last executing test programs: 7.634869159s ago: executing program 4 (id=48): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRES16]) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.449250069s ago: executing program 4 (id=50): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x1, 0x0, 0x200005, 0x5, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2, 0x3f, 0x6000, 0x5, r1, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.688057218s ago: executing program 4 (id=53): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109882, 0xa0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000080)='{/\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='-+[\x00', &(0x7f00000001c0)='@\x00']}, &(0x7f00000003c0)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000380)='\x00']}, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x40548}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x440d1}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000200)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x9]}}, 0x5c) 6.619168265s ago: executing program 4 (id=54): syz_usb_connect$uac2(0x5, 0x99, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8, [{0xfe, &(0x7f0000000040)=@string={0xfe, 0x3, "145f447c37bd235dc40ef6e3e09992f4975012f360c39035b90eeb07a9eac926ff76290b0d66059bb5c2ba3251489274e62bc4abed24eb7ca30a3be23e66d577586a1de18f3d6241dac393d336365b1d5a82fc7f7431ae7c6b352c8dc8c8696b1235c4943ab700dfeeeb370871fc43303ed08dc0a0104971e61dd5dd703bc183687a9b8277e518515a0fd3a7d6d4ef4228a6978272c431164264f0bbcf8eeaf711ff9dbef520f11959682d8d0375401f32c38eeb92f77f2653789e5e98cec3413df1031016ee776da33e9f530d9b930ccab57890662b8e5c7c5791d877d9404100806975e5713d0ce884d9b4fc83649bb73aa9ad9101443207a210ce"}}, {0xe, &(0x7f0000000140)=@string={0xe, 0x3, "3f45f1482cad21b7ff5796bd"}}, {0xc0, &(0x7f0000000180)=@string={0xc0, 0x3, "8d33e151b58ee823eb17e74341b3650e297b204b41e5d5f46d651bc3ee3d70a21b8adaf0b90b52e371fc79b82fdd46fbca31755b760a7f9042a951f51284059672e06ef5455b1fc250ad9301b7886cc29811b3a4ea4487774711460fb9646f07550aa61dd5b104f779edf51fb5964bcdec1b54f1557c5d7fe13d9a0b757d8159426dc80d75f35374a5b7ee8de4681ea0b3a01e45afc25d331c3ce2839816a766d4fc1789f3098f05b923821db475a96e512e8dba4319db05e9c1b14dc72d"}}, {0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "fe83b616bec0baa0f4fa3e3318411ca02bd00aa6468699c3042214f729a33ef76c7c982fb8a5a5cb1f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "12e9a47686b9903ee1c18ec34962a518be8b1129e760d023f446de0c67f809f06e9a6a95ff4ff75ecaf76ab191611ddd792396882829a30ef1d16efa90f7a00759add77ae7eda6c6b40b1c9f4a659ec627e34a12aa9d9253096916a5314725f54ed97fb6f9d543daa452727ff0fc1036b8db98136270acb98a73be2aca3587949cc20f79da403f6ef88799621fa46f82cde89f3bd2aa2b4e4fb7e748dbee49ab3eeb1b1f27d1cdc21af88ac1e4044ceeaa4b6bfa0fb41769e2f5c70e2b1fc64df345362ff13fd72c2a36b0e25afc73d130a8409b3c89b64fddc5e966968e903723e4ca"}}, {0x9e, &(0x7f0000000400)=@string={0x9e, 0x3, "136e96025527adfc331494e8985fe985d6015d46a81b0b3ffa9252856de50e52f78a6879a895ad1edf04ecb58c7430fde21f61e2d0e5f6b2e37403a28f12ef2ca04cd7b68441394bf0ee03e07b708d04474ed01ead14c6b894b4cd43192a6dd61693e23d05a66b993c98f2c9c3139bc77db463b35dba9eb8475d717df4fb52213c2d552d8d7489d95a5d03fad7441628af98c0d89ab4eb4da65bf623"}}]}) 6.297843274s ago: executing program 3 (id=57): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) ioctl$BLKBSZSET(r4, 0x40081271, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\n\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x88358, 0x2, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0xf, 0x4507}, &(0x7f0000000140)=0x10) 5.200733399s ago: executing program 1 (id=60): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r0, 0xcc46c000) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.844755607s ago: executing program 1 (id=61): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRES16]) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.542059517s ago: executing program 1 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) r3 = fanotify_init(0x200, 0x1000) fanotify_mark(r3, 0x1, 0x8001003, r2, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42200, 0x1) fanotify_mark(r2, 0xc6, 0x20, r4, &(0x7f0000000040)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010429bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000b000051690400280012800b00010067656e65766500001800028014000700fe88"], 0x5c}}, 0x2000000) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x88) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x10000a006) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001680)) r10 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f00000001c0)={0x0, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096}) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r2, 0xc0106440, &(0x7f0000000180)={0x3, 0x779, &(0x7f0000000140)}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000010400000000000000000a0000000900010073797a31000000000900020073797a32000000002800048024ee01800b00010065787468647200001400028008000740000000050800064000000000140000001100010000000000000000000100000a0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.360227824s ago: executing program 2 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000100000000000000080000001805003e2020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) 4.184919573s ago: executing program 2 (id=64): syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) unshare(0x6020400) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000140)=@unspec={0x2d, 0xa00}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.791620099s ago: executing program 2 (id=65): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x15, 0x107, 0x70bd27, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24044011}, 0x2400c044) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r2 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000001c}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r11 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r14 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r14, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r13, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r14, 0x80045626, &(0x7f0000000180)) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r15, 0xffffffffffffffff, 0x0) fanotify_mark(r8, 0x1, 0x40000032, r7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) io_setup(0xffff, &(0x7f0000000140)) 3.416239691s ago: executing program 4 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001200100000000000000000000240109022400010000200009041a000703000103100bfb1683e225df51a0b6330000000000000000000000bb56df61"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.392645959s ago: executing program 1 (id=67): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)='*', 0x1}], 0x1}}], 0x1, 0x4000000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32) r4 = io_uring_setup(0x3df, &(0x7f0000000040)={0x0, 0x9acd, 0x2, 0x800007, 0x41}) (rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) (async) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030400000000000924050000f8211cfd0924030500000004000724050401"], 0x0) 3.240327196s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2203, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x7}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x44}}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000002d00)={&(0x7f0000002c80)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="ba991d6aa0198f0c049856dca220d42b56bf08ce0daa9757654c9330d7a6d44b51d58de5bc2929278e671dd9499ebfc195beb2dcdb52b7c5df4dc74edb32f55ad450fbe7893ec35621d4d171540baefcb0b39d6e4008cb9a92c937f7e7a9825ec5a03d8b72e6a103b9395debcabc78af9ff51919", 0x74}, {&(0x7f0000001ac0)="564f2be47e0c51b79b96702a96f471cce1dec152d9dee574829ce77c69efcb6ef18780f4577a02451599c2fa2792d14abb14fb21b43f321b8fcbcc326c84236ed36934c239b678bb5158ec02d05a0374f865ba20b8f830a5f13663a1faa4568e01fe7094b7b2c5f8619ed65b0277003ec83e78603657ee7479f1184dcdd16f7b397ac00e6e40518ccf80", 0x8a}, {&(0x7f0000001b80)="f733379e7544ac43d803b565ff32b4b5e4204c8828386c60824beb4fb7eeec2df1d2956ea9febc9b7ed3d75e483ecacd4f890cfc50f200476a93cfccabdfb0e818526339731648e8e3be563081995b8742077fe8e951e9a5ca1a638b3a52bb20e7416497868ce9f8407aa386f9941f0072438d0d79", 0x75}, {&(0x7f0000001c00)="b2862f20ca8711346a15e8f6ee309f138c02ef682059cdecc4b14b1898a48248d0311c2c8e7387b65b350f45dc3b5814ba97dadb4ee174c15cb62ad133edda7b9c954aaf96a8778caf6646e823cddbd2891a204e194c812c5b80637b55db680ac30b924ed4", 0x65}, {&(0x7f0000001c80)="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", 0x1000}], 0x6, 0x4, 0x0, 0x8, 0xf, 0x7, 0x7, 0x8000}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x988, 0x10001, {0xffffffffffffffff}, {}, 0x7, 0x7fff}) setpgid(r2, r3) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6}, {0x9, 0x5, 0xe, 0x2, 0x3ff, 0xff, 0x5, 0x4}, {0x9, 0x5, 0x4, 0x3, 0x8, 0x4, 0x7f, 0xbd}}}}}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x8, {0x1000, 0x8, [0xf0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 3.048618844s ago: executing program 1 (id=70): userfaultfd(0x80001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x830}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1b02}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') pread64(r5, &(0x7f0000001240)=""/102373, 0x18fe5, 0x80) 2.982621649s ago: executing program 3 (id=71): r0 = eventfd2(0x0, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x2000000a}) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x0, 0x0, 0x6, 0x0, 0x1, r0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x200040) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x108}]}, @generic={0x7, 0x7, "04030e0000"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x800) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x431160a1, 0x0, 0x5, 0x1, 0x56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0xa, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x80000001, 0x200000000005, 0x4, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffffa, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) 2.731526174s ago: executing program 0 (id=72): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRES16]) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.584195275s ago: executing program 3 (id=73): r0 = syz_io_uring_setup(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x0}, 0x20) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/1, 0x10}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f00000025c0)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000002500)=[{&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000002540)=""/103, 0x67}, 0x2001) r5 = socket$inet6(0xa, 0x5, 0x9) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) 2.553542033s ago: executing program 0 (id=74): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r3}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f00000005c0)={0xb, @raw_data="10920b249771600b7d5eae9b0ddea6488d3dbb2a3c10140ddf1d09f7c25f96470e8d015cfd48de8a072cc1d65a74f71936e7ef09665b33a30321c231a4b8a7c33c06d69976f7ef8dba8dcc16a89f58bbb5c2de13ad94d251e1a2e0a4873e76dc63aff4ff0a869070e107acc9053666070ea7c4e122c29c14ab9c7326ef994770c82212a1bbf0121c85cc51111e07adf88a2b76dbf03f9d83cf5753b06366f7905b2a187ba54411ab4b03f2c68b854929905c7d5ead015da30d3054912cbf5d53e3aa97d09a244906"}) (async, rerun: 32) r5 = fsmount(r0, 0x1, 0x0) (rerun: 32) fchdir(r5) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103) 2.199723489s ago: executing program 0 (id=75): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000080)={0x7, 'vlan0\x00', {0x3}, 0x2}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'wlan1\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000001c0)={'macvlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x40, 0x1, 0xfffffffffffff801, 0x4, 0xfffffffffffffffe, 0x8000, 0x8, 0x4, 0x4829300e, 0x90, 0x4, 0x10000, 0x201, 0x4, 0x7], 0x80a0000, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltclass={0x44, 0x29, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x8, 0x9}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xfd}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xfc, 0x2}}, @tclass_kind_options=@c_red={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x104030}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16721b9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd26, 0x25dfdbfd, {0x7, r3}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000700)={{0x0, 0x8, 0x3f, 0xfffffffffffffffe, 0xff8, 0x7, 0xd, 0xb8, 0x6, 0x1, 0x80, 0x5, 0x5, 0xfc, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000007c0)) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000800)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r8, &(0x7f0000000880)=@id, &(0x7f00000008c0)=0x10) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000900)={{0xa, 0x4e24, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, {0xa, 0x4e22, 0x8, @loopback, 0x80000000}, 0xffffffffffffffff, {[0xc9, 0xffffd81b, 0x1, 0xe, 0x9, 0x9, 0x3, 0xfffffff4]}}, 0x5c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$inet6(r2, &(0x7f0000000980)={0xa, 0x4e23, 0xa, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) r9 = accept$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) getsockname$packet(r9, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) socket(0x2c, 0x800, 0x2) dup(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000ac0)=0xffffffff, 0x4) 2.144780876s ago: executing program 3 (id=76): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x7) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2.103201824s ago: executing program 2 (id=77): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0x7a, ""/122}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xc, "ced50c08"}, @global=@item_012={0x1, 0x1, 0x4, 'X'}]}}, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 1.980073971s ago: executing program 0 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x62, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x20a102, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000200)={{0xa, 0x6}, {0x0, 0x2}, 0x4}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01980000000000001c001280080001006772650010000280060018000300000004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 1.759979989s ago: executing program 3 (id=79): io_setup(0x8, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$snapshot(r1, &(0x7f0000000200)="1f2c604e6a1f77e227", 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010001d19fb2e5db67b56df25000000003d18545acf680cebc580e533a43ad12317dbee80d94b550d365f112ceb9aa65f085923990ba9476ce251b5e133543e7eacb53356a9f30692a36998ba01ad420d8e1c35b6763691f8fbd83f66aed0b34001e1f44cf6c31d4d2efed5f8e92bf6811e4d2997cc34d86bdfc6f920", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/230, 0xe6}], 0x6, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) 1.711246149s ago: executing program 0 (id=80): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) splice(r1, &(0x7f0000000100)=0x6, r2, &(0x7f0000000200)=0x4, 0x4, 0x2) umount2(&(0x7f0000000000)='.