last executing test programs: 14m55.572712305s ago: executing program 1 (id=319): socket$inet(0x2, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0xc, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x4, 0x8}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xa11, "7c16bf8f3738028760825d877dff1db25036001b763f08adb6301751e3d2b3b6", 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000080)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e28, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x23, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 14m54.452928473s ago: executing program 1 (id=320): fsopen(&(0x7f0000000300)='vfat\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000007f40)) getpgid(0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/ip_mr_cache\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r6) write$cgroup_int(r6, 0x0, 0x0) 14m53.127162628s ago: executing program 1 (id=322): socket$inet(0x2, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fanotify_init(0x0, 0x0) setrlimit(0xc, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x4, 0x8}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xa11, "7c16bf8f3738028760825d877dff1db25036001b763f08adb6301751e3d2b3b6", 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e28, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x23, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r6, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 14m51.905056085s ago: executing program 1 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) sendto$inet(r1, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r11, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) 14m50.635863692s ago: executing program 1 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x31b040, 0x67) unlink(&(0x7f0000000180)='./file1\x00') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r5, &(0x7f00000004c0)='./bus\x00', r3, &(0x7f0000000500)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) 14m48.195944932s ago: executing program 1 (id=333): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() socket$tipc(0x1e, 0x2, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='geneve1\x00', 0x10) times(0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r9 = dup(r0) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 14m31.533015719s ago: executing program 32 (id=333): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() socket$tipc(0x1e, 0x2, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='geneve1\x00', 0x10) times(0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r9 = dup(r0) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b38090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d8079cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c334086d87341432750865cd7e1436767d3c34b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e92c2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210483b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df2926b2448039ef799cf0630becdbe6c4579b5561dc825ab82982794ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859330d7dc1c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2eee8db8897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf8939653e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269a21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000c1000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006) 12m24.264869403s ago: executing program 0 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r5, 0x8744}], 0x1, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) r7 = getpid() r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x3201}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) recvmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 12m22.228355899s ago: executing program 0 (id=504): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b0, &(0x7f0000001100)={0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x17) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000240)=[@enter_looper, @release={0x40046306, 0xfffffffc}], 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) 12m18.356525494s ago: executing program 0 (id=508): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000463000/0x4000)=nil, 0x4000, 0xf, 0x100010, r1, 0x5d628000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r8, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) r9 = fcntl$dupfd(r7, 0x406, r6) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x98, &(0x7f00000007c0)={0x139f, 0x2100, 0x12}}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000000)="a2adc695775cb1caff63bab31a1da95e5ac6a732b5c599679564c71fb24d9759da71ec727637a1910edf742aec3037af4a2551ceb2507e8a0c", &(0x7f0000000300), &(0x7f0000000480)="653afe8b65ad6bb15d79125c918de7558b18a8d41cd0122170df", &(0x7f00000004c0)="1f0cc9117c247197a9606d99a2938ee120159730900bbbfd086d7ce1eb5bbaa7bd9e2eabc6ad31007f9c63bf427aeaf936195920b704ef98c694860668586b57d826125f2ce5717da7074fc5869f4f8d0c0f55cc766c51d1df246c67", 0x4, r9}, 0x38) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xfc}, {0x19, 0x5}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xf}, {}, {0x0, 0x81, 0xbe}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {}, {0x0, 0x50}, {0x0, 0x0, 0x4, '\x00', 0x3}, {0x1}, {0x2, 0x2, 0x4}, {}, {0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x6, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1}, {0xfc, 0x83, 0xe}]}}) fcntl$addseals(r5, 0x409, 0x7) r11 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0xc800) 12m14.305079136s ago: executing program 0 (id=513): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12m12.538945919s ago: executing program 0 (id=517): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone3(&(0x7f0000000b40)={0x11001000, &(0x7f0000000040), &(0x7f0000000240)=0x0, &(0x7f0000000340), {0x1c}, 0x0, 0x0, &(0x7f0000000580)=""/76, 0x0}, 0x58) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x4) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = mq_open(&(0x7f0000000680)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\xe3\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2s\x9e\xe6\xb0\x86g\x1e\xd3\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x122, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c7db100", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010008000c006400000008000d000000000018000e800400010006000200195200000500030058000000"], 0x6c}}, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000479000/0x1000)=nil) r9 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r9, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 12m11.221118547s ago: executing program 0 (id=519): io_uring_setup(0xdac, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 12m10.981090755s ago: executing program 33 (id=519): io_uring_setup(0xdac, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 10m48.545114883s ago: executing program 4 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae68", 0x98, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x48851, &(0x7f0000000c80)={0xa, 0x4e20, 0x5, @private1, 0x8}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r6, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r6, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xc, 0x8, 0x5, 0x6, 0x81, 0x8, 0xc2}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a"], 0x94}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 10m44.057310757s ago: executing program 4 (id=629): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-lR\x9fG\x85e\xc2jAu*x\x8c-\x91\xa4+\xb0\x1a\x82\xaa\xa66t\x95\x9d\xf2\'\xd3\x00aBL'}]}, 0x2e) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {r6, r7/1000+60000}}, 0x0) getitimer(0x2, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f00000000c0), 0x18) connect$can_j1939(r8, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01004000010203010902940003010000000904000000010100000a24010000030102"], 0x0) 10m39.752271751s ago: executing program 4 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) dup(r5) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000003000)={'ip_vti0\x00', &(0x7f0000002f00)=@ethtool_drvinfo={0x3, "d77a6672c2dfbf04c1cf30d1b49556a97edca51f27b3fb5834b51533e6911d19", "cdb4d4d2702bcfaba7a42633357e346ccba7df8953707dbacc6e5dd1bb112e17", "d92a6d1485e28004325f97eb429acc1d946add83e86190e55167e25c34e6ce1f", "5ea5af65fd42784c5d18a295fd884468835927c25de742f721327ff02b5d1a42", "dc6ee8601d747e4d0606010dd45262b43d78a271a92e4973bf3aeb1e2ff86c47", "70195501dc2df58cab33c69f", 0x1000, 0x7f, 0xd, 0x0, 0x6}}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x0) 10m32.197108775s ago: executing program 4 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x7, "f9c4ae1c7e15"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a917000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={0x0, 0x13, r8}) r9 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r9, &(0x7f0000000440)=[{&(0x7f0000000180)=""/247, 0xc}], 0x100000000000031b, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r11}, 0x20) getsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, &(0x7f00000003c0), &(0x7f0000000440)=0x4) 10m27.628089125s ago: executing program 4 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0xc0205647, &(0x7f0000000240)=0x1) dup2(r8, r8) 10m24.420020207s ago: executing program 4 (id=653): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xbdb, &(0x7f00000000c0), &(0x7f0000000000)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0xa) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) recvmmsg(r5, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f00000001c0)}, {&(0x7f0000000400)=""/65, 0x41}], 0x5, &(0x7f0000000a00)=""/99, 0x63}, 0xffff}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/8, 0x8}, {&(0x7f0000001b40)=""/186, 0xba}, {&(0x7f0000001c00)=""/148, 0x94}, {&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7, &(0x7f0000002e00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)=""/250, 0xfa}, {&(0x7f0000002fc0)=""/117, 0x75}], 0x2, &(0x7f0000003080)=""/3, 0x3}, 0x3}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003140)=""/94, 0x5e}, {&(0x7f00000031c0)=""/45, 0x2d}, {&(0x7f0000003200)=""/201, 0xc9}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/226, 0xe2}, {&(0x7f0000003500)=""/97, 0x61}, {&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/135, 0x87}], 0x8, &(0x7f0000003740)=""/184, 0xb8}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003800)=""/73, 0x49}], 0x1}, 0xff}, {{&(0x7f00000038c0)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @default, @bcast, @bcast, @default, @remote, @bcast]}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/165, 0xa5}, {&(0x7f0000003a00)=""/152, 0x98}, {&(0x7f0000003ac0)=""/154, 0x9a}, {&(0x7f0000003b80)=""/250, 0xfa}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/39, 0x27}], 0x6, &(0x7f0000004d40)=""/217, 0xd9}, 0x9}, {{&(0x7f0000004e40)=@ethernet, 0x80, &(0x7f0000005200)=[{&(0x7f0000004ec0)=""/245, 0xf5}, {&(0x7f0000004fc0)=""/192, 0xc0}, {&(0x7f0000005080)=""/80, 0x50}, {&(0x7f0000005100)=""/79, 0x4f}, {&(0x7f0000005180)=""/23, 0x17}, {&(0x7f00000051c0)=""/16, 0x10}], 0x6, &(0x7f0000005280)=""/150, 0x96}, 0x2}], 0x7, 0x0, &(0x7f0000005540)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000480)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x9, 0x8001, 0x0, 0x0, r9, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r7, @ANYBLOB="b65d03c85851426a790c18681db406a9d962140a1581745b3b047bee1e002eca68b37303b2ba5b23051ecd9231a76a0aff114d22564602432e96a617097f3ec10fe51226abe4486d613fb7cc79ff273a782db89e152f3fdf9967143270013a67c66b06fdddf9a2020281bd406bca63f3c6489d10bda1958581db9ed58693afa637741281299ae6b5d64e"], 0x1c}}, 0x0) write$nci(r6, &(0x7f000000a600)=ANY=[@ANYBLOB="6105061803030207081ffc013c05088a08017d"], 0x13) clock_nanosleep(0x7, 0x1, &(0x7f0000009c40), 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73708cc9f1ba1f848f123bd02e979d1e692420000005e0a001000000002800000129459673194a896ea0596f6dfafb144e2ec1050bb00647c443e6c073c37d7a4d4399c0aa03770e921ab1d5b9eee8299f2ce33e85dd674580037f6fff2b140175dc41a10d63a74735495d3570de9ca9cdb7900609fb26174b206b16030def96b3a1ba6", 0x8f}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) 10m8.23082898s ago: executing program 34 (id=653): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0xbdb, &(0x7f00000000c0), &(0x7f0000000000)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0xa) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) recvmmsg(r5, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f00000001c0)}, {&(0x7f0000000400)=""/65, 0x41}], 0x5, &(0x7f0000000a00)=""/99, 0x63}, 0xffff}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/8, 0x8}, {&(0x7f0000001b40)=""/186, 0xba}, {&(0x7f0000001c00)=""/148, 0x94}, {&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7, &(0x7f0000002e00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)=""/250, 0xfa}, {&(0x7f0000002fc0)=""/117, 0x75}], 0x2, &(0x7f0000003080)=""/3, 0x3}, 0x3}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003140)=""/94, 0x5e}, {&(0x7f00000031c0)=""/45, 0x2d}, {&(0x7f0000003200)=""/201, 0xc9}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/226, 0xe2}, {&(0x7f0000003500)=""/97, 0x61}, {&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/135, 