][ T5870] usb 1-1: Manufacturer: syz [ 76.698832][ T5870] usb 1-1: SerialNumber: syz [ 76.706894][ T5870] usb 1-1: config 0 descriptor?? [ 77.214772][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.349248][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.637628][ T5954] No such timeout policy "syz1" [ 77.851260][ T8] usb 1-1: USB disconnect, device number 2 [ 78.018826][ T5872] usb 4-1: USB disconnect, device number 2 [ 79.593161][ T29] audit: type=1800 audit(1736534759.583:2): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.14" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 79.701880][ T5973] can: request_module (can-proto-0) failed. [ 79.802480][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.846422][ T5977] FAULT_INJECTION: forcing a failure. [ 79.846422][ T5977] name failslab, interval 1, probability 0, space 0, times 1 [ 79.906344][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.0.20 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 79.916935][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.927026][ T5977] Call Trace: [ 79.930337][ T5977] [ 79.933288][ T5977] dump_stack_lvl+0x241/0x360 [ 79.938021][ T5977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.943265][ T5977] should_fail_ex+0x3b0/0x4e0 [ 79.947976][ T5977] should_failslab+0xac/0x100 [ 79.952683][ T5977] ? sock_alloc_inode+0x28/0xc0 [ 79.957565][ T5977] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 79.963313][ T5977] sock_alloc_inode+0x28/0xc0 [ 79.968014][ T5977] ? __pfx_sock_alloc_inode+0x10/0x10 [ 79.973408][ T5977] alloc_inode+0x65/0x1a0 [ 79.977767][ T5977] __sock_create+0x127/0xa30 [ 79.982388][ T5977] ? __might_fault+0xaa/0x120 [ 79.987090][ T5977] __sys_socketpair+0x2ca/0x720 [ 79.991975][ T5977] ? __pfx___sys_socketpair+0x10/0x10 [ 79.997390][ T5977] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.003411][ T5977] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.009777][ T5977] ? do_syscall_64+0x100/0x230 [ 80.014584][ T5977] __x64_sys_socketpair+0x9b/0xb0 [ 80.019649][ T5977] do_syscall_64+0xf3/0x230 [ 80.024194][ T5977] ? clear_bhb_loop+0x35/0x90 [ 80.028903][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.034849][ T5977] RIP: 0033:0x7f4138185d29 [ 80.039300][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.058922][ T5977] RSP: 002b:00007f4138f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.067342][ T5977] RAX: ffffffffffffffda RBX: 00007f4138375fa0 RCX: 00007f4138185d29 [ 80.075417][ T5977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d [ 80.083474][ T5977] RBP: 00007f4138f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 80.091446][ T5977] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 80.099417][ T5977] R13: 0000000000000000 R14: 00007f4138375fa0 R15: 00007ffc2ad39f98 [ 80.107405][ T5977] [ 80.110554][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.135096][ T5977] socket: no more sockets [ 80.159206][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 80.166071][ T8] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 80.175564][ T8] usb 3-1: config 0 has no interface number 0 [ 80.181879][ T8] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 80.210103][ T8] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 80.237654][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.272918][ T5993] ======================================================= [ 80.272918][ T5993] WARNING: The mand mount option has been deprecated and [ 80.272918][ T5993] and is ignored by this kernel. Remove the mand [ 80.272918][ T5993] option from the mount to silence this warning. [ 80.272918][ T5993] ======================================================= [ 80.307830][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.817964][ T8] usb 3-1: Product: syz [ 80.822691][ T8] usb 3-1: Manufacturer: syz [ 80.827420][ T8] usb 3-1: SerialNumber: syz [ 80.835300][ T8] usb 3-1: config 0 descriptor?? [ 81.593982][ T5999] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 81.942702][ T975] cfg80211: failed to load regulatory.db [ 82.018271][ T6004] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.034140][ T8] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 82.098980][ T8] usb 3-1: USB disconnect, device number 2 [ 82.386399][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.726433][ T6015] No such timeout policy "syz1" [ 82.943086][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.119045][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.391851][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.741498][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.754792][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.764269][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.785956][ T6026] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 83.957948][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.999262][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.513776][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.524521][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.554811][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.157700][ T6053] No such timeout policy "syz1" [ 85.236235][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.245024][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 85.253748][ T5838] Bluetooth: hci2: hardware error 0x00 [ 85.342131][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.456700][ T1145] bridge_slave_1: left allmulticast mode [ 85.464357][ T1145] bridge_slave_1: left promiscuous mode [ 85.549100][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.679393][ T1145] bridge_slave_0: left allmulticast mode [ 85.685116][ T1145] bridge_slave_0: left promiscuous mode [ 85.701370][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.845572][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 85.863150][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.874476][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.412036][ T5874] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 86.421237][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.429434][ T5874] usb 1-1: Product: syz [ 86.433635][ T5874] usb 1-1: Manufacturer: syz [ 86.438603][ T5874] usb 1-1: SerialNumber: syz [ 86.446500][ T5874] usb 1-1: config 0 descriptor?? [ 86.452848][ T5874] hub 1-1:0.0: bad descriptor, ignoring hub [ 86.458985][ T5874] hub 1-1:0.0: probe with driver hub failed with error -5 [ 86.498194][ T5874] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 86.538282][ T1154] usb 1-1: Failed to submit usb control message: -71 [ 86.545199][ T1154] usb 1-1: unable to send the bmi data to the device: -71 [ 86.627983][ T1154] usb 1-1: unable to get target info from device [ 86.634804][ T1154] usb 1-1: could not get target info (-71) [ 86.647131][ T1154] usb 1-1: could not probe fw (-71) [ 86.809660][ T5134] Bluetooth: hci3: command tx timeout [ 87.154590][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.174724][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.198436][ T1145] bond0 (unregistering): Released all slaves [ 87.553353][ T6029] chnl_net:caif_netlink_parms(): no params data found [ 87.699988][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 87.768435][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.912679][ T6091] macvlan0: entered promiscuous mode [ 87.998132][ T6101] dlm: no local IP address has been set [ 88.003942][ T6101] dlm: cannot start dlm midcomms -107 [ 88.196533][ T5874] usb 1-1: USB disconnect, device number 3 [ 88.890982][ T5838] Bluetooth: hci3: command tx timeout [ 88.907523][ T1145] hsr_slave_0: left promiscuous mode [ 88.952468][ T1145] hsr_slave_1: left promiscuous mode [ 89.010166][ T6126] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 89.065826][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.077550][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.105782][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.146191][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.180363][ T1145] veth1_macvtap: left promiscuous mode [ 89.196737][ T1145] veth0_macvtap: left promiscuous mode [ 89.206932][ T1145] veth1_vlan: left promiscuous mode [ 89.235890][ T1145] veth0_vlan: left promiscuous mode [ 90.011551][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 90.076323][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 90.531346][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.539594][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.546783][ T6029] bridge_slave_0: entered allmulticast mode [ 90.553962][ T6029] bridge_slave_0: entered promiscuous mode [ 90.629743][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.647298][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.665603][ T6029] bridge_slave_1: entered allmulticast mode [ 90.671760][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.802538][ T6029] bridge_slave_1: entered promiscuous mode [ 90.915898][ T8] usb 1-1: device descriptor read/64, error -71 [ 90.967927][ T5838] Bluetooth: hci3: command tx timeout [ 91.091093][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.313738][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.437826][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.487746][ T6029] team0: Port device team_slave_0 added [ 91.520063][ T6029] team0: Port device team_slave_1 added [ 91.577526][ T8] usb 1-1: device descriptor read/64, error -71 [ 91.687998][ T8] usb usb1-port1: attempt power cycle [ 91.713152][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.743284][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.847603][ T5930] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.869255][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.909320][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.946594][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.004301][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.016027][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 92.027084][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.050621][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.090766][ T5930] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 92.100290][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.118419][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.144022][ T5930] usb 3-1: Product: syz [ 92.159053][ T8] usb 1-1: device descriptor read/8, error -71 [ 92.175490][ T5930] usb 3-1: Manufacturer: syz [ 92.184113][ T5930] usb 3-1: SerialNumber: syz [ 92.202069][ T6029] hsr_slave_0: entered promiscuous mode [ 92.210219][ T5930] usb 3-1: config 0 descriptor?? [ 92.220161][ T5930] hub 3-1:0.0: bad descriptor, ignoring hub [ 92.226818][ T5930] hub 3-1:0.0: probe with driver hub failed with error -5 [ 92.235341][ T6029] hsr_slave_1: entered promiscuous mode [ 92.294396][ T5930] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 92.355800][ T51] usb 3-1: Failed to submit usb control message: -71 [ 92.390529][ T51] usb 3-1: unable to send the bmi data to the device: -71 [ 92.407915][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.436062][ T51] usb 3-1: unable to get target info from device [ 92.455676][ T51] usb 3-1: could not get target info (-71) [ 92.471510][ T8] usb 1-1: device descriptor read/8, error -71 [ 92.487541][ T51] usb 3-1: could not probe fw (-71) [ 92.620315][ T8] usb usb1-port1: unable to enumerate USB device [ 92.914104][ T6179] nvme_fabrics: missing parameter 'transport=%s' [ 92.957871][ T6179] nvme_fabrics: missing parameter 'nqn=%s' [ 92.963564][ T6029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.993620][ T6029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.017028][ T6029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.053039][ T5838] Bluetooth: hci3: command tx timeout [ 93.055944][ T6029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.173509][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.216095][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.264387][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.271611][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.309259][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.316454][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.499617][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 93.649823][ T6208] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.661766][ T29] audit: type=1326 audit(1736534773.643:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.4.61" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f6bb85d29 code=0x0 [ 93.670973][ T6210] capability: warning: `syz.0.62' uses 32-bit capabilities (legacy support in use) [ 93.991721][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.263077][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 94.827816][ T57] usb 3-1: USB disconnect, device number 3 [ 95.641667][ T6029] veth0_vlan: entered promiscuous mode [ 95.967798][ T6029] veth1_vlan: entered promiscuous mode [ 96.016910][ T6029] veth0_macvtap: entered promiscuous mode [ 96.030617][ T6029] veth1_macvtap: entered promiscuous mode [ 96.045313][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.055848][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.065777][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.076309][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.086333][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.096850][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.106819][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.117663][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.130180][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.163531][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.184734][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.237424][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.267158][ T6270] devtmpfs: Too few inodes for current use [ 96.269911][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.306188][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.356080][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.379799][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.417564][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.446700][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.520366][ T6029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.537420][ T6029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.546169][ T6029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.555096][ T6029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638435][ T6278] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.646444][ T6278] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 96.656133][ T6278] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.664174][ T6278] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 97.540350][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.569975][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.664157][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.715174][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.146754][ T6305] tipc: Started in network mode [ 98.174565][ T6305] tipc: Node identity 228a5c7b9db8, cluster identity 4711 [ 98.221193][ T6305] tipc: Enabled bearer , priority 0 [ 98.261592][ T6307] syzkaller0: entered promiscuous mode [ 98.275237][ T6307] syzkaller0: entered allmulticast mode [ 98.312383][ T6305] syzkaller0: mtu greater than device maximum [ 98.357992][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.388180][ T6303] tipc: Resetting bearer [ 98.421709][ T6303] tipc: Disabling bearer [ 98.547854][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 98.584861][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.632028][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.651886][ T5871] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 98.686846][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.703445][ T5871] usb 3-1: Product: syz [ 98.734862][ T5871] usb 3-1: Manufacturer: syz [ 98.740091][ T5871] usb 3-1: SerialNumber: syz [ 98.787166][ T5871] usb 3-1: config 0 descriptor?? [ 98.807847][ T5871] hub 3-1:0.0: bad descriptor, ignoring hub [ 98.813836][ T5871] hub 3-1:0.0: probe with driver hub failed with error -5 [ 98.867934][ T29] audit: type=1800 audit(1736534778.853:4): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.78" name="bus" dev="overlay" ino=113 res=0 errno=0 [ 98.923967][ T5871] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 98.924897][ T6316] sctp: failed to load transform for md5: -2 [ 98.972360][ T5924] usb 3-1: Failed to submit usb control message: -71 [ 98.981540][ T5924] usb 3-1: unable to send the bmi data to the device: -71 [ 98.988910][ T5924] usb 3-1: unable to get target info from device [ 98.995502][ T5924] usb 3-1: could not get target info (-71) [ 99.002463][ T5924] usb 3-1: could not probe fw (-71) [ 99.239669][ T6329] netlink: 76 bytes leftover after parsing attributes in process `syz.1.78'. [ 99.521052][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.80'. [ 100.815310][ T6356] devtmpfs: Too few inodes for current use [ 101.267991][ T5930] usb 3-1: USB disconnect, device number 4 [ 101.561511][ T6375] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.569528][ T6375] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 101.578544][ T6375] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 101.586441][ T6375] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 102.594827][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.957606][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.101927][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.113262][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.123607][ T5930] usb 6-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 103.127523][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.132785][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.147601][ T5874] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 103.153730][ T5930] usb 6-1: config 0 descriptor?? [ 103.177067][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.208577][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.237753][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.376427][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.387423][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.396348][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.404334][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.423331][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.447451][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.476790][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.487491][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.498055][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.504780][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 103.514578][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.525250][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 103.536570][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.545792][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.555832][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.572020][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.582232][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 