\x00', 0xf) 1.517702054s ago: executing program 3 (id=81): socket$inet6(0xa, 0x6, 0xdc0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$dsp(0xffffffffffffffff, 0x0, 0xffffffffffffff75) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x0, 0x100000}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r2, 0x2000000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r2, 0x23, 0x0, 0x1000000}) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x494, &(0x7f0000000d40)=ANY=[]) pselect6(0x40, &(0x7f0000000100)={0x1000000009, 0x23, 0x5, 0x0, 0x804, 0x0, 0x3, 0x7}, 0x0, &(0x7f0000000240)={0x21, 0x0, 0x7, 0x0, 0x6, 0x3, 0x3, 0xa}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 715.961645ms ago: executing program 0 (id=82): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce800090502"], 0x0) syz_usb_connect$uac2(0x2, 0x102, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0xf3, 0x0, 0x58, {0x8, 0xb, 0x2, 0x2, 0x1, 0x2, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x5, 0x1a, 0x7f}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, [0xf8, 0x9, 0x2, 0x3, 0xc, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4eb, 0x1, 0x22, 'M,W'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xee, 0x1, 0x0, 0x9, "a42acd"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x4, 0xb, 0x7f, "82fb", "8acc28"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x10, 0x10, "2a7aff6f7c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x2}, @as_header={0x10, 0x24, 0x1, 0x36, 0x6, 0x3, 0x4, 0x9, 0x18, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x1, 0x1, {0x8, 0x25, 0x1, 0x2, 0x1, 0xf7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xef}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x4, 0xfd}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6c2, 0x53c, 0x0, "6709a078"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa9, 0x3, 0x9, 0x9}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x1, "", '\b'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x7f, 0x2, {0x8, 0x25, 0x1, 0x181, 0xf, 0x8, 0x5}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x39, 0x0, 0x2, 0x20, 0x2}, 0x1d, &(0x7f00000001c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6, 0xf, 0x1ff, [0x0, 0xc00f, 0xff0000]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80e}}]}) 291.677801ms ago: executing program 4 (id=83): fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) unshare(0x22060600) tee(r0, r1, 0xff, 0x8) close(0xffffffffffffffff) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000480)=""/74, 0x4a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0xe4, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xb4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x70, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8b4d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe8c6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xb8}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) write$char_usb(r4, &(0x7f00000003c0)="90", 0x1) ioctl$TUNSETLINK(r5, 0x400454cd, 0x206) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff51ffffffaaaaaaaaaabb88a8000081"], 0x0) recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d9, 0x10022, 0x0) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) 54.986172ms ago: executing program 2 (id=84): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRES16]) r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=85): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20003, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000180)=0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) keyctl$setperm(0x5, 0x0, 0x80003) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x2, 0x10, 0x4], 0x3, [0x1751, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xc, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x9, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2002]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r10 = socket$unix(0x1, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts. [ 80.763686][ T5595] cgroup: Unknown subsys name 'net' [ 80.881598][ T5595] cgroup: Unknown subsys name 'cpuset' [ 80.891381][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.549646][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.381485][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.385676][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.390780][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.404310][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.414028][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.421273][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.429566][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.438589][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.438621][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.455056][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.464614][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.464641][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.465999][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.478771][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.490964][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.500209][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.509063][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.516581][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.517109][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.534079][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.583481][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.593519][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.604792][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.618516][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.628547][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.771337][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.778820][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.786377][ T5623] bridge_slave_0: entered allmulticast mode [ 87.794407][ T5623] bridge_slave_0: entered promiscuous mode [ 87.814859][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.822055][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.829563][ T5623] bridge_slave_1: entered allmulticast mode [ 87.836926][ T5623] bridge_slave_1: entered promiscuous mode [ 87.960850][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.968211][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.975442][ T5624] bridge_slave_0: entered allmulticast mode [ 87.984018][ T5624] bridge_slave_0: entered promiscuous mode [ 88.002028][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.017264][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.025211][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.032471][ T5620] bridge_slave_0: entered allmulticast mode [ 88.039909][ T5620] bridge_slave_0: entered promiscuous mode [ 88.048793][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.055929][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.063324][ T5620] bridge_slave_1: entered allmulticast mode [ 88.070770][ T5620] bridge_slave_1: entered promiscuous mode [ 88.078208][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.085404][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.092700][ T5624] bridge_slave_1: entered allmulticast mode [ 88.100595][ T5624] bridge_slave_1: entered promiscuous mode [ 88.119276][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.249403][ T5623] team0: Port device team_slave_0 added [ 88.255276][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.263191][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.270510][ T5622] bridge_slave_0: entered allmulticast mode [ 88.278061][ T5622] bridge_slave_0: entered promiscuous mode [ 88.289081][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.301006][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.310467][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.317675][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.324877][ T5621] bridge_slave_0: entered allmulticast mode [ 88.332489][ T5621] bridge_slave_0: entered promiscuous mode [ 88.342942][ T5623] team0: Port device team_slave_1 added [ 88.349375][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.356644][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.364060][ T5622] bridge_slave_1: entered allmulticast mode [ 88.371494][ T5622] bridge_slave_1: entered promiscuous mode [ 88.381517][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.392887][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.406514][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.413828][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.421462][ T5621] bridge_slave_1: entered allmulticast mode [ 88.428954][ T5621] bridge_slave_1: entered promiscuous mode [ 88.544168][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.551478][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.578292][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.578869][ T5612] Bluetooth: hci1: command tx timeout [ 88.595072][ T5608] Bluetooth: hci0: command tx timeout [ 88.601153][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.601716][ T5605] Bluetooth: hci3: command tx timeout [ 88.616410][ T4925] Bluetooth: hci2: command tx timeout [ 88.618443][ T5620] team0: Port device team_slave_0 added [ 88.631376][ T5620] team0: Port device team_slave_1 added [ 88.639434][ T5624] team0: Port device team_slave_0 added [ 88.647998][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.658534][ T5605] Bluetooth: hci4: command tx timeout [ 88.666139][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.673231][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.699290][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.712704][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.735487][ T5624] team0: Port device team_slave_1 added [ 88.754740][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.845830][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.853556][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.879716][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.892453][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.899499][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.925950][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.939023][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.946049][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.972028][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.984988][ T5621] team0: Port device team_slave_0 added [ 88.992824][ T5622] team0: Port device team_slave_0 added [ 89.001694][ T5622] team0: Port device team_slave_1 added [ 89.008444][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.015442][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.041464][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.072067][ T5621] team0: Port device team_slave_1 added [ 89.124346][ T5623] hsr_slave_0: entered promiscuous mode [ 89.131185][ T5623] hsr_slave_1: entered promiscuous mode [ 89.161425][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.168618][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.194979][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.207733][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.214766][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.240914][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.272306][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.279792][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.306056][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.360880][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.368190][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.394504][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.421985][ T5624] hsr_slave_0: entered promiscuous mode [ 89.428701][ T5624] hsr_slave_1: entered promiscuous mode [ 89.434892][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 