last executing test programs: 7m45.437174718s ago: executing program 1 (id=1311): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x32, r2}, {0x1ef, 0xffffffffffffffff, 0xfffffffffffffffa, 0x400000, 0x1ff, 0xa3, 0x3, 0x2}, {0x8, 0x1, 0x67ff, 0x9}, 0x1ac5, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@local, 0x3504, 0x3, 0x3, 0x3, 0x0, 0x5, 0xffff0001}}, 0xe4) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)="3756608a8ae6d9f0c40d177f41e18ced9b897f067166d3d922d32b27c5cfccea4541553eeb9175494019ea6bff76840d022eb91af6ba326898fc1f94f5a8de74167a6b0192d6", 0x46) recvmsg(0xffffffffffffffff, 0x0, 0x123) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 7m45.277215222s ago: executing program 1 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x120) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x121483) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) flock(r2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000001d80)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xb, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x4044) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000800) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3442, 0x100, 0x0, 0x338}, &(0x7f0000000080), &(0x7f00000001c0), 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 7m42.958677659s ago: executing program 1 (id=1316): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1011e0, 0x1000, 0xfffffffc, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7m41.977317923s ago: executing program 1 (id=1318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7m41.799432037s ago: executing program 1 (id=1320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x32, r2}, {0x1ef, 0xffffffffffffffff, 0xfffffffffffffffa, 0x400000, 0x1ff, 0xa3, 0x3, 0x2}, {0x8, 0x1, 0x67ff, 0x9}, 0x1ac5, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@local, 0x3504, 0x3, 0x3, 0x3, 0x0, 0x5, 0xffff0001}}, 0xe4) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)="3756608a8ae6d9f0c40d177f41e18ced9b897f067166d3d922d32b27c5cfccea4541553eeb9175494019ea6bff76840d022eb91af6ba326898fc1f94f5a8de74167a6b0192d6", 0x46) recvmsg(0xffffffffffffffff, 0x0, 0x123) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 7m41.27892301s ago: executing program 1 (id=1322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004000)=""/4099, 0x1003) 7m24.771096015s ago: executing program 32 (id=1322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004000)=""/4099, 0x1003) 3m11.207633287s ago: executing program 2 (id=2066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3m10.933460724s ago: executing program 4 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 3m7.294941263s ago: executing program 4 (id=2069): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) 3m7.211737165s ago: executing program 0 (id=2070): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8081) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 3m7.150950317s ago: executing program 2 (id=2071): syz_emit_ethernet(0x27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x20000005, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="020000d3e75595b440b2000400000008fa000001000000800000006f0370755c596901258c32f317171230d934bee1b1d8f7f4422942fb96622796800b49e9e22a516b45bc580596e65ff604e16968759b00767af39ddefa0a5595de7fafeccf882367651dad851eb97378d39ef6d2c65749d8401f7c20cd2f4a4a92b00e8aa6d432ec56623780299c5953fd687c1f7386ffad6fb17be4320f507b619c13d6aa32f2379c49e7ff40843fc67cf651058a1fcbbe3ff01df62653d62c7ef9fe38faf7a50c82abd48d04108306550286459320d714eef74b01e48df17a4494eef85b0f1f52243409bbffbd4b9ccf0cfe2dc22c1cf6995213f27dfd232a82be6d42f45d936dcfd66e6a22d7a23af841e7cfb27de2a6ff6c365af23af269cdfa1f27c4559bad763d63ed12c855b4313f6b7696f8fcb100"/322, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x1c, 0x11, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000015c0)='GPL\x00', 0xfe50, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x20000004, 0x5}, 0x8, 0x10, &(0x7f0000002740)={0x5, 0x10, 0x80000001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000002e00), 0x10, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) write$P9_RLERRORu(r2, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x96) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000002c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}'}, 0xe3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i', 0xc) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) 3m6.795954746s ago: executing program 0 (id=2072): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x120) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x121483) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) flock(r1, 0x1) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xb, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x4044) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000800) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3442, 0x100, 0x0, 0x338}, &(0x7f0000000080), &(0x7f00000001c0), 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 3m4.675469707s ago: executing program 3 (id=2073): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 3m4.361061366s ago: executing program 2 (id=2074): syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, 0x0, 0x0, 0xc88c5) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x53c8, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, &(0x7f00000002c0)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="020000000000000068656c6c6f000000", 0x10) 3m4.149524781s ago: executing program 2 (id=2075): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) 3m1.855741917s ago: executing program 0 (id=2076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600)="001122334455667788", 0x9, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m1.769053629s ago: executing program 3 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 3m1.624385122s ago: executing program 3 (id=2078): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48080) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r1 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r1, &(0x7f0000000280)=""/226, 0xe2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r2, r2, 0x0, 0x1002000ff) 3m1.621047083s ago: executing program 4 (id=2079): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1011e0, 0x1000, 0xfffffffc, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x400, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m1.512207945s ago: executing program 0 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m58.223522686s ago: executing program 3 (id=2081): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='tcp\x00', 0x3) r6 = openat(r4, 0x0, 0x18b040, 0x48) write(r6, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m58.07200887s ago: executing program 4 (id=2082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) 2m57.792631947s ago: executing program 3 (id=2083): syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, 0x0, 0x0, 0xc88c5) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x53c8, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, &(0x7f00000002c0)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="020000000000000068656c6c6f000000", 0x10) 2m57.547364633s ago: executing program 3 (id=2084): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x120) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x121483) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) flock(r1, 0x1) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xb, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x4044) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000800) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3442, 0x100, 0x0, 0x338}, &(0x7f0000000080), &(0x7f00000001c0), 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 2m57.351624577s ago: executing program 0 (id=2085): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 2m56.904672528s ago: executing program 4 (id=2086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 2m56.667363675s ago: executing program 4 (id=2087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) 2m54.941406197s ago: executing program 2 (id=2088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m54.654755544s ago: executing program 0 (id=2089): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48080) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r1 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r1, &(0x7f0000000280)=""/226, 0xe2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r2, r2, 0x0, 0x1002000ff) 2m54.645935944s ago: executing program 2 (id=2090): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x0', 0x3) 2m2.368315847s ago: executing program 33 (id=2089): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48080) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r1 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r1, &(0x7f0000000280)=""/226, 0xe2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r2, r2, 0x0, 0x1002000ff) 2m2.21128289s ago: executing program 34 (id=2087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) 2m1.943059687s ago: executing program 35 (id=2090): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x0', 0x3) 2m1.769083722s ago: executing program 36 (id=2084): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x120) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x121483) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) flock(r1, 0x1) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xb, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x4044) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000800) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3442, 0x100, 0x0, 0x338}, &(0x7f0000000080), &(0x7f00000001c0), 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 14.215113691s ago: executing program 8 (id=2196): bpf$PROG_LOAD(0x2, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000270000042cbd7000fedbdf253e6c4f5934af26ef87440d1b0c1fd427f3651013fffc8be2f5abcd99697d1e34c658f4d90f70a2651ceaef4c76f6879b836c783902bbd563d151136446e02382bc49e476b760ad9a51db43ea445d0505eb938e8ff24d005980ce7c669dd37638aa"], 0xc4}], 0x1}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040050) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 11.37664758s ago: executing program 5 (id=2201): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.207907934s ago: executing program 8 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x7, 0x80000001, 0xa6d8, 0x2, 0x1, 0x40000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x80000003, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4001, 0x10000, 0x0, 0x8, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x3, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x3, 0x0, 0x40, 0x1, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x1, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0x7ffd, 0x7, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)="300a384a5afa3e03bf0a64cfebc3b33c352aa04016e0926526dc921d67a10e885e6aa280acc85541ae9e1533592103fba5aeab1525b15d997041aa960acab3ca3f1ab8f34e977a68217431a64238abd8d03871d9b6455f5e4bcc3bb353532c99039270ef3a7c54a1224ca31e4d7ba8dec1c030fc6f69a5756f06cc7d8f4404e2f78b86a7577f79f1fc00c25cc4aee65d55fca0c900", 0x95) 9.212080113s ago: executing program 5 (id=2204): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) 9.164638895s ago: executing program 8 (id=2205): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) 7.538625705s ago: executing program 6 (id=2206): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.410191358s ago: executing program 7 (id=2207): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='tcp\x00', 0x3) r6 = openat(r4, 0x0, 0x18b040, 0x48) write(r6, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.256563181s ago: executing program 6 (id=2208): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x40) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000402000000dd000e0400000000000000000000000000000d040000000000000000000002010000000400000000639b1b1b0000000000002646f2a2177e084f000839d60dba4c006100"], 0x0, 0x52}, 0x28) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0xc5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={r7, 0x7, 0x2, r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7, 0x7, 0x2, r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r9 = dup(r8) write$binfmt_aout(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0300430004000000f2000000001000007b0000005a6ad76d5b97130010000000"], 0x20) read$FUSE(r9, &(0x7f0000003940)={0x2020}, 0x2020) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0x17, "ff00f70000e5020052c4f21c7f000000002000"}) r11 = syz_open_pts(r10, 0x141601) write(r11, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000002c0)={r3, 0x1, 0x1, 0x0, &(0x7f0000000200)}) 6.945209209s ago: executing program 7 (id=2209): syz_emit_ethernet(0x27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x20000005, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="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"/322, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x1c, 0x11, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000015c0)='GPL\x00', 0xfe50, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x20000004, 0x5}, 0x8, 0x10, &(0x7f0000002740)={0x5, 0x10, 0x80000001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000002e00), 0x10, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) write$P9_RLERRORu(r2, &(0x7f0000002900)=ANY=[@ANYBLOB="9600000007010089005b0bdb58ae5b1aa9fdfaadd16d64c8854858a9250c1a65e000000000fbff0000819e47d92ce2c6619fe8f1b386e22b4f70d0a2821e623b28b5e16a53d691257c7ca08e7aad54c80ce589bf333a991eac60c3cfd3aed20711a9a55efff595d27123c6ca979dcb1e80d6d5254e26f823807a385ad27df5e49f359b01f974b81e7214dbd3cdfdbd6e43ec0364e578cb80ab6a438e72ef542ed0571906c4d4d7f411b584de8638fa6257b7f318da40c6e8c17b7596553b977377251fb36603f8f6b58c0b5f2f60f1718036ceaa194b93370400080000c9eda6329632edc831c45a44f0417e61177cdba8e2eaab9c340c6fa4db12f1f0c77af2cbaa6269b6dc"], 0x96) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000002c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}'}, 0xe3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r6, &(0x7f0000000500)=""/4096, 0x1000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i', 0xc) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) 3.003614956s ago: executing program 6 (id=2210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) 2.758840592s ago: executing program 5 (id=2211): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813cbf", 0x4, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) shutdown(r0, 0x1) 2.758210592s ago: executing program 7 (id=2212): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.615835885s ago: executing program 6 (id=2213): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x7, 0x80000001, 0xa6d8, 0x2, 0x1, 0x40000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x80000003, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x5, 0x0, 0x4001, 0x10000, 0x0, 0x8, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x3, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x3, 0x0, 0x40, 0x1, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x1, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0x7ffd, 0x7, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)="300a384a5afa3e03bf0a64cfebc3b33c352aa04016e0926526dc921d67a10e885e6aa280acc85541ae9e1533592103fba5aeab1525b15d997041aa960acab3ca3f1ab8f34e977a68217431a64238abd8d03871d9b6455f5e4bcc3bb353532c99039270ef3a7c54a1224ca31e4d7ba8dec1c030fc6f69a5756f06cc7d8f4404e2f78b86a7577f79f1fc00c25cc4aee65d55fca0c900", 0x95) 2.531058107s ago: executing program 8 (id=2214): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 2.521604848s ago: executing program 5 (id=2215): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) shutdown(0xffffffffffffffff, 0x1) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) 599.530035ms ago: executing program 7 (id=2216): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d80, 0x82) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 594.794035ms ago: executing program 6 (id=2217): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='tcp\x00', 0x3) r6 = openat(r4, 0x0, 0x18b040, 0x48) write(r6, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 570.946256ms ago: executing program 8 (id=2218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000500)='A', 0x1000) 515.336867ms ago: executing program 5 (id=2219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)}, 0x20000885) 318.102492ms ago: executing program 7 (id=2220): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04221b36db"], 0x13) 275.403783ms ago: executing program 8 (id=2221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) 111.742597ms ago: executing program 6 (id=2222): socket$kcm(0x29, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r2, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x1074, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1044, 0x2, [@TCA_FLOWER_ACT={0x1040, 0x3, [@m_tunnel_key={0x103c, 0x10, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf93}]}, {0x1004, 0x6, "72db074a972493972e9a05474f3fafb024daed2801db48880da532370fcff03c41cd21ba6c2f0564f245460f923e2d78a134ea43f6ed083740079c4255eb32a80bf7641ac95956a4551f21f3c8ed67931d8aa5c3dbc2d3fa70456d422a445ff90857f5545b0e84290bdbc0ec5a1e98d4320c14ffcba6f6812386bbcbc7916d9824383d43720f0c0c9a9f12016d0982a393a88a8fb9be4a3112e92e31a4ea1eace319ca9e5e8d9579b6ece7c236127e5da28c73c98bd6af491b4ee545ebfaeca4ddb55d4efe59719d61741b67eed608d71e6d5a8c2b135114899bca7ad545bea1075b3cea8b0ef80f51f72f7da7cb8205f4901e197e5f30365ac68805f9e56d994dc79384c7ee08bd8653ad977dfaa8bfbd830416515e035eef241878212b255f38199bad170d4e4e2e10a0f2e01a099c20d0a024dc61e14624efa3ee601aadc363de5fa2f31ff4b727fefef087cf96358c522653d774583f0cf1fae282a422bdf3b26c7a9e7dc740e73b2de8f7104293a48043a686c504e6dc8914b0161d01e721c3b8ffa42b6d5ea41e596a2585ce8250b839ac024ba226e00694517a599a29bac5c69eebdc7ea08436faaad9e3b63ed72bb8e7827fb4da32edfd05d1e81e02fd29a438682b665b3921128b45885aae85fc0b5699feee304735116a1681d0aa2379431d24878ef21975921832c5859b028aa881f0ee32412dd193c8cc1928ceb375b03f90463009fc653178751b9c136e5730681945064a81514f7b114e11d18a5756685b7c142377bdf0835b4c7b82ce01c88193317528c64128e9660e1d7c4a7630074982e28a409b934432b5b783c6e5bb6355ad0aef962c3792b6ab9d0911949cbe786b0c87d91138492131554697e0db6d55e706d4e51a723cb8e74c8360c53aafd58b29f72c2298a7ef4395a31b0b06aeecac62ae664060ae55582dd97ab4d2020558f0f74502f95c3ee2ecb8b46089a260bfd6eee6f17925ef38dcbf95cc8013f506a8c0b6f3da57246abc500f12286fde5fac8ae2f4ecd91cb2217fe7c33f7e66a60a89cf5a377f7499256453ad09fcdc6fb9a1db47a73703507268b4cd29060f8567e82d1494cadb4a76ca5a273e3b163f8f4c57e1aa1c7262bf7ac8cba52fc28be268bf9cb93e521a252f3ee4e3827cad919ebf4137c6c81aee82de0aeb53908c40c620f6becfb5e814110d6990af677ab83c50c9a08d2a9f4e054a5a6983525d6a914244c3b58c5f6a5a8c16aaed1c7bcafcabf28a597546918d60338df37aa43534e5860c5357c2846d5301ea1711b6d14de7d010f8c19d07f9817baef9cee1638aad6531e77dec8eba2ba007aa775e97fce93fe47c01609fdf6b20da282028ffbe2914d9703531cc813fd87207d8faed8449cba3f1742651de14c711cc9b4cbe50a83b5e125feb347138217041ca08cceb8f63abb1d80fc2e02a1a4cf5d95a0f3dd7d5f2801ab98e49946cb4ab86c3609ad62a1a65b2f94d73f3fe5fa7667d9bc86d6a6cefa5cd104577d4223f2db0bb2a9ed107d0c022c449a98201080a0a9fab13515a698b4eb5f10d868cdb41c2cd6d98b4be8be8ddb7c786bda820f59783b4a2814216a8c7b2bc5c7bc383c958a7ece292c0d4039d30f4b2e27e066a309e41b99c75e6a6f0c95f8e28b42124f0ccfc750d707262743ecee384093499f44112e97b1542ae7921cede3ddf03a6d9d1fab6e4f7e8921af59f4ec85f7f1684e5710e228906ad56a737c0468e300f26fde5d89c50915781b52d477a88489202f11aa7e17293340ac96cea1a76fe79fdfb259109eab46a8dc4af250a24759aba0012ed89c0ea93c4c77740b3bcadb4b048f52e50fae2b9f77824161580aab22f83168db0813ecf6f4a5c851c6e3e0712077dbd5a4489a1c64cf709b75288e638398b84d5507c69e58617f7b37fde77c3ab7af2ba885dbafdb669be368d9c61a9abfb822c7e99d55fa811eec5f9bf6084e3db964d9eb47868427b8802ab850eabc167889cd112ee29cd6fd99565fbb3fccf5e82f0633e019573a76a7a7b45ad65b7edf234dd255b76864c38743370ae523192dc890840e2fc7e6b2847c13160116a133f7a998447fd7582b5f9b67bfae0809163987cff4c3fe4076a4d3a09d4455ae26be5f0a853dbee082f31919aff644fd9eab7da33303c034ae8981345e0dc88a88ac2f067a1f947f0502db59cd432b7e952d205c14b33a433981adcdcd5b46e720a08c130148579b8fd891c59a4a0b4cde130a1f665204d5e2397e8098bc563b0b91c6ca374d638841879f91d91b324c9ee3087288b2cc5b03243a8583887018350e53ba31749474ad573e2135fc14381269c91319322d29b104d6c5f3cfc4d5045023c448289aeba4faa42d835c9d65f38906c9135b37276f1db9d700652a7e2afdc5aef8cb686812ef756bd077bd24fa1b0c0c603123d0c09e09528083106d4141ea0b00895b9dae7ebcb8a8a08fe4da6ff4f9d2178f2276534ff21ac9921392ed97f23ef159f732f1f6f5ef9a141d0efdb57521d92aad28c38652b8e40773954fffa88ac510be288c89cba1eb1d73e8c81ab8382979896b9afadcc20b9a4c50cdcd8b318f26b6479264aeb03d299470e5a9918b2c9b3c03286d1af5b96ba5baf53c4d6012e8d37799a95610786eaf4b9a3d1d73039855e8f3def93d791c51152ae1a1bed53a40664eef05d09817d2fd44bc8f49a8f6d5d5f561d9442e3d7d032a8db61a1de7f58b77e8c747244790aab898cde0bcf80b771a23328116f545b34890cd677bbcb692a70b91534b2cd9a9d383a14ec432045b8bb93b766b376557b20499525ac242cd202a0f5adec0c9c21b2d318194a1041dc9270d9354b7086e977113dc6efe8cbbcca30b31d7bf7a42a911880b863bd09edaa641cc3b18e3305cd01b3c9a3dee247c0a8137dc0d253c25c40dd852bbd332949f9fdcc88c516b92606f381f7194e90702ba8aca14a085e88db24f2fcf9d5b2b3301f305eb5042cfe03edf4a1d2e2f1c320d014ab6fa4128987f413057976d08cdf753e8f2e75b7aa0b72d0782ad58c45d9c3c68f7b18e35770654e91863c2040cbc61177f38737957cdc7a13476be67cafc234f6b0b901d49f4081ee3ca3efa087173ad5f43326172c01b5435499306abfc4db3538438bbbb297023d6cfdadd2c9f29d35351e7fd8db515d338df6b89acff378a9349df20d51ddb8f847347a3f62ddf1fa3c529f5ef755a1c70460ec1e6ba6a30caaa817560946f13965d9a75a3b3605c45ea7818580a4373fe4eb0143676c98960030e3c59305c607b0e8c3dce8b1458394e671620d48723f05a41ff4d38306cad56b1608c3276b741e7e838f91d742ceda78e1ddabcb3a916f28f5211229c0722fa5df8351217f9e735f1b57efaf118be4c3a40d1234451ee7023e6c46fd2716cebbf7622e8d0a690fe4853911f97c6a5587f4bc0b8858baf600636b2cce98aabe02e2d1ae2ea62dd47af1b72b0a58ee525f0cc5aba06f0e26b63d84028e9d24c9aed7f8ef5d3b3ba1e3d71ffe9755a1478bf2a6d79feba643d1eb9e2fd2741b65096a48cc76e1cb91ed4cd62e12d6507a6745ce6ef3bb3850ffb206b3d5216b05e7db2c3d0224227e760220477d15f867de32232c8002bca2904a60706fe8d35efbdfbb9a6de757849ca795facd1f0eec7c502d5bb8b1ea3382eb63d2969d5220b699447b26938381e23790ce09cf7651bfe328458a165340db49b342ae533a72050afa5e642ef79b5dd3593ed6db4fa53472e1371ac45d80bb1fc36b6c70e3dfa720e5ea985f0252114b376a1385ec2d87e2fd55b08524b89f54b0e2be9ac773b30fd0e0fd84518fa9b4938a5d2c4eafea00e6bea2cf7810c53e12883fb6c89365e894babfa6e884f6421dfa411ecc9a8059e26bc0d665112d29b0e3c427d1ba2be3620c253171e36412b664414a67a39d9fe624478a29367769fb98630987097b3ce40ff0e1f8db409f391eedaa169f2cff082df24578bcafe0c2e423b24e3bf29ae4bb2fbe6fba506214530ea41ef2ded4bb0df7a1754d3d377689737754acde8aa20a14b0f81fadc14d40c491daa4c014909a1ded98e36d01a3367116791f6815ec6f37c37c2de73684ea4873b1e1f38b8b9e95a313e39ca03bc6d66cdb7f89fa05e6fd21744643980875b0f004ca500a2d2d5dd765a772061fbb70dd5b58438fa525c124a3a33b2fe588248c75405591bb9b1b8ef47a85cac6bd4bcf5bf38e6e52073d4043d82b1d2dc199ca9a8c3872fbc9ffdd8deac263891a2157ec8791e3876f7529e64996673baa5f2f7c58afe7eeeb64df287147cf3e85fdeb096a866e4d14cb745ea3282e9406f1515be61641e7857efe07ae19c5a1c8bc1274c57624ef66682ee75c93cede5a3ac5fad92e987183a6d60140a6ee92e6c7290a285c26a131eec332639a1465895fc3f1bbf1acf995c54c01f7d1b37423622f96c27fec5192be406c0ee68e49204c697d58518c426d71f4660d7848a6f4d31cd1adc1af25f986ec28b08a329b09e5e55858cfb756bd97e854f731a76a9e120211bb64958654c0e05848df02d4298ae62f1a3b6bd5303c15647eedef7293db5fff7b4a4fef1fca132a514edf099c999a75906570a66ccc9bc1fef7ef889a317da941ac1d5d932902309e36facd9ca00e8473698e3937f49ae2859e464afa4427a230687fc8ec70b66fd126db5a9cb14b9af36b6c2df0e3438524e13ab6d4bcbae5c0cfabfba72b6783fef036bfe3e688acf51e588faf3dce3f158643b2a2810b7f25bd90a597b518ba65525d52d3312fcda7c7434be8bc17f9a9cd95adc892e7cd6df8d6bbe977bd2842970bd162ce78cfc3c1881944d837fd1beea9726cd39aa570f33547722be1aeb66f8c9bb599f10eb0817cbc1d9afc3a66e701bb0f80399137e372c16b6e900701b87fe72e2feca6d1cff430a34258c3c64a8239463f0406973028da0cf3b9424bb472dabb068d41f206d6ed84c2ddf6c6f189a5e009741afe8b6b56a48e41e10596ff64398a3647fa4cda4bba6b8faaa2a455b63e7afc66c8030fb3fa5b983e1db583ce6f87ba67f7c1231be37a6431f59cec99a56b0c3f2962bd746b31271bb0410efb509e57461e33cb74fb84b95146617a51e13ad2103dd9a6c805d92318d57cc1ee11d2fe642f0dab7c0977dd8a013591e24fbf3a9953151557165d1bbb22d8629c9f1aedcde3afe05c3ae77f6c420739d48e74423e45e8b1ee8272bf9490eacd03ad31cd74d30965b9ee492c2254a5027362dfa31a6bd723aeaae0cd5fd47a4c8a1bd272f583e3dc0787b77088d9b52da24a5ec6ae26bd2187efe4ae67a95493a286afbd5d572373954c015ac6ba935b66add7d83b02a22bcf7471eb8d81f98d928ac562cdeab5e128ee8ce23813ac019e763b9cf1ac90d22f0c9ac3d789a5797f4125a916a234d840f00fbf172b0d2816aace8636b246b142e5f6a4b57fd4a5893240e09da499092a4006f225139fcaa92dcd4899f33c905e9dfeb55788412f16f2f0bf467acc12ddbda0bba9b61cc6bc3339742eccaed597ecbfe7aeb0dc8f2d939b5a2e04bf42053b5ae23f9c5c8f36595900ae9d8eaa8788a16b7d5c79c71cba1620385c9d77612b51b2d41ad49c7085b8b1f33164aefd6e06039275b2f8d6a492ac4ae2ae230b6bc2da772c6a27151d02a0dfed5a9fc57e45e0b21fe5878f70c22d8970aed7665f26e1c95552c7ff7520542d508d6be5c02eaf1036472e10ff9fe588bc7f5e496a70ab517483b49c13c45699b05c774c977e94e4f192"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendto$inet(r3, &(0x7f0000000000)="db", 0x1, 0x24000000, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0xd39edd0f225dd60c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x1, {0x3}}) r9 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f6aaaaaaaaaaaa0180c200000e000d000000603b0100000095beaad49c4fae921da24c5bd6c3985b7aa004ebf74eb7ef40dc61834c45056324491d7f9c9834715c4bad811f2076c7d0d9c60b6af07021b7a6d40969d594"], 0x5a) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341) r11 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r11, 0x0) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 3.623079ms ago: executing program 7 (id=2223): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='1', 0x1) 0s ago: executing program 5 (id=2224): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ata cause=failed comm="syz.4.1538" name="addr_traddr" dev="configfs" ino=26061 res=0 errno=0 [ 458.723540][ T27] audit: type=1800 audit(1786191509.587:1397): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1538" name="addr_trsvcid" dev="configfs" ino=26062 res=0 errno=0 [ 459.028224][ T789] vhci_hcd: vhci_device speed not set [ 459.934276][ T5846] usb 4-1: USB disconnect, device number 32 [ 461.523744][ T5085] Bluetooth: hci1: Malformed HCI Event [ 462.423388][T10528] Can't find ip_set type lisT:set [ 463.110235][ T789] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 463.321596][ T789] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 463.346764][ T789] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 463.366380][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.390126][ T789] usb 4-1: Product: syz [ 463.404170][ T789] usb 4-1: Manufacturer: syz [ 463.419058][ T789] usb 4-1: SerialNumber: syz [ 463.426913][ T789] usb 4-1: config 0 descriptor?? [ 463.450366][T10538] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 463.470659][ T789] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 463.559716][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 463.779582][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 464.154061][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 464.174129][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.189442][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.200172][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.217178][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.232887][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 464.242907][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.273851][ T5085] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 465.280957][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 465.284680][ T971] usb 4-1: USB disconnect, device number 33 [ 465.949286][T10582] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 465.956066][T10582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 465.972393][T10582] vhci_hcd vhci_hcd.0: Device attached [ 466.250816][ T9] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 466.344247][ T5085] Bluetooth: hci3: Malformed HCI Event [ 466.559060][T10591] vhci_hcd: connection reset by peer [ 466.980665][T10596] Can't find ip_set type lisT:set [ 467.060827][ T59] vhci_hcd: stop threads [ 467.069763][ T59] vhci_hcd: release socket [ 467.074429][ T59] vhci_hcd: disconnect device [ 467.093463][ T789] usb 5-1: USB disconnect, device number 5 [ 467.802797][ T5085] Bluetooth: hci1: Malformed HCI Event [ 467.907393][T10602] Can't find ip_set type lisT:set [ 469.481018][ T5085] Bluetooth: hci4: link tx timeout [ 469.486720][ T5085] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.508211][ T5783] Bluetooth: hci4: link tx timeout [ 469.514530][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.526211][ T5783] Bluetooth: hci4: link tx timeout [ 469.531552][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.541414][ T5783] Bluetooth: hci4: link tx timeout [ 469.552510][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.561068][ T5783] Bluetooth: hci4: link tx timeout [ 469.566354][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.574496][ T5783] Bluetooth: hci4: link tx timeout [ 469.579723][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.587671][ T5783] Bluetooth: hci4: link tx timeout [ 469.592839][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.600834][ T5783] Bluetooth: hci4: link tx timeout [ 469.606112][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.614938][ T5783] Bluetooth: hci4: link tx timeout [ 469.620386][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.628569][ T5783] Bluetooth: hci4: link tx timeout [ 469.633876][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.641618][ T5783] Bluetooth: hci4: link tx timeout [ 469.647344][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.655219][ T5783] Bluetooth: hci4: link tx timeout [ 469.662534][ T5783] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 469.973078][ T5818] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 470.165169][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 470.195852][ T5818] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 470.210989][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.232719][ T5818] usb 4-1: Product: syz [ 470.248888][ T5818] usb 4-1: Manufacturer: syz [ 470.270873][ T5818] usb 4-1: SerialNumber: syz [ 470.282916][ T5766] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 470.290839][T10643] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1568'. [ 470.325702][ T5818] usb 4-1: config 0 descriptor?? [ 470.358435][T10630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 470.403670][T10645] siw: device registration error -23 [ 470.492974][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 471.124279][ T5818] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 471.142601][ T5766] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 471.151371][ T5766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.161620][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.172312][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.183933][ T5766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.197941][ T5766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 471.207419][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.504976][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 471.974353][ T5085] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 471.981428][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 472.109298][ T5766] usb 4-1: USB disconnect, device number 34 [ 472.154062][ T9] vhci_hcd: vhci_device speed not set [ 473.141143][ T971] usb 3-1: USB disconnect, device number 22 [ 473.213457][ T5085] Bluetooth: hci4: Malformed HCI Event [ 473.908022][T10695] bond5: entered promiscuous mode [ 473.928121][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 475.303947][T10703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 475.310698][T10703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.446656][T10703] vhci_hcd vhci_hcd.0: Device attached [ 475.645292][T10715] vhci_hcd: connection closed [ 475.647422][ T48] vhci_hcd: stop threads [ 475.688528][ T48] vhci_hcd: release socket [ 475.715542][ T5766] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 475.729179][ T48] vhci_hcd: disconnect device [ 475.759592][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 475.808093][ T9] usb 41-1: enqueue for inactive port 0 [ 475.925628][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 475.929904][ T9] vhci_hcd: vhci_device speed not set [ 475.952426][ T5766] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 476.020000][ T5766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.074288][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.116101][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.155375][ T5766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.188672][ T5766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.188809][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.229525][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.280860][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.588041][T10737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.596632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.052384][T10747] bond4: entered promiscuous mode [ 478.503000][ T9] usb 3-1: USB disconnect, device number 23 [ 479.697521][T10785] bond6: entered promiscuous mode [ 479.787292][T10781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 479.793902][T10781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.016874][T10781] vhci_hcd vhci_hcd.0: Device attached [ 480.156343][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.169645][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.287904][ T23] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 480.309656][T10789] vhci_hcd: connection reset by peer [ 480.315262][ T12] vhci_hcd: stop threads [ 480.384299][ T12] vhci_hcd: release socket [ 480.390406][ T27] audit: type=1800 audit(1786191531.506:1398): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1606" name="device_path" dev="configfs" ino=26417 res=0 errno=0 [ 480.488143][T10797] nvmet: failed to open block device (null): (-22) [ 480.497907][ T12] vhci_hcd: disconnect device [ 480.520666][ T27] audit: type=1800 audit(1786191531.596:1399): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1606" name="enable" dev="configfs" ino=26422 res=0 errno=0 [ 480.523006][T10797] nvmet_tcp: address family 255 not supported [ 480.567988][ T27] audit: type=1800 audit(1786191531.636:1400): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1606" name="addr_trtype" dev="configfs" ino=26423 res=0 errno=0 [ 480.623278][ T27] audit: type=1800 audit(1786191531.636:1401): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1606" name="addr_traddr" dev="configfs" ino=26424 res=0 errno=0 [ 480.675129][ T27] audit: type=1800 audit(1786191531.636:1402): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1606" name="addr_trsvcid" dev="configfs" ino=26425 res=0 errno=0 [ 480.772251][T10803] jffs2: notice: (10803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 481.028382][ T5766] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 481.253061][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 481.260828][ T5766] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 481.261202][T10814] bond5: entered promiscuous mode [ 481.284654][ T5766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.303280][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.328846][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.979701][ T5766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.115726][ T5766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.125137][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.264280][ T27] audit: type=1800 audit(1786191534.374:1403): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1617" name="device_path" dev="configfs" ino=25546 res=0 errno=0 [ 483.274020][T10826] nvmet: failed to open block device (null): (-22) [ 483.286036][ T27] audit: type=1800 audit(1786191534.384:1404): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1617" name="enable" dev="configfs" ino=26469 res=0 errno=0 [ 483.322560][T10826] nvmet_tcp: address family 255 not supported [ 483.357763][ T27] audit: type=1800 audit(1786191534.424:1405): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1617" name="addr_trtype" dev="configfs" ino=25547 res=0 errno=0 [ 483.390813][ T27] audit: type=1800 audit(1786191534.424:1406): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1617" name="addr_traddr" dev="configfs" ino=25548 res=0 errno=0 [ 483.413242][ T27] audit: type=1800 audit(1786191534.424:1407): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1617" name="addr_trsvcid" dev="configfs" ino=25549 res=0 errno=0 [ 483.635004][T10830] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1618'. [ 484.411796][ T5846] usb 3-1: USB disconnect, device number 24 [ 485.441544][ T23] vhci_hcd: vhci_device speed not set [ 486.731151][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 486.766634][ T27] audit: type=1800 audit(1786191537.873:1408): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="device_path" dev="configfs" ino=26507 res=0 errno=0 [ 486.790887][T10859] nvmet: failed to open block device (null): (-22) [ 486.790914][ T27] audit: type=1800 audit(1786191537.873:1409): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="enable" dev="configfs" ino=26508 res=0 errno=0 [ 486.816298][T10859] nvmet_tcp: address family 255 not supported [ 486.838622][ T27] audit: type=1800 audit(1786191537.923:1410): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="addr_trtype" dev="configfs" ino=26511 res=0 errno=0 [ 486.871383][ T27] audit: type=1800 audit(1786191537.923:1411): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="addr_traddr" dev="configfs" ino=26512 res=0 errno=0 [ 486.894130][ T27] audit: type=1800 audit(1786191537.923:1412): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="addr_trsvcid" dev="configfs" ino=26513 res=0 errno=0 [ 486.963917][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 486.996882][ T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 487.041164][ T5846] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 487.100602][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.125412][T10862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 487.131997][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.149099][ T9] usb 5-1: Product: syz [ 487.155773][ T9] usb 5-1: Manufacturer: syz [ 487.165811][ T9] usb 5-1: SerialNumber: syz [ 487.187363][T10862] vhci_hcd vhci_hcd.0: Device attached [ 487.208151][ T9] usb 5-1: config 0 descriptor?? [ 487.231304][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 487.244525][T10852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 487.866407][ T5846] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 487.878822][ T9] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 487.893576][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.903560][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.913821][ T5846] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.924507][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.937731][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.946896][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.991837][ T23] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 487.992516][T10865] vhci_hcd: connection closed [ 488.008387][T10866] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 488.060933][ T12] vhci_hcd: stop threads [ 488.065682][ T12] vhci_hcd: release socket [ 488.071246][ T12] vhci_hcd: disconnect device [ 488.532810][ T5085] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 488.539905][ T5085] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 489.429513][ T5818] usb 5-1: USB disconnect, device number 6 [ 490.964692][ T5818] usb 4-1: USB disconnect, device number 35 [ 491.257179][T10927] nvmet: failed to open block device (null): (-22) [ 491.273569][ T27] audit: type=1800 audit(1786191542.360:1413): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="device_path" dev="configfs" ino=26703 res=0 errno=0 [ 491.324768][T10927] nvmet_tcp: address family 255 not supported [ 491.352020][ T27] audit: type=1800 audit(1786191542.360:1414): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="enable" dev="configfs" ino=26704 res=0 errno=0 [ 491.386573][ T27] audit: type=1800 audit(1786191542.400:1415): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="addr_trtype" dev="configfs" ino=26705 res=0 errno=0 [ 491.476680][ T27] audit: type=1800 audit(1786191542.410:1416): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="addr_traddr" dev="configfs" ino=26706 res=0 errno=0 [ 491.592046][ T27] audit: type=1800 audit(1786191542.430:1417): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1636" name="addr_trsvcid" dev="configfs" ino=26707 res=0 errno=0 [ 493.124228][ T23] vhci_hcd: vhci_device speed not set [ 494.457628][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.489864][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.572638][ T971] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 494.767342][ T971] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 494.787807][ T971] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 494.805986][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.820181][ T971] usb 4-1: Product: syz [ 494.829041][ T971] usb 4-1: Manufacturer: syz [ 494.833893][ T971] usb 4-1: SerialNumber: syz [ 494.845506][ T971] usb 4-1: config 0 descriptor?? [ 494.851619][T10940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.864595][ T971] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 496.038653][ T27] audit: type=1800 audit(1786191547.138:1418): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="device_path" dev="configfs" ino=27712 res=0 errno=0 [ 496.062019][T10958] nvmet: failed to open block device (null): (-22) [ 496.104680][T10958] nvmet_tcp: address family 255 not supported [ 496.118165][ T27] audit: type=1800 audit(1786191547.168:1419): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="enable" dev="configfs" ino=27713 res=0 errno=0 [ 496.212117][ T27] audit: type=1800 audit(1786191547.178:1420): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="addr_trtype" dev="configfs" ino=26766 res=0 errno=0 [ 496.243738][ T27] audit: type=1800 audit(1786191547.188:1421): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="addr_traddr" dev="configfs" ino=26767 res=0 errno=0 [ 496.276033][ T27] audit: type=1800 audit(1786191547.188:1422): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="addr_trsvcid" dev="configfs" ino=26768 res=0 errno=0 [ 496.352078][ T5085] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 496.360099][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 496.723681][ T971] usb 4-1: USB disconnect, device number 36 [ 497.506884][ T971] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 497.598958][T10980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.607811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.725698][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 497.738679][ T971] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 497.749677][ T971] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.762105][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.777612][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.794386][ T971] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.812807][ T971] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.823411][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.444173][ T23] usb 3-1: USB disconnect, device number 25 [ 501.607608][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.620266][ T27] audit: type=1800 audit(1786191552.715:1423): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1667" name="device_path" dev="configfs" ino=26873 res=0 errno=0 [ 501.624424][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.641483][T11036] nvmet: failed to open block device (null): (-22) [ 501.678849][ T27] audit: type=1800 audit(1786191552.725:1424): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1667" name="enable" dev="configfs" ino=26874 res=0 errno=0 [ 501.704315][ T27] audit: type=1800 audit(1786191552.805:1425): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1667" name="addr_trtype" dev="configfs" ino=26875 res=0 errno=0 [ 501.706823][T11036] nvmet_tcp: address family 255 not supported [ 501.727792][ T27] audit: type=1800 audit(1786191552.805:1426): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1667" name="addr_traddr" dev="configfs" ino=26876 res=0 errno=0 [ 501.753359][ T27] audit: type=1800 audit(1786191552.805:1427): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1667" name="addr_trsvcid" dev="configfs" ino=26877 res=0 errno=0 [ 501.849001][ T5818] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 501.873442][T11041] jffs2: notice: (11041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 502.076973][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 502.094063][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.101439][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.183158][ T5818] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 502.258322][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.327910][ T5818] usb 3-1: Product: syz [ 502.384399][ T5818] usb 3-1: Manufacturer: syz [ 502.412879][ T5818] usb 3-1: SerialNumber: syz [ 502.443724][ T5818] usb 3-1: config 0 descriptor?? [ 502.493443][T11034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.657597][ T5818] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 503.637171][T11056] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 505.496544][ T8337] usb 3-1: USB disconnect, device number 26 [ 505.725130][T11069] nvmet: failed to open block device (null): (-22) [ 505.741362][ T27] audit: type=1800 audit(1786191556.813:1428): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="device_path" dev="configfs" ino=27825 res=0 errno=0 [ 505.771572][T11069] nvmet_tcp: address family 255 not supported [ 505.810023][ T27] audit: type=1800 audit(1786191556.823:1429): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="enable" dev="configfs" ino=27826 res=0 errno=0 [ 505.864368][ T27] audit: type=1800 audit(1786191556.863:1430): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="addr_trtype" dev="configfs" ino=26949 res=0 errno=0 [ 505.941533][ T27] audit: type=1800 audit(1786191556.863:1431): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="addr_traddr" dev="configfs" ino=26950 res=0 errno=0 [ 505.981308][ T971] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 505.990673][ T27] audit: type=1800 audit(1786191556.873:1432): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="addr_trsvcid" dev="configfs" ino=26951 res=0 errno=0 [ 506.190734][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 506.570327][ T971] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 506.842837][ T971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.853649][ T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.864174][ T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 506.874665][ T971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.888210][ T971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 506.898532][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.040112][T11091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1685'. [ 507.182331][T11092] siw: device registration error -23 [ 508.719129][ T27] audit: type=1800 audit(1786191559.812:1433): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="device_path" dev="configfs" ino=27885 res=0 errno=0 [ 508.742923][T11101] nvmet: failed to open block device (null): (-22) [ 508.756143][T11101] nvmet_tcp: address family 255 not supported [ 508.763506][ T27] audit: type=1800 audit(1786191559.842:1434): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="enable" dev="configfs" ino=27886 res=0 errno=0 [ 508.838266][ T27] audit: type=1800 audit(1786191559.842:1435): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="addr_trtype" dev="configfs" ino=27887 res=0 errno=0 [ 508.890332][ T27] audit: type=1800 audit(1786191559.852:1436): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="addr_traddr" dev="configfs" ino=27888 res=0 errno=0 [ 508.913231][ T27] audit: type=1800 audit(1786191559.852:1437): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="addr_trsvcid" dev="configfs" ino=27889 res=0 errno=0 [ 508.934821][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.002230][ T971] usb 5-1: USB disconnect, device number 7 [ 509.294598][T11113] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 511.539928][ T27] audit: type=1800 audit(1786191562.630:1438): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="device_path" dev="configfs" ino=27043 res=0 errno=0 [ 511.581798][T11128] nvmet: failed to open block device (null): (-22) [ 511.640332][ T27] audit: type=1800 audit(1786191562.670:1439): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="enable" dev="configfs" ino=27044 res=0 errno=0 [ 511.690620][T11128] nvmet_tcp: address family 255 not supported [ 511.704253][ T27] audit: type=1800 audit(1786191562.760:1440): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="addr_trtype" dev="configfs" ino=28016 res=0 errno=0 [ 511.911455][ T27] audit: type=1800 audit(1786191562.770:1441): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="addr_traddr" dev="configfs" ino=28017 res=0 errno=0 [ 511.932682][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.390998][ T27] audit: type=1800 audit(1786191562.780:1442): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1698" name="addr_trsvcid" dev="configfs" ino=27045 res=0 errno=0 [ 512.626461][T11137] nvmet_tcp: address family 255 not supported [ 514.257347][T11161] binder: 11160:11161 ioctl c0306201 0 returned -14 [ 514.344527][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 514.344545][ T27] audit: type=1800 audit(1786191565.429:1447): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1711" name="device_path" dev="configfs" ino=27132 res=0 errno=0 [ 