103.593759][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.609368][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.613044][ T5930] wacom 0003:056A:0028.0001: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 103.619690][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.653746][ T5871] usb 3-1: config 0 descriptor?? [ 103.660883][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.681145][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.681933][ T5930] wacom 0003:056A:0028.0001: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.5-1/input0 [ 103.713963][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.748814][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.756603][ T5930] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0028.0001/input/input7 [ 103.769226][ T5874] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.783484][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.790333][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.800124][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.821347][ T6404] syz_tun: entered allmulticast mode [ 103.881617][ T5874] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.905300][ T5874] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.917205][ T5930] usb 6-1: USB disconnect, device number 2 [ 103.964315][ T5874] usb 5-1: Product: syz [ 103.974651][ T5874] usb 5-1: Manufacturer: syz [ 103.986508][ T6404] syz_tun: left allmulticast mode [ 103.995648][ T5874] usb 5-1: SerialNumber: syz [ 104.031007][ T5874] usb 5-1: config 0 descriptor?? [ 104.070449][ T5874] yurex 5-1:0.0: Could not find endpoints [ 104.529633][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.580510][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.715887][ T975] usb 5-1: USB disconnect, device number 2 [ 105.277755][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.477588][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 105.529161][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.814555][ T5874] usb 3-1: USB disconnect, device number 5 [ 105.837535][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 105.852186][ T5871] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 105.880136][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.037119][ T5871] usb 6-1: Product: syz [ 106.041773][ T5871] usb 6-1: Manufacturer: syz [ 106.047068][ T5871] usb 6-1: SerialNumber: syz [ 106.054401][ T5871] usb 6-1: config 0 descriptor?? [ 106.060983][ T5871] hub 6-1:0.0: bad descriptor, ignoring hub [ 106.066974][ T5871] hub 6-1:0.0: probe with driver hub failed with error -5 [ 106.098824][ T5871] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 106.167652][ T6446] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 106.175477][ T6446] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.184302][ T6446] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 106.192157][ T6446] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 106.683863][ T1145] usb 6-1: Failed to submit usb control message: -113 [ 106.903873][ T1145] usb 6-1: unable to send the bmi data to the device: -113 [ 106.917633][ T6451] FAULT_INJECTION: forcing a failure. [ 106.917633][ T6451] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.936149][ T1145] usb 6-1: unable to get target info from device [ 106.953489][ T6451] CPU: 1 UID: 0 PID: 6451 Comm: syz.4.99 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 106.964125][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.974210][ T6451] Call Trace: [ 106.977504][ T6451] [ 106.980445][ T6451] dump_stack_lvl+0x241/0x360 [ 106.985146][ T6451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.990359][ T6451] ? __pfx__printk+0x10/0x10 [ 106.994980][ T6451] ? snprintf+0xda/0x120 [ 106.999248][ T6451] should_fail_ex+0x3b0/0x4e0 [ 107.003950][ T6451] _copy_to_user+0x31/0xb0 [ 107.008369][ T6451] simple_read_from_buffer+0xca/0x150 [ 107.013740][ T6451] proc_fail_nth_read+0x1e9/0x250 [ 107.018767][ T6451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.024308][ T6451] ? rw_verify_area+0x55e/0x6f0 [ 107.029152][ T6451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.034692][ T6451] vfs_read+0x1fc/0xb70 [ 107.038844][ T6451] ? __pfx___mutex_lock+0x10/0x10 [ 107.043870][ T6451] ? __pfx_vfs_read+0x10/0x10 [ 107.048545][ T6451] ? __fget_files+0x2a/0x410 [ 107.053129][ T6451] ? __fget_files+0x395/0x410 [ 107.057794][ T6451] ? __fget_files+0x2a/0x410 [ 107.062394][ T6451] ksys_read+0x18f/0x2b0 [ 107.066659][ T6451] ? __pfx_ksys_read+0x10/0x10 [ 107.071450][ T6451] ? do_syscall_64+0x100/0x230 [ 107.076227][ T6451] ? do_syscall_64+0xb6/0x230 [ 107.080908][ T6451] do_syscall_64+0xf3/0x230 [ 107.085499][ T6451] ? clear_bhb_loop+0x35/0x90 [ 107.090180][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.096077][ T6451] RIP: 0033:0x7f2f6bb8473c [ 107.100486][ T6451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.120095][ T6451] RSP: 002b:00007f2f6c8d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.128526][ T6451] RAX: ffffffffffffffda RBX: 00007f2f6bd75fa0 RCX: 00007f2f6bb8473c [ 107.136487][ T6451] RDX: 000000000000000f RSI: 00007f2f6c8d30a0 RDI: 0000000000000004 [ 107.144447][ T6451] RBP: 00007f2f6c8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 107.152401][ T6451] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 107.160357][ T6451] R13: 0000000000000000 R14: 00007f2f6bd75fa0 R15: 00007ffc4aa20028 [ 107.168345][ T6451] [ 107.171441][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.220926][ T1145] usb 6-1: could not get target info (-113) [ 107.231221][ T1145] usb 6-1: could not probe fw (-113) [ 107.351867][ T6453] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 107.629989][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 108.088368][ T5874] usb 6-1: USB disconnect, device number 3 [ 108.492008][ T6479] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 108.632855][ T6479] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.322095][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.542995][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 110.605978][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.631820][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.644397][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.655169][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.678709][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.700044][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.715421][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.726840][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.742527][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.771380][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.805443][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.826983][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.853992][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.869931][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.884167][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.895789][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.041135][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.052703][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.061771][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.074825][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.085641][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.096938][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.110546][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.125946][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.722166][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 111.731495][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 111.740162][ T9] usb 2-1: Product: syz [ 111.749971][ T9] usb 2-1: Manufacturer: syz [ 111.759100][ T9] usb 2-1: SerialNumber: syz [ 111.789224][ T9] usb 2-1: config 0 descriptor?? [ 111.825186][ T9] yurex 2-1:0.0: Could not find endpoints [ 113.115948][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.124808][ T29] audit: type=1800 audit(1736534793.113:5): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.115" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 113.168338][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.192661][ T8] usb 2-1: USB disconnect, device number 2 [ 113.747894][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.832355][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.949036][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.990903][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.047872][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 114.063871][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.451306][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.461911][ T8] usb 5-1: Product: syz [ 114.652937][ T9] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 114.674689][ T8] usb 5-1: Manufacturer: syz [ 114.679515][ T8] usb 5-1: SerialNumber: syz [ 114.685075][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.700917][ T8] usb 5-1: config 0 descriptor?? [ 114.707317][ T9] usb 1-1: config 0 descriptor?? [ 114.886248][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.895579][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 115.612632][ T8] usb 5-1: USB disconnect, device number 3 [ 115.689925][ T9] betop 0003:11C2:2208.0003: unknown main item tag 0x0 [ 115.700040][ T9] betop 0003:11C2:2208.0003: unknown main item tag 0x0 [ 115.731063][ T9] betop 0003:11C2:2208.0003: unknown main item tag 0x0 [ 115.763068][ T9] betop 0003:11C2:2208.0003: unknown main item tag 0x0 [ 115.801326][ T9] betop 0003:11C2:2208.0003: unknown main item tag 0x0 [ 115.824852][ T9] betop 0003:11C2:2208.0003: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 115.864285][ T9] betop 0003:11C2:2208.0003: no inputs found [ 118.384635][ T57] usb 1-1: USB disconnect, device number 8 [ 118.954533][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.133'. [ 119.047913][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.268489][ T57] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 119.360500][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.373778][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.389970][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.404726][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.423723][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.434010][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.443071][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.456390][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.482851][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.493161][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.502195][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.515163][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.547497][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.560645][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.570114][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.583419][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.599416][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.615508][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.625577][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.657754][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.675682][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.890216][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.900316][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.913787][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.922304][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.933004][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.690394][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.703407][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.718419][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.729888][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.738942][ T57] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.760979][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.557585][ T57] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.566978][ T57] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.575492][ T57] usb 5-1: Product: syz [ 121.579785][ T57] usb 5-1: Manufacturer: syz [ 121.584414][ T57] usb 5-1: SerialNumber: syz [ 121.617135][ T57] usb 5-1: config 0 descriptor?? [ 121.661712][ T57] yurex 5-1:0.0: Could not find endpoints [ 121.800747][ T6650] netlink: 'syz.4.141': attribute type 10 has an invalid length. [ 121.840131][ T57] usb 5-1: USB disconnect, device number 4 [ 121.916701][ T6650] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.194058][ T6622] syz.0.135 (6622): drop_caches: 2 [ 122.199665][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.362114][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 122.388524][ T57] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 122.403992][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.417923][ T57] usb 5-1: Product: syz [ 122.433917][ T57] usb 5-1: Manufacturer: syz [ 122.454140][ T57] usb 5-1: SerialNumber: syz [ 122.755071][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.931706][ T57] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 123.016209][ T57] usb 5-1: USB disconnect, device number 5 [ 123.406674][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.111195][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.146'. [ 124.408137][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.578339][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 124.646918][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 124.787447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.849880][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.871965][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.908031][ T9] usb 2-1: Product: syz [ 124.933766][ T9] usb 2-1: Manufacturer: syz [ 124.956141][ T9] usb 2-1: SerialNumber: syz [ 124.978783][ T9] usb 2-1: config 0 descriptor?? [ 124.991380][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 125.019583][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 126.236278][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.257711][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 126.328312][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.236763][ T6719] usb usb8: usbfs: process 6719 (syz.2.153) did not claim interface 0 before use [ 127.289354][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 127.296732][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 127.310150][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 127.385803][ T6728] netlink: 'syz.4.154': attribute type 4 has an invalid length. [ 127.416518][ T8] usb 2-1: USB disconnect, device number 3 [ 127.434627][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 127.487165][ T8] em28xx 2-1:0.0: Freeing device [ 127.507715][ T6725] netlink: 'syz.4.154': attribute type 4 has an invalid length. [ 127.737997][ T5874] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.958065][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 128.042429][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.188278][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.202483][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.211288][ T5874] usb 3-1: Product: syz [ 128.359190][ T5874] usb 3-1: Manufacturer: syz [ 128.364301][ T5874] usb 3-1: SerialNumber: syz [ 128.375997][ T5874] cdc_ether 3-1:1.0: skipping garbage [ 128.390778][ T5874] usb 3-1: bad CDC descriptors [ 129.423729][ T5871] usb 3-1: USB disconnect, device number 6 [ 129.760236][ T6774] usb usb8: usbfs: process 6774 (syz.1.165) did not claim interface 0 before use [ 131.369172][ T6830] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 133.132624][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139905][ T6853] Zero length message leads to an empty skb [ 133.148243][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.150690][ T6853] usb usb8: usbfs: process 6853 (syz.5.176) did not claim interface 0 before use [ 133.777489][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.834429][ T6861] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 133.928039][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 133.936894][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.956887][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.973949][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.986817][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.003818][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.025183][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.035624][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.062606][ T9] usb 6-1: Manufacturer: syz [ 134.118859][ T9] usb 6-1: config 0 descriptor?? [ 134.178948][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 134.185456][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 134.499434][ T58] libceph: connect (1)[c::]:6789 error -101 [ 134.505536][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 134.629703][ T9] rc_core: IR keymap rc-hauppauge not found [ 134.654535][ T9] Registered IR keymap rc-empty [ 134.667734][ T6872] process 'syz.4.182' launched './file2' with NULL argv: empty string added [ 134.686255][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.718226][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.744934][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 134.759774][ T6863] ceph: No mds server is up or the cluster is laggy [ 134.783081][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 134.810025][ T6872] ipt_REJECT: TCP_RESET invalid for non-tcp [ 134.847618][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.887637][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.001349][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.076044][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.165341][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.242876][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.271680][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.297807][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.317595][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.337574][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.383168][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 135.473598][ T9] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 135.564181][ T9] usb 6-1: USB disconnect, device number 4 [ 135.668840][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.828652][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 135.843767][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.927435][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.971309][ T5873] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 136.039074][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.087561][ T5873] usb 5-1: Product: syz [ 136.097451][ T5873] usb 5-1: Manufacturer: syz [ 136.133577][ T5873] usb 5-1: SerialNumber: syz [ 136.259761][ T5873] usb 