89.441331][ T5624] Cannot create hsr debugfs directory [ 89.462086][ T5620] hsr_slave_0: entered promiscuous mode [ 89.468907][ T5620] hsr_slave_1: entered promiscuous mode [ 89.475321][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 89.481208][ T5620] Cannot create hsr debugfs directory [ 89.633105][ T5622] hsr_slave_0: entered promiscuous mode [ 89.639838][ T5622] hsr_slave_1: entered promiscuous mode [ 89.646081][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 89.652894][ T5622] Cannot create hsr debugfs directory [ 89.689586][ T5621] hsr_slave_0: entered promiscuous mode [ 89.695991][ T5621] hsr_slave_1: entered promiscuous mode [ 89.706564][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 89.712446][ T5621] Cannot create hsr debugfs directory [ 90.237884][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.255773][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.266858][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.280172][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.288625][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.299272][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.307390][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.319450][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.399531][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.414951][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.424833][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.435131][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.443296][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.454540][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.462873][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.473896][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.585009][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.597154][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.613157][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.626001][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.634538][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.644799][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.653639][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.660618][ T4925] Bluetooth: hci2: command tx timeout [ 90.666397][ T5608] Bluetooth: hci0: command tx timeout [ 90.669967][ T5605] Bluetooth: hci3: command tx timeout [ 90.672533][ T5612] Bluetooth: hci1: command tx timeout [ 90.685291][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.737817][ T5612] Bluetooth: hci4: command tx timeout [ 90.780826][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.794063][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.814105][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.827305][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.846814][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.859530][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.883343][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.893390][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.920532][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.981653][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.005174][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.012921][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.049953][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.061945][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.070008][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.079872][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.101932][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.111960][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.120566][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.133828][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.148297][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.155518][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.202158][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.301741][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.323505][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.330732][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.363948][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.380684][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.387920][ T539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.456794][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.494963][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.502155][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.532815][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.540053][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.555562][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.565323][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.631712][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.663007][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.693251][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.700486][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.748843][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.756036][ T539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.773477][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.799528][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.823442][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.830628][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.845463][ T5623] veth0_vlan: entered promiscuous mode [ 91.879514][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.886682][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.910407][ T5623] veth1_vlan: entered promiscuous mode [ 91.969343][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.991704][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.032270][ T985] cfg80211: failed to load regulatory.db [ 92.086020][ T5624] veth0_vlan: entered promiscuous mode [ 92.102987][ T5623] veth0_macvtap: entered promiscuous mode [ 92.126149][ T5624] veth1_vlan: entered promiscuous mode [ 92.140552][ T5623] veth1_macvtap: entered promiscuous mode [ 92.204836][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.215854][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.253158][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.264245][ T5624] veth0_macvtap: entered promiscuous mode [ 92.285506][ T5624] veth1_macvtap: entered promiscuous mode [ 92.294264][ T5620] veth0_vlan: entered promiscuous mode [ 92.313797][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.335483][ T5620] veth1_vlan: entered promiscuous mode [ 92.386357][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.407718][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.492033][ T539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513329][ T5621] veth0_vlan: entered promiscuous mode [ 92.538322][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.558948][ T5622] veth0_vlan: entered promiscuous mode [ 92.606784][ T5621] veth1_vlan: entered promiscuous mode [ 92.624939][ T5620] veth0_macvtap: entered promiscuous mode [ 92.641350][ T5622] veth1_vlan: entered promiscuous mode [ 92.648282][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.662788][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.686329][ T5620] veth1_macvtap: entered promiscuous mode [ 92.738309][ T5612] Bluetooth: hci1: command tx timeout [ 92.740057][ T4925] Bluetooth: hci3: command tx timeout [ 92.743830][ T5608] Bluetooth: hci2: command tx timeout [ 92.749244][ T5605] Bluetooth: hci0: command tx timeout [ 92.783003][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.793525][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.801347][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.817849][ T5608] Bluetooth: hci4: command tx timeout [ 92.847353][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.858489][ T539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.873966][ T539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.891540][ T539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.923284][ T539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.948694][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.970190][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.985208][ T5621] veth0_macvtap: entered promiscuous mode [ 93.008447][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.034363][ T5622] veth0_macvtap: entered promiscuous mode [ 93.065283][ T5621] veth1_macvtap: entered promiscuous mode [ 93.089590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.100190][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.114854][ T5622] veth1_macvtap: entered promiscuous mode [ 93.158216][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.186806][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.238199][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.267398][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.292322][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.327721][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.359257][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426716][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.529822][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.553013][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.569099][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.677820][ T5674] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.736134][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.746145][ T539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.756275][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.859778][ T5674] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.871858][ T539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889332][ T5674] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 93.896287][ T539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.938851][ T5674] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 93.967955][ T5674] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.004243][ T5674] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.042601][ T5674] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 94.064546][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.074855][ T5674] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 94.088820][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.099705][ T539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.115237][ T5674] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 94.126626][ T539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.131643][ T5674] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 8192, setting to 1024 [ 94.155484][ T5674] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 94.190398][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.198677][ T5674] usb 3-1: Product: syz [ 94.203041][ T5674] usb 3-1: Manufacturer: syz [ 94.208100][ T5674] usb 3-1: SerialNumber: syz [ 94.265628][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.274919][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.364255][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.372830][ T5704] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.385606][ T5727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.480994][ T5674] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 94.549860][ T5704] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 94.577871][ T1114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.580007][ T5704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.618375][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.638706][ T5704] usb 4-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 94.649738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.657118][ T5704] usb 4-1: Product: syz [ 94.657143][ T5704] usb 4-1: Manufacturer: syz [ 94.657160][ T5704] usb 4-1: SerialNumber: syz [ 94.662779][ T5674] usb 3-1: USB disconnect, device number 2 [ 94.713718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.725505][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.733005][ T5704] em28xx 4-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 94.752920][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.816812][ T5704] em28xx 4-1:1.0: DVB interface 0 found: bulk [ 94.827782][ T539] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.829488][ T5608] Bluetooth: hci3: command tx timeout [ 94.842311][ T5612] Bluetooth: hci0: command tx timeout [ 94.847887][ T5612] Bluetooth: hci2: command tx timeout [ 94.849646][ T4925] Bluetooth: hci1: command tx timeout [ 94.898880][ T4925] Bluetooth: hci4: command tx timeout [ 94.944436][ T5732] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.000102][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.237902][ T539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.321349][ T5704] em28xx 4-1:1.0: unknown em28xx chip ID (0) [ 95.468744][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.507881][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.545298][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.569189][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.588985][ T5676] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.671098][ T5749] tipc: Started in network mode [ 95.677025][ T5749] tipc: Node identity 40000000000000002e05, cluster identity 4711 [ 95.787544][ T5676] usb 5-1: Using ep0 maxpacket: 8 [ 95.806090][ T5676] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.834771][ T5676] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 95.876461][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.911539][ T5676] usb 5-1: Product: syz [ 95.932141][ T5676] usb 5-1: Manufacturer: syz [ 95.952764][ T5676] usb 5-1: SerialNumber: syz [ 95.986942][ T5753] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 96.055140][ T5753] input: syz0 as /devices/virtual/input/input5 [ 96.294030][ T5757] overlay: Unknown parameter '6xƒ¸&&fÇ5ôef¹\' [ 96.479041][ T5763] input: syz1 as /devices/virtual/input/input6 [ 96.648593][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.749906][ T5606] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.797857][ T10] usb 2-1: device descriptor read/64, error -71 [ 96.907820][ T5606] usb 3-1: Using ep0 maxpacket: 16 [ 96.914909][ T5606] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.933877][ T5606] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.946226][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.968106][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.976431][ T5606] usb 3-1: Product: syz [ 96.984009][ T5606] usb 3-1: Manufacturer: syz [ 96.990547][ T5606] usb 3-1: SerialNumber: syz [ 97.002842][ T5606] usb 3-1: config 0 descriptor?? [ 97.030508][ T5606] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.052677][ T5606] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 97.069582][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.217684][ T10] usb 2-1: device descriptor read/64, error -71 [ 97.238908][ T5704] em28xx 4-1:1.0: writing to i2c device at 0xa0 failed (error=-5) [ 97.251510][ T5775] batadv1: entered promiscuous mode [ 97.257046][ T5775] batadv1: entered allmulticast mode [ 97.263412][ T5704] em28xx 4-1:1.0: failed to read eeprom (err=-5) [ 97.273378][ T5704] em28xx 4-1:1.