514.349751][T11165] nvmet_tcp: address family 255 not supported [ 514.392373][ T27] audit: type=1800 audit(1786191565.429:1448): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1711" name="addr_trtype" dev="configfs" ino=27133 res=0 errno=0 [ 514.472429][ T27] audit: type=1800 audit(1786191565.429:1449): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1711" name="addr_traddr" dev="configfs" ino=27134 res=0 errno=0 [ 514.518673][ T27] audit: type=1800 audit(1786191565.429:1450): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1711" name="addr_trsvcid" dev="configfs" ino=27135 res=0 errno=0 [ 514.753752][T11173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1714'. [ 514.839086][T11175] siw: device registration error -23 [ 516.517648][ T27] audit: type=1800 audit(1786191567.608:1451): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1716" name="enable" dev="configfs" ino=27167 res=0 errno=0 [ 518.257207][T11195] nvmet_tcp: address family 255 not supported [ 518.298372][ T27] audit: type=1800 audit(1786191569.327:1452): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1721" name="device_path" dev="configfs" ino=27205 res=0 errno=0 [ 518.319198][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.335037][ T27] audit: type=1800 audit(1786191569.327:1453): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1721" name="addr_trtype" dev="configfs" ino=27206 res=0 errno=0 [ 518.404978][ T27] audit: type=1800 audit(1786191569.337:1454): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1721" name="addr_traddr" dev="configfs" ino=27207 res=0 errno=0 [ 518.495135][ T27] audit: type=1800 audit(1786191569.337:1455): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1721" name="addr_trsvcid" dev="configfs" ino=27208 res=0 errno=0 [ 518.636964][ T971] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 520.719843][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 520.868858][ T971] usb 3-1: device descriptor read/all, error -71 [ 521.000043][T11201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1723'. [ 521.183491][T11204] siw: device registration error -23 [ 521.722575][ T27] audit: type=1800 audit(1786191572.805:1456): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1726" name="enable" dev="configfs" ino=27237 res=0 errno=0 [ 522.360068][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1730'. [ 523.361712][T11225] Can't find ip_set type lisT:set [ 524.463519][T11233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 525.061926][T11241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1735'. [ 528.054989][T11244] siw: device registration error -23 [ 530.272874][T11265] Can't find ip_set type lisT:set [ 530.656565][T11277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1746'. [ 530.672424][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 530.843259][ T5766] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 530.973470][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.380070][T11277] siw: device registration error -23 [ 531.462791][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.547192][ T5766] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 531.758097][ T5766] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 531.776010][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.784167][ T5766] usb 3-1: Product: syz [ 531.788519][ T5766] usb 3-1: Manufacturer: syz [ 531.793158][ T5766] usb 3-1: SerialNumber: syz [ 531.800781][ T5766] usb 3-1: config 0 descriptor?? [ 531.814299][T11275] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.832632][ T5766] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 532.494644][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.454737][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.537850][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.722380][T11299] Can't find ip_set type lisT:set [ 533.783843][ T8] usb 3-1: USB disconnect, device number 29 [ 534.004133][T11309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.013346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.022852][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.124910][ T971] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 534.320799][ T971] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 534.343671][ T971] usb 4-1: config 0 has no interface number 0 [ 534.350389][ T971] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.380629][ T971] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 534.394815][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.421416][ T971] usb 4-1: Product: syz [ 534.507098][T11319] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 534.524093][ T971] usb 4-1: Manufacturer: syz [ 534.539555][ T971] usb 4-1: SerialNumber: syz [ 534.589072][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.914108][ T971] usb 4-1: config 0 descriptor?? [ 534.927673][ T971] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 535.642918][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.656440][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.855242][ T5846] usb 4-1: USB disconnect, device number 37 [ 536.935594][ T5846] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 537.057700][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.696935][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.822528][T11335] binder: 11334:11335 ioctl c400941b 0 returned -22 [ 538.878815][T11345] Can't find ip_set type lisT:set [ 538.887374][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.889467][ T5085] Bluetooth: hci1: Malformed HCI Event [ 539.337904][ T5846] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 539.548244][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 539.649855][ T5846] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 539.717079][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.796004][ T5846] usb 5-1: Product: syz [ 539.833537][ T5846] usb 5-1: Manufacturer: syz [ 539.883220][ T5846] usb 5-1: SerialNumber: syz [ 539.998313][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.019195][ T5846] usb 5-1: config 0 descriptor?? [ 540.025742][T11351] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 540.078609][ T5846] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 540.108200][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.738272][ T5085] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 540.745555][ T5085] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 540.803010][ T971] usb 5-1: USB disconnect, device number 8 [ 541.059052][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.336073][T11372] LUN: removable file: (no medium) [ 541.689031][ T5085] Bluetooth: hci4: Malformed HCI Event [ 542.100009][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.349411][T11387] Can't find ip_set type lisT:set [ 542.741592][ T27] audit: type=1800 audit(1786191593.825:1457): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="device_path" dev="configfs" ino=27512 res=0 errno=0 [ 542.770879][T11393] nvmet: failed to open block device (null): (-22) [ 542.798404][T11393] nvmet_tcp: address family 255 not supported [ 542.805739][ T27] audit: type=1800 audit(1786191593.855:1458): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="enable" dev="configfs" ino=27513 res=0 errno=0 [ 542.911904][ T27] audit: type=1800 audit(1786191593.875:1459): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="addr_trtype" dev="configfs" ino=27514 res=0 errno=0 [ 542.980247][ T27] audit: type=1800 audit(1786191593.875:1460): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="addr_traddr" dev="configfs" ino=27515 res=0 errno=0 [ 543.001322][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.033708][ T27] audit: type=1800 audit(1786191593.875:1461): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1781" name="addr_trsvcid" dev="configfs" ino=27516 res=0 errno=0 [ 543.075670][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.143793][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.152008][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.379638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.923843][T11406] Can't find ip_set type lisT:set [ 544.184480][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.514190][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.181079][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.590662][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.941118][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.973456][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.638866][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.194046][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.676667][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.444086][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.703338][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.005686][T11435] Can't find ip_set type lisT:set [ 551.157561][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.193315][ T27] audit: type=1800 audit(1786191602.260:1462): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1790" name="device_path" dev="configfs" ino=27571 res=0 errno=0 [ 551.234570][T11434] nvmet: failed to open block device (null): (-22) [ 551.247657][T11434] nvmet_tcp: address family 255 not supported [ 551.282922][ T27] audit: type=1800 audit(1786191602.310:1463): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1790" name="enable" dev="configfs" ino=28481 res=0 errno=0 [ 551.356961][ T27] audit: type=1800 audit(1786191602.310:1464): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1790" name="addr_trtype" dev="configfs" ino=28482 res=0 errno=0 [ 551.396022][ T27] audit: type=1800 audit(1786191602.320:1465): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1790" name="addr_traddr" dev="configfs" ino=28483 res=0 errno=0 [ 551.430174][ T27] audit: type=1800 audit(1786191602.320:1466): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1790" name="addr_trsvcid" dev="configfs" ino=28484 res=0 errno=0 [ 551.575968][T11448] binder: 11444:11448 ioctl c0306201 0 returned -14 [ 552.531889][T11456] Can't find ip_set type lisT:set [ 552.584060][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.593627][T11429] LUN: removable file: (no medium) [ 552.619484][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.134233][ T5818] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 553.305024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.741267][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.776747][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.969760][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 553.983643][ T5818] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 553.993164][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.004692][ T5818] usb 4-1: Product: syz [ 554.008913][ T5818] usb 4-1: Manufacturer: syz [ 554.013547][ T5818] usb 4-1: SerialNumber: syz [ 554.050416][ T5818] usb 4-1: config 0 descriptor?? [ 554.062972][T11461] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 554.073849][ T5818] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 554.754268][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.029677][ T5085] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 555.036785][ T5085] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 555.239119][ T23] usb 4-1: USB disconnect, device number 38 [ 555.284819][ T5085] Bluetooth: hci4: Malformed HCI Event [ 555.914259][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.960152][T11482] Can't find ip_set type lisT:set [ 556.507103][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.678377][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.711215][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.826193][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.986575][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.236514][T11494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 557.243274][T11494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 557.251248][T11494] vhci_hcd vhci_hcd.0: Device attached [ 557.544683][T11495] vhci_hcd: connection closed [ 557.544988][ T33] vhci_hcd: stop threads [ 557.554521][ T5818] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 557.596661][ T33] vhci_hcd: release socket [ 557.614965][ T33] vhci_hcd: disconnect device [ 557.797252][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.027531][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.247403][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.371372][T11504] LUN: removable file: (no medium) [ 559.867883][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.272376][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.316358][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.361416][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.681938][ T5818] vhci_hcd: vhci_device speed not set [ 562.919330][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.230756][T11528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.259512][T11528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.268247][T11528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.326460][T11532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.398728][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 563.507382][ T27] audit: type=1800 audit(1786191614.574:1467): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1815" name="device_path" dev="configfs" ino=28777 res=0 errno=0 [ 563.508841][T11540] nvmet: failed to open block device (null): (-22) [ 563.537553][ T27] audit: type=1800 audit(1786191614.574:1468): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1815" name="enable" dev="configfs" ino=28778 res=0 errno=0 [ 563.559039][T11540] nvmet_tcp: address family 255 not supported [ 563.565230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.572346][ T27] audit: type=1800 audit(1786191614.604:1469): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1815" name="addr_trtype" dev="configfs" ino=28781 res=0 errno=0 [ 563.572394][ T27] audit: type=1800 audit(1786191614.604:1470): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1815" name="addr_traddr" dev="configfs" ino=28782 res=0 errno=0 [ 563.572437][ T27] audit: type=1800 audit(1786191614.604:1471): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1815" name="addr_trsvcid" dev="configfs" ino=28783 res=0 errno=0 [ 563.597958][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.639448][ T5846] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 563.909338][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 564.041026][ T5846] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 564.102659][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.153291][ T5846] usb 3-1: Product: syz [ 564.188174][ T5846] usb 3-1: Manufacturer: syz [ 564.203122][ T5846] usb 3-1: SerialNumber: syz [ 564.235613][ T5846] usb 3-1: config 0 descriptor?? [ 564.247896][T11533] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.267415][ T5846] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 564.438790][ T23] net_ratelimit: 6 callbacks suppressed [ 564.438809][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.003800][ T5085] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 565.011541][ T5085] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 565.038905][ T23] usb 3-1: USB disconnect, device number 30 [ 565.441325][T11562] program syz.4.