5-1: config 0 descriptor?? [ 136.267716][ T5873] hub 5-1:0.0: bad descriptor, ignoring hub [ 136.275121][ T5873] hub 5-1:0.0: probe with driver hub failed with error -5 [ 136.463291][ T5873] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 136.593943][ T12] usb 5-1: Failed to submit usb control message: -71 [ 136.603711][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 136.615840][ T12] usb 5-1: unable to get target info from device [ 136.623796][ T12] usb 5-1: could not get target info (-71) [ 136.630295][ T12] usb 5-1: could not probe fw (-71) [ 137.369795][ T6910] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.391139][ T6909] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.854710][ T57] usb 5-1: USB disconnect, device number 6 [ 140.966158][ T6955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.981351][ T6955] FAULT_INJECTION: forcing a failure. [ 140.981351][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 140.994197][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.5.205 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 141.004805][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.014988][ T6955] Call Trace: [ 141.018282][ T6955] [ 141.021224][ T6955] dump_stack_lvl+0x241/0x360 [ 141.025926][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.031146][ T6955] ? __pfx__printk+0x10/0x10 [ 141.035760][ T6955] ? fs_reclaim_acquire+0x93/0x130 [ 141.040890][ T6955] ? __pfx___might_resched+0x10/0x10 [ 141.046219][ T6955] should_fail_ex+0x3b0/0x4e0 [ 141.050931][ T6955] should_failslab+0xac/0x100 [ 141.055640][ T6955] __kmalloc_noprof+0xdd/0x4c0 [ 141.060421][ T6955] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.066166][ T6955] tomoyo_realpath_from_path+0xcf/0x5e0 [ 141.071743][ T6955] tomoyo_path_number_perm+0x236/0x860 [ 141.077222][ T6955] ? tomoyo_path_number_perm+0x206/0x860 [ 141.082871][ T6955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.088870][ T6955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.094902][ T6955] ? irqentry_exit+0x63/0x90 [ 141.099513][ T6955] ? lockdep_hardirqs_on+0x99/0x150 [ 141.104741][ T6955] ? __se_sys_ioctl+0x2c/0x170 [ 141.109532][ T6955] security_file_ioctl+0xc6/0x2a0 [ 141.114578][ T6955] __se_sys_ioctl+0x46/0x170 [ 141.119189][ T6955] do_syscall_64+0xf3/0x230 [ 141.123713][ T6955] ? clear_bhb_loop+0x35/0x90 [ 141.128409][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.134327][ T6955] RIP: 0033:0x7fd5a0185d29 [ 141.138754][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.158382][ T6955] RSP: 002b:00007fd5a1038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.166828][ T6955] RAX: ffffffffffffffda RBX: 00007fd5a0376160 RCX: 00007fd5a0185d29 [ 141.174836][ T6955] RDX: 0000000020000200 RSI: 0000000000008b26 RDI: 0000000000000007 [ 141.182838][ T6955] RBP: 00007fd5a1038090 R08: 0000000000000000 R09: 0000000000000000 [ 141.190829][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.198816][ T6955] R13: 0000000000000000 R14: 00007fd5a0376160 R15: 00007ffc67faf488 [ 141.206820][ T6955] [ 141.212586][ T6955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.349757][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.517546][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 141.527903][ T5873] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 141.536169][ T5873] usb 5-1: config 0 has no interface number 0 [ 141.556457][ T5873] usb 5-1: config 0 interface 30 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.594353][ T5873] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 141.665123][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.716853][ T5873] usb 5-1: config 0 descriptor?? [ 141.739403][ T5873] usbhid 5-1:0.30: couldn't find an input interrupt endpoint [ 141.827764][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 141.977501][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 141.994956][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.017775][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 142.039738][ T5871] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 142.067911][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.086189][ T5871] usb 6-1: Product: syz [ 142.096305][ T5871] usb 6-1: Manufacturer: syz [ 142.106423][ T5871] usb 6-1: SerialNumber: syz [ 142.118607][ T5871] usb 6-1: config 0 descriptor?? [ 142.137583][ T5871] hub 6-1:0.0: bad descriptor, ignoring hub [ 142.143558][ T5871] hub 6-1:0.0: probe with driver hub failed with error -5 [ 142.171274][ T5871] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 142.202614][ T51] usb 6-1: Failed to submit usb control message: -71 [ 142.210248][ T51] usb 6-1: unable to send the bmi data to the device: -71 [ 142.226453][ T51] usb 6-1: unable to get target info from device [ 142.246873][ T51] usb 6-1: could not get target info (-71) [ 142.267179][ T51] usb 6-1: could not probe fw (-71) [ 143.231883][ T6979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.210'. [ 143.296288][ T6979] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 143.909744][ T8] usb 5-1: USB disconnect, device number 7 [ 144.051949][ T6986] FAULT_INJECTION: forcing a failure. [ 144.051949][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.087602][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.4.212 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 144.098260][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.108316][ T6986] Call Trace: [ 144.111600][ T6986] [ 144.114529][ T6986] dump_stack_lvl+0x241/0x360 [ 144.119250][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.124445][ T6986] ? __pfx__printk+0x10/0x10 [ 144.129042][ T6986] ? __pfx_lock_release+0x10/0x10 [ 144.134067][ T6986] should_fail_ex+0x3b0/0x4e0 [ 144.138756][ T6986] _copy_from_iter+0x1e9/0x1c20 [ 144.143615][ T6986] ? __virt_addr_valid+0x183/0x530 [ 144.148738][ T6986] ? __alloc_skb+0x28f/0x440 [ 144.153412][ T6986] ? __pfx__copy_from_iter+0x10/0x10 [ 144.158702][ T6986] ? __virt_addr_valid+0x183/0x530 [ 144.163815][ T6986] ? __virt_addr_valid+0x183/0x530 [ 144.168935][ T6986] ? __virt_addr_valid+0x45f/0x530 [ 144.174041][ T6986] ? __phys_addr_symbol+0x2f/0x70 [ 144.179084][ T6986] ? __check_object_size+0x47a/0x730 [ 144.184412][ T6986] netlink_sendmsg+0x73d/0xcb0 [ 144.189201][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.194499][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.199781][ T6986] __sock_sendmsg+0x221/0x270 [ 144.204813][ T6986] ____sys_sendmsg+0x52a/0x7e0 [ 144.209577][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.214856][ T6986] ? __fget_files+0x2a/0x410 [ 144.219446][ T6986] ? __fget_files+0x2a/0x410 [ 144.224042][ T6986] __sys_sendmsg+0x269/0x350 [ 144.228818][ T6986] ? __pfx_lock_release+0x10/0x10 [ 144.233839][ T6986] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.238952][ T6986] ? __pfx_vfs_write+0x10/0x10 [ 144.243740][ T6986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.250423][ T6986] ? do_syscall_64+0x100/0x230 [ 144.255191][ T6986] ? do_syscall_64+0xb6/0x230 [ 144.259895][ T6986] do_syscall_64+0xf3/0x230 [ 144.264658][ T6986] ? clear_bhb_loop+0x35/0x90 [ 144.269343][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.275235][ T6986] RIP: 0033:0x7f2f6bb85d29 [ 144.279647][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.299247][ T6986] RSP: 002b:00007f2f6c8d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.307661][ T6986] RAX: ffffffffffffffda RBX: 00007f2f6bd75fa0 RCX: 00007f2f6bb85d29 [ 144.315803][ T6986] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 144.323769][ T6986] RBP: 00007f2f6c8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 144.331735][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.339699][ T6986] R13: 0000000000000000 R14: 00007f2f6bd75fa0 R15: 00007ffc4aa20028 [ 144.347682][ T6986] [ 144.447972][ T6988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.213'. [ 144.718134][ T5871] usb 6-1: USB disconnect, device number 5 [ 149.177601][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.350256][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 149.363036][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.394935][ T7039] capability: warning: `syz.4.227' uses deprecated v2 capabilities in a way that may be insecure [ 149.416350][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.435424][ T8] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 149.460759][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.477502][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.496552][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.506721][ T8] usb 6-1: Product: syz [ 149.515974][ T8] usb 6-1: Manufacturer: syz [ 149.538485][ T8] usb 6-1: SerialNumber: syz [ 149.628455][ T8] usb 6-1: config 0 descriptor?? [ 149.636633][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 149.646715][ T8] hub 6-1:0.0: probe with driver hub failed with error -5 [ 149.697444][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.723605][ T8] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 149.752720][ T5924] usb 6-1: Failed to submit usb control message: -71 [ 149.762817][ T5924] usb 6-1: unable to send the bmi data to the device: -71 [ 149.776704][ T5924] usb 6-1: unable to get target info from device [ 149.786974][ T5924] usb 6-1: could not get target info (-71) [ 149.793508][ T5924] usb 6-1: could not probe fw (-71) [ 149.825260][ T7047] FAULT_INJECTION: forcing a failure. [ 149.825260][ T7047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.839928][ T9] usb 5-1: device descriptor read/64, error -71 [ 