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 97.289941][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.315879][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.338013][ T10] usb usb2-port1: attempt power cycle [ 97.344873][ T5704] em28xx 4-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 97.360125][ T5704] em28xx 4-1:1.0: dvb set to bulk mode. [ 97.366491][ T187] em28xx 4-1:1.0: Binding DVB extension [ 97.390372][ T5704] usb 4-1: USB disconnect, device number 2 [ 97.397325][ T187] em28xx 4-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 97.411790][ T187] zl10353_read_register: readreg error (reg=127, ret==-19) [ 97.426148][ T5704] em28xx 4-1:1.0: Disconnecting em28xx [ 97.439357][ T187] em28xx 4-1:1.0: frontend initialization failed [ 97.447272][ T187] em28xx 4-1:1.0: Remote control support is not available for this card. [ 97.460919][ T5704] em28xx 4-1:1.0: Closing input extension [ 97.495580][ T5704] em28xx: Freeing device [ 97.639647][ T5606] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.647711][ T5606] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 97.708099][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.749574][ T10] usb 2-1: device descriptor read/8, error -71 [ 98.019180][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.061022][ T10] usb 2-1: device descriptor read/8, error -71 [ 98.209428][ T10] usb usb2-port1: unable to enumerate USB device [ 98.238013][ T5341] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.268672][ T5606] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 98.283565][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 98.298591][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 98.318872][ T5787] loop9: detected capacity change from 0 to 7 [ 98.327292][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 98.339321][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 98.356760][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 98.366895][ T5787] Dev loop9: unable to read RDB block 7 [ 98.377115][ T5787] loop9: AHDI p1 p2 p3 [ 98.384790][ T5787] loop9: partition table partially beyond EOD, truncated [ 98.400325][ T5787] loop9: p1 start 1920169572 is beyond EOD, truncated [ 98.435077][ T5341] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.460976][ T5787] loop9: p2 start 1851744889 is beyond EOD, truncated [ 98.473342][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.488240][ T5341] usb 4-1: Product: syz [ 98.497876][ T5341] usb 4-1: Manufacturer: syz [ 98.507653][ T5341] usb 4-1: SerialNumber: syz [ 98.534467][ T5341] usb 4-1: config 0 descriptor?? [ 98.624589][ T5676] usb 5-1: USB disconnect, device number 2 [ 98.759149][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.778388][ T5341] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.830988][ T5341] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.866658][ T5341] usb 4-1: USB disconnect, device number 3 [ 98.938016][ T5794] pimreg: entered allmulticast mode [ 98.997611][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 20 [ 99.010479][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 16 [ 99.089511][ T5801] bond1: option all_slaves_active: invalid value (9) [ 99.117395][ T5801] bond1 (unregistering): Released all slaves [ 99.118064][ T5676] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.247875][ T5606] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 99.268961][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 12 [ 99.278399][ T5676] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 99.302319][ T5676] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.332306][ T5676] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.361018][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.399665][ T5676] usb 5-1: Product: syz [ 99.408162][ T5676] usb 5-1: Manufacturer: syz [ 99.425641][ T5676] usb 5-1: SerialNumber: syz [ 99.440374][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 14 [ 99.454155][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 18 [ 99.480447][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 22 [ 99.496025][ T5606] em28xx 3-1:0.0: couldn't setup AC97 register 24 [ 99.534562][ T5683] em28xx 3-1:0.0: Binding audio extension [ 99.559078][ T5683] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 99.589569][ T5606] usb 3-1: USB disconnect, device number 3 [ 99.604125][ T5683] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 99.630345][ T5606] em28xx 3-1:0.0: Disconnecting em28xx [ 99.684966][ T5683] em28xx 3-1:0.0: alt 0 doesn't exist on interface 7 [ 99.722376][ T5676] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 99.777187][ T5606] em28xx 3-1:0.0: Closing audio extension [ 99.817165][ T5606] em28xx: Freeing device [ 99.886277][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.199423][ T5606] usb 5-1: USB disconnect, device number 3 [ 100.290851][ T5606] usblp0: removed [ 100.538033][ T5676] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 100.713755][ T5676] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 100.741142][ T5676] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 100.758065][ T5676] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 100.771302][ T5676] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 100.790662][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.814705][ T5676] usb 2-1: Product: syz [ 100.834425][ T5676] usb 2-1: Manufacturer: syz [ 100.853435][ T5676] usb 2-1: SerialNumber: syz [ 100.964965][ T5847] loop4: detected capacity change from 0 to 7 [ 100.976718][ T5847] loop4: [ 100.982456][ T5847] loop4: partition table partially beyond EOD, truncated [ 101.216408][ T4975] loop4: [ 101.223744][ T4975] loop4: partition table partially beyond EOD, truncated [ 101.240838][ T187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.347542][ T5606] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.427633][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 101.434373][ T187] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 101.445188][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.452017][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.464324][ T187] usb 3-1: config 0 descriptor?? [ 101.497534][ T5606] usb 1-1: Using ep0 maxpacket: 8 [ 101.503530][ T5606] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 101.514112][ T5606] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 101.522741][ T5341] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.531022][ T5606] usb 1-1: config 0 has no interface number 0 [ 101.537919][ T5606] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.549682][ T5606] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 101.561896][ T5606] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.575010][ T5606] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.589478][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.604531][ T5606] usb 1-1: config 0 descriptor?? [ 101.623701][ T5606] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 101.717558][ T5341] usb 5-1: Using ep0 maxpacket: 16 [ 101.723633][ T5341] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 101.737704][ T5341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.744498][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.756040][ T5341] usb 5-1: config 0 descriptor?? [ 101.823702][ T5853] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 101.871969][ T5606] usb 1-1: USB disconnect, device number 2 [ 101.905516][ T5606] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 101.965454][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.983008][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.001004][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.013399][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.024714][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.039297][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.050855][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.069733][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.093002][ T187] usbhid 3-1:0.0: can't add hid device: -71 [ 102.115232][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.123831][ T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.169082][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.177380][ T187] usb 3-1: USB disconnect, device number 4 [ 102.434321][ T5341] kye 0003:0458:500F.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 102.449718][ T5341] kye 0003:0458:500F.0001: unknown main item tag 0x0 [ 102.457598][ T5341] kye 0003:0458:500F.0001: unknown main item tag 0x6 [ 102.464510][ T5341] kye 0003:0458:500F.0001: ignoring exceeding usage max [ 102.480869][ T5341] kye 0003:0458:500F.0001: hidraw0: USB HID v0.08 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 102.491924][ T5341] kye 0003:0458:500F.0001: tablet-enabling feature report not found [ 102.501113][ T5341] kye 0003:0458:500F.0001: tablet enabling failed [ 102.557659][ T5606] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.632187][ T187] usb 5-1: USB disconnect, device number 4 [ 102.717566][ T5606] usb 1-1: device descriptor read/64, error -71 [ 102.732526][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 102.773439][ T5869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.978526][ T5606] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.127588][ T5606] usb 1-1: device descriptor read/64, error -71 [ 103.240258][ T5606] usb usb1-port1: attempt power cycle [ 103.275937][ T5676] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.287562][ T985] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.294435][ T5676] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.440268][ T5676] usb 2-1: USB disconnect, device number 6 [ 103.470357][ T985] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.497188][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.504100][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.526865][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.556458][ T985] usb 3-1: config 0 descriptor?? [ 103.609548][ T5606] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.639946][ T5606] usb 1-1: device descriptor read/8, error -71 [ 103.654246][ T5884] netlink: 'syz.1.51': attribute type 30 has an invalid length. [ 103.749783][ T5884] netlink: 'syz.1.51': attribute type 30 has an invalid length. [ 103.787967][ T985] usbhid 3-1:0.0: can't add hid device: -71 [ 103.795621][ T985] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.809714][ T985] usb 3-1: USB disconnect, device number 5 [ 103.887631][ T5606] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.909460][ T5606] usb 1-1: device descriptor read/8, error -71 [ 104.029098][ T5606] usb usb1-port1: unable to enumerate USB device [ 104.152861][ T5889] vlan0: entered promiscuous mode [ 104.227555][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.398239][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 104.414123][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.436904][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.450048][ T10] usb 3-1: config 0 descriptor?? [ 104.487549][ T187] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.629104][ T187] usb 5-1: device descriptor read/64, error -71 [ 104.848290][ T5676] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.880504][ T187] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.017799][ T187] usb 5-1: device descriptor read/64, error -71 [ 105.025779][ T5676] usb 4-1: Using ep0 maxpacket: 16 [ 105.035727][ T5676] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.048164][ T5676] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 105.063786][ T5676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.075738][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 