0x87}], 0x8, &(0x7f0000003740)=""/184, 0xb8}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003800)=""/73, 0x49}], 0x1}, 0xff}, {{&(0x7f00000038c0)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @default, @bcast, @bcast, @default, @remote, @bcast]}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/165, 0xa5}, {&(0x7f0000003a00)=""/152, 0x98}, {&(0x7f0000003ac0)=""/154, 0x9a}, {&(0x7f0000003b80)=""/250, 0xfa}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/39, 0x27}], 0x6, &(0x7f0000004d40)=""/217, 0xd9}, 0x9}, {{&(0x7f0000004e40)=@ethernet, 0x80, &(0x7f0000005200)=[{&(0x7f0000004ec0)=""/245, 0xf5}, {&(0x7f0000004fc0)=""/192, 0xc0}, {&(0x7f0000005080)=""/80, 0x50}, {&(0x7f0000005100)=""/79, 0x4f}, {&(0x7f0000005180)=""/23, 0x17}, {&(0x7f00000051c0)=""/16, 0x10}], 0x6, &(0x7f0000005280)=""/150, 0x96}, 0x2}], 0x7, 0x0, &(0x7f0000005540)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000480)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x9, 0x8001, 0x0, 0x0, r9, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r7, @ANYBLOB="b65d03c85851426a790c18681db406a9d962140a1581745b3b047bee1e002eca68b37303b2ba5b23051ecd9231a76a0aff114d22564602432e96a617097f3ec10fe51226abe4486d613fb7cc79ff273a782db89e152f3fdf9967143270013a67c66b06fdddf9a2020281bd406bca63f3c6489d10bda1958581db9ed58693afa637741281299ae6b5d64e"], 0x1c}}, 0x0) write$nci(r6, &(0x7f000000a600)=ANY=[@ANYBLOB="6105061803030207081ffc013c05088a08017d"], 0x13) clock_nanosleep(0x7, 0x1, &(0x7f0000009c40), 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73708cc9f1ba1f848f123bd02e979d1e692420000005e0a001000000002800000129459673194a896ea0596f6dfafb144e2ec1050bb00647c443e6c073c37d7a4d4399c0aa03770e921ab1d5b9eee8299f2ce33e85dd674580037f6fff2b140175dc41a10d63a74735495d3570de9ca9cdb7900609fb26174b206b16030def96b3a1ba6", 0x8f}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) 3m15.322400895s ago: executing program 6 (id=2371): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x4, 0x2, {}, 0x58603}) 3m15.140390189s ago: executing program 6 (id=2373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() setrlimit(0x1, &(0x7f0000000400)={0x2, 0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000a3c000/0x1000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2001) mmap$dsp(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b9743be9253bb9afc7ceecab31eb59e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x14, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3m12.939556774s ago: executing program 6 (id=2381): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000190f1"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3m9.513407409s ago: executing program 6 (id=2401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 3m9.209225043s ago: executing program 6 (id=2405): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x9}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) 3m8.75752645s ago: executing program 6 (id=2410): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m5.323502709s ago: executing program 35 (id=2410): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 20.496311143s ago: executing program 5 (id=3022): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000001c0)=@x86={0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.224029918s ago: executing program 5 (id=3029): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x376, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6002000003403afffe80"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES32=r1], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000001c0)=ANY=[]) 13.213066148s ago: executing program 5 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="308f6fdcd8ef95ac180e28e3b7dafa546e208e23230c54cd672deb128dccb3484fc090000000000000abc8c5ed1d0658fe873325c8de8347cf2d7dbcf7", 0xfffffffffffffc65, 0x240400c4, 0x0, 0x0) 12.856970112s ago: executing program 7 (id=3047): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x14, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f0000001280)=""/39, 0x27) 11.862278159s ago: executing program 7 (id=3049): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.359703367s ago: executing program 3 (id=3052): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x8000, 0x5b, 0x6, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x64, 0x0, 0xd3, 0x4, 0x0, @private=0xa010102, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0x2, [{@empty, 0xf}]}]}}}}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) 8.625020137s ago: executing program 8 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') r8 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x6612, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.49992408s ago: executing program 7 (id=3057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 7.577560345s ago: executing program 8 (id=3058): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 7.514063306s ago: executing program 5 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 7.434570101s ago: executing program 3 (id=3060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae68", 0x98, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x48851, &(0x7f0000000c80)={0xa, 0x4e20, 0x5, @private1, 0x8}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xc, 0x8, 0x5, 0x6, 0x81, 0x8, 0xc2}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a"], 0x94}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r8, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 6.077076143s ago: executing program 5 (id=3061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="000019"], 0x0, 0x0}) 5.808817341s ago: executing program 7 (id=3062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x22, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) 4.944072413s ago: executing program 3 (id=3063): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) r1 = syz_io_uring_setup(0x5d71, &(0x7f0000000340)={0x0, 0x0, 0x10700}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) close(r4) 4.213346179s ago: executing program 2 (id=3064): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000002d80)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 4.191109593s ago: executing program 3 (id=3065): rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r2, 0xfbff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) 3.473404796s ago: executing program 7 (id=3066): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 3.398327033s ago: executing program 8 (id=3067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.261392053s ago: executing program 3 (id=3068): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, 0x0, 0x4e) lchown(0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 2.633341913s ago: executing program 7 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') r8 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x6612, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.453415689s ago: executing program 8 (id=3070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.426479081s ago: executing program 2 (id=3071): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000a00)) splice(r1, 0x0, r5, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000001100)="94", 0x1) write$binfmt_misc(r0, &(0x7f0000000140), 0x4) 2.08813095s ago: executing program 3 (id=3072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() setrlimit(0x1, &(0x7f0000000400)={0x2, 0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000a3c000/0x1000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2001) mmap$dsp(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b9743be9253bb9afc7ceecab31eb59e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x14, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.027915132s ago: executing program 2 (id=3073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae68", 0x98, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x48851, &(0x7f0000000c80)={0xa, 0x4e20, 0x5, @private1, 0x8}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xc, 0x8, 0x5, 0x6, 0x81, 0x8, 0xc2}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a"], 0x94}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r8, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 1.663135724s ago: executing program 8 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') r8 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x6612, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.081347259s ago: executing program 5 (id=3075): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "ca00"}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x6248, &(0x7f0000000280)) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffdfffff]}, 0x0, 0x0, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r6) 223.864242ms ago: executing program 2 (id=3076): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x5) 223.179417ms ago: executing program 2 (id=3077): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xdf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x2}) io_uring_enter(r0, 0x2d42, 0x0, 0x0, 0x0, 0x0) 139.600216ms ago: executing program 8 (id=3078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="da454db68fa5ab6d29bf7a803b64d817971b13515ab65d4d0da1c55edc303003360ca71f91e90688372d58d068f7b84afb", 0x31}], 0x1}}], 0x1, 0x400c1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=3079): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r4, 0x0) kernel console output (not intermixed with test programs): riptor?? [ 946.081577][ T5917] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 946.421079][T13783] tipc: Enabling of bearer rejected, failed to enable media [ 946.966452][T11022] usb 6-1: USB disconnect, device number 28 [ 947.035003][T11022] usblp0: removed [ 947.998504][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1856'. [ 948.031105][T13797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 948.039133][T13797] IPv6: NLM_F_CREATE should be set when creating new route [ 948.046504][T13797] IPv6: NLM_F_CREATE should be set when creating new route [ 948.273596][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1858'. [ 949.865096][T13824] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 950.643500][T13838] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 951.592269][T13868] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 951.676431][T13866] erofs (device erofs): cannot find valid erofs superblock [ 953.036214][T13890] tipc: Enabling of bearer rejected, failed to enable media [ 954.037690][T13907] tipc: Enabling of bearer rejected, failed to enable media [ 954.096406][T13906] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 958.981618][ T5917] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 959.157872][ T5917] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 959.176415][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.191909][ T5917] usb 4-1: config 0 descriptor?? [ 959.212444][ T5917] cp210x 4-1:0.0: cp210x converter detected [ 959.640593][ T5917] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 959.652556][ T5917] usb 4-1: cp210x converter now attached to ttyUSB0 [ 959.870076][ T5917] usb 4-1: USB disconnect, device number 24 [ 959.894305][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 959.912075][ T5917] cp210x 4-1:0.0: device disconnected [ 960.260499][ T29] audit: type=1326 audit(1735356781.376:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.296494][ T29] audit: type=1326 audit(1735356781.376:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.324414][ T29] audit: type=1326 audit(1735356781.376:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.359420][ T29] audit: type=1326 audit(1735356781.376:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.392455][ T29] audit: type=1326 audit(1735356781.376:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.392735][ T5874] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 960.435352][ T29] audit: type=1326 audit(1735356781.376:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.491839][ T29] audit: type=1326 audit(1735356781.376:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.569020][ T29] audit: type=1326 audit(1735356781.376:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.613443][ T29] audit: type=1326 audit(1735356781.376:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f71d1985d29 code=0x7ffc0000 [ 960.636408][ T29] audit: type=1326 audit(1735356781.376:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13998 comm="syz.6.