149.860702][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.1.228 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 149.871325][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.881379][ T7047] Call Trace: [ 149.884660][ T7047] [ 149.887605][ T7047] dump_stack_lvl+0x241/0x360 [ 149.892299][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.897492][ T7047] ? __pfx__printk+0x10/0x10 [ 149.902076][ T7047] ? __pfx_lock_release+0x10/0x10 [ 149.907101][ T7047] should_fail_ex+0x3b0/0x4e0 [ 149.911774][ T7047] _copy_from_iter+0x1e9/0x1c20 [ 149.916620][ T7047] ? __virt_addr_valid+0x183/0x530 [ 149.921733][ T7047] ? __alloc_skb+0x28f/0x440 [ 149.926315][ T7047] ? __pfx__copy_from_iter+0x10/0x10 [ 149.931593][ T7047] ? __virt_addr_valid+0x183/0x530 [ 149.936713][ T7047] ? __virt_addr_valid+0x183/0x530 [ 149.941819][ T7047] ? __virt_addr_valid+0x45f/0x530 [ 149.946927][ T7047] ? __phys_addr_symbol+0x2f/0x70 [ 149.951941][ T7047] ? __check_object_size+0x47a/0x730 [ 149.957223][ T7047] netlink_sendmsg+0x73d/0xcb0 [ 149.961984][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.967265][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.972540][ T7047] __sock_sendmsg+0x221/0x270 [ 149.977220][ T7047] ____sys_sendmsg+0x52a/0x7e0 [ 149.981985][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.987258][ T7047] ? __fget_files+0x2a/0x410 [ 149.991835][ T7047] ? __fget_files+0x2a/0x410 [ 149.996415][ T7047] __sys_sendmsg+0x269/0x350 [ 150.000991][ T7047] ? __pfx_lock_release+0x10/0x10 [ 150.006025][ T7047] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.011166][ T7047] ? __pfx_vfs_write+0x10/0x10 [ 150.015938][ T7047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.022259][ T7047] ? do_syscall_64+0x100/0x230 [ 150.027021][ T7047] ? do_syscall_64+0xb6/0x230 [ 150.031692][ T7047] do_syscall_64+0xf3/0x230 [ 150.036190][ T7047] ? clear_bhb_loop+0x35/0x90 [ 150.040860][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.046744][ T7047] RIP: 0033:0x7f2661b85d29 [ 150.051148][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.070746][ T7047] RSP: 002b:00007f2662a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.079170][ T7047] RAX: ffffffffffffffda RBX: 00007f2661d75fa0 RCX: 00007f2661b85d29 [ 150.087149][ T7047] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 150.095114][ T7047] RBP: 00007f2662a94090 R08: 0000000000000000 R09: 0000000000000000 [ 150.103097][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.111063][ T7047] R13: 0000000000000000 R14: 00007f2661d75fa0 R15: 00007ffdefd83bf8 [ 150.119046][ T7047] [ 150.122219][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.267785][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.408321][ T9] usb 5-1: device descriptor read/64, error -71 [ 150.537465][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.627743][ T9] usb usb5-port1: attempt power cycle [ 150.728354][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 150.738298][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.747952][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.758322][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.766512][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.776378][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.787086][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.795532][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.804897][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.815478][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.823830][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.833350][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.843510][ T5930] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.851230][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.859654][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.869456][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.881099][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.889530][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.899153][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.909895][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.918321][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.928280][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.938895][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.947311][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.957018][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 150.967278][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.974316][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.985882][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 150.995638][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.004710][ T8] usb 2-1: Product: syz [ 151.009812][ T9] usb 5-1: device descriptor read/8, error -71 [ 151.016888][ T8] usb 2-1: Manufacturer: syz [ 151.021792][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 151.027495][ T8] usb 2-1: SerialNumber: syz [ 151.035244][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 151.048941][ T8] usb 2-1: config 0 descriptor?? [ 151.054070][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.064829][ T8] yurex 2-1:0.0: Could not find endpoints [ 151.080692][ T5930] usb 1-1: config 0 descriptor?? [ 151.102589][ T5930] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 151.123707][ T5930] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.139378][ T5930] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 151.146626][ T5930] usb 1-1: media controller created [ 151.168210][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.202087][ T5930] usb 1-1: selecting invalid altsetting 1 [ 151.208723][ T5930] set interface failed [ 151.209456][ T5930] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 151.221854][ T5930] error writing reg: 0xff, val: 0x00 [ 151.257542][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.289437][ T5930] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 151.318261][ T9] usb 5-1: device descriptor read/8, error -71 [ 151.427823][ T9] usb usb5-port1: unable to enumerate USB device [ 151.479288][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.491014][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.501516][ T9] usb 2-1: USB disconnect, device number 4 [ 151.741338][ T9] usb 1-1: USB disconnect, device number 9 [ 151.843815][ T57] usb 6-1: USB disconnect, device number 6 [ 153.296173][ T7077] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 153.591579][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 154.777818][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.837728][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.993164][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.003015][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.118422][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 155.119784][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.140436][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 155.141307][ T58] usb 5-1: config 162 has an invalid interface number: 164 but max is 1 [ 155.150816][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.169276][ T9] usb 1-1: Product: syz [ 155.675005][ T58] usb 5-1: config 162 has an invalid interface number: 211 but max is 1 [ 155.684182][ T58] usb 5-1: config 162 has no interface number 0 [ 155.691291][ T58] usb 5-1: config 162 has no interface number 1 [ 155.699268][ T58] usb 5-1: config 162 interface 164 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.714135][ T58] usb 5-1: config 162 interface 211 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 155.725730][ T58] usb 5-1: config 162 interface 211 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 155.738303][ T58] usb 5-1: config 162 interface 211 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 155.750503][ T58] usb 5-1: config 162 interface 211 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 155.761519][ T58] usb 5-1: config 162 interface 211 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.918332][ T9] usb 1-1: Manufacturer: syz [ 155.923048][ T9] usb 1-1: SerialNumber: syz [ 155.930693][ T9] usb 1-1: config 0 descriptor?? [ 155.938207][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.944229][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 155.984750][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 155.985601][ T58] usb 5-1: config 162 interface 164 has no altsetting 0 [ 156.001356][ T58] usb 5-1: config 162 interface 211 has no altsetting 0 [ 156.013103][ T2944] usb 1-1: Failed to submit usb control message: -71 [ 156.039471][ T2944] usb 1-1: unable to send the bmi data to the device: -71 [ 156.059250][ T2944] usb 1-1: unable to get target info from device [ 156.065640][ T2944] usb 1-1: could not get target info (-71) [ 156.248039][ T2944] usb 1-1: could not probe fw (-71) [ 156.382599][ T58] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a47, bcdDevice=a0.b8 [ 156.391779][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.410254][ T58] usb 5-1: can't set config #162, error -71 [ 156.419111][ T58] usb 5-1: USB disconnect, device number 12 [ 157.989851][ T7123] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 157.997808][ T7123] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 158.006241][ T7123] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.016249][ T7123] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 158.909384][ T7125] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.917241][ T7125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 158.926124][ T7125] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.933990][ T7125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 159.557712][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.727790][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 159.748537][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.782895][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.796692][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.813167][ T5919] usb 3-1: Product: syz [ 159.863553][ T5919] usb 3-1: Manufacturer: syz [ 159.891268][ T5919] usb 3-1: SerialNumber: syz [ 160.017835][ T5919] cdc_ether 3-1:1.0: skipping garbage [ 160.026859][ T5919] usb 3-1: bad CDC descriptors [ 160.316642][ T5930] usb 3-1: USB disconnect, device number 7 [ 160.897740][ T5930] usb 1-1: USB disconnect, device number 10 [ 163.057498][ T7170] netlink: 'syz.0.263': attribute type 2 has an invalid length. [ 163.065329][ T7170] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 163.073560][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.263'. [ 163.413274][ T7175] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.421347][ T7175] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 163.430391][ T7175] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.438399][ T7175] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 164.347428][ T29] audit: type=1800 audit(1736534844.323:6): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.263" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 166.299321][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 166.508873][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 166.526849][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.537265][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.581895][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 166.591191][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.599678][ T9] usb 6-1: Product: syz [ 166.603870][ T9] usb 6-1: Manufacturer: syz [ 166.608726][ T9] usb 6-1: SerialNumber: syz [ 166.664320][ T9] usb 6-1: config 0 descriptor?? [ 166.671102][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 166.677118][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 166.789650][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 166.824418][ T51] usb 6-1: Failed to submit usb control message: -71 [ 166.844890][ T51] usb 6-1: unable to send the bmi data to the device: -71 [ 166.861869][ T51] usb 6-1: unable to get target info from device [ 166.868440][ T51] usb 6-1: could not get target info (-71) [ 166.874650][ T51] usb 6-1: could not probe fw (-71) [ 167.113058][ T7220] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.120960][ T7220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.129898][ T7220] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.137749][ T7220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 167.626096][ T7228] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 168.192389][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 168.478119][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 170.537751][ T9] usb 6-1: USB disconnect, device number 7 [ 171.343019][ T7273] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.351138][ T7273] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 171.360088][ T7273] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.368053][ T7273] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 172.135909][ T7276] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 172.227877][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 172.890109][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.293'. [ 173.403362][ T7300] IPVS: set_ctl: invalid protocol: 115 172.30.1.3:20003 [ 173.432444][ T7300] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 173.697463][ T5871] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 173.873037][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 173.887167][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.909824][ T7313] overlayfs: failed to resolve './file1': -2 [ 173.921478][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.949581][ T5871] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 173.967415][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.000852][ T5871] usb 6-1: Product: syz [ 174.005082][ T5871] usb 6-1: Manufacturer: syz [ 174.289993][ T5871] usb 6-1: SerialNumber: syz [ 174.297737][ T5871] usb 6-1: config 0 descriptor?? [ 174.304333][ T5871] hub 6-1:0.0: bad descriptor, ignoring hub [ 174.310745][ T5871] hub 6-1:0.0: probe with driver hub failed with error -5 [ 174.337754][ T5871] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 174.416569][ T51] usb 6-1: Failed to submit usb control message: -71 [ 174.453793][ T51] usb 6-1: unable to send the bmi data to the device: -71 [ 174.469893][ T7323] FAULT_INJECTION: forcing a failure. [ 174.469893][ T7323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.470857][ T51] usb 6-1: unable to get target info from device [ 174.508768][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.1.305 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 174.519521][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.529646][ T7323] Call Trace: [ 174.532949][ T7323] [ 174.535902][ T7323] dump_stack_lvl+0x241/0x360 [ 174.540631][ T7323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.545868][ T7323] ? __pfx__printk+0x10/0x10 [ 174.550494][ T7323] ? __pfx_lock_release+0x10/0x10 [ 174.555575][ T7323] should_fail_ex+0x3b0/0x4e0 [ 174.560292][ T7323] _copy_from_iter+0x1e9/0x1c20 [ 174.565185][ T7323] ? __virt_addr_valid+0x183/0x530 [ 174.570337][ T7323] ? __alloc_skb+0x28f/0x440 [ 174.574954][ T7323] ? __pfx__copy_from_iter+0x10/0x10 [ 174.580268][ T7323] ? __virt_addr_valid+0x183/0x530 [ 174.585402][ T7323] ? __virt_addr_valid+0x183/0x530 [ 174.590530][ T7323] ? __virt_addr_valid+0x45f/0x530 [ 174.595667][ T7323] ? __phys_addr_symbol+0x2f/0x70 [ 174.600714][ T7323] ? __check_object_size+0x47a/0x730 [ 174.606032][ T7323] netlink_sendmsg+0x73d/0xcb0 [ 174.610830][ T7323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.616149][ T7323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.621456][ T7323] __sock_sendmsg+0x221/0x270 [ 174.626168][ T7323] ____sys_sendmsg+0x52a/0x7e0 [ 174.630963][ T7323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.636270][ T7323] ? __fget_files+0x2a/0x410 [ 174.640886][ T7323] ? __fget_files+0x2a/0x410 [ 174.645509][ T7323] __sys_sendmsg+0x269/0x350 [ 174.650130][ T7323] ? __pfx_lock_release+0x10/0x10 [ 174.655186][ T7323] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.660335][ T7323] ? __pfx_vfs_write+0x10/0x10 [ 174.665144][ T7323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.671506][ T7323] ? do_syscall_64+0x100/0x230 [ 174.676305][ T7323] ? do_syscall_64+0xb6/0x230 [ 174.681014][ T7323] do_syscall_64+0xf3/0x230 [ 174.685546][ T7323] ? clear_bhb_loop+0x35/0x90 [ 174.690246][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.696177][ T7323] RIP: 0033:0x7f2661b85d29 [ 174.700623][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.709061][ T51] usb 6-1: could not get target info (-71) [ 174.720232][ T7323] RSP: 002b:00007f2662a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.720258][ T7323] RAX: ffffffffffffffda RBX: 00007f2661d75fa0 RCX: 00007f2661b85d29 [ 174.720271][ T7323] RDX: 0000000020000010 RSI: 0000000020001000 RDI: 0000000000000003 [ 174.720282][ T7323] RBP: 00007f2662a94090 R08: 0000000000000000 R09: 0000000000000000 [ 174.720292][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.720303][ T7323] R13: 0000000000000000 R14: 00007f2661d75fa0 R15: 00007ffdefd83bf8 [ 174.720330][ T7323] [ 174.810005][ T51] usb 6-1: could not probe fw (-71) [ 174.817997][ T7324] mmap: syz.4.304 (7324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.775275][ T7337] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 176.355374][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 178.504134][ T5930] usb 6-1: USB disconnect, device number 8 [ 178.517928][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 178.697579][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 178.716699][ T5871] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 178.730810][ T5871] usb 1-1: config 0 has no interface number 0 [ 178.770570][ T5871] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 178.797500][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.826199][ T5871] usb 1-1: Product: syz [ 178.867053][ T5871] usb 1-1: Manufacturer: syz [ 178.877726][ T5871] usb 1-1: SerialNumber: syz [ 178.898441][ T5871] usb 1-1: config 0 descriptor?? [ 178.970589][ T5871] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 179.546801][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.557522][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.003907][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.314'. [ 180.121726][ T7383] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 180.129651][ T7383] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 180.137890][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.320'. [ 180.155279][ T29] audit: type=1800 audit(1736534860.143:7): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.320" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 180.174815][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.188399][ T5871] gspca_topro: reg_w err -71 [ 180.227503][ T5871] gspca_topro: Sensor soi763a [ 180.276884][ T5871] usb 1-1: USB disconnect, device number 11 [ 180.589764][ T7391] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 