105.087185][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.103390][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 105.120820][ T5676] usb 4-1: Product: syz [ 105.131394][ T5676] usb 4-1: Manufacturer: syz [ 105.146777][ T187] usb usb5-port1: attempt power cycle [ 105.156715][ T5676] usb 4-1: SerialNumber: syz [ 105.193928][ T5676] usb 4-1: config 0 descriptor?? [ 105.234951][ T5676] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.275523][ T5676] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 105.527599][ T187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.568420][ T187] usb 5-1: device descriptor read/8, error -71 [ 105.651143][ T5929] syz_tun: entered allmulticast mode [ 105.814534][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.818172][ T187] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.862932][ T187] usb 5-1: device descriptor read/8, error -71 [ 105.891409][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.923682][ T5676] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 105.944436][ T5676] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 105.979344][ T187] usb usb5-port1: unable to enumerate USB device [ 106.054342][ T985] usb 3-1: USB disconnect, device number 6 [ 106.054653][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 106.432760][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.591567][ T5676] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 106.661181][ T5676] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 106.687308][ T5676] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 107.130214][ T5676] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 107.156573][ T5676] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 107.193572][ T5676] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 107.243707][ T5676] usb 4-1: USB disconnect, device number 4 [ 107.791510][ T5606] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.856539][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 107.929073][ T5676] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 107.931880][ T5982] team0: Device ipvlan2 failed to register rx_handler [ 107.948335][ T5606] usb 5-1: device descriptor read/64, error -71 [ 108.119728][ T5676] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 108.145636][ T5676] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.162689][ T5676] usb 3-1: can't read configurations, error -71 [ 108.197755][ T5606] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.207651][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.357672][ T5606] usb 5-1: device descriptor read/64, error -71 [ 108.371179][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 108.399552][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 108.426219][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 108.453407][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.490776][ T5606] usb usb5-port1: attempt power cycle [ 108.501217][ T10] usb 2-1: probing VID:PID(0424:012C) [ 108.545320][ T10] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 108.567681][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 108.580551][ T10] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 108.597540][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 108.613893][ T10] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 108.860882][ T5606] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.898712][ T5606] usb 5-1: device descriptor read/8, error -71 [ 108.908150][ T10] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 108.956693][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 108.984660][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 109.110626][ T6026] random: crng reseeded on system resumption [ 109.111207][ T10] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 109.148404][ T5606] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.183885][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.79'. [ 109.200372][ T5606] usb 5-1: device descriptor read/8, error -71 [ 109.219118][ T5676] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.317980][ T5606] usb usb5-port1: unable to enumerate USB device [ 109.369319][ T5676] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 109.385648][ T5676] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.409007][ T5676] usb 3-1: config 0 has no interface number 0 [ 109.419605][ T5676] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.431535][ T5676] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.444095][ T5676] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.476290][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.500454][ T5676] usb 3-1: config 0 descriptor?? [ 109.847595][ T5606] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.028697][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 110.043734][ T5606] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.078069][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.111486][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.149873][ T10] usb 2-1: USB disconnect, device number 7 [ 110.163205][ T9] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 110.176760][ T5676] uclogic 0003:28BD:0042.0002: failed retrieving string descriptor #100: -71 [ 110.181285][ T5606] usb 4-1: config 0 descriptor?? [ 110.210217][ T9] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 110.224342][ T5676] uclogic 0003:28BD:0042.0002: failed retrieving pen parameters: -71 [ 110.248608][ T5676] uclogic 0003:28BD:0042.0002: pen probing failed: -71 [ 110.256134][ T5676] uclogic 0003:28BD:0042.0002: failed probing parameters: -71 [ 110.263903][ T5676] uclogic 0003:28BD:0042.0002: probe with driver uclogic failed with error -71 [ 110.292820][ T5676] usb 3-1: USB disconnect, device number 8 [ 110.324907][ T10] USB vub300 remote SDIO host controller[0] now disconnected [ 110.417979][ T5606] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.467574][ T5683] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 110.628414][ T5683] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 110.648120][ T5683] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 110.659667][ T5683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.670414][ T5683] usb 1-1: config 0 has no interface number 0 [ 110.676631][ T5683] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.696141][ T5683] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.742002][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.764019][ T5683] usb 1-1: Product: syz [ 110.779928][ T5683] usb 1-1: Manufacturer: syz [ 110.787543][ T5683] usb 1-1: SerialNumber: syz [ 110.808954][ T5683] usb 1-1: config 0 descriptor?? [ 110.863765][ T5606] usb 4-1: USB disconnect, device number 5 [ 110.914894][ T5683] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 110.978971][ C0] [ 110.981641][ C0] ============================= [ 110.987404][ C0] WARNING: suspicious RCU usage [ 110.992909][ C0] syzkaller #0 Not tainted [ 110.997339][ C0] ----------------------------- [ 111.002282][ C0] kernel/sched/core.c:9197 Illegal context switch in RCU-sched read-side critical section! [ 111.012567][ C0] [ 111.012567][ C0] other info that might help us debug this: [ 111.012567][ C0] [ 111.023067][ C0] [ 111.023067][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 111.031227][ C0] locks held by syz.2.84/6070: 5, last CPU#0: [ 111.037519][ C0] #0: ffff888029aaa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 111.046695][ C0] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 111.056711][ C0] #2: ffff8880777e8978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 111.067293][ C0] #3: ffffffff8eb5a460 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 111.076765][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 111.087306][ C0] [ 111.087306][ C0] stack backtrace: [ 111.093272][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 111.093294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.093309][ C0] Call Trace: [ 111.093319][ C0] [ 111.093329][ C0] dump_stack_lvl+0xe8/0x150 [ 111.093358][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 111.093388][ C0] __might_resched+0xbb/0x4c0 [ 111.093411][ C0] ? __cancel_work_sync+0x5c/0x110 [ 111.093441][ C0] __cancel_work_sync+0x6d/0x110 [ 111.093464][ C0] mmc_free_host+0x19/0x30 [ 111.093481][ C0] call_timer_fn+0x18d/0x5f0 [ 111.093497][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 111.093521][ C0] ? call_timer_fn+0xd5/0x5f0 [ 111.093535][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 111.093558][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.093578][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 111.093604][ C0] __run_timer_base+0x652/0x8b0 [ 111.093628][ C0] ? ktime_get+0x45/0x220 [ 111.093659][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 111.093686][ C0] ? ktime_get+0x1f5/0x220 [ 111.093708][ C0] ? lapic_next_event+0x11/0x20 [ 111.093738][ C0] run_timer_softirq+0xb7/0x170 [ 111.093763][ C0] handle_softirqs+0x226/0x860 [ 111.093784][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 111.093808][ C0] __irq_exit_rcu+0xcb/0x220 [ 111.093827][ C0] irq_exit_rcu+0x9/0x30 [ 111.093844][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 111.093868][ C0] [ 111.093873][ C0] [ 111.093879][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.093896][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 111.093918][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 111.093931][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 111.093945][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 111.093957][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 111.093967][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 111.093977][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 111.093988][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 111.094002][ C0] ? pfn_valid+0xba/0x490 [ 111.094022][ C0] ? pfn_valid+0xba/0x490 [ 111.094046][ C0] ? pfn_valid+0xf3/0x490 [ 111.094068][ C0] page_table_check_clear+0x21/0x500 [ 111.094088][ C0] ? vm_normal_page+0x12c/0x280 [ 111.094112][ C0] __zap_vma_range+0x39b9/0x4f20 [ 111.094169][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 111.094199][ C0] ? mas_find+0xab1/0xcf0 [ 111.094222][ C0] ? unmap_vmas+0x1b9/0x550 [ 111.094246][ C0] unmap_vmas+0x390/0x550 [ 111.094273][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 111.094313][ C0] exit_mmap+0x293/0x9f0 [ 111.094332][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 111.094367][ C0] ? __pfx_exit_aio+0x10/0x10 [ 111.094401][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 111.094427][ C0] __mmput+0x118/0x420 [ 111.094446][ C0] exit_mm+0x221/0x2d0 [ 111.094473][ C0] do_exit+0x6cd/0x2360 [ 111.094502][ C0] ? __pfx_do_exit+0x10/0x10 [ 111.094528][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.094554][ C0] do_group_exit+0x22d/0x2f0 [ 111.094577][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.094600][ C0] get_signal+0x121b/0x12c0 [ 111.094634][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 111.094658][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.094692][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 111.094716][ C0] ? rcu_is_watching+0x16/0xb0 [ 111.094735][ C0] do_syscall_64+0x328/0x520 [ 111.094758][ C0] ? trace_irq_disable+0x3b/0x140 [ 111.094780][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.094796][ C0] ? clear_bhb_loop+0x70/0xc0 [ 111.094815][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.094831][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 111.094848][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 111.094856][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.094871][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 111.094882][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 111.094892][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.094901][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.094910][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 111.094934][ C0] [ 111.094944][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552 [ 111.545176][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6070, name: syz.2.84 [ 111.554089][ C0] preempt_count: 102, expected: 0 [ 111.559174][ C0] RCU nest depth: 1, expected: 0 [ 111.564115][ C0] locks held by syz.2.84/6070: 5, last CPU#0: [ 111.570214][ C0] #0: ffff888029aaa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 111.579347][ C0] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 111.588875][ C0] #2: ffff8880777e8978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 111.599369][ C0] #3: ffffffff8eb5a460 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 111.608816][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 111.619388][ C0] Preemption disabled at: [ 111.619398][ C0] [<0000000000000000>] 0x0 [ 111.628170][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 111.628189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.628199][ C0] Call Trace: [ 111.628208][ C0] [ 111.628214][ C0] dump_stack_lvl+0xe8/0x150 [ 111.628239][ C0] __might_resched+0x36a/0x4c0 [ 111.628265][ C0] __cancel_work_sync+0x6d/0x110 [ 111.628295][ C0] mmc_free_host+0x19/0x30 [ 111.628311][ C0] call_timer_fn+0x18d/0x5f0 [ 111.628327][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 111.628351][ C0] ? call_timer_fn+0xd5/0x5f0 [ 111.628365][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 111.628388][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.628408][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 