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 960.681331][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 960.690262][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.700552][ T5874] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 960.712558][ T5874] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 960.725387][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.733509][ T5874] usb 3-1: Product: syz [ 960.737822][ T5874] usb 3-1: Manufacturer: syz [ 960.742464][ T5874] usb 3-1: SerialNumber: syz [ 960.750390][ T5874] usb 3-1: config 0 descriptor?? [ 960.759273][ T5874] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 960.840149][T14010] syzkaller1: entered promiscuous mode [ 960.846001][T14010] syzkaller1: entered allmulticast mode [ 960.969879][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 961.151658][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 961.166228][ T46] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 961.190020][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.222395][ T46] usb 4-1: config 0 descriptor?? [ 961.272505][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.288136][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.324769][ T5874] usb 3-1: USB disconnect, device number 29 [ 961.469485][ T46] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 961.490408][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 961.524676][ T46] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 961.548425][ T46] usb 4-1: media controller created [ 961.598670][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.736813][ T5836] Bluetooth: hci3: sending frame failed (-49) [ 961.745755][ T5833] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 962.284886][ T5917] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 962.339611][ T46] az6027: usb out operation failed. (-71) [ 962.345611][ T46] stb0899_attach: Driver disabled by Kconfig [ 962.356925][ T46] az6027: no front-end attached [ 962.356925][ T46] [ 962.367323][ T46] az6027: usb out operation failed. (-71) [ 962.378552][ T46] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 962.387681][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 962.416724][ T46] dvb-usb: schedule remote query interval to 400 msecs. [ 962.432515][ T46] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 962.445132][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 962.457108][ T46] usb 4-1: USB disconnect, device number 25 [ 962.473657][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 962.480700][T11991] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 962.499049][ T5917] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 962.508143][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.549001][ T5917] usb 3-1: Product: syz [ 962.560614][ T46] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 962.570190][ T5917] usb 3-1: Manufacturer: syz [ 962.581945][ T5917] usb 3-1: SerialNumber: syz [ 962.594386][ T5917] usb 3-1: config 0 descriptor?? [ 962.649957][T11991] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 962.658097][T11991] usb 6-1: config 0 has no interface number 0 [ 962.688022][T11991] usb 6-1: New USB device found, idVendor=12d1, idProduct=8869, bcdDevice=3b.15 [ 962.707504][T11991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.719140][T11991] usb 6-1: Product: syz [ 962.729763][T11991] usb 6-1: Manufacturer: syz [ 962.738749][T11991] usb 6-1: SerialNumber: syz [ 962.753361][T11991] usb 6-1: config 0 descriptor?? [ 962.764043][T11991] huawei_cdc_ncm 6-1:0.51: CDC Union missing and no IAD found [ 962.794363][T11991] huawei_cdc_ncm 6-1:0.51: bind() failure [ 963.067052][ T5917] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 963.236305][ T5874] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 963.329262][ T5829] usb 6-1: USB disconnect, device number 29 [ 963.397785][ T5874] usb 8-1: Using ep0 maxpacket: 32 [ 963.409349][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.420307][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 963.434455][ T5874] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 963.444932][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.456801][ T5874] usb 8-1: config 0 descriptor?? [ 963.726505][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 963.737737][ T5917] usb 3-1: USB disconnect, device number 30 [ 963.741036][ T5874] usb 8-1: string descriptor 0 read error: -71 [ 963.761184][ T5874] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 963.777731][ T5874] usb 8-1: USB disconnect, device number 26 [ 964.102383][ T5829] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 964.284146][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 964.296358][ T5829] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.315936][ T5829] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.356328][ T5829] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.419281][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.427855][ T5829] usb 4-1: Product: syz [ 964.435180][ T5829] usb 4-1: Manufacturer: syz [ 964.439917][ T5829] usb 4-1: SerialNumber: syz [ 964.470170][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.485825][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.909518][ T5829] usb 4-1: 0:2 : does not exist [ 965.407577][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 965.434856][T14142] syzkaller1: entered promiscuous mode [ 965.444102][T14142] syzkaller1: entered allmulticast mode [ 965.450145][ T46] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 965.559070][ T5917] usb 4-1: USB disconnect, device number 26 [ 965.609589][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 965.628134][ T46] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 965.659660][ T46] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 965.681014][ T46] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.716842][ T46] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 965.727412][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.735698][ T46] usb 8-1: Product: syz [ 965.741343][ T46] usb 8-1: Manufacturer: syz [ 965.756234][ T46] usb 8-1: SerialNumber: syz [ 965.931755][T14152] syzkaller1: entered promiscuous mode [ 965.937680][T14152] syzkaller1: entered allmulticast mode [ 966.267841][ T46] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 966.390051][T14165] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 966.734444][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 966.786373][ T5829] usb 8-1: USB disconnect, device number 27 [ 967.729145][T14190] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 968.697332][T14201] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 969.009710][T14206] syzkaller1: entered promiscuous mode [ 969.021760][T14206] syzkaller1: entered allmulticast mode [ 969.043093][T14209] tipc: Enabling of bearer rejected, failed to enable media [ 969.216950][T14216] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 969.539360][T14230] netlink: 'syz.7.2012': attribute type 10 has an invalid length. [ 969.570760][T14230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.581600][T14230] bond0: entered promiscuous mode [ 969.587243][T14230] bond_slave_0: entered promiscuous mode [ 969.593704][T14230] bond_slave_1: entered promiscuous mode [ 969.600318][T14230] bond0: entered allmulticast mode [ 969.605659][T14230] bond_slave_0: entered allmulticast mode [ 969.612446][T14230] bond_slave_1: entered allmulticast mode [ 969.622615][T14230] team0: Port device bond0 added [ 970.090772][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 970.090792][ T29] audit: type=1326 audit(1735356790.571:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14244 comm="syz.2.2018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea1d85d29 code=0x0 [ 970.150512][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 970.204995][T14248] tipc: Enabling of bearer rejected, failed to enable media [ 972.091160][T14273] tipc: Enabling of bearer rejected, failed to enable media [ 972.585473][T14281] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 973.570485][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2040'. [ 973.612474][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2040'. [ 974.555341][T14335] syzkaller1: entered promiscuous mode [ 974.574462][T14335] syzkaller1: entered allmulticast mode [ 974.669059][T14338] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 975.970654][T14364] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2062'. [ 976.590306][T14376] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 977.489122][T14388] tipc: Enabling of bearer rejected, failed to enable media [ 977.853363][T14391] siw: device registration error -23 [ 978.355307][T14407] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2072'. [ 978.509737][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.535909][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.575937][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.607221][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.646665][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.689218][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 978.716272][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.618173][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.625742][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.633185][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.641545][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.649386][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.657135][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.664572][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.672286][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.680021][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.688136][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.695671][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.703192][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.710703][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.718150][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.725732][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.733493][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.740925][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.748553][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.756135][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.763656][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.771093][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.778671][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.786203][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.793637][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.801638][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.809176][ T5874] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 979.827524][ T5829] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 979.972532][ T5874] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 980.108464][ T5829] usb 6-1: config 0 has no interfaces? [ 980.114464][ T5829] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 980.141015][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.180649][ T5829] usb 6-1: config 0 descriptor?? [ 980.391429][T14417] »»»»»» speed is unknown, defaulting to 1000 [ 980.423558][ T5829] usb 6-1: USB disconnect, device number 30 [ 980.870991][T14417] »»»»»» speed is unknown, defaulting to 1000 [ 981.131507][T14439] netlink: 'syz.6.2085': attribute type 1 has an invalid length. [ 981.150584][T14439] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2085'. [ 981.729192][T14449] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2087'. [ 983.058086][T14465] tipc: Enabling of bearer rejected, failed to enable media [ 984.050662][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 984.345582][T14481] binder: 14479:14481 ioctl c0306201 200002c0 returned -22 [ 985.486026][T14497] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2101'. [ 986.113628][ T5829] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 986.220329][T11991] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 986.295132][ T5829] usb 8-1: Using ep0 maxpacket: 16 [ 986.310459][ T5829] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 986.327296][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.345843][ T5829] usb 8-1: Product: syz [ 986.350694][ T5829] usb 8-1: Manufacturer: syz [ 986.366216][ T5829] usb 8-1: SerialNumber: syz [ 986.380689][T11991] usb 6-1: Using ep0 maxpacket: 16 [ 986.389303][ T5829] r8152-cfgselector 8-1: Unknown version 0x0000 [ 986.389445][T11991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.410465][ T5829] r8152-cfgselector 8-1: config 0 descriptor?? [ 986.424922][T11991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.453741][T11991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 986.484678][T11991] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 986.504868][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.525118][T11991] usb 6-1: config 0 descriptor?? [ 986.983327][ T5917] r8152-cfgselector 8-1: USB disconnect, device number 28 [ 987.029501][T11991] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 987.056892][T11991] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 987.335557][T14519] tipc: Enabling of bearer rejected, failed to enable media [ 987.453827][T11991] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 987.619387][T11991] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 987.805766][T11991] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 987.879136][T11991] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 988.028002][T11991] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 988.058143][T11991] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 988.144666][T14528] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 988.181106][ T46] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 988.230986][T11991] usb 6-1: USB disconnect, device number 31 [ 988.244163][ T46] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 