180.916873][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.322'. [ 182.207485][ T5930] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.357818][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.542802][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 182.563351][ T8] usb 3-1: config 0 has no interfaces? [ 182.574570][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.590869][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.603638][ T8] usb 3-1: Product: syz [ 182.612923][ T7414] trusted_key: syz.1.326 sent an empty control message without MSG_MORE. [ 182.626039][ T8] usb 3-1: Manufacturer: syz [ 182.634954][ T8] usb 3-1: SerialNumber: syz [ 182.652738][ T8] usb 3-1: config 0 descriptor?? [ 184.798526][ T7423] [ 184.800905][ T7423] ====================================================== [ 184.805487][ T7422] block device autoloading is deprecated and will be removed. [ 184.807919][ T7423] WARNING: possible circular locking dependency detected [ 184.807932][ T7423] 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 Not tainted [ 184.807942][ T7423] ------------------------------------------------------ [ 184.807948][ T7423] syz.5.330/7423 is trying to acquire lock: [ 184.807959][ T7423] ffff88807ef2c420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 184.808016][ T7423] [ 184.808016][ T7423] but task is already holding lock: [ 184.808023][ T7423] ffff88805a8a2418 [ 184.815761][ T7422] syz.5.330: attempt to access beyond end of device [ 184.815761][ T7422] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.822479][ T7423] (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: path_openat+0x89a/0x3590 [ 184.822532][ T7423] [ 184.822532][ T7423] which lock already depends on the new lock. [ 184.822532][ T7423] [ 184.822537][ T7423] [ 184.822537][ T7423] the existing dependency chain (in reverse order) is: [ 184.822544][ T7423] [ 184.822544][ T7423] -> #3 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 184.822569][ T7423] lock_acquire+0x1ed/0x550 [ 184.822587][ T7423] down_read+0xb1/0xa40 [ 184.822603][ T7423] lookup_slow+0x45/0x70 [ 184.822620][ T7423] walk_component+0x2e1/0x410 [ 184.822636][ T7423] path_lookupat+0x16f/0x450 [ 184.822651][ T7423] filename_lookup+0x2a3/0x670 [ 184.822665][ T7423] kern_path+0x35/0x50 [ 184.850679][ T7422] PM: Image not found (code -5) [ 184.851788][ T7423] lookup_bdev+0xc5/0x290 [ 184.851815][ T7423] resume_store+0x1a0/0x710 [ 184.961656][ T7423] kernfs_fop_write_iter+0x3a0/0x500 [ 184.967465][ T7423] vfs_write+0xaeb/0xd30 [ 184.972224][ T7423] ksys_write+0x18f/0x2b0 [ 184.977069][ T7423] do_syscall_64+0xf3/0x230 [ 184.982092][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.988505][ T7423] [ 184.988505][ T7423] -> #2 (&of->mutex){+.+.}-{4:4}: [ 184.995712][ T7423] lock_acquire+0x1ed/0x550 [ 185.000733][ T7423] __mutex_lock+0x1ac/0xee0 [ 185.005753][ T7423] kernfs_fop_write_iter+0x1ea/0x500 [ 185.011570][ T7423] iter_file_splice_write+0xbfa/0x1510 [ 185.017570][ T7423] do_splice+0xd68/0x18e0 [ 185.022421][ T7423] __se_sys_splice+0x2e0/0x450 [ 185.027721][ T7423] do_syscall_64+0xf3/0x230 [ 185.032741][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.039170][ T7423] [ 185.039170][ T7423] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 185.046570][ T7423] lock_acquire+0x1ed/0x550 [ 185.051599][ T7423] __mutex_lock+0x1ac/0xee0 [ 185.056628][ T7423] iter_file_splice_write+0x330/0x1510 [ 185.062604][ T7423] backing_file_splice_write+0x35a/0x570 [ 185.068756][ T7423] ovl_splice_write+0x4b8/0x630 [ 185.074123][ T7423] do_splice+0xd68/0x18e0 [ 185.078971][ T7423] __se_sys_splice+0x2e0/0x450 [ 185.084252][ T7423] do_syscall_64+0xf3/0x230 [ 185.089271][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.095684][ T7423] [ 185.095684][ T7423] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 185.103071][ T7423] validate_chain+0x18ef/0x5920 [ 185.108438][ T7423] __lock_acquire+0x1397/0x2100 [ 185.113800][ T7423] lock_acquire+0x1ed/0x550 [ 185.118814][ T7423] sb_start_write+0x4d/0x1c0 [ 185.123923][ T7423] mnt_want_write+0x3f/0x90 [ 185.128939][ T7423] ovl_create_object+0x13a/0x3a0 [ 185.134412][ T7423] path_openat+0x1c03/0x3590 [ 185.139547][ T7423] do_filp_open+0x27f/0x4e0 [ 185.144577][ T7423] do_sys_openat2+0x13e/0x1d0 [ 185.149764][ T7423] __x64_sys_openat+0x247/0x2a0 [ 185.155122][ T7423] do_syscall_64+0xf3/0x230 [ 185.160141][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.166552][ T7423] [ 185.166552][ T7423] other info that might help us debug this: [ 185.166552][ T7423] [ 185.176770][ T7423] Chain exists of: [ 185.176770][ T7423] sb_writers#5 --> &of->mutex --> &ovl_i_mutex_dir_key[depth] [ 185.176770][ T7423] [ 185.190160][ T7423] Possible unsafe locking scenario: [ 185.190160][ T7423] [ 185.197617][ T7423] CPU0 CPU1 [ 185.202998][ T7423] ---- ---- [ 185.208366][ T7423] lock(&ovl_i_mutex_dir_key[depth]); [ 185.213824][ T7423] lock(&of->mutex); [ 185.220318][ T7423] lock(&ovl_i_mutex_dir_key[depth]); [ 185.228289][ T7423] rlock(sb_writers#5); [ 185.232533][ T7423] [ 185.232533][ T7423] *** DEADLOCK *** [ 185.232533][ T7423] [ 185.240665][ T7423] 2 locks held by syz.5.330/7423: [ 185.245674][ T7423] #0: ffff888142bfa420 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 185.254991][ T7423] #1: ffff88805a8a2418 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: path_openat+0x89a/0x3590 [ 185.265451][ T7423] [ 185.265451][ T7423] stack backtrace: [ 185.271327][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.5.330 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 185.281902][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.291953][ T7423] Call Trace: [ 185.295228][ T7423] [ 185.298155][ T7423] dump_stack_lvl+0x241/0x360 [ 185.302831][ T7423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.308025][ T7423] ? __pfx__printk+0x10/0x10 [ 185.312611][ T7423] print_circular_bug+0x13a/0x1b0 [ 185.317636][ T7423] check_noncircular+0x36a/0x4a0 [ 185.322572][ T7423] ? __pfx_check_noncircular+0x10/0x10 [ 185.328024][ T7423] ? lockdep_lock+0x123/0x2b0 [ 185.332706][ T7423] validate_chain+0x18ef/0x5920 [ 185.337567][ T7423] ? __pfx_validate_chain+0x10/0x10 [ 185.342759][ T7423] ? lockdep_hardirqs_on+0x99/0x150 [ 185.347952][ T7423] ? __d_add+0x4d7/0x800 [ 185.352187][ T7423] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 185.358072][ T7423] ? __pfx_lock_release+0x10/0x10 [ 185.363087][ T7423] ? do_raw_spin_lock+0x14f/0x370 [ 185.368110][ T7423] ? do_raw_spin_unlock+0x13c/0x8b0 [ 185.373301][ T7423] ? __wake_up_common_lock+0x18c/0x1e0 [ 185.378756][ T7423] ? __d_add+0x500/0x800 [ 185.382989][ T7423] ? mark_lock+0x9a/0x360 [ 185.387312][ T7423] __lock_acquire+0x1397/0x2100 [ 185.392167][ T7423] lock_acquire+0x1ed/0x550 [ 185.396661][ T7423] ? mnt_want_write+0x3f/0x90 [ 185.401337][ T7423] ? __pfx_lock_acquire+0x10/0x10 [ 185.406356][ T7423] ? __pfx___might_resched+0x10/0x10 [ 185.411642][ T7423] ? __pfx_ovl_lookup+0x10/0x10 [ 185.416497][ T7423] sb_start_write+0x4d/0x1c0 [ 185.421084][ T7423] ? mnt_want_write+0x3f/0x90 [ 185.425758][ T7423] mnt_want_write+0x3f/0x90 [ 185.430261][ T7423] ovl_create_object+0x13a/0x3a0 [ 185.435541][ T7423] ? from_kgid+0x1a7/0x730 [ 185.439950][ T7423] ? __pfx_ovl_create_object+0x10/0x10 [ 185.445406][ T7423] ? bpf_lsm_inode_create+0x9/0x10 [ 185.450514][ T7423] ? security_inode_create+0xbe/0x340 [ 185.455883][ T7423] ? __pfx_ovl_create+0x10/0x10 [ 185.460727][ T7423] path_openat+0x1c03/0x3590 [ 185.465328][ T7423] ? __pfx_path_openat+0x10/0x10 [ 185.470266][ T7423] do_filp_open+0x27f/0x4e0 [ 185.474764][ T7423] ? __pfx_do_filp_open+0x10/0x10 [ 185.479782][ T7423] ? do_raw_spin_lock+0x14f/0x370 [ 185.484818][ T7423] do_sys_openat2+0x13e/0x1d0 [ 185.489491][ T7423] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.494680][ T7423] ? do_fanotify_mark+0x3e5/0xda0 [ 185.499706][ T7423] __x64_sys_openat+0x247/0x2a0 [ 185.504553][ T7423] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.509918][ T7423] ? do_syscall_64+0x100/0x230 [ 185.514681][ T7423] ? do_syscall_64+0xb6/0x230 [ 185.519357][ T7423] do_syscall_64+0xf3/0x230 [ 185.523855][ T7423] ? clear_bhb_loop+0x35/0x90 [ 185.528530][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.534418][ T7423] RIP: 0033:0x7fd5a0185d29 [ 185.538827][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.558426][ T7423] RSP: 002b:00007fd5a1059038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.566835][ T7423] RAX: ffffffffffffffda RBX: 00007fd5a0376080 RCX: 00007fd5a0185d29 [ 185.574796][ T7423] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 185.582759][ T7423] RBP: 00007fd5a0201b08 R08: 0000000000000000 R09: 0000000000000000 [ 185.590746][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.598705][ T7423] R13: 0000000000000000 R14: 00007fd5a0376080 R15: 00007ffc67faf488 [ 185.606672][ T7423] [ 185.679261][ T9] usb 3-1: USB disconnect, device number 8 [ 185.823795][ T7427] netlink: 'syz.4.331': attribute type 2 has an invalid length. [ 185.831875][ T7427] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 185.847913][ T7427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.331'. [ 185.974110][ T29] audit: type=1800 audit(1736534865.953:8): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.331" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 191.527779][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 191.527926][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 191.533836][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 194.568804][ T1294] ieee802154 phy0 wpan0: encryption failed: -22