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.498729][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.651030][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.703446][T11568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.712553][T11568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.974155][T11568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.992555][T11569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.001552][T11569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.208998][ T27] audit: type=1800 audit(1786191618.272:1472): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="device_path" dev="configfs" ino=28919 res=0 errno=0 [ 567.209732][T11573] nvmet: failed to open block device (null): (-22) [ 567.230162][ T27] audit: type=1800 audit(1786191618.272:1473): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="enable" dev="configfs" ino=28920 res=0 errno=0 [ 567.257650][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.280892][T11573] nvmet_tcp: address family 255 not supported [ 567.301306][ T27] audit: type=1800 audit(1786191618.342:1474): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="addr_trtype" dev="configfs" ino=28921 res=0 errno=0 [ 567.323594][ T27] audit: type=1800 audit(1786191618.342:1475): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="addr_traddr" dev="configfs" ino=28922 res=0 errno=0 [ 567.348813][ T27] audit: type=1800 audit(1786191618.342:1476): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="addr_trsvcid" dev="configfs" ino=28923 res=0 errno=0 [ 567.399462][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.753625][ T5818] net_ratelimit: 6 callbacks suppressed [ 570.753646][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.767389][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.823376][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.833805][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.903513][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.010419][ T27] audit: type=1800 audit(1786191622.071:1477): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1831" name="device_path" dev="configfs" ino=29051 res=0 errno=0 [ 571.022663][T11597] nvmet_tcp: address family 255 not supported [ 571.044262][ T27] audit: type=1800 audit(1786191622.071:1478): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1831" name="addr_trtype" dev="configfs" ino=29052 res=0 errno=0 [ 571.079014][ T27] audit: type=1800 audit(1786191622.081:1479): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1831" name="addr_traddr" dev="configfs" ino=29053 res=0 errno=0 [ 571.178089][ T27] audit: type=1800 audit(1786191622.081:1480): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1831" name="addr_trsvcid" dev="configfs" ino=29054 res=0 errno=0 [ 571.285827][ T27] audit: type=1800 audit(1786191622.350:1481): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1834" name="device_path" dev="configfs" ino=29071 res=0 errno=0 [ 571.289260][T11606] nvmet: failed to open block device (null): (-22) [ 571.312130][ T27] audit: type=1800 audit(1786191622.350:1482): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1834" name="enable" dev="configfs" ino=29072 res=0 errno=0 [ 571.374259][T11606] nvmet_tcp: address family 255 not supported [ 571.381471][ T27] audit: type=1800 audit(1786191622.420:1483): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1834" name="addr_trtype" dev="configfs" ino=29073 res=0 errno=0 [ 571.433632][ T27] audit: type=1800 audit(1786191622.420:1484): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1834" name="addr_traddr" dev="configfs" ino=29074 res=0 errno=0 [ 571.461488][ T27] audit: type=1800 audit(1786191622.430:1485): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1834" name="addr_trsvcid" dev="configfs" ino=29075 res=0 errno=0 [ 571.803161][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.309329][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.354800][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.415317][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.424842][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.105336][ T27] audit: type=1800 audit(1786191625.169:1486): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1842" name="device_path" dev="configfs" ino=29903 res=0 errno=0 [ 574.136575][T11628] nvmet_tcp: address family 255 not supported [ 574.519528][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 574.528704][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1843'. [ 574.544274][T11637] geneve2: entered promiscuous mode [ 574.549964][T11637] geneve2: entered allmulticast mode [ 574.575787][T11637] binder: 11636:11637 unknown command 1074553619 [ 574.582404][T11637] binder: 11636:11637 ioctl c0306201 200000000040 returned -22 [ 574.718057][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 574.751113][T11642] netlink: 'syz.3.1846': attribute type 79 has an invalid length. [ 574.779475][T11642] 9pnet_virtio: no channels available for device syz [ 575.774018][T11651] nvmet: failed to open block device (null): (-22) [ 575.799871][T11651] nvmet_tcp: address family 255 not supported [ 576.039282][ T11] net_ratelimit: 17 callbacks suppressed [ 576.039301][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.244969][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.696379][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.849933][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 576.850092][ T27] audit: type=1800 audit(1786191627.908:1495): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1852" name="zoned" dev="configfs" ino=29264 res=0 errno=0 [ 577.003651][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.162801][ T27] audit: type=1800 audit(1786191627.948:1496): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1852" name="power" dev="configfs" ino=29265 res=0 errno=0 [ 577.447341][ T27] audit: type=1800 audit(1786191627.978:1497): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1852" name="power" dev="configfs" ino=29270 res=0 errno=0 [ 577.621259][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.184807][T11671] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 578.702026][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.541229][ T27] audit: type=1800 audit(1786191630.606:1498): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1860" name="device_path" dev="configfs" ino=29311 res=0 errno=0 [ 579.562834][T11684] nvmet: failed to open block device (null): (-22) [ 579.579799][ T27] audit: type=1800 audit(1786191630.606:1499): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1860" name="enable" dev="configfs" ino=29312 res=0 errno=0 [ 579.622949][T11684] nvmet_tcp: address family 255 not supported [ 579.636366][ T27] audit: type=1800 audit(1786191630.676:1500): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1860" name="addr_trtype" dev="configfs" ino=29313 res=0 errno=0 [ 579.713269][ T27] audit: type=1800 audit(1786191630.676:1501): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1860" name="addr_traddr" dev="configfs" ino=29314 res=0 errno=0 [ 579.777589][ T8337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.786909][ T27] audit: type=1800 audit(1786191630.686:1502): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1860" name="addr_trsvcid" dev="configfs" ino=29315 res=0 errno=0 [ 580.038285][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.426135][ T789] libceph: connect (1)[c::]:6789 error -101 [ 580.432680][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 580.535596][T11688] orangefs_mount: mount request failed with -4 [ 580.698401][ T8337] libceph: connect (1)[c::]:6789 error -101 [ 580.735365][ T8337] libceph: mon0 (1)[c::]:6789 connect error [ 580.758200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.915067][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.198771][T11704] could not allocate digest TFM handle sha1-neon [ 581.226131][T11710] ceph: No mds server is up or the cluster is laggy [ 581.370253][T11729] binder: 11727:11729 ioctl c0306201 0 returned -14 [ 581.381744][T11729] binder: 11727:11729 ioctl c0306201 0 returned -14 [ 581.621940][T11738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.630526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.016959][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.025368][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.079673][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.297971][T11753] binder: 11752:11753 ioctl c0306201 0 returned -14 [ 583.320175][T11753] binder: 11752:11753 ioctl c0306201 0 returned -14 [ 584.045711][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.082021][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.610228][T11785] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1899'. [ 586.243024][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.419833][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.486568][T11794] siw: device registration error -23 [ 586.990710][T11805] sctp: [Deprecated]: syz.3.1905 (pid 11805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.990710][T11805] Use struct sctp_sack_info instead [ 587.291402][ T971] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 587.322270][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.433918][ T23] kernel write not supported for file /vcsa (pid: 23 comm: kworker/1:0) [ 587.503647][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 587.524252][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.591415][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 587.619149][T11824] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1912'. [ 587.636595][ T971] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 587.647792][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.657752][ T971] usb 4-1: Product: syz [ 587.663854][ T971] usb 4-1: Manufacturer: syz [ 587.669018][ T971] usb 4-1: SerialNumber: syz [ 587.677928][ T971] usb 4-1: config 0 descriptor?? [ 587.806642][T11827] siw: device registration error -23 [ 588.487757][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.681297][ T971] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 588.894161][ T971] usb 4-1: USB disconnect, device number 39 [ 589.484747][T11849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 589.615873][T11849] overlayfs: failed to look up (tracing) for ino (-66) [ 589.812804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.906316][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.703737][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.575687][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.503463][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.608614][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.633108][T11854] LUN: removable file: (no medium) [ 592.773279][ T5085] Bluetooth: hci1: Malformed HCI Event [ 593.645103][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.735588][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.695260][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.405488][T11889] LUN: removable file: (no medium) [ 596.450934][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.521070][T11895] ERROR: device name not specified. [ 596.594235][ T5085] Bluetooth: hci4: Malformed HCI Event [ 596.766380][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.487114][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.531994][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.993670][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.006894][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.016838][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.391726][ T27] audit: type=1800 audit(1786191650.426:1503): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1947" name="zoned" dev="configfs" ino=30828 res=0 errno=0 [ 599.412738][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.724931][ T27] audit: type=1800 audit(1786191650.436:1504): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1947" name="power" dev="configfs" ino=30829 res=0 errno=0 [ 599.807760][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.981268][ T27] audit: type=1800 audit(1786191650.436:1505): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1947" name="power" dev="configfs" ino=30830 res=0 errno=0 [ 600.127960][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.718457][T11917] Bluetooth: hci4: command 0x0406 tx timeout [ 601.728993][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.834655][T11919] LUN: removable file: (no medium) [ 601.978890][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.119690][ T5085] Bluetooth: hci1: Malformed HCI Event [ 602.521954][T11930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.531582][T11930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.984836][T11941] 9pnet_virtio: no channels available for device syz [ 603.720066][ C0] process 11940 (syz.2.1954) no longer affine to cpu1 [ 604.570910][ T33] net_ratelimit: 46 callbacks suppressed [ 604.570926][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.587181][ T8] smpboot: CPU 1 is now offline [ 604.593272][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.585536][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.616508][T11961] LUN: removable file: (no medium) [ 605.688215][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.855126][ T5085] Bluetooth: hci1: Malformed HCI Event [ 605.890722][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.131566][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 606.203224][T11975] netlink: 'syz.4.1963': attribute type 13 has an invalid length. [ 606.439177][ T27] audit: type=1800 audit(1786191657.483:1506): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1965" name="device_path" dev="configfs" ino=31949 res=0 errno=0 [ 606.473046][T11980] nvmet: failed to open block device (null): (-22) [ 606.504140][T11980] nvmet_tcp: address family 255 not supported [ 606.510423][ T27] audit: type=1800 audit(1786191657.523:1507): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1965" name="enable" dev="configfs" ino=31950 res=0 errno=0 [ 606.603489][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.612501][ T6902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 606.625343][ T27] audit: type=1800 audit(1786191657.543:1508): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1965" name="addr_trtype" dev="configfs" ino=31951 res=0 errno=0 [ 606.676661][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.730601][ T27] audit: type=1800 audit(1786191657.543:1509): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1965" name="addr_traddr" dev="configfs" ino=31952 res=0 errno=0 [ 606.775760][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.809888][ T27] audit: type=1800 audit(1786191657.543:1510): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1965" name="addr_trsvcid" dev="configfs" ino=31953 res=0 errno=0 [ 606.861155][ T6902] usb 5-1: Using ep0 maxpacket: 8 [ 606.872615][ T6902] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 606.891852][ T6902] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.902484][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.951068][ T6902] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.976934][ T6902] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.016010][ T6902] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.075320][ T6902] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.101839][ T6902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.394664][ T6902] usb 5-1: usb_control_msg returned -32 [ 607.400350][ T6902] usbtmc 5-1:16.0: can't read capabilities [ 607.572249][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.312525][ T8] net_ratelimit: 3 callbacks suppressed [ 610.312540][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.536202][ T6902] usb 5-1: USB disconnect, device number 9 [ 611.554256][T11997] LUN: removable file: (no medium) [ 611.578318][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.610666][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.854162][ T5085] Bluetooth: hci1: Malformed HCI Event [ 612.133903][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.614293][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.654576][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.005036][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 614.677974][T12025] loop5: detected capacity change from 0 to 7 [ 614.700074][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.740784][T12025] Dev loop5: unable to read RDB block 7 [ 614.760246][T12025] loop5: unable to read partition table [ 614.783892][T12025] loop5: partition table beyond EOD, truncated [ 614.805475][T12025] loop_reread_partitions: partition scan of loop5 (þ被xüŸâ·û) failed (rc=-5) [ 615.052197][ T5085] Bluetooth: hci4: Malformed HCI Event [ 615.175529][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.735658][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.005080][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.143825][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.371030][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.389130][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.382382][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.150248][ T27] audit: type=1800 audit(1786191672.195:1511): pid=12042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1988" name="zoned" dev="configfs" ino=32195 res=0 errno=0 [ 621.178407][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.351508][ T27] audit: type=1800 audit(1786191672.345:1512): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1988" name="power" dev="configfs" ino=32196 res=0 errno=0 [ 621.422913][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.494761][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.503537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.505142][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.544672][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.137885][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.318522][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.467005][ T27] audit: type=1800 audit(1786191676.503:1513): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1994" name="zoned" dev="configfs" ino=32244 res=0 errno=0 [ 