988.300586][ T46] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 988.363982][ T46] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 988.686770][T14543] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 988.741001][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2119'. [ 988.770524][T14547] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2119'. [ 988.816087][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2120'. [ 989.019174][T14540] »»»»»» speed is unknown, defaulting to 1000 [ 989.272471][T14540] »»»»»» speed is unknown, defaulting to 1000 [ 989.371793][T14558] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2122'. [ 989.711492][T14563] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 990.579237][ T46] kernel write not supported for file /cpu/0/msr (pid: 46 comm: kworker/1:1) [ 991.013880][T14601] kvm: kvm [14599]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000014) [ 991.154540][T14607] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2142'. [ 991.824863][T14624] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2147'. [ 991.859236][T14624] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2147'. [ 991.897670][T14624] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2147'. [ 991.927634][T14624] tc_dump_action: action bad kind [ 994.184544][T11991] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 994.344969][T11991] usb 8-1: Using ep0 maxpacket: 8 [ 994.363713][T11991] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 994.412275][T11991] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 994.429866][T11991] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 994.465461][T11991] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.487294][T11991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.526628][T11991] usb 8-1: Product: syz [ 994.537462][T11991] usb 8-1: Manufacturer: syz [ 994.555960][T11991] usb 8-1: SerialNumber: syz [ 994.715569][T14657] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 994.806914][T14665] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 994.817742][T14665] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 995.044968][T11991] usb 8-1: 0:2 : does not exist [ 995.099838][T11991] usb 8-1: USB disconnect, device number 29 [ 995.491324][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.265606][T14704] netlink: 'syz.5.2173': attribute type 29 has an invalid length. [ 997.288729][T14704] netlink: 'syz.5.2173': attribute type 29 has an invalid length. [ 997.309875][T14704] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2173'. [ 997.550588][T14708] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1000.973235][ T5829] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1000.985830][T14778] overlayfs: conflicting lowerdir path [ 1001.189799][ T5829] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1001.209923][ T5829] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1001.240154][ T5829] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1001.292090][ T5829] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.311844][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.347970][ T5829] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.470156][ T5829] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1001.557556][T10415] udevd[10415]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.636715][T11991] usb 8-1: USB disconnect, device number 30 [ 1002.342044][T14798] input: syz1 as /devices/virtual/input/input35 [ 1002.791352][T14811] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2207'. [ 1003.018329][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2211'. [ 1003.114417][T14819] batman_adv: batadv0: Adding interface: macsec1 [ 1003.120832][T14819] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.146987][T14819] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1004.140267][T14841] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1004.733467][T14856] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2225'. [ 1004.767852][T11991] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1004.939125][T11991] usb 3-1: Using ep0 maxpacket: 8 [ 1004.945971][T11991] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1004.978913][T11991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.080588][T11991] usb 3-1: config 0 descriptor?? [ 1005.115040][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 1006.057674][T14888] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 1006.341114][T14888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1006.404313][T14888] bond1: (slave ip6gretap1): making interface the new active one [ 1006.636435][T14888] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1009.102284][T11991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1009.113848][T11991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1009.152569][T11991] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1009.243521][T11991] usb 3-1: USB disconnect, device number 31 [ 1009.425074][T14910] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1009.474858][T14905] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1013.063558][T11022] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1013.234882][T11022] usb 8-1: Using ep0 maxpacket: 16 [ 1013.246558][T11022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1013.292549][T11022] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1013.329638][T11022] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1013.371070][T11022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.402686][T11022] usb 8-1: config 0 descriptor?? [ 1013.908566][T11022] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1013.935556][T11022] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1013.962357][T15002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.976572][T11022] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 1013.985444][ T29] audit: type=1400 audit(1735356831.627:238): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=14999 comm="syz.2.2268" dest=20000 netif=wpan0 [ 1014.767296][T11022] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 1014.789033][T11022] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 1014.822964][T11022] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 1014.859439][T11022] usb 8-1: USB disconnect, device number 31 [ 1015.181094][T15039] syzkaller1: entered promiscuous mode [ 1015.209457][T15039] syzkaller1: entered allmulticast mode [ 1015.395740][T15034] »»»»»» speed is unknown, defaulting to 1000 [ 1015.586892][T15049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1543511462 (24696183392 ns) > initial count (19957873440 ns). Using initial count to start timer. [ 1015.669416][T15034] »»»»»» speed is unknown, defaulting to 1000 [ 1015.675931][T11022] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1015.853764][T11022] usb 6-1: Using ep0 maxpacket: 8 [ 1015.882477][T11022] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.893074][T11022] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.931759][T11022] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1015.968577][T11022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.060409][T11022] usbtmc 6-1:16.0: bulk endpoints not found [ 1016.613042][T15068] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1017.976606][T15091] syzkaller1: entered promiscuous mode [ 1017.987326][T15091] syzkaller1: entered allmulticast mode [ 1018.088504][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 1018.620989][T15107] dccp_v6_rcv: dropped packet with invalid checksum [ 1018.641570][ T46] usb 6-1: USB disconnect, device number 32 [ 1018.721621][T15111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.883899][T15116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.968505][T11991] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1019.166943][T11022] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1019.287155][T15126] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1019.381497][T11022] usb 8-1: Using ep0 maxpacket: 32 [ 1019.389516][T11022] usb 8-1: config 0 has an invalid interface number: 219 but max is 0 [ 1019.405965][T11022] usb 8-1: config 0 has no interface number 0 [ 1019.443839][T11022] usb 8-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.504263][T11022] usb 8-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.550140][T11022] usb 8-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 1019.596180][T11022] usb 8-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.660398][T11022] usb 8-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1019.672424][T11022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.712389][T11022] usb 8-1: Product: syz [ 1019.716092][T11991] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1019.725725][T11991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.733260][T11022] usb 8-1: Manufacturer: syz [ 1019.736237][T11991] usb 4-1: config 0 descriptor?? [ 1019.745612][T11991] cp210x 4-1:0.0: cp210x converter detected [ 1019.757041][T11022] usb 8-1: SerialNumber: syz [ 1019.781572][T11022] usb 8-1: config 0 descriptor?? [ 1019.792539][T15118] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1020.048408][T11022] etas_es58x 8-1:0.219: Starting syz syz (Serial Number syz) [ 1020.087580][T11022] usb 8-1: USB disconnect, device number 32 [ 1020.206860][T11991] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1020.267796][T11991] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1020.538261][T11991] usb 4-1: USB disconnect, device number 27 [ 1020.586852][T11991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1020.627016][T11991] cp210x 4-1:0.0: device disconnected [ 1021.006596][ T5829] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1021.663988][ T5829] usb 8-1: Using ep0 maxpacket: 16 [ 1021.687309][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.711273][T15168] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1021.969811][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.979900][ T5829] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1021.989372][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.550359][ T5829] usb 8-1: config 0 descriptor?? [ 1023.000903][T15195] program syz.2.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1023.003269][ T5829] elan 0003:04F3:0755.0020: failed to start in urb: -90 [ 1023.021223][ T5829] elan 0003:04F3:0755.0020: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1023.230274][ T119] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1023.308081][ T5829] usb 8-1: USB disconnect, device number 33 [ 1023.435207][ T119] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1023.445817][ T119] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1023.460408][ T119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1023.473317][ T119] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1023.490901][ T119] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1023.508969][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1023.549090][ T119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1023.570172][ T119] usb 4-1: string descriptor 0 read error: -22 [ 1023.577343][ T119] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1023.597246][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.635594][ T119] usb 4-1: config 0 descriptor?? [ 1023.642026][T15196] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1023.665534][ T119] hub 4-1:0.0: bad descriptor, ignoring hub [ 1023.672170][T15208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1023.691491][ T119] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1023.711021][ T119] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 1024.087960][ T119] usb 4-1: USB disconnect, device number 28 [ 1025.776250][T15253] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1026.255546][ T5829] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1027.890943][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 1027.893174][ T5829] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1027.893213][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.901022][ T5829] usb 6-1: config 0 descriptor?? [ 1027.907488][ T5829] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1028.985539][T15307] tipc: Enabling of bearer rejected, failed to enable media [ 1029.784214][ T5829] gspca_sunplus: reg_w_riv err -71 [ 1029.784299][ T5829] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1029.785938][ T5829] usb 6-1: USB disconnect, device number 33 [ 1030.160598][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1030.160655][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.372429][T15323] mkiss: ax0: crc mode is auto. [ 1030.492837][T15323] mkiss: ax0: crc mode is auto. [ 1031.151467][ T5917] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1031.644021][T15356] tipc: Enabling of bearer rejected, failed to enable media [ 1032.049402][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1032.056756][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.078220][ T5917] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1032.138469][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1032.149472][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.178259][ T5917] usb 