111.628434][ C0] __run_timer_base+0x652/0x8b0 [ 111.628458][ C0] ? ktime_get+0x45/0x220 [ 111.628488][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 111.628515][ C0] ? ktime_get+0x1f5/0x220 [ 111.628538][ C0] ? lapic_next_event+0x11/0x20 [ 111.628567][ C0] run_timer_softirq+0xb7/0x170 [ 111.628592][ C0] handle_softirqs+0x226/0x860 [ 111.628614][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 111.628637][ C0] __irq_exit_rcu+0xcb/0x220 [ 111.628656][ C0] irq_exit_rcu+0x9/0x30 [ 111.628673][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 111.628698][ C0] [ 111.628703][ C0] [ 111.628709][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.628726][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 111.628747][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 111.628760][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 111.628774][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 111.628785][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 111.628796][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 111.628806][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 111.628817][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 111.628831][ C0] ? pfn_valid+0xba/0x490 [ 111.628851][ C0] ? pfn_valid+0xba/0x490 [ 111.628875][ C0] ? pfn_valid+0xf3/0x490 [ 111.628896][ C0] page_table_check_clear+0x21/0x500 [ 111.628916][ C0] ? vm_normal_page+0x12c/0x280 [ 111.628940][ C0] __zap_vma_range+0x39b9/0x4f20 [ 111.628998][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 111.629027][ C0] ? mas_find+0xab1/0xcf0 [ 111.629050][ C0] ? unmap_vmas+0x1b9/0x550 [ 111.629074][ C0] unmap_vmas+0x390/0x550 [ 111.629102][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 111.629141][ C0] exit_mmap+0x293/0x9f0 [ 111.629161][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 111.629195][ C0] ? __pfx_exit_aio+0x10/0x10 [ 111.629229][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 111.629250][ C0] __mmput+0x118/0x420 [ 111.629269][ C0] exit_mm+0x221/0x2d0 [ 111.629300][ C0] do_exit+0x6cd/0x2360 [ 111.629329][ C0] ? __pfx_do_exit+0x10/0x10 [ 111.629355][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.629381][ C0] do_group_exit+0x22d/0x2f0 [ 111.629404][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.629427][ C0] get_signal+0x121b/0x12c0 [ 111.629461][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 111.629484][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.629519][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 111.629542][ C0] ? rcu_is_watching+0x16/0xb0 [ 111.629561][ C0] do_syscall_64+0x328/0x520 [ 111.629584][ C0] ? trace_irq_disable+0x3b/0x140 [ 111.629606][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.629622][ C0] ? clear_bhb_loop+0x70/0xc0 [ 111.629641][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.629657][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 111.629670][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 111.629678][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.629693][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 111.629704][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 111.629714][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.629723][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.629732][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 111.629755][ C0] [ 111.630195][ C0] [ 112.062399][ C0] ============================= [ 112.067252][ C0] WARNING: suspicious RCU usage [ 112.072132][ C0] syzkaller #0 Tainted: G W [ 112.078138][ C0] ----------------------------- [ 112.082982][ C0] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 112.094978][ C0] [ 112.094978][ C0] other info that might help us debug this: [ 112.094978][ C0] [ 112.105249][ C0] [ 112.105249][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 112.113342][ C0] locks held by syz.2.84/6070: 5, last CPU#0: [ 112.119438][ C0] #0: ffff888029aaa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 112.128546][ C0] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 112.138076][ C0] #2: ffff8880777e8978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 112.148564][ C0] #3: ffffffff8eb5a460 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 112.158005][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 112.168559][ C0] [ 112.168559][ C0] stack backtrace: [ 112.174471][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.174494][ C0] Tainted: [W]=WARN [ 112.174499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.174509][ C0] Call Trace: [ 112.174517][ C0] [ 112.174527][ C0] dump_stack_lvl+0xe8/0x150 [ 112.174562][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 112.174593][ C0] __synchronize_srcu+0x157/0x2f0 [ 112.174620][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 112.174642][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.174669][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.174690][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 112.174715][ C0] ? synchronize_srcu+0x20a/0x260 [ 112.174740][ C0] wakeup_source_unregister+0x129/0x3f0 [ 112.174762][ C0] mmc_host_classdev_release+0x47/0x100 [ 112.174780][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 112.174797][ C0] device_release+0xc4/0x1f0 [ 112.174821][ C0] kobject_put+0x222/0x550 [ 112.174838][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 112.174860][ C0] call_timer_fn+0x18d/0x5f0 [ 112.174876][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.174899][ C0] ? call_timer_fn+0xd5/0x5f0 [ 112.174913][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 112.174936][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.174956][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.174981][ C0] __run_timer_base+0x652/0x8b0 [ 112.175006][ C0] ? ktime_get+0x45/0x220 [ 112.175036][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 112.175063][ C0] ? ktime_get+0x1f5/0x220 [ 112.175086][ C0] ? lapic_next_event+0x11/0x20 [ 112.175115][ C0] run_timer_softirq+0xb7/0x170 [ 112.175140][ C0] handle_softirqs+0x226/0x860 [ 112.175161][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 112.175185][ C0] __irq_exit_rcu+0xcb/0x220 [ 112.175204][ C0] irq_exit_rcu+0x9/0x30 [ 112.175221][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 112.175249][ C0] [ 112.175254][ C0] [ 112.175261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.175278][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 112.175300][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 112.175313][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 112.175333][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 112.175344][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 112.175355][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 112.175365][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 112.175376][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 112.175390][ C0] ? pfn_valid+0xba/0x490 [ 112.175410][ C0] ? pfn_valid+0xba/0x490 [ 112.175433][ C0] ? pfn_valid+0xf3/0x490 [ 112.175455][ C0] page_table_check_clear+0x21/0x500 [ 112.175475][ C0] ? vm_normal_page+0x12c/0x280 [ 112.175499][ C0] __zap_vma_range+0x39b9/0x4f20 [ 112.175556][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 112.175585][ C0] ? mas_find+0xab1/0xcf0 [ 112.175608][ C0] ? unmap_vmas+0x1b9/0x550 [ 112.175632][ C0] unmap_vmas+0x390/0x550 [ 112.175659][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 112.175699][ C0] exit_mmap+0x293/0x9f0 [ 112.175718][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 112.175752][ C0] ? __pfx_exit_aio+0x10/0x10 [ 112.175786][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 112.175807][ C0] __mmput+0x118/0x420 [ 112.175826][ C0] exit_mm+0x221/0x2d0 [ 112.175852][ C0] do_exit+0x6cd/0x2360 [ 112.175881][ C0] ? __pfx_do_exit+0x10/0x10 [ 112.175907][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.175933][ C0] do_group_exit+0x22d/0x2f0 [ 112.175956][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.175979][ C0] get_signal+0x121b/0x12c0 [ 112.176012][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 112.176035][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.176069][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 112.176093][ C0] ? rcu_is_watching+0x16/0xb0 [ 112.176112][ C0] do_syscall_64+0x328/0x520 [ 112.176134][ C0] ? trace_irq_disable+0x3b/0x140 [ 112.176157][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.176173][ C0] ? clear_bhb_loop+0x70/0xc0 [ 112.176192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.176208][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 112.176225][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 112.176237][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.176252][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 112.176264][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 112.176273][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.176283][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.176292][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 112.176315][ C0] [ 112.176328][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1491 [ 112.676939][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6070, name: syz.2.84 [ 112.685845][ C0] preempt_count: 102, expected: 0 [ 112.690909][ C0] RCU nest depth: 1, expected: 0 [ 112.695852][ C0] locks held by syz.2.84/6070: 5, last CPU#0: [ 112.701959][ C0] #0: ffff888029aaa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 112.711103][ C0] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 112.721021][ C0] #2: ffff8880777e8978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 112.731532][ C0] #3: ffffffff8eb5a460 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 112.740994][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 112.751492][ C0] Preemption disabled at: [ 112.751503][ C0] [<0000000000000000>] 0x0 [ 112.760281][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.760304][ C0] Tainted: [W]=WARN [ 112.760309][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.760319][ C0] Call Trace: [ 112.760326][ C0] [ 112.760333][ C0] dump_stack_lvl+0xe8/0x150 [ 112.760359][ C0] __might_resched+0x36a/0x4c0 [ 112.760386][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 112.760412][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 112.760434][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.760462][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.760483][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 112.760508][ C0] ? synchronize_srcu+0x20a/0x260 [ 112.760533][ C0] wakeup_source_unregister+0x129/0x3f0 [ 112.760555][ C0] mmc_host_classdev_release+0x47/0x100 [ 112.760575][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 112.760591][ C0] device_release+0xc4/0x1f0 [ 112.760615][ C0] kobject_put+0x222/0x550 [ 112.760632][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 112.760654][ C0] call_timer_fn+0x18d/0x5f0 [ 112.760669][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.760692][ C0] ? call_timer_fn+0xd5/0x5f0 [ 112.760707][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 112.760729][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.760749][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.760775][ C0] __run_timer_base+0x652/0x8b0 [ 112.760799][ C0] ? ktime_get+0x45/0x220 [ 112.760829][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 112.760856][ C0] ? ktime_get+0x1f5/0x220 [ 112.760878][ C0] ? lapic_next_event+0x11/0x20 [ 112.760908][ C0] run_timer_softirq+0xb7/0x170 [ 112.760933][ C0] handle_softirqs+0x226/0x860 [ 112.760954][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 112.760978][ C0] __irq_exit_rcu+0xcb/0x220 [ 112.760997][ C0] irq_exit_rcu+0x9/0x30 [ 112.761014][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 112.761038][ C0] [ 112.761043][ C0] [ 112.761049][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.761067][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 112.761088][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 112.761101][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 112.761115][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 112.761127][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 112.761137][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 112.761147][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 112.761158][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 112.761172][ C0] ? pfn_valid+0xba/0x490 [ 112.761192][ C0] ? pfn_valid+0xba/0x490 [ 112.761216][ C0] ? pfn_valid+0xf3/0x490 [ 112.761243][ C0] page_table_check_clear+0x21/0x500 [ 112.761264][ C0] ? vm_normal_page+0x12c/0x280 [ 112.761288][ C0] __zap_vma_range+0x39b9/0x4f20 [ 112.761345][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 112.761374][ C0] ? mas_find+0xab1/0xcf0 [ 112.761397][ C0] ? unmap_vmas+0x1b9/0x550 [ 112.761421][ C0] unmap_vmas+0x390/0x550 [ 112.761448][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 112.761488][ C0] exit_mmap+0x293/0x9f0 [ 112.761507][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 112.761542][ C0] ? __pfx_exit_aio+0x10/0x10 [ 112.761575][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 112.761596][ C0] __mmput+0x118/0x420 [ 112.761615][ C0] exit_mm+0x221/0x2d0 [ 112.761640][ C0] do_exit+0x6cd/0x2360 [ 112.761670][ C0] ? __pfx_do_exit+0x10/0x10 [ 112.761696][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.761722][ C0] do_group_exit+0x22d/0x2f0 [ 112.761745][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.761768][ C0] get_signal+0x121b/0x12c0 [ 112.761801][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 112.761825][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.761859][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 112.761882][ C0] ? rcu_is_watching+0x16/0xb0 [ 112.761901][ C0] do_syscall_64+0x328/0x520 [ 112.761924][ C0] ? trace_irq_disable+0x3b/0x140 [ 112.761946][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.761962][ C0] ? clear_bhb_loop+0x70/0xc0 [ 112.761981][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.761997][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 112.762010][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 112.762018][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.762032][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 112.762044][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 112.762053][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.762063][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.762072][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 112.762095][ C0] [ 112.762118][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90006ff8000, but annotated. [ 112.763525][ C0] [ 112.763530][ C0] ====================================================== [ 112.763536][ C0] WARNING: possible circular locking dependency detected [ 112.763545][ C0] syzkaller #0 Tainted: G W [ 112.763553][ C0] ------------------------------------------------------ [ 112.763558][ C0] syz.2.84/6070 is trying to acquire lock: [ 112.763566][ C0] ffffffff8eb4c680 (console_owner){..