625.585057][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.595702][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.145049][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.149256][T12072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 628.155933][T12072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.203400][T12072] vhci_hcd vhci_hcd.0: Device attached [ 628.221807][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.471788][ T5818] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 629.758641][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.767025][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.931795][T12087] vhci_hcd: connection reset by peer [ 629.947892][T12097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.957260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.989947][ T59] vhci_hcd: stop threads [ 629.998491][ T59] vhci_hcd: release socket [ 630.015339][ T59] vhci_hcd: disconnect device [ 630.138222][T12099] i2c i2c-0: delete_device: Can't find device in list [ 630.788185][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.796509][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.154820][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.207235][ T27] audit: type=1800 audit(1786191683.240:1514): pid=12105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2009" name="zoned" dev="configfs" ino=32396 res=0 errno=0 [ 632.678913][T12123] i2c i2c-0: delete_device: Can't find device in list [ 632.784671][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.184466][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.180348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.235293][ T5818] vhci_hcd: vhci_device speed not set [ 635.858064][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.231341][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.475892][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.501371][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.270963][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.502923][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.511918][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.521924][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.584075][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.949362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.638983][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.647399][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.600537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.761263][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.506589][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.517367][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.511511][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.594894][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.634168][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.739367][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.781218][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.197947][T12222] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 651.673722][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.544621][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.638186][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.555076][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.600674][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.636076][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.716385][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.849904][T12255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.858549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.216412][T12253] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 657.223061][T12253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 657.376446][T12253] vhci_hcd vhci_hcd.0: Device attached [ 657.403307][T12264] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 657.564940][T12262] vhci_hcd: connection closed [ 657.565210][ T11] vhci_hcd: stop threads [ 657.598960][ T11] vhci_hcd: release socket [ 657.616039][ T11] vhci_hcd: disconnect device [ 657.646550][ T6902] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 657.663355][ T6902] usb 41-1: enqueue for inactive port 0 [ 657.676797][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.776528][ T6902] vhci_hcd: vhci_device speed not set [ 659.512169][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.518300][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.526738][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.523490][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.968560][ T6902] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 662.170024][ T6902] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 662.564048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.604123][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.194669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.209669][ T6902] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 664.259677][ T6902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.309404][ T6902] usb 3-1: Product: syz [ 664.339798][ T6902] usb 3-1: Manufacturer: syz [ 664.344517][ T6902] usb 3-1: SerialNumber: syz [ 664.379159][ T6902] usb 3-1: config 0 descriptor?? [ 664.412838][T12272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 664.453822][ T6902] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 665.200369][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.240807][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.354761][ T6902] usb 3-1: USB disconnect, device number 31 [ 666.606035][T12299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.614750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.641791][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.948974][T12305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 668.516743][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.528077][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.513546][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.522213][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.618539][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.689295][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.099916][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.223339][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.258243][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.524530][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.608311][T12310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 673.614869][T12310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 673.666181][T12310] vhci_hcd vhci_hcd.0: Device attached [ 673.854049][T12331] vhci_hcd: connection closed [ 673.854309][ T59] vhci_hcd: stop threads [ 673.886584][ T59] vhci_hcd: release socket [ 673.912124][ T59] vhci_hcd: disconnect device [ 673.934626][ T9] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 673.974099][ T9] usb 41-1: enqueue for inactive port 0 [ 674.065700][ T9] vhci_hcd: vhci_device speed not set [ 674.169280][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.561934][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.252040][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.265877][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.532823][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.534020][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.613205][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.814277][T12355] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 679.849725][ T27] audit: type=1800 audit(1786191730.866:1515): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="device_path" dev="configfs" ino=33330 res=0 errno=0 [ 679.874056][T12356] nvmet: failed to open block device (null): (-22) [ 679.917196][T12356] nvmet_tcp: address family 255 not supported [ 679.933893][ T27] audit: type=1800 audit(1786191730.886:1516): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="enable" dev="configfs" ino=33331 res=0 errno=0 [ 680.016467][ T27] audit: type=1800 audit(1786191730.916:1517): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="addr_trtype" dev="configfs" ino=33332 res=0 errno=0 [ 680.113452][ T27] audit: type=1800 audit(1786191730.926:1518): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="addr_traddr" dev="configfs" ino=33333 res=0 errno=0 [ 680.195208][ T27] audit: type=1800 audit(1786191730.926:1519): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="addr_trsvcid" dev="configfs" ino=33334 res=0 errno=0 [ 680.216193][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.652607][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.687984][ T9] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 680.918459][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 680.972721][ T9] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 680.982567][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.012472][ T9] usb 4-1: Product: syz [ 681.037727][ T9] usb 4-1: Manufacturer: syz [ 681.057554][ T9] usb 4-1: SerialNumber: syz [ 681.069513][ T9] usb 4-1: config 0 descriptor?? [ 681.076016][T12365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.131172][ T9] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 681.693502][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.569270][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.907826][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.493822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.226418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.290747][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 735.305214][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.411884][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.420617][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.437373][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.445802][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.454255][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.482021][T11964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.556829][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.565650][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.646786][ T2974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.664704][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.925569][ T5818] usb 4-1: USB disconnect, device number 40 [ 737.407034][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 737.421058][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 737.447308][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.457436][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 737.467807][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.479924][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.487783][T12413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 737.495216][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.503219][T12413] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 737.511130][T12413] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 737.518609][T12413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.526041][T12413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.637001][T11917] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 737.665876][T11917] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 737.682857][T11917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.704539][T12409] lo speed is unknown, defaulting to 1000 [ 737.717676][T12414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.728348][T12414] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 737.735550][T12414] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.837141][T12413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 737.850722][T12413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 737.862257][T12413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 737.873197][T12413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 737.881243][T12413] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 737.888798][T12413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 737.966133][T12408] lo speed is unknown, defaulting to 1000 [ 738.128255][T12417] lo speed is unknown, defaulting to 1000 [ 738.199071][T12412] lo speed is unknown, defaulting to 1000 [ 739.002338][ T3508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.103439][ T3508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.176966][ T3508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.290322][ T3508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.338286][T12409] chnl_net:caif_netlink_parms(): no params data found [ 739.434398][T12408] chnl_net:caif_netlink_parms(): no params data found [ 739.613171][T12412] chnl_net:caif_netlink_parms(): no params data found [ 739.641286][T12413] Bluetooth: hci2: command tx timeout [ 739.648624][T11917] Bluetooth: hci5: command tx timeout [ 739.665201][T12417] chnl_net:caif_netlink_parms(): no params data found [ 739.798384][T12413] Bluetooth: hci6: command tx timeout [ 739.830780][T12409] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.847732][T12409] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.855106][T12409] bridge_slave_0: entered allmulticast mode [ 739.887350][T12409] bridge_slave_0: entered promiscuous mode [ 739.962662][T12413] Bluetooth: hci7: command tx timeout [ 739.987727][T12409] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.994903][T12409] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.033372][T12409] bridge_slave_1: entered allmulticast mode [ 740.064019][T12409] bridge_slave_1: entered promiscuous mode [ 740.328079][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.335321][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.368091][T12408] bridge_slave_0: entered allmulticast mode [ 740.375017][T12408] bridge_slave_0: entered promiscuous mode [ 740.463890][T12409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.504011][T12409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.518123][T12392] net_ratelimit: 13 callbacks suppressed [ 740.518136][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.548184][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.555532][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.582777][T12408] bridge_slave_1: entered allmulticast mode [ 740.607266][T12408] bridge_slave_1: entered promiscuous mode [ 740.659039][T12417] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.666150][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.698048][T12417] bridge_slave_0: entered allmulticast mode [ 740.714465][T12417] bridge_slave_0: entered promiscuous mode [ 740.815247][T12417] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.829827][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.843213][T12417] bridge_slave_1: entered allmulticast mode [ 740.851157][T12417] bridge_slave_1: entered promiscuous mode [ 740.916337][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.947226][T12412] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.959917][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.967473][T12412] bridge_slave_0: entered allmulticast mode [ 740.980604][T12412] bridge_slave_0: entered promiscuous mode [ 741.027866][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.050588][T12409] team0: Port device team_slave_0 added [ 741.071528][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.084377][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.092298][T12412] bridge_slave_1: entered allmulticast mode [ 741.104422][T12412] bridge_slave_1: entered promiscuous mode [ 741.153440][T12409] team0: Port device team_slave_1 added [ 741.189923][T12417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.223638][T12408] team0: Port device team_slave_0 added [ 741.247722][T12408] team0: Port device team_slave_1 added [ 741.337495][T12417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.464454][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.500459][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.531518][T12417] team0: Port device team_slave_0 added [ 741.565540][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.578859][ T3458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.588812][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.597598][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.627132][T12409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.649409][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.717234][T12409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.734553][T12413] Bluetooth: hci2: command tx timeout [ 741.740743][T11917] Bluetooth: hci5: command tx timeout [ 741.767149][T12409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.788937][T12409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.858112][T12409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.878825][T12413] Bluetooth: hci6: command tx timeout [ 