4-1: Product: syz [ 1032.187290][ T5917] usb 4-1: Manufacturer: syz [ 1032.194737][ T5917] usb 4-1: SerialNumber: syz [ 1032.312734][ T5836] block nbd2: Receive control failed (result -107) [ 1032.403089][T15366] nbd2: detected capacity change from 0 to 131074 [ 1032.428041][ T9955] block nbd2: Dead connection, failed to find a fallback [ 1032.437284][ T5917] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1032.448852][ T9955] block nbd2: shutting down sockets [ 1032.457871][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.482106][ T9955] buffer_io_error: 4 callbacks suppressed [ 1032.482126][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.513215][T15364] nbd2: detected capacity change from 131074 to 12 [ 1032.531820][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.553919][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.571296][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.594586][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.602575][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.611937][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.620016][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.629325][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.637650][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.646731][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.654700][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.690920][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.698889][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.733610][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.741503][ T9955] ldm_validate_partition_table(): Disk read failed. [ 1032.755946][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.765067][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.787446][ T9955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.804971][ T9955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1032.826118][ T9955] Dev nbd2: unable to read RDB block 0 [ 1032.834669][ T5917] usb 4-1: USB disconnect, device number 29 [ 1032.851378][ T5917] usblp0: removed [ 1032.858329][ T9955] nbd2: unable to read partition table [ 1032.874437][ T9955] nbd2: partition table beyond EOD, truncated [ 1032.913371][ T9955] ldm_validate_partition_table(): Disk read failed. [ 1032.933767][ T9955] Dev nbd2: unable to read RDB block 0 [ 1032.940909][ T9955] nbd2: unable to read partition table [ 1032.946682][ T9955] nbd2: partition table beyond EOD, truncated [ 1033.138079][T15384] Bluetooth: hci3: sending frame failed (-49) [ 1033.148982][ T5836] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1033.228488][T15386] syzkaller0: entered allmulticast mode [ 1033.272374][T15386] syzkaller0 (unregistering): left allmulticast mode [ 1033.585591][T15395] gtp0: entered promiscuous mode [ 1033.921388][T15405] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1034.514054][ T6339] bridge_slave_1: left allmulticast mode [ 1034.520532][ T6339] bridge_slave_1: left promiscuous mode [ 1034.534224][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.745995][ T6339] bridge_slave_0: left allmulticast mode [ 1034.751804][ T6339] bridge_slave_0: left promiscuous mode [ 1034.766082][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.373992][T15384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1038.418045][T15384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1038.441804][T15384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1038.472885][T15384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1038.502341][T15384] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1038.511512][T15384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1038.548537][ T6339] gretap0 (unregistering): left promiscuous mode [ 1038.577482][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1038.589082][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1038.597473][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1038.610319][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1038.620111][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1038.641618][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1038.753002][ T6339] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1038.761864][ T6339] bridge0 (unregistering): left allmulticast mode [ 1039.014331][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.035622][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.060657][ T6339] bond0 (unregistering): Released all slaves [ 1039.201592][ T6339] tipc: Left network mode [ 1039.881665][T15466] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1040.296677][T15469] tipc: Enabling of bearer rejected, failed to enable media [ 1040.306812][T15449] »»»»»» speed is unknown, defaulting to 1000 [ 1040.824781][T15449] »»»»»» speed is unknown, defaulting to 1000 [ 1040.837078][T15384] Bluetooth: hci0: command tx timeout [ 1041.636019][T15480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.652044][ T6339] macvlan0: left promiscuous mode [ 1041.732814][ T6339] hsr_slave_0: left promiscuous mode [ 1041.820423][ T6339] hsr_slave_1: left promiscuous mode [ 1041.885416][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.892915][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.937953][T11991] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1041.982532][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.027820][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.072143][ T6339] veth1_macvtap: left promiscuous mode [ 1042.077835][ T6339] veth0_macvtap: left promiscuous mode [ 1042.083525][ T6339] veth1_vlan: left promiscuous mode [ 1042.089400][ T6339] veth0_vlan: left promiscuous mode [ 1042.109116][T11991] usb 8-1: Using ep0 maxpacket: 8 [ 1042.118469][T11991] usb 8-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 1042.127987][T11991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.152380][T11991] usb 8-1: Product: syz [ 1042.156689][T11991] usb 8-1: Manufacturer: syz [ 1042.425766][T11991] usb 8-1: SerialNumber: syz [ 1042.433439][T11991] usb 8-1: config 0 descriptor?? [ 1042.444203][T11991] gspca_main: spca500-2.14.0 probing 046d:0900 [ 1042.721099][ T6339] pim6reg (unregistering): left allmulticast mode [ 1043.012320][T11991] gspca_spca500: reg write: error -32 [ 1043.026300][T11991] gspca_spca500: reg write: error -32 [ 1043.039354][T11991] gspca_spca500: reg write: error -32 [ 1043.159244][T15384] Bluetooth: hci0: command tx timeout [ 1043.167811][T11991] gspca_spca500: reg write: error -32 [ 1043.173774][T11991] gspca_spca500: reg write: error -32 [ 1043.179955][T11991] gspca_spca500: reg write: error -32 [ 1043.716369][ T6339] team_slave_1 (unregistering): left promiscuous mode [ 1043.732387][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 1043.788623][ T6339] team_slave_0 (unregistering): left promiscuous mode [ 1043.796631][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 1044.283680][T11991] gspca_spca500: reg write: error -71 [ 1044.291042][T11991] gspca_spca500: reg write: error -71 [ 1044.312283][T11991] gspca_spca500: reg write: error -71 [ 1044.349046][T11991] usb 8-1: USB disconnect, device number 34 [ 1044.520146][T15493] tipc: Enabling of bearer rejected, failed to enable media [ 1044.728854][T15499] Bluetooth: MGMT ver 1.23 [ 1044.834435][T15449] chnl_net:caif_netlink_parms(): no params data found [ 1045.114645][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.121875][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.167018][T15449] bridge_slave_0: entered allmulticast mode [ 1045.174862][T15449] bridge_slave_0: entered promiscuous mode [ 1045.197710][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.216511][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.234907][T15449] bridge_slave_1: entered allmulticast mode [ 1045.401946][T15384] Bluetooth: hci0: command tx timeout [ 1045.410563][T15449] bridge_slave_1: entered promiscuous mode [ 1046.025930][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.254896][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.327482][ T6339] IPVS: stop unused estimator thread 0... [ 1046.414331][T15528] syzkaller0: entered promiscuous mode [ 1046.425411][T15528] syzkaller0: entered allmulticast mode [ 1046.532747][T15449] team0: Port device team_slave_0 added [ 1046.596986][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2445'. [ 1046.664991][ T5874] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1046.672629][ T5874] hid-generic 0000:0000:0000.0021: unknown main item tag 0x6 [ 1046.684935][T15534] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 1046.704962][T15449] team0: Port device team_slave_1 added [ 1046.711165][ T5874] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1046.882230][ T5194] udevd[5194]: worker [9958] terminated by signal 33 (Unknown signal 33) [ 1046.909948][ T5194] udevd[5194]: worker [9958] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0021/hidraw/hidraw0' [ 1047.475533][ T8146] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1047.657182][ T8146] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1047.700019][T15384] Bluetooth: hci0: command tx timeout [ 1047.709656][ T8146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1047.721471][ T8146] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1047.730793][ T8146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.746604][ T8146] usb 3-1: config 0 descriptor?? [ 1048.212747][ T8146] appletouch 3-1:0.0: Geyser mode initialized. [ 1048.221079][ T8146] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 1048.458665][ T8146] usb 3-1: USB disconnect, device number 32 [ 1048.512614][T10416] udevd[10416]: Error opening device "/dev/input/event4": No such device [ 1048.546854][ T8146] appletouch 3-1:0.0: input: appletouch disconnected [ 1048.564118][T10416] udevd[10416]: Unable to EVIOCGABS device "/dev/input/event4" [ 1048.574883][T10416] udevd[10416]: Unable to EVIOCGABS device "/dev/input/event4" [ 1048.653201][ T29] audit: type=1326 audit(1735356864.040:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.5.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76f4f85d29 code=0x0 [ 1048.674267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.378517][ T8146] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1049.564501][ T8146] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1049.597650][ T8146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.618857][ T8146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.658021][ T8146] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.677173][ T8146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.685376][ T8146] usb 3-1: Product: syz [ 1049.697440][ T8146] usb 3-1: Manufacturer: syz [ 1049.702732][ T8146] usb 3-1: SerialNumber: syz [ 1050.417718][ T8146] usb 3-1: 0:2 : does not exist [ 1050.474197][ T8146] usb 3-1: USB disconnect, device number 33 [ 1050.737322][ T9955] udevd[9955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.489335][T15580] tipc: Enabling of bearer rejected, failed to enable media [ 1052.925590][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.963729][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.010361][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.072802][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.090935][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.143554][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.163722][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2469'. [ 1053.268838][T15449] hsr_slave_0: entered promiscuous mode [ 1053.278205][T15449] hsr_slave_1: entered promiscuous mode [ 1053.288770][T15449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.296834][ T5917] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1053.314105][T15449] Cannot create hsr debugfs directory [ 1053.670286][ T5917] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1053.679748][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.687889][ T5917] usb 6-1: Product: syz [ 1053.692176][ T5917] usb 6-1: Manufacturer: syz [ 1053.696879][ T5917] usb 6-1: SerialNumber: syz [ 1053.713472][ T5917] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1053.742416][ T8146] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1054.204392][ T5829] usb 6-1: USB disconnect, device number 34 [ 1054.862547][ T8146] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1054.877191][ T8146] ath9k_htc: Failed to initialize the device [ 1054.893033][ T5829] usb 6-1: ath9k_htc: USB layer deinitialized [ 1055.232706][ T5829] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1055.420283][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.431741][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.445407][ T5829] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1055.456021][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.466853][ T5829] usb 6-1: config 0 descriptor?? [ 1055.941000][ T5829] hid-steam 0003:28DE:1142.0022: item fetching failed at offset 1/5 [ 1055.953297][ T5829] hid-steam 0003:28DE:1142.0022: steam_probe:parse of hid interface failed [ 1055.962662][ T5829] hid-steam 0003:28DE:1142.0022: probe with driver hid-steam failed with error -22 [ 1056.227500][ T5829] usb 6-1: USB disconnect, device number 35 [ 1056.525041][T15608] tipc: Enabling of bearer rejected, failed to enable media [ 1056.950502][T15449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.239553][T15449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.274026][T15628] tipc: Enabling of bearer rejected, failed to enable media [ 1058.289222][T15449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.299710][T15449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.382353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.389558][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.420792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.428025][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.709982][T15449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.903527][ T119] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1059.111045][ T119] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1059.142227][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.178672][ T119] usb 4-1: Product: syz [ 1059.196903][ T119] usb 4-1: Manufacturer: syz [ 1059.216633][ T119] usb 4-1: SerialNumber: syz [ 1059.271599][ T119] usb 4-1: config 0 descriptor?? [ 1059.301367][ T119] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1059.576989][T15449] veth0_vlan: entered promiscuous mode [ 1059.620590][T15449] veth1_vlan: entered promiscuous mode [ 1059.733072][T15449] veth0_macvtap: entered promiscuous mode [ 1059.778025][T15449] veth1_macvtap: entered promiscuous mode [ 1059.839131][T15652] sp0: Synchronizing with TNC [ 1059.845901][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.866778][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.877219][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.890253][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.935063][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.951492][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.964457][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.975586][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.987909][T15449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.020966][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.047406][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.067453][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.106704][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.122158][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.137526][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.148142][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.159455][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.172022][T15449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.367133][ T46] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1060.914257][ T119] gspca_sunplus: reg_w_riv err -71 [ 1060.940894][ T119] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1061.147017][ T119] usb 4-1: USB disconnect, device number 30 [ 1061.542141][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.568440][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 1061.583951][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.592173][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.613430][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1061.625717][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.633340][ T46] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1061.633384][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.633409][ T46] usb 8-1: Product: syz [ 1061.633428][ T46] usb 8-1: Manufacturer: syz [ 1061.633445][ T46] usb 8-1: SerialNumber: syz [ 1061.662272][ T46] usb 8-1: config 0 descriptor?? [ 1061.682839][T15673] tipc: Enabling of bearer rejected, failed to enable media [ 1061.700024][ T46] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1061.715372][ T46] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1062.270877][ T119] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1062.403122][ T46] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1062.443182][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 1062.452004][ T119] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1063.120995][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1063.132853][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1063.144664][ T119] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.157753][ T119] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.167162][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.276301][ T46] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1063.284974][ T46] em28xx 8-1:0.0: board has no eeprom [ 1063.382619][ T46] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1063.411214][ T46] em28xx 8-1:0.0: dvb set to bulk mode. [ 1063.434424][T11991] em28xx 8-1:0.0: Binding DVB extension [ 1063.485910][ T46] usb 8-1: USB disconnect, device number 35 [ 1063.512588][ T46] em28xx 8-1:0.0: Disconnecting em28xx [ 1063.602645][ T119] usb 4-1: GET_CAPABILITIES returned 0 [ 1063.614876][ T119] usbtmc 4-1:16.0: can't read capabilities [ 1063.638876][T11991] em28xx 8-1:0.0: Registering input extension [ 1063.682208][ T46] em28xx 8-1:0.0: Closing input extension [ 1063.813421][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.832161][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.841328][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.850542][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.859684][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.868817][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.884321][ T46] em28xx 8-1:0.0: Freeing device [ 1063.929081][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.938244][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.947375][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.956493][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.965614][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.027954][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.037115][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.046262][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.055372][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.064483][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.233146][ T46] usb 4-1: USB disconnect, device number 31 [ 1065.221601][ T5829] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1065.236103][ T5829] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1065.489773][ T119] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1065.670292][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 1065.682097][ T119] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1065.702807][ T119] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.745045][ T119] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1065.763942][ T119] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1065.793348][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.821780][ T119] usb 3-1: config 0 descriptor?? [ 1066.054825][T15731] hid-generic 0000:0000:0000.0023: pid 15731 passed too large report [ 1066.101771][ T119] usbhid 3-1:0.0: can't add hid device: -71 [ 1066.129592][ T119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1066.164703][ T119] usb 3-1: USB disconnect, device number 34 [ 1066.527380][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 1067.092228][ T5829] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1067.265773][ T5829] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.279528][ T5829] usb 3-1: config 0 has no interface number 0 [ 1067.286095][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1067.304901][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1067.316039][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1067.325483][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.349552][ T5829] usb 3-1: config 0 descriptor?? [ 1067.357532][T15745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1067.386284][ T5829] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1067.718411][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1067.761412][ T5874] usb 3-1: USB disconnect, device number 35 [ 1068.843657][T15741] team0: Port device team_slave_1 removed [ 1069.110536][T15762] netlink: 'syz.5.2517': attribute type 4 has an invalid length. [ 1069.184808][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1069.195964][T15762] netlink: 'syz.5.2517': attribute type 4 has an invalid length. [ 1070.363416][ T5874] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1070.380488][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2525'. [ 1070.406770][T15787] team0: left allmulticast mode [ 1070.411861][T15787] team_slave_0: left allmulticast mode [ 1070.438173][T15787] team_slave_1: left allmulticast mode [ 1070.449214][T15787] bond0: left allmulticast mode [ 1070.454336][T15787] bond_slave_0: left allmulticast mode [ 1070.483979][T15787] bond_slave_1: left allmulticast mode [ 1070.490553][T15787] team0: left promiscuous mode [ 1070.496402][T15787] team_slave_0: left promiscuous mode [ 1070.508284][T15787] team_slave_1: left promiscuous mode [ 1070.514862][T15787] bond0: left promiscuous mode [ 1070.519802][T15787] bond_slave_0: left promiscuous mode [ 1070.525672][T15787] bond_slave_1: left promiscuous mode [ 1070.533368][T15787] bridge0: port 3(team0) entered disabled state [ 1070.545148][ T5917] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1070.547811][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.553329][T15787] bridge_slave_1: left allmulticast mode [ 1070.572475][T15787] bridge_slave_1: left promiscuous mode [ 1070.573745][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1070.580724][T15787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.590497][ T5874] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1070.604709][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1070.613722][ T5874] usb 6-1: SerialNumber: syz [ 1070.627245][T15787] bridge_slave_0: left allmulticast mode [ 1070.637856][T15787] bridge_slave_0: left promiscuous mode [ 1070.655498][T15787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.759453][ T5917] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1070.768725][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.782192][ T5917] usb 9-1: config 0 descriptor?? [ 1070.853419][ T5874] usb 6-1: 0:2 : does not exist [ 1070.882096][ T5874] usb 6-1: unit 255 not found! [ 1070.892282][ T5874] usb 6-1: 5:0: cannot get min/max values for control 1 (id 5) [ 1070.913457][ T5874] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1070.936434][ T5874] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1070.948259][ T5874] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1070.955747][ T29] audit: type=1326 audit(1735356884.900:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15796 comm="syz.2.2527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea1d85d29 code=0x0 [ 1070.960178][ T5874] usb 6-1: 5:0: cannot get min/max values for control 6 (id 5) [ 1071.000557][ T5874] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5) [ 1071.273909][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 1071.339252][ T5874] usb 6-1: USB disconnect, device number 36 [ 1071.341898][ T5917] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1071.389865][ T5917] [drm] Initialized udl on minor 2 [ 1071.399516][ T5917] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1071.468722][ T5917] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1071.490815][T11991] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1071.501102][ T5917] usb 9-1: USB disconnect, device number 2 [ 1071.529494][T11991] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1071.567539][ T9955] udevd[9955]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.804579][ T29] audit: type=1326 audit(1735356885.714:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1071.828041][ T29] audit: type=1326 audit(1735356885.714:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1071.947073][ T29] audit: type=1326 audit(1735356885.714:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.020716][ T29] audit: type=1326 audit(1735356885.714:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.062099][ T29] audit: type=1326 audit(1735356885.714:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.105866][ T29] audit: type=1326 audit(1735356885.714:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.162936][ T29] audit: type=1326 audit(1735356885.714:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.243706][ T29] audit: type=1326 audit(1735356885.714:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.303102][ T29] audit: type=1326 audit(1735356885.714:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15805 comm="syz.7.