-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 112.763607][ C0] [ 112.763607][ C0] but task is already holding lock: [ 112.763612][ C0] ffffffff9aa241d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 112.763649][ C0] [ 112.763649][ C0] which lock already depends on the new lock. [ 112.763649][ C0] [ 112.763655][ C0] [ 112.763655][ C0] the existing dependency chain (in reverse order) is: [ 112.763660][ C0] [ 112.763660][ C0] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 112.763686][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 112.763706][ C0] debug_object_assert_init+0xb0/0x380 [ 112.763726][ C0] hrtimer_start_range_ns+0x3d/0x3e0 [ 112.763741][ C0] rpm_suspend+0x12d9/0x17a0 [ 112.763757][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 112.763773][ C0] __device_attach+0x355/0x450 [ 112.763790][ C0] device_initial_probe+0xa1/0xd0 [ 112.763807][ C0] bus_probe_device+0x12a/0x220 [ 112.763829][ C0] device_add+0x7d7/0xb80 [ 112.763842][ C0] serdev_controller_add+0x85/0x6d0 [ 112.763863][ C0] serdev_tty_port_register+0x159/0x260 [ 112.763884][ C0] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 112.763901][ C0] serial_core_register_port+0xffa/0x2840 [ 112.763923][ C0] serial8250_register_8250_port+0x16b4/0x2090 [ 112.763945][ C0] serial_pnp_probe+0x56a/0x7f0 [ 112.763965][ C0] pnp_device_probe+0x30b/0x4c0 [ 112.763986][ C0] really_probe+0x254/0xae0 [ 112.764003][ C0] __driver_probe_device+0x1e8/0x360 [ 112.764021][ C0] driver_probe_device+0x4f/0x240 [ 112.764038][ C0] __driver_attach+0x339/0x600 [ 112.764055][ C0] bus_for_each_dev+0x23b/0x2c0 [ 112.764076][ C0] bus_add_driver+0x345/0x670 [ 112.764099][ C0] driver_register+0x23a/0x320 [ 112.764118][ C0] serial8250_init+0x8f/0x160 [ 112.764132][ C0] do_one_initcall+0x250/0x870 [ 112.764153][ C0] do_initcall_level+0x10a/0x1a0 [ 112.764168][ C0] do_initcalls+0x59/0xa0 [ 112.764182][ C0] kernel_init_freeable+0x29d/0x3e0 [ 112.764198][ C0] kernel_init+0x22/0x1d0 [ 112.764212][ C0] ret_from_fork+0x514/0xb70 [ 112.764240][ C0] ret_from_fork_asm+0x1a/0x30 [ 112.764261][ C0] [ 112.764261][ C0] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 112.764281][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 112.764300][ C0] __pm_runtime_resume+0x10f/0x180 [ 112.764316][ C0] __uart_start+0x171/0x460 [ 112.764337][ C0] uart_write+0x251/0x9f0 [ 112.764358][ C0] n_tty_write+0xd49/0x11e0 [ 112.764375][ C0] file_tty_write+0x50d/0x9f0 [ 112.764396][ C0] vfs_write+0x612/0xba0 [ 112.764419][ C0] ksys_write+0x150/0x270 [ 112.764440][ C0] do_syscall_64+0x166/0x520 [ 112.764462][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.764477][ C0] [ 112.764477][ C0] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 112.764496][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 112.764514][ C0] serial8250_console_write+0x153/0x1ba0 [ 112.764528][ C0] console_flush_all+0x6ea/0xaf0 [ 112.764545][ C0] console_unlock+0xd1/0x1c0 [ 112.764558][ C0] vprintk_emit+0x485/0x560 [ 112.764572][ C0] _printk+0xdd/0x130 [ 112.764585][ C0] register_console+0xbc3/0xfc0 [ 112.764602][ C0] univ8250_console_init+0x3a/0x70 [ 112.764616][ C0] console_init+0x10b/0x4a0 [ 112.764636][ C0] start_kernel+0x238/0x3e0 [ 112.764649][ C0] x86_64_start_reservations+0x24/0x30 [ 112.764670][ C0] x86_64_start_kernel+0x137/0x1b0 [ 112.764689][ C0] common_startup_64+0x13e/0x157 [ 112.764705][ C0] [ 112.764705][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 112.764724][ C0] __lock_acquire+0x1520/0x2cf0 [ 112.764745][ C0] lock_acquire+0x106/0x350 [ 112.764766][ C0] console_flush_all+0x693/0xaf0 [ 112.764782][ C0] console_unlock+0xd1/0x1c0 [ 112.764795][ C0] vprintk_emit+0x485/0x560 [ 112.764809][ C0] _printk+0xdd/0x130 [ 112.764821][ C0] __debug_object_init+0x2c3/0x3c0 [ 112.764839][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 112.764861][ C0] wakeup_source_unregister+0x129/0x3f0 [ 112.764877][ C0] mmc_host_classdev_release+0x47/0x100 [ 112.764892][ C0] device_release+0xc4/0x1f0 [ 112.764911][ C0] kobject_put+0x222/0x550 [ 112.764924][ C0] call_timer_fn+0x18d/0x5f0 [ 112.764937][ C0] __run_timer_base+0x652/0x8b0 [ 112.764958][ C0] run_timer_softirq+0xb7/0x170 [ 112.764980][ C0] handle_softirqs+0x226/0x860 [ 112.764996][ C0] __irq_exit_rcu+0xcb/0x220 [ 112.765012][ C0] irq_exit_rcu+0x9/0x30 [ 112.765028][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 112.765049][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.765064][ C0] pfn_valid+0xf7/0x490 [ 112.765082][ C0] page_table_check_clear+0x21/0x500 [ 112.765099][ C0] __zap_vma_range+0x39b9/0x4f20 [ 112.765119][ C0] unmap_vmas+0x390/0x550 [ 112.765138][ C0] exit_mmap+0x293/0x9f0 [ 112.765153][ C0] __mmput+0x118/0x420 [ 112.765167][ C0] exit_mm+0x221/0x2d0 [ 112.765187][ C0] do_exit+0x6cd/0x2360 [ 112.765208][ C0] do_group_exit+0x22d/0x2f0 [ 112.765234][ C0] get_signal+0x121b/0x12c0 [ 112.765249][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 112.765268][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 112.765289][ C0] do_syscall_64+0x328/0x520 [ 112.765310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.765324][ C0] [ 112.765324][ C0] other info that might help us debug this: [ 112.765324][ C0] [ 112.765329][ C0] Chain exists of: [ 112.765329][ C0] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 112.765329][ C0] [ 112.765352][ C0] Possible unsafe locking scenario: [ 112.765352][ C0] [ 112.765357][ C0] CPU0 CPU1 [ 112.765361][ C0] ---- ---- [ 112.765365][ C0] lock(&obj_hash[i].lock); [ 112.765375][ C0] lock(&dev->power.lock); [ 112.765386][ C0] lock(&obj_hash[i].lock); [ 112.765397][ C0] lock(console_owner); [ 112.765406][ C0] [ 112.765406][ C0] *** DEADLOCK *** [ 112.765406][ C0] [ 112.765410][ C0] locks held by syz.2.84/6070: 8, last CPU#0: [ 112.765421][ C0] #0: ffff888029aaa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 112.765456][ C0] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 112.765491][ C0] #2: ffff8880777e8978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 112.765529][ C0] #3: ffffffff8eb5a460 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 112.765568][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 112.765602][ C0] #5: ffffffff9aa241d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 112.765640][ C0] #6: ffffffff8eb4c6e0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 112.765673][ C0] #7: ffffffff8ea33f78 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 112.765711][ C0] [ 112.765711][ C0] stack backtrace: [ 112.765720][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.765741][ C0] Tainted: [W]=WARN [ 112.765746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.765755][ C0] Call Trace: [ 112.765760][ C0] [ 112.765766][ C0] dump_stack_lvl+0xe8/0x150 [ 112.765788][ C0] print_circular_bug+0x2e1/0x300 [ 112.765805][ C0] check_noncircular+0x12e/0x150 [ 112.765823][ C0] __lock_acquire+0x1520/0x2cf0 [ 112.765854][ C0] ? console_flush_all+0x123/0xaf0 [ 112.765871][ C0] lock_acquire+0x106/0x350 [ 112.765893][ C0] ? console_flush_all+0x123/0xaf0 [ 112.765913][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 112.765931][ C0] ? console_flush_all+0x123/0xaf0 [ 112.765949][ C0] console_flush_all+0x693/0xaf0 [ 112.765965][ C0] ? console_flush_all+0x123/0xaf0 [ 112.765984][ C0] ? console_flush_all+0x123/0xaf0 [ 112.766003][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 112.766023][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 112.766044][ C0] console_unlock+0xd1/0x1c0 [ 112.766060][ C0] ? __pfx_console_unlock+0x10/0x10 [ 112.766075][ C0] ? __pfx__raw_spin_unlock+0x10/0x10 [ 112.766094][ C0] ? _printk+0xdd/0x130 [ 112.766110][ C0] vprintk_emit+0x485/0x560 [ 112.766126][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 112.766145][ C0] _printk+0xdd/0x130 [ 112.766161][ C0] ? __pfx__printk+0x10/0x10 [ 112.766180][ C0] __debug_object_init+0x2c3/0x3c0 [ 112.766201][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 112.766218][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 112.766247][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 112.766269][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.766290][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.766310][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 112.766332][ C0] ? synchronize_srcu+0x20a/0x260 [ 112.766355][ C0] wakeup_source_unregister+0x129/0x3f0 [ 112.766373][ C0] mmc_host_classdev_release+0x47/0x100 [ 112.766389][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 112.766405][ C0] device_release+0xc4/0x1f0 [ 112.766426][ C0] kobject_put+0x222/0x550 [ 112.766441][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 112.766461][ C0] call_timer_fn+0x18d/0x5f0 [ 112.766475][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.766498][ C0] ? call_timer_fn+0xd5/0x5f0 [ 112.766511][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 112.766529][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.766548][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 112.766572][ C0] __run_timer_base+0x652/0x8b0 [ 112.766594][ C0] ? ktime_get+0x45/0x220 [ 112.766618][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 112.766643][ C0] ? ktime_get+0x1f5/0x220 [ 112.766663][ C0] ? lapic_next_event+0x11/0x20 [ 112.766690][ C0] run_timer_softirq+0xb7/0x170 [ 112.766713][ C0] handle_softirqs+0x226/0x860 [ 112.766732][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 112.766752][ C0] __irq_exit_rcu+0xcb/0x220 [ 112.766769][ C0] irq_exit_rcu+0x9/0x30 [ 112.766785][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 112.766807][ C0] [ 112.766812][ C0] [ 112.766817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.766834][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 112.766853][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 112.766866][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 112.766879][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 112.766890][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 112.766901][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 112.766910][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 112.766921][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 112.766934][ C0] ? pfn_valid+0xba/0x490 [ 112.766952][ C0] ? pfn_valid+0xba/0x490 [ 112.766973][ C0] ? pfn_valid+0xf3/0x490 [ 112.766992][ C0] page_table_check_clear+0x21/0x500 [ 112.767011][ C0] ? vm_normal_page+0x12c/0x280 [ 112.767032][ C0] __zap_vma_range+0x39b9/0x4f20 [ 112.767069][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 112.767094][ C0] ? mas_find+0xab1/0xcf0 [ 112.767115][ C0] ? unmap_vmas+0x1b9/0x550 [ 112.767137][ C0] unmap_vmas+0x390/0x550 [ 112.767159][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 112.767188][ C0] exit_mmap+0x293/0x9f0 [ 112.767205][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 112.767233][ C0] ? __pfx_exit_aio+0x10/0x10 [ 112.767262][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 112.767280][ C0] __mmput+0x118/0x420 [ 112.767296][ C0] exit_mm+0x221/0x2d0 [ 112.767319][ C0] do_exit+0x6cd/0x2360 [ 112.767344][ C0] ? __pfx_do_exit+0x10/0x10 [ 112.767367][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.767388][ C0] do_group_exit+0x22d/0x2f0 [ 112.767452][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.767477][ C0] get_signal+0x121b/0x12c0 [ 112.767507][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 112.767533][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.767567][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 112.767597][ C0] ? rcu_is_watching+0x16/0xb0 [ 112.767622][ C0] do_syscall_64+0x328/0x520 [ 112.767645][ C0] ? trace_irq_disable+0x3b/0x140 [ 112.767667][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.767682][ C0] ? clear_bhb_loop+0x70/0xc0 [ 112.767699][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.767714][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 112.767729][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 