741.910800][T12417] team0: Port device team_slave_1 added [ 741.917109][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.938714][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.973805][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.018938][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.038616][T12413] Bluetooth: hci7: command tx timeout [ 742.065296][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.083395][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.138771][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.329961][T12412] team0: Port device team_slave_0 added [ 742.393242][T12417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.408521][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.445134][T12417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.458406][T12412] team0: Port device team_slave_1 added [ 742.497608][T12417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.525375][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.558653][T12417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.599121][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.607947][ T3508] hsr_slave_0: left promiscuous mode [ 742.629549][ T3508] hsr_slave_1: left promiscuous mode [ 742.674312][ T3508] veth1_macvtap: left promiscuous mode [ 742.693417][ T3508] veth0_macvtap: left promiscuous mode [ 742.714464][ T3508] veth1_vlan: left promiscuous mode [ 742.719996][ T3508] veth0_vlan: left promiscuous mode [ 742.948291][ T3508] bond4 (unregistering): Released all slaves [ 742.984372][ T3508] bond3 (unregistering): Released all slaves [ 743.025907][ T3508] bond2 (unregistering): Released all slaves [ 743.062260][ T3508] bond1 (unregistering): Released all slaves [ 743.642916][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.804226][T12413] Bluetooth: hci2: command tx timeout [ 743.809920][T11917] Bluetooth: hci5: command tx timeout [ 743.965158][T12413] Bluetooth: hci6: command tx timeout [ 744.127490][T12413] Bluetooth: hci7: command tx timeout [ 744.581414][ T3508] bond0 (unregistering): Released all slaves [ 744.680129][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.700771][T12409] hsr_slave_0: entered promiscuous mode [ 744.707202][T12409] hsr_slave_1: entered promiscuous mode [ 744.733121][T12408] hsr_slave_0: entered promiscuous mode [ 744.768139][T12408] hsr_slave_1: entered promiscuous mode [ 744.790141][T12408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.797716][T12408] Cannot create hsr debugfs directory [ 744.850428][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.857567][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.888970][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.005171][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.026131][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.038336][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.069829][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.146096][T12417] hsr_slave_0: entered promiscuous mode [ 745.152879][T12417] hsr_slave_1: entered promiscuous mode [ 745.159006][T12417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.172515][T12417] Cannot create hsr debugfs directory [ 745.438474][ T3508] IPVS: stop unused estimator thread 0... [ 745.454899][T12412] hsr_slave_0: entered promiscuous mode [ 745.474701][T12412] hsr_slave_1: entered promiscuous mode [ 745.506809][T12412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.530261][T12412] Cannot create hsr debugfs directory [ 745.720713][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.881035][T12413] Bluetooth: hci2: command tx timeout [ 745.886593][T12413] Bluetooth: hci5: command tx timeout [ 746.035245][ T3508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.046608][T12413] Bluetooth: hci6: command tx timeout [ 746.192427][ T3508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.204949][T12413] Bluetooth: hci7: command tx timeout [ 746.237970][T12408] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 746.258638][T12408] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 746.344333][ T3508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.386563][T12408] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 746.421143][T12408] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.472480][ T3508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.752690][T12409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.837512][T12409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 746.932908][T12409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.950236][T12409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.129420][T12417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 747.179512][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.248669][T12417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 747.272837][T12417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 747.353174][T12417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 747.393499][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.508464][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.515685][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.610737][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.618051][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.737777][T12412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.896900][T12412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.919556][T12412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.990612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.997573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.057645][T12417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.087926][T12412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 748.257591][T12409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.341481][T12417] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.433845][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.441140][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.500688][T12409] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.588242][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.595421][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.667572][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.674829][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.787049][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.794400][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.058024][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.121914][T12412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.866953][T12412] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.925542][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.932710][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.060229][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.067493][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.261377][T12417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.687331][T12408] veth0_vlan: entered promiscuous mode [ 750.717874][T12412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.759026][T12409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.801672][T12408] veth1_vlan: entered promiscuous mode [ 751.042873][T12408] veth0_macvtap: entered promiscuous mode [ 751.125357][T12408] veth1_macvtap: entered promiscuous mode [ 751.405638][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.457199][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.518913][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.716047][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.770041][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.816103][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.047172][T12408] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.078006][T12408] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.093808][T12408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.103030][T12408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.279823][T12409] veth0_vlan: entered promiscuous mode [ 752.312876][T12412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.483004][T12409] veth1_vlan: entered promiscuous mode [ 752.513729][T12417] veth0_vlan: entered promiscuous mode [ 752.715191][T12417] veth1_vlan: entered promiscuous mode [ 752.868170][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.919097][T12409] veth0_macvtap: entered promiscuous mode [ 752.925854][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.986632][T12417] veth0_macvtap: entered promiscuous mode [ 753.009449][T12409] veth1_macvtap: entered promiscuous mode [ 753.049345][T12417] veth1_macvtap: entered promiscuous mode [ 753.091603][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.144104][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.153954][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.197717][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.225256][T12409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.302337][T12397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.317081][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.340484][T12397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.361279][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.384198][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.409232][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.449008][T12409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.497941][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.526046][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.554866][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.588432][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.614498][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.639087][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.669946][T12417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.826925][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.852197][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.875742][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.911432][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.937553][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.952566][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.972539][T12417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.983265][T12409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.998346][T12409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.008324][T12409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.026620][T12409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.064345][T12412] veth0_vlan: entered promiscuous mode [ 754.130348][T12412] veth1_vlan: entered promiscuous mode [ 754.158633][T12417] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.179676][T12417] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.205376][T12417] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.226335][T12417] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.621313][T12412] veth0_macvtap: entered promiscuous mode [ 754.683452][ T3508] hsr_slave_0: left promiscuous mode [ 754.712223][ T3508] hsr_slave_1: left promiscuous mode [ 754.735983][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.774068][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.800300][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.834191][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.862270][ T3508] bridge_slave_1: left allmulticast mode [ 754.885875][ T3508] bridge_slave_1: left promiscuous mode [ 754.891650][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.952698][ T3508] bridge_slave_0: left allmulticast mode [ 754.977579][ T3508] bridge_slave_0: left promiscuous mode [ 755.006017][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.166127][ T3508] hsr_slave_0: left promiscuous mode [ 755.184455][ T3508] hsr_slave_1: left promiscuous mode [ 755.210391][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.240692][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.282284][ T3508] bridge_slave_1: left allmulticast mode [ 755.314812][ T3508] bridge_slave_1: left promiscuous mode [ 755.345783][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.411166][ T3508] bridge_slave_0: left allmulticast mode [ 755.435342][ T3508] bridge_slave_0: left promiscuous mode [ 755.460294][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.591112][ T3508] hsr_slave_0: left promiscuous mode [ 755.615864][ T3508] hsr_slave_1: left promiscuous mode [ 755.639616][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.670280][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.706155][ T3508] bridge_slave_1: left allmulticast mode [ 755.712027][ T3508] bridge_slave_1: left promiscuous mode [ 755.755632][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.774694][ T3508] bridge_slave_0: left allmulticast mode [ 755.790236][ T3508] bridge_slave_0: left promiscuous mode [ 755.810380][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.894564][ T3508] veth1_macvtap: left promiscuous mode [ 755.903146][ T3508] veth0_macvtap: left promiscuous mode [ 755.911097][ T3508] veth1_vlan: left promiscuous mode [ 755.918754][ T3508] veth0_vlan: left promiscuous mode [ 759.065060][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 759.213661][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 759.296543][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.382794][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.517146][ T3508] bond0 (unregistering): Released all slaves [ 761.725190][ T3508] bond5 (unregistering): Released all slaves [ 761.786451][ T3508] bond4 (unregistering): Released all slaves [ 761.824335][ T3508] bond3 (unregistering): Released all slaves [ 761.862302][ T3508] bond2 (unregistering): Released all slaves [ 761.906408][ T3508] bond1 (unregistering): Released all slaves [ 764.828162][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 764.898702][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 765.050130][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.149078][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.226485][ T3508] bond0 (unregistering): Released all slaves [ 767.346544][ T3508] bond6 (unregistering): Released all slaves [ 767.369496][ T3508] bond5 (unregistering): Released all slaves [ 767.387613][ T3508] bond4 (unregistering): Released all slaves [ 767.415189][ T3508] bond3 (unregistering): Released all slaves [ 767.430042][ T3508] bond2 (unregistering): Released all slaves [ 767.456860][ T3508] bond1 (unregistering): Released all slaves [ 768.194711][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 768.258786][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 768.329355][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.401105][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.885898][ T3508] bond0 (unregistering): Released all slaves [ 769.016984][T12412] veth1_macvtap: entered promiscuous mode [ 769.070472][ T8] lo speed is unknown, defaulting to 1000 [ 769.198846][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.260305][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.297142][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.317637][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.327932][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.342846][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.384494][T12412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.444049][T12397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.490521][T12397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.501626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.511297][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.563925][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.589276][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.620865][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.645346][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.673695][T12412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.699020][T12412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.745910][T12412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.820845][T12412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.832232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.862611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.871169][T12412] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.895383][T12412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.921517][T12412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.053439][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.134540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.399022][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.468071][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.664960][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.753844][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.845063][T12680] nvmet: failed to open block device (null): (-22) [ 770.860326][ T27] audit: type=1800 audit(1786191821.801:1520): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2091" name="device_path" dev="configfs" ino=36964 res=0 errno=0 [ 770.963700][T12680] nvmet_tcp: address family 255 not supported [ 771.036977][ T27] audit: type=1800 audit(1786191821.801:1521): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2091" name="enable" dev="configfs" ino=36965 res=0 errno=0 [ 771.239550][ T27] audit: type=1800 audit(1786191821.921:1522): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2091" name="addr_trtype" dev="configfs" ino=37002 res=0 errno=0 [ 771.476050][T12688] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 771.565891][ T27] audit: type=1800 audit(1786191821.921:1523): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2091" name="addr_traddr" dev="configfs" ino=37003 res=0 errno=0 [ 771.758835][ T27] audit: type=1800 audit(1786191821.931:1524): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2091" name="addr_trsvcid" dev="configfs" ino=37004 res=0 errno=0 [ 782.316870][T12723] LUN: removable file: (no medium) [ 783.531150][T12733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 784.386097][ T27] audit: type=1800 audit(1786191835.344:1525): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2120" name="zoned" dev="configfs" ino=37161 res=0 errno=0 [ 785.702745][ T27] audit: type=1800 audit(1786191835.944:1526): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2120" name="power" dev="configfs" ino=37162 res=0 errno=0 [ 785.856549][ T27] audit: type=1800 audit(1786191836.243:1527): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2120" name="power" dev="configfs" ino=37164 res=0 errno=0 [ 789.954284][T12769] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 792.087253][T12776] LUN: removable file: (no medium) [ 793.569249][ T27] audit: type=1800 audit(1786191844.519:1528): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2132" name="zoned" dev="configfs" ino=37278 res=0 errno=0 [ 795.772015][ T27] audit: type=1800 audit(1786191845.079:1529): pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2132" name="power" dev="configfs" ino=37279 res=0 errno=0 [ 795.945518][ T27] audit: type=1800 audit(1786191845.109:1530): pid=12782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2132" name="power" dev="configfs" ino=37282 res=0 errno=0 [ 796.008525][T12786] jffs2: notice: (12786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 796.097005][T12791] No buffer was provided with the request [ 798.194832][T12801] jffs2: notice: (12801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 800.716506][T12817] batadv1: entered promiscuous mode [ 801.901536][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2142'. [ 803.801485][T12837] LUN: removable file: (no medium) [ 804.481024][T12853] jffs2: notice: (12853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.235851][ T27] audit: type=1800 audit(1786191859.182:1531): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2150" name="zoned" dev="configfs" ino=37527 res=0 errno=0 [ 808.839975][ T27] audit: type=1800 audit(1786191859.382:1532): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2150" name="power" dev="configfs" ino=37530 res=0 errno=0 [ 808.982811][ T27] audit: type=1800 audit(1786191859.722:1533): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2150" name="power" dev="configfs" ino=37536 res=0 errno=0 [ 809.066546][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2152'. [ 809.436388][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.497777][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.705530][T12883] LUN: removable file: (no medium) [ 815.208672][T12909] lo speed is unknown, defaulting to 1000 [ 815.278558][T12909] lo speed is unknown, defaulting to 1000 [ 815.323951][T12909] lo speed is unknown, defaulting to 1000 [ 815.373906][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2162'. [ 815.476255][T12909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 815.591830][T12909] lo speed is unknown, defaulting to 1000 [ 815.639132][T12909] lo speed is unknown, defaulting to 1000 [ 815.684079][T12909] lo speed is unknown, defaulting to 1000 [ 815.746053][T12909] lo speed is unknown, defaulting to 1000 [ 815.806390][T12920] syz.6.2163 uses obsolete (PF_INET,SOCK_PACKET) [ 816.909087][T12946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 819.042422][T12946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 819.216402][T12946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 819.390536][T12946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 821.231445][T12959] LUN: removable file: (no medium) [ 822.334448][ T27] audit: type=1800 audit(1786191873.115:1534): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2168" name="power" dev="configfs" ino=37773 res=0 errno=0 [ 823.739725][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2171'. [ 825.610591][T12981] siw: device registration error -23 [ 829.445149][ T27] audit: type=1800 audit(1786191880.381:1535): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2177" name="power" dev="configfs" ino=37861 res=0 errno=0 [ 831.857503][T13006] LUN: removable file: (no medium) [ 831.896388][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2180'. [ 833.956135][T13021] jffs2: notice: (13021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 835.700450][T13034] No buffer was provided with the request [ 840.041509][T13053] jffs2: notice: (13053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 840.524238][ T27] audit: type=1800 audit(1786191891.456:1536): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2192" name="power" dev="configfs" ino=38086 res=0 errno=0 [ 843.722101][ T27] audit: type=1800 audit(1786191894.644:1537): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2182" name="device_path" dev="configfs" ino=38187 res=0 errno=0 [ 843.745881][T13074] nvmet: failed to open block device (null): (-22) [ 843.763284][T13077] No buffer was provided with the request [ 843.813824][T13074] nvmet_tcp: address family 255 not supported [ 843.887750][ T27] audit: type=1800 audit(1786191894.654:1538): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2182" name="enable" dev="configfs" ino=38188 res=0 errno=0 [ 844.079817][ T27] audit: type=1800 audit(1786191894.724:1539): pid=13081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2182" name="addr_trtype" dev="configfs" ino=38192 res=0 errno=0 [ 846.191710][ T27] audit: type=1800 audit(1786191894.734:1540): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2182" name="addr_traddr" dev="configfs" ino=38195 res=0 errno=0 [ 846.372007][ T27] audit: type=1800 audit(1786191894.744:1541): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2182" name="addr_trsvcid" dev="configfs" ino=38200 res=0 errno=0 [ 848.306163][ T27] audit: type=1800 audit(1786191899.232:1542): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2202" name="power" dev="configfs" ino=38266 res=0 errno=0 [ 850.605049][ T27] audit: type=1800 audit(1786191901.531:1543): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2207" name="device_path" dev="configfs" ino=38321 res=0 errno=0 [ 850.645291][T13127] nvmet: failed to open block device (null): (-22) [ 850.717432][T13127] nvmet_tcp: address family 255 not supported [ 850.785256][ T27] audit: type=1800 audit(1786191901.561:1544): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2207" name="enable" dev="configfs" ino=38326 res=0 errno=0 [ 850.965926][ T27] audit: type=1800 audit(1786191901.631:1545): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2207" name="addr_trtype" dev="configfs" ino=38328 res=0 errno=0 [ 853.278902][ T27] audit: type=1800 audit(1786191901.631:1546): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2207" name="addr_traddr" dev="configfs" ino=38329 res=0 errno=0 [ 854.889525][ T27] audit: type=1800 audit(1786191901.641:1547): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2207" name="addr_trsvcid" dev="configfs" ino=38330 res=0 errno=0 [ 856.867798][ T27] audit: type=1800 audit(1786191907.718:1548): pid=13160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2213" name="power" dev="configfs" ino=38594 res=0 errno=0 [ 856.888402][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.452834][ T27] audit: type=1800 audit(1786191908.367:1549): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="device_path" dev="configfs" ino=38632 res=0 errno=0 [ 857.473969][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.486893][T13169] nvmet: failed to open block device (null): (-22) [ 857.557014][T13169] nvmet_tcp: address family 255 not supported [ 857.665581][T12413] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 857.680656][ T27] audit: type=1800 audit(1786191908.407:1550): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="enable" dev="configfs" ino=38633 res=0 errno=0 [ 857.896064][ T27] audit: type=1800 audit(1786191908.457:1551): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="addr_trtype" dev="configfs" ino=38641 res=0 errno=0 [ 857.999307][T13184] [ 858.001678][T13184] ====================================================== [ 858.008692][T13184] WARNING: possible circular locking dependency detected [ 858.015889][T13184] syzkaller #0 Not tainted [ 858.020315][T13184] ------------------------------------------------------ [ 858.027337][T13184] syz.7.2223/13184 is trying to acquire lock: [ 858.033396][T13184] ffff888148c2f400 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 858.045134][T13184] [ 858.045134][T13184] but task is already holding lock: [ 858.052490][T13184] ffff888026b3c120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 858.061625][T13184] [ 858.061625][T13184] which lock already depends on the new lock. [ 858.061625][T13184] [ 858.072031][T13184] [ 858.072031][T13184] the existing dependency chain (in reverse order) is: [ 858.081034][T13184] [ 858.081034][T13184] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 858.088666][T13184] __mutex_lock+0x135/0xc80 [ 858.093883][T13184] tcm_set_name+0x2a/0x90 [ 858.098777][T13184] function_make+0x199/0x350 [ 858.104009][T13184] configfs_mkdir+0x515/0x9e0 [ 858.109308][T13184] vfs_mkdir+0x2a5/0x470 [ 858.114183][T13184] do_mkdirat+0x1dc/0x450 [ 858.119111][T13184] __x64_sys_mkdir+0x6e/0x80 [ 858.124295][T13184] do_syscall_64+0x55/0xb0 [ 858.129475][T13184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.135973][T13184] [ 858.135973][T13184] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 858.144224][T13184] __mutex_lock+0x135/0xc80 [ 858.149337][T13184] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 858.156109][T13184] configfs_symlink+0x5a5/0xfe0 [ 858.161650][T13184] vfs_symlink+0x138/0x2b0 [ 858.166588][T13184] do_symlinkat+0x1ba/0x400 [ 858.171600][T13184] __x64_sys_symlinkat+0x99/0xb0 [ 858.177064][T13184] do_syscall_64+0x55/0xb0 [ 858.182008][T13184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.188418][T13184] [ 858.188418][T13184] -> #0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 858.197198][T13184] __lock_acquire+0x37ef/0x7d80 [ 858.202594][T13184] lock_acquire+0x19e/0x420 [ 858.207622][T13184] down_write+0x97/0x200 [ 858.212380][T13184] configfs_depend_item_unlocked+0x157/0x430 [ 858.218872][T13184] usbg_make_tpg+0x1f7/0x580 [ 858.223989][T13184] target_fabric_make_tpg+0xa4/0x6d0 [ 858.229826][T13184] configfs_mkdir+0x515/0x9e0 [ 858.235018][T13184] vfs_mkdir+0x2a5/0x470 [ 858.239916][T13184] do_mkdirat+0x1dc/0x450 [ 858.244754][T13184] __x64_sys_mkdir+0x6e/0x80 [ 858.249874][T13184] do_syscall_64+0x55/0xb0 [ 858.254847][T13184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.261266][T13184] [ 858.261266][T13184] other info that might help us debug this: [ 858.261266][T13184] [ 858.271484][T13184] Chain exists of: [ 858.271484][T13184] &sb->s_type->i_mutex_key#20 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 858.271484][T13184] [ 858.286192][T13184] Possible unsafe locking scenario: [ 858.286192][T13184] [ 858.293727][T13184] CPU0 CPU1 [ 858.299086][T13184] ---- ---- [ 858.304519][T13184] lock(&opts->dep_lock); [ 858.308959][T13184] lock(gadget_subsys.su_mutex); [ 858.316591][T13184] lock(&opts->dep_lock); [ 858.323533][T13184] lock(&sb->s_type->i_mutex_key#20); [ 858.328990][T13184] [ 858.328990][T13184] *** DEADLOCK *** [ 858.328990][T13184] [ 858.337310][T13184] 5 locks held by syz.7.2223/13184: [ 858.342525][T13184] #0: ffff888141ed0418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 858.351872][T13184] #1: ffff888059943910 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 858.362777][T13184] #2: ffffffff8db2b830 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 858.372521][T13184] #3: ffffffff8de58f08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 858.382542][T13184] #4: ffff888026b3c120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 858.392222][T13184] [ 858.392222][T13184] stack backtrace: [ 858.398102][T13184] CPU: 0 PID: 13184 Comm: syz.7.2223 Not tainted syzkaller #0 [ 858.405916][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.416179][T13184] Call Trace: [ 858.419741][T13184] [ 858.422804][T13184] dump_stack_lvl+0x18c/0x250 [ 858.427705][T13184] ? load_image+0x420/0x420 [ 858.432256][T13184] ? show_regs_print_info+0x20/0x20 [ 858.437474][T13184] ? print_circular_bug+0x12b/0x1a0 [ 858.442667][T13184] check_noncircular+0x2fc/0x400 [ 858.447597][T13184] ? look_up_lock_class+0x75/0x140 [ 858.452828][T13184] ? print_deadlock_bug+0x5d0/0x5d0 [ 858.458052][T13184] ? lockdep_lock+0xf5/0x230 [ 858.462647][T13184] ? __lock_acquire+0x357f/0x7d80 [ 858.467685][T13184] ? _find_first_zero_bit+0xd6/0x100 [ 858.473028][T13184] __lock_acquire+0x37ef/0x7d80 [ 858.477914][T13184] ? is_bpf_text_address+0x28f/0x2a0 [ 858.483233][T13184] ? verify_lock_unused+0x140/0x140 [ 858.488520][T13184] lock_acquire+0x19e/0x420 [ 858.493037][T13184] ? configfs_depend_item_unlocked+0x157/0x430 [ 858.499206][T13184] ? trace_raw_output_contention_end+0xd0/0xd0 [ 858.505365][T13184] ? __might_sleep+0xe0/0xe0 [ 858.510015][T13184] ? rcu_is_watching+0x15/0xb0 [ 858.514973][T13184] ? read_lock_is_recursive+0x20/0x20 [ 858.520534][T13184] ? trace_contention_end+0x39/0xe0 [ 858.526003][T13184] ? __mutex_lock+0x30d/0xc80 [ 858.530727][T13184] ? do_syscall_64+0x55/0xb0 [ 858.535697][T13184] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.541769][T13184] down_write+0x97/0x200 [ 858.546024][T13184] ? configfs_depend_item_unlocked+0x157/0x430 [ 858.552348][T13184] ? down_read_killable+0x340/0x340 [ 858.557546][T13184] configfs_depend_item_unlocked+0x157/0x430 [ 858.563528][T13184] usbg_make_tpg+0x1f7/0x580 [ 858.568148][T13184] ? usbg_drop_tport+0x20/0x20 [ 858.572929][T13184] ? vscnprintf+0x80/0x80 [ 858.577262][T13184] target_fabric_make_tpg+0xa4/0x6d0 [ 858.582554][T13184] ? target_fabric_release_wwn+0xb0/0xb0 [ 858.588224][T13184] configfs_mkdir+0x515/0x9e0 [ 858.592914][T13184] vfs_mkdir+0x2a5/0x470 [ 858.597180][T13184] do_mkdirat+0x1dc/0x450 [ 858.601511][T13184] ? vfs_mkdir+0x470/0x470 [ 858.605930][T13184] ? getname_flags+0x20a/0x500 [ 858.610694][T13184] __x64_sys_mkdir+0x6e/0x80 [ 858.615286][T13184] do_syscall_64+0x55/0xb0 [ 858.619699][T13184] ? clear_bhb_loop+0x40/0x90 [ 858.624453][T13184] ? clear_bhb_loop+0x40/0x90 [ 858.629172][T13184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.635073][T13184] RIP: 0033:0x7fce8a59e0d9 [ 858.639649][T13184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.659531][T13184] RSP: 002b:00007fce8b448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 858.668126][T13184] RAX: ffffffffffffffda RBX: 00007fce8a825fa0 RCX: 00007fce8a59e0d9 [ 858.676158][T13184] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 858.684322][T13184] RBP: 00007fce8a635024 R08: 0000000000000000 R09: 0000000000000000 [ 858.692398][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.700896][T13184] R13: 00007fce8a826038 R14: 00007fce8a825fa0 R15: 00007fffedb5f7c8 [ 858.709478][T13184] [ 858.712700][ C0] vkms_vblank_simulate: vblank timer overrun [ 858.731791][ T27] audit: type=1800 audit(1786191908.457:1552): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="addr_traddr" dev="configfs" ino=38645 res=0 errno=0 [ 858.753779][ T27] audit: type=1800 audit(1786191908.467:1553): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="addr_trsvcid" dev="configfs" ino=38646 res=0 errno=0 [ 858.774880][ C0] vkms_vblank_simulate: vblank timer overrun [ 858.881083][T13184] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 862.740344][T11917] Bluetooth: hci5: command 0x0406 tx timeout [ 862.746381][T11917] Bluetooth: hci2: command 0x0406 tx timeout [ 862.753769][T12413] Bluetooth: hci6: command 0x0406 tx timeout [ 862.760421][T12414] Bluetooth: hci7: command 0x0406 tx timeout