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7ab85d29 code=0x7fc00000 [ 1072.352541][T15828] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1074.316758][T15864] tipc: Enabling of bearer rejected, failed to enable media [ 1075.406014][T15877] tipc: Enabling of bearer rejected, failed to enable media [ 1075.517096][T11991] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1075.691768][T11991] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1075.709227][T11991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.835057][T15893] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1075.884108][T11991] usb 3-1: Product: syz [ 1075.908298][T11991] usb 3-1: Manufacturer: syz [ 1075.941475][T11991] usb 3-1: SerialNumber: syz [ 1075.985646][T11991] usb 3-1: config 0 descriptor?? [ 1076.581211][ T5874] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1076.757940][ T5874] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 1076.777124][ T5874] usb 9-1: config 0 has no interface number 0 [ 1076.787948][ T5874] usb 9-1: config 0 interface 11 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.817747][ T5874] usb 9-1: config 0 interface 11 has no altsetting 0 [ 1076.833549][ T5874] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1076.860921][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.885404][ T5874] usb 9-1: config 0 descriptor?? [ 1076.940137][T15912] CIFS mount error: No usable UNC path provided in device string! [ 1076.940137][T15912] [ 1076.961195][T15912] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1077.330210][T11991] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 1077.349501][ T5874] wacom 0003:056A:0084.0024: hidraw0: USB HID v0.06 Device [HID 056a:0084] on usb-dummy_hcd.8-1/input11 [ 1077.354973][T11991] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 1077.387006][T11991] usb 3-1: USB disconnect, device number 36 [ 1077.409913][T11991] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 1077.571707][ T8146] usb 9-1: USB disconnect, device number 3 [ 1077.602641][T11991] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1078.448574][T15925] tipc: Enabling of bearer rejected, failed to enable media [ 1078.684615][T15934] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1078.776673][ T8146] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1078.965434][ T8146] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1078.982186][ T8146] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1079.016289][ T8146] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.026773][ T8146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.054496][ T8146] usb 9-1: Product: syz [ 1079.058753][ T8146] usb 9-1: Manufacturer: syz [ 1079.086535][ T8146] usb 9-1: SerialNumber: syz [ 1079.330203][T15932] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1079.838854][T15957] tipc: Enabling of bearer rejected, failed to enable media [ 1080.736239][T15959] tipc: Enabling of bearer rejected, failed to enable media [ 1080.789752][T15932] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1081.052293][ T8146] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1081.059166][ T8146] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 1081.292838][ T8146] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 1081.760355][ T8146] cdc_ncm 9-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1081.794751][ T8146] usb 9-1: USB disconnect, device number 4 [ 1081.801595][ T8146] cdc_ncm 9-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1082.101620][T15998] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1082.686594][T16009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.819155][T16006] tipc: Enabling of bearer rejected, failed to enable media [ 1083.003318][T16013] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 1083.458993][ T8146] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1083.651424][ T8146] usb 6-1: Using ep0 maxpacket: 16 [ 1083.667837][ T8146] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1083.687291][ T8146] usb 6-1: config 0 has no interface number 0 [ 1083.706097][ T8146] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1083.732683][ T8146] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1083.754241][ T8146] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1083.774208][ T8146] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1083.794533][ T8146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.814320][ T8146] usb 6-1: Product: syz [ 1083.822534][ T8146] usb 6-1: Manufacturer: syz [ 1083.827382][ T8146] usb 6-1: SerialNumber: syz [ 1083.855004][ T8146] usb 6-1: config 0 descriptor?? [ 1083.861670][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1083.876928][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1084.131401][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1084.139255][T16024] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1084.357490][T16043] block nbd3: shutting down sockets [ 1084.581593][T16047] tipc: Enabling of bearer rejected, failed to enable media [ 1084.825740][ T8146] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1085.212981][T16049] IPVS: length: 71 != 8 [ 1085.364340][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2610'. [ 1085.427371][T16058] bridge0: port 1(bridge_slave_1) entered blocking state [ 1085.440049][T16058] bridge0: port 1(bridge_slave_1) entered disabled state [ 1085.453263][T16058] bridge_slave_1: entered allmulticast mode [ 1085.461133][T16058] bridge_slave_1: entered promiscuous mode [ 1085.682641][ T5874] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1085.843037][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 1085.859440][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1085.872707][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1085.882628][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.900377][ T5874] usb 3-1: Product: syz [ 1085.908394][ T5874] usb 3-1: Manufacturer: syz [ 1085.916678][ T5874] usb 3-1: SerialNumber: syz [ 1085.929846][ T5874] usb 3-1: config 0 descriptor?? [ 1085.944336][ T5874] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1085.954860][ T5874] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1086.313496][ T8146] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1086.324419][ T8146] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1086.334246][ T8146] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1086.416431][ T8146] usb 6-1: USB disconnect, device number 37 [ 1086.595407][ T5874] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1087.266209][T16089] tipc: Enabling of bearer rejected, failed to enable media [ 1088.132350][ T5874] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1088.140646][ T5874] em28xx 3-1:0.0: board has no eeprom [ 1088.237482][ T5874] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1088.252942][ T5874] em28xx 3-1:0.0: dvb set to bulk mode. [ 1088.265076][ T5829] em28xx 3-1:0.0: Binding DVB extension [ 1088.289208][ T5874] usb 3-1: USB disconnect, device number 37 [ 1088.320845][ T5874] em28xx 3-1:0.0: Disconnecting em28xx [ 1088.444279][ T5829] em28xx 3-1:0.0: Registering input extension [ 1088.485811][ T5874] em28xx 3-1:0.0: Closing input extension [ 1088.503936][ T5874] em28xx 3-1:0.0: Freeing device [ 1088.716135][T16105] kvm: emulating exchange as write [ 1090.745922][ T8146] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1090.814406][ T8146] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1091.201237][T16135] input: syz0 as /devices/virtual/input/input43 [ 1093.034928][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1094.535535][T16190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 1094.563729][T16178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.594034][T16178] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1094.630020][T16178] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1096.061675][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1096.068307][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1096.372542][T16225] bridge_slave_0: left allmulticast mode [ 1096.380595][T16225] bridge_slave_0: left promiscuous mode [ 1096.389846][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.492398][T16225] bridge_slave_1: left allmulticast mode [ 1096.517096][T16225] bridge_slave_1: left promiscuous mode [ 1096.534771][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.572967][T16225] bond0: (slave bond_slave_0): Releasing backup interface [ 1096.617562][T16225] bond0: (slave bond_slave_1): Releasing backup interface [ 1096.703517][T16225] team0: Port device team_slave_0 removed [ 1096.779061][ T5836] Bluetooth: hci0: command 0x0405 tx timeout [ 1097.514079][T16225] team0: Port device team_slave_1 removed [ 1097.577405][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.596011][T16225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.612768][ T8146] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1097.625405][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.632970][T16225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.783881][ T8146] usb 4-1: Using ep0 maxpacket: 16 [ 1097.796384][ T8146] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1097.819359][ T8146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1097.875151][ T8146] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1097.893347][ T8146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.013781][ T119] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1098.185977][ T119] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.202239][ T119] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1098.299611][ T119] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1098.448968][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1098.633932][ T8146] usb 4-1: Product: syz [ 1098.638184][ T8146] usb 4-1: Manufacturer: syz [ 1098.642919][ T8146] usb 4-1: SerialNumber: syz [ 1098.650447][ T8146] usb 4-1: config 0 descriptor?? [ 1098.657461][ T119] usb 6-1: SerialNumber: syz [ 1098.765350][ T8146] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1098.774766][ T8146] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1098.923712][ T119] usb 6-1: 0:2 : does not exist [ 1099.043094][ T5836] Bluetooth: hci0: command 0x0405 tx timeout [ 1099.054146][ T119] usb 6-1: USB disconnect, device number 38 [ 1101.350955][ T8146] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1101.357907][ T8146] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1101.365395][ T8146] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1101.372479][ T8146] em28xx 4-1:0.0: No AC97 audio processor [ 1101.417426][ T5836] Bluetooth: hci0: command 0x0405 tx timeout [ 1101.846439][T16263] tipc: Enabling of bearer rejected, failed to enable media [ 1102.399910][ T8146] usb 4-1: USB disconnect, device number 32 [ 1102.422029][ T8146] em28xx 4-1:0.0: Disconnecting em28xx [ 1102.457574][ T8146] em28xx 4-1:0.0: Freeing device [ 1102.563031][T10416] udevd[10416]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.109729][ T8146] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1104.732087][T16286] tipc: Enabling of bearer rejected, failed to enable media [ 1105.476100][ T8146] usb 4-1: Using ep0 maxpacket: 32 [ 1105.667856][ T8146] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 1106.689851][ T8146] usb 4-1: config 0 has no interface number 0 [ 1107.786930][ T8146] usb 4-1: string descriptor 0 read error: -71 [ 1107.793385][ T8146] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1108.519910][ T8146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.530918][ T8146] usb 4-1: config 0 descriptor?? [ 1108.548959][ T8146] usb 4-1: can't set config #0, error -71 [ 1108.560059][ T8146] usb 4-1: USB disconnect, device number 33 [ 1109.300756][T16325] tipc: Enabling of bearer rejected, failed to enable media [ 1110.223147][T16337] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1110.937848][ T8146] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1111.274917][ T8146] usb 8-1: Using ep0 maxpacket: 16 [ 1111.287658][ T8146] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.333900][ T8146] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.619476][ T8146] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.000868][ T8146] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1112.026995][ T8146] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.081982][ T8146] usb 8-1: config 0 descriptor?? [ 1113.051635][T16380] tipc: Enabling of bearer rejected, failed to enable media [ 1113.456471][ T8146] uclogic 0003:5543:0064.0026: ignoring exceeding usage max [ 1113.525003][ T8146] uclogic 0003:5543:0064.0026: No inputs registered, leaving [ 1113.643955][ T8146] uclogic 0003:5543:0064.0026: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.7-1/input0 [ 1113.761681][ T8146] usb 8-1: USB disconnect, device number 36 [ 1114.215822][T16391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1114.980927][T16406] tipc: Enabled bearer , priority 0 [ 1115.141609][T16406] syzkaller0: entered promiscuous mode [ 1115.152173][T16406] syzkaller0: entered allmulticast mode [ 1115.161368][T16406] tipc: Resetting bearer [ 1115.187723][ T119] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1115.262041][T16413] overlayfs: upper fs does not support tmpfile. [ 1115.294206][T16404] tipc: Resetting bearer [ 1116.045025][T11991] tipc: Node number set to 757989376 [ 1116.087203][ T119] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1116.098399][ T119] usb 8-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 1116.117671][ T119] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.129112][ T119] usb 8-1: config 0 descriptor?? [ 1116.137723][ T119] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1116.289654][T16425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1116.662492][ T8146] usb 8-1: USB disconnect, device number 37 [ 1117.229501][ T119] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1117.604521][ T119] usb 6-1: Using ep0 maxpacket: 16 [ 1117.612203][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.616933][ T8146] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1117.623860][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.641811][ T119] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1117.651013][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.669349][ T119] usb 6-1: config 0 descriptor?? [ 1118.421533][ T8146] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.435769][ T8146] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1118.454773][ T119] hid-alps 0003:044E:120C.0027: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 1118.494000][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.502723][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.513977][ T119] usb 6-1: USB disconnect, device number 39 [ 1118.518818][ T8146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.566916][ T8146] usb 9-1: config 0 descriptor?? [ 1118.601949][ T8146] pwc: Askey VC010 type 2 USB webcam detected. [ 1119.012048][ T8146] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1119.062591][ T8146] pwc: recv_control_msg error -32 req 02 val 2700 [ 1119.088199][ T8146] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1119.096635][ T8146] pwc: recv_control_msg error -32 req 04 val 1000 [ 1119.119020][ T8146] pwc: recv_control_msg error -32 req 04 val 1300 [ 1119.358482][ T8146] pwc: recv_control_msg error -71 req 02 val 2000 [ 1119.384423][ T8146] pwc: recv_control_msg error -71 req 02 val 2100 [ 1119.399885][ T8146] pwc: recv_control_msg error -71 req 04 val 1500 [ 1119.421286][ T8146] pwc: recv_control_msg error -71 req 02 val 2500 [ 1119.456595][ T8146] pwc: recv_control_msg error -71 req 02 val 2400 [ 1119.475112][ T8146] pwc: recv_control_msg error -71 req 02 val 2600 [ 1119.513176][ T8146] pwc: recv_control_msg error -71 req 02 val 2900 [ 1119.521083][ T8146] pwc: recv_control_msg error -71 req 02 val 2800 [ 1119.528827][ T8146] pwc: recv_control_msg error -71 req 04 val 1100 [ 1119.549301][ T8146] pwc: recv_control_msg error -71 req 04 val 1200 [ 1119.578974][ T8146] pwc: Registered as video103. [ 1119.586089][ T8146] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 1119.638726][ T8146] usb 9-1: USB disconnect, device number 5 [ 1120.771654][T16450] delete_channel: no stack [ 1120.892785][ T8146] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1121.044647][T16463] program syz.5.2732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1121.078872][ T8146] usb 9-1: Using ep0 maxpacket: 32 [ 1121.087554][ T8146] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1121.452124][ T8146] usb 9-1: config 0 has no interface number 0 [ 1121.465913][ T8146] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1121.475164][ T8146] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1121.495596][ T8146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.503664][ T8146] usb 9-1: Product: syz [ 1121.508741][ T8146] usb 9-1: Manufacturer: syz [ 1121.513400][ T8146] usb 9-1: SerialNumber: syz [ 1121.542079][ T8146] usb 9-1: config 0 descriptor?? [ 1121.650842][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 1121.650865][ T29] audit: type=1326 audit(1735356932.336:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16464 comm="syz.5.2733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76f4f85d29 code=0x0 [ 1122.506893][T16404] tipc: Disabling bearer [ 1122.632441][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2728'. [ 1124.288004][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.295944][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.303522][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.312329][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.322034][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.330303][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.341743][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.349953][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.357707][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.365855][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.374101][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.408878][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.442215][ T8146] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1124.450842][ T8146] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1124.465924][ T8146] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1124.474225][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.487879][ T8146] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1124.530853][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.544213][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.557677][ T8146] usb 9-1: USB disconnect, device number 6 [ 1124.564487][T11991] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1124.573310][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.590701][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.599460][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.607976][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.615697][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.623879][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.632817][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.645417][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.675944][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.710510][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.719791][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.729100][T11991] usb 6-1: config 0 has no interfaces? [ 1124.737898][T11991] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1124.748339][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.756011][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.764247][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.772726][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.782095][T11991] usb 6-1: config 0 descriptor?? [ 1124.787331][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.796279][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.803792][ T5917] hid-generic 0000:0000:0003.0028: unknown main item tag 0x0 [ 1124.814501][ T5917] hid-generic 0000:0000:0003.0028: hidraw0: HID v0.09 Device [syz0] on syz0 [ 1126.109694][T16515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1126.327821][T16518] tipc: Enabling of bearer rejected, failed to enable media [ 1126.793559][ T5829] usb 6-1: USB disconnect, device number 40 [ 1126.840078][ T8146] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1126.890905][T16524] netfs: Couldn't get user pages (rc=-14) [ 1127.054201][ T8146] usb 4-1: Using ep0 maxpacket: 32 [ 1127.073972][ T8146] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1127.082570][ T8146] usb 4-1: config 0 has no interface number 0 [ 1127.096638][ T8146] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1127.105703][ T8146] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1127.125847][ T8146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.142547][ T8146] usb 4-1: Product: syz [ 1127.143592][T16534] kvm: pic: level sensitive irq not supported [ 1127.146784][ T8146] usb 4-1: Manufacturer: syz [ 1127.146809][ T8146] usb 4-1: SerialNumber: syz [ 1127.154015][ T8146] usb 4-1: config 0 descriptor?? [ 1127.161079][T16534] kvm: pic: non byte read [ 1127.170957][ T8146] smsc75xx v1.0.0 [ 1127.173329][T16534] kvm: pic: level sensitive irq not supported [ 1127.176253][T16534] kvm: pic: non byte read [ 1127.188079][T16534] kvm: pic: level sensitive irq not supported [ 1127.188154][T16534] kvm: pic: non byte read [ 1127.204046][ T5874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1127.342416][T11022] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1127.385324][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 1127.421406][ T5874] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1127.437099][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.449485][ T5874] usb 3-1: Product: syz [ 1127.453713][ T5874] usb 3-1: Manufacturer: syz [ 1127.458331][ T5874] usb 3-1: SerialNumber: syz [ 1127.466983][ T5874] usb 3-1: config 0 descriptor?? [ 1127.534882][T11022] usb 9-1: Using ep0 maxpacket: 32 [ 1127.547673][T11022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.559068][T11022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.570215][T11022] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1127.583802][T11022] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1127.593607][T11022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.606778][T11022] usb 9-1: config 0 descriptor?? [ 1127.724484][ T5874] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1127.829383][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1127.844030][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1128.125813][T11022] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0029/input/input45 [ 1128.164846][T11022] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0029/input/input46 [ 1128.212314][T11022] kye 0003:0458:5011.0029: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 1129.317745][ C1] kye 0003:0458:5011.0029: usb_submit_urb(ctrl) failed: -1 [ 1129.394700][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 1129.414694][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 1129.456767][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1129.467509][ T8146] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1129.485529][ T8146] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1129.518865][ T8146] usb 4-1: USB disconnect, device number 34 [ 1129.667714][ T5874] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1129.709619][ T5874] usb 3-1: USB disconnect, device number 38 [ 1130.211439][T16573] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1130.238259][T16573] syzkaller0: entered promiscuous mode [ 1130.256805][ T5829] usb 9-1: USB disconnect, device number 7 [ 1130.295041][T16573] syzkaller0: entered allmulticast mode [ 1130.741947][ T8146] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1130.912982][ T8146] usb 3-1: Using ep0 maxpacket: 32 [ 1130.920014][ T8146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.931265][ T8146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.941200][ T8146] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1130.951359][ T8146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.962374][ T8146] usb 3-1: config 0 descriptor?? [ 1130.969779][ T8146] hub 3-1:0.0: USB hub found [ 1131.205328][ T8146] hub 3-1:0.0: 1 port detected [ 1131.619054][T16599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1132.068647][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1132.299387][ T29] audit: type=1800 audit(1735356942.298:415): pid=16605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2778" name="bus" dev="overlay" ino=2270 res=0 errno=0 [ 1132.359160][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1132.419189][T16597] erspan0: left allmulticast mode [ 1132.441670][T16597] erspan0: left promiscuous mode [ 1132.446901][T16597] bridge0: port 3(erspan0) entered disabled state [ 1132.473672][T11991] hub 3-1:0.0: activate --> -90 [ 1132.507298][T16597] bridge_slave_1: left allmulticast mode [ 1132.520932][T16597] bridge_slave_1: left promiscuous mode [ 1132.532623][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.551724][T16597] bridge_slave_0: left allmulticast mode [ 1132.564570][T16597] bridge_slave_0: left promiscuous mode [ 1132.574722][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.844993][ T5917] usb 3-1: USB disconnect, device number 39 [ 1133.094255][T11991] usb 3-1-port1: config error [ 1136.653805][ T5917] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1136.857825][ T5917] usb 9-1: Using ep0 maxpacket: 8 [ 1136.987251][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1137.020973][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1137.055795][ T5917] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1137.086878][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1137.101002][ T5917] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1137.117223][ T5917] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1137.141091][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.155081][ T5917] usb 9-1: config 0 descriptor?? [ 1137.172390][T16683] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1137.958864][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1138.347090][ T5829] usb 9-1: USB disconnect, device number 8 [ 1138.401611][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 1139.487675][T16729] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1139.837279][T16731] netlink: 'syz.2.2818': attribute type 10 has an invalid length. [ 1140.181731][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1140.190688][T16726] bridge_slave_1: left allmulticast mode [ 1140.247097][T16726] bridge_slave_1: left promiscuous mode [ 1140.274970][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.417393][T16726] bridge_slave_0: left allmulticast mode [ 1140.437196][T16726] bridge_slave_0: left promiscuous mode [ 1140.565473][