112.767737][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.767752][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 112.767764][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 112.767773][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.767783][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.767792][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 112.767809][ C0] [ 114.609220][ C0] ------------[ cut here ]------------ [ 114.614696][ C0] 1 [ 114.614718][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.2.84/6070 [ 114.627130][ C0] Modules linked in: [ 114.631059][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.641737][ C0] Tainted: [W]=WARN [ 114.645540][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.655595][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 114.661510][ C0] Code: cc cc cc 41 ff c7 44 89 3d e9 ee ca 15 48 c7 c1 80 f1 4c 8c 48 c7 c7 e0 f1 4c 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 97 44 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 4e 54 0a 3b 05 9f [ 114.681120][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 114.687189][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 9e148af508641800 [ 114.695186][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 114.703202][ C0] RBP: ffff888076b80020 R08: 0000000000000100 R09: 0000000000000004 [ 114.711189][ C0] R10: dffffc0000000000 R11: fffffbfff1d3ca44 R12: ffff888056efa4e8 [ 114.719168][ C0] R13: ffff88801bb86348 R14: dffffc0000000000 R15: 0000000000000001 [ 114.727144][ C0] FS: 0000000000000000(0000) GS:ffff888124f1a000(0000) knlGS:0000000000000000 [ 114.736078][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.742664][ C0] CR2: 000000110c3584de CR3: 000000005891a000 CR4: 00000000003526f0 [ 114.750640][ C0] Call Trace: [ 114.753926][ C0] [ 114.756774][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 114.762331][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 114.767369][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 114.772949][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.778009][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.783827][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 114.789382][ C0] ? synchronize_srcu+0x20a/0x260 [ 114.794439][ C0] wakeup_source_unregister+0x129/0x3f0 [ 114.799990][ C0] mmc_host_classdev_release+0x47/0x100 [ 114.805539][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 114.811697][ C0] device_release+0xc4/0x1f0 [ 114.816321][ C0] kobject_put+0x222/0x550 [ 114.820740][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 114.825516][ C0] call_timer_fn+0x18d/0x5f0 [ 114.830130][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.836818][ C0] ? call_timer_fn+0xd5/0x5f0 [ 114.841524][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 114.846646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.851869][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 114.858553][ C0] __run_timer_base+0x652/0x8b0 [ 114.863416][ C0] ? ktime_get+0x45/0x220 [ 114.867758][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 114.873140][ C0] ? ktime_get+0x1f5/0x220 [ 114.877566][ C0] ? lapic_next_event+0x11/0x20 [ 114.882428][ C0] run_timer_softirq+0xb7/0x170 [ 114.887292][ C0] handle_softirqs+0x226/0x860 [ 114.892067][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 114.896842][ C0] __irq_exit_rcu+0xcb/0x220 [ 114.901438][ C0] irq_exit_rcu+0x9/0x30 [ 114.905688][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 114.911334][ C0] [ 114.914270][ C0] [ 114.917203][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.923189][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 114.928149][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 114.947779][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 114.953865][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 114.961847][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 114.969830][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 114.977812][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 114.985810][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 114.993797][ C0] ? pfn_valid+0xba/0x490 [ 114.998146][ C0] ? pfn_valid+0xba/0x490 [ 115.002488][ C0] ? pfn_valid+0xf3/0x490 [ 115.006847][ C0] page_table_check_clear+0x21/0x500 [ 115.012140][ C0] ? vm_normal_page+0x12c/0x280 [ 115.017014][ C0] __zap_vma_range+0x39b9/0x4f20 [ 115.021990][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 115.027296][ C0] ? mas_find+0xab1/0xcf0 [ 115.031636][ C0] ? unmap_vmas+0x1b9/0x550 [ 115.036148][ C0] unmap_vmas+0x390/0x550 [ 115.040490][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 115.045408][ C0] exit_mmap+0x293/0x9f0 [ 115.049658][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 115.054458][ C0] ? __pfx_exit_aio+0x10/0x10 [ 115.059157][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 115.064362][ C0] __mmput+0x118/0x420 [ 115.068435][ C0] exit_mm+0x221/0x2d0 [ 115.072535][ C0] do_exit+0x6cd/0x2360 [ 115.076706][ C0] ? __pfx_do_exit+0x10/0x10 [ 115.081326][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.086362][ C0] do_group_exit+0x22d/0x2f0 [ 115.090963][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.096188][ C0] get_signal+0x121b/0x12c0 [ 115.100704][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 115.106257][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.112425][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 115.117812][ C0] ? rcu_is_watching+0x16/0xb0 [ 115.122601][ C0] do_syscall_64+0x328/0x520 [ 115.127202][ C0] ? trace_irq_disable+0x3b/0x140 [ 115.132240][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.138313][ C0] ? clear_bhb_loop+0x70/0xc0 [ 115.142998][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.148899][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 115.153317][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 115.160341][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.168773][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 115.176778][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 115.184764][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.192757][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.200758][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 115.208765][ C0] [ 115.211790][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.219094][ C0] CPU: 0 UID: 0 PID: 6070 Comm: syz.2.84 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.229779][ C0] Tainted: [W]=WARN [ 115.233588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.243653][ C0] Call Trace: [ 115.246946][ C0] [ 115.249797][ C0] vpanic+0x56d/0xa60 [ 115.253794][ C0] ? __pfx__printk+0x10/0x10 [ 115.258413][ C0] ? __pfx_vpanic+0x10/0x10 [ 115.262934][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 115.268223][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 115.273431][ C0] panic+0xc5/0xd0 [ 115.277165][ C0] ? __pfx_panic+0x10/0x10 [ 115.281598][ C0] __warn+0x315/0x4c0 [ 115.285592][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 115.290893][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 115.296188][ C0] __report_bug+0x276/0x570 [ 115.300709][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 115.306178][ C0] ? __pfx___report_bug+0x10/0x10 [ 115.311215][ C0] ? __wake_up_klogd+0xf0/0x130 [ 115.316074][ C0] ? vprintk_emit+0x4ee/0x560 [ 115.320770][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 115.325805][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 115.331100][ C0] report_bug+0x16b/0x220 [ 115.335443][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 115.340737][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 115.346037][ C0] handle_bug+0x9c/0x200 [ 115.350284][ C0] exc_invalid_op+0x1a/0x50 [ 115.354793][ C0] asm_exc_invalid_op+0x1a/0x20 [ 115.359646][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 115.365549][ C0] Code: cc cc cc 41 ff c7 44 89 3d e9 ee ca 15 48 c7 c1 80 f1 4c 8c 48 c7 c7 e0 f1 4c 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 97 44 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 4e 54 0a 3b 05 9f [ 115.385164][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 115.391272][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 9e148af508641800 [ 115.399260][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 115.407261][ C0] RBP: ffff888076b80020 R08: 0000000000000100 R09: 0000000000000004 [ 115.415241][ C0] R10: dffffc0000000000 R11: fffffbfff1d3ca44 R12: ffff888056efa4e8 [ 115.423221][ C0] R13: ffff88801bb86348 R14: dffffc0000000000 R15: 0000000000000001 [ 115.431212][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 115.436524][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 115.442094][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 115.447136][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 115.452695][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.457736][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.463553][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 115.469113][ C0] ? synchronize_srcu+0x20a/0x260 [ 115.474172][ C0] wakeup_source_unregister+0x129/0x3f0 [ 115.479734][ C0] mmc_host_classdev_release+0x47/0x100 [ 115.485293][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 115.491457][ C0] device_release+0xc4/0x1f0 [ 115.496149][ C0] kobject_put+0x222/0x550 [ 115.500602][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 115.505373][ C0] call_timer_fn+0x18d/0x5f0 [ 115.510056][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 115.516743][ C0] ? call_timer_fn+0xd5/0x5f0 [ 115.521421][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 115.526564][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.531782][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 115.538472][ C0] __run_timer_base+0x652/0x8b0 [ 115.543341][ C0] ? ktime_get+0x45/0x220 [ 115.547682][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 115.553068][ C0] ? ktime_get+0x1f5/0x220 [ 115.557505][ C0] ? lapic_next_event+0x11/0x20 [ 115.562379][ C0] run_timer_softirq+0xb7/0x170 [ 115.567258][ C0] handle_softirqs+0x226/0x860 [ 115.572033][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 115.576815][ C0] __irq_exit_rcu+0xcb/0x220 [ 115.581417][ C0] irq_exit_rcu+0x9/0x30 [ 115.585670][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 115.591316][ C0] [ 115.594264][ C0] [ 115.597199][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.603191][ C0] RIP: 0010:pfn_valid+0xf7/0x490 [ 115.608141][ C0] Code: 45 31 c9 53 e8 ba 6c 60 ff 48 83 c4 08 e8 d1 dd 97 09 89 c5 31 ff 89 c6 e8 76 f9 84 ff 85 ed 74 1a e8 0d 98 69 ff 84 c0 74 7d 64 f4 84 ff 4d 85 ff 75 11 e8 5a f4 84 ff eb 3d e8 53 f4 84 ff [ 115.627758][ C0] RSP: 0018:ffffc90006fff318 EFLAGS: 00000202 [ 115.633851][ C0] RAX: 0000000000000001 RBX: ffffffff82423c3a RCX: 8000000000000003 [ 115.641830][ C0] RDX: 0000000000000000 RSI: ffffffff8c4ce860 RDI: ffffffff8c4ce820 [ 115.649805][ C0] RBP: 0000000000000001 R08: ffffffff82423c3a R09: 0000000000000000 [ 115.657798][ C0] R10: 0000000000000000 R11: ffffffff8eb5a460 R12: dffffc0000000000 [ 115.665789][ C0] R13: 00007f68c6c00000 R14: 00000000000595ce R15: ffff88813fe52160 [ 115.673765][ C0] ? pfn_valid+0xba/0x490 [ 115.678110][ C0] ? pfn_valid+0xba/0x490 [ 115.682472][ C0] ? pfn_valid+0xf3/0x490 [ 115.686814][ C0] page_table_check_clear+0x21/0x500 [ 115.692105][ C0] ? vm_normal_page+0x12c/0x280 [ 115.696971][ C0] __zap_vma_range+0x39b9/0x4f20 [ 115.701945][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 115.707243][ C0] ? mas_find+0xab1/0xcf0 [ 115.711581][ C0] ? unmap_vmas+0x1b9/0x550 [ 115.716104][ C0] unmap_vmas+0x390/0x550 [ 115.720482][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 115.725391][ C0] exit_mmap+0x293/0x9f0 [ 115.729650][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 115.734430][ C0] ? __pfx_exit_aio+0x10/0x10 [ 115.739123][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 115.744326][ C0] __mmput+0x118/0x420 [ 115.748404][ C0] exit_mm+0x221/0x2d0 [ 115.752483][ C0] do_exit+0x6cd/0x2360 [ 115.756652][ C0] ? __pfx_do_exit+0x10/0x10 [ 115.761257][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.766316][ C0] do_group_exit+0x22d/0x2f0 [ 115.770920][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.776130][ C0] get_signal+0x121b/0x12c0 [ 115.780651][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 115.786216][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.792404][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 115.797791][ C0] ? rcu_is_watching+0x16/0xb0 [ 115.802579][ C0] do_syscall_64+0x328/0x520 [ 115.807179][ C0] ? trace_irq_disable+0x3b/0x140 [ 115.812225][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.818313][ C0] ? clear_bhb_loop+0x70/0xc0 [ 115.823006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.828913][ C0] RIP: 0033:0x7f68c7b9e0d9 [ 115.833339][ C0] Code: Unable to access opcode bytes at 0x7f68c7b9e0af. [ 115.840357][ C0] RSP: 002b:00007f68c8a5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.848779][ C0] RAX: fffffffffffffe00 RBX: 00007f68c7e25fa8 RCX: 00007f68c7b9e0d9 [ 115.856758][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f68c7e25fa8 [ 115.864731][ C0] RBP: 00007f68c7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.872709][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.880769][ C0] R13: 00007f68c7e26038 R14: 00007f68c7f4f960 R15: 00007f68c7f4fa48 [ 115.888761][ C0] [ 115.892406][ C0] Kernel Offset: disabled [ 115.896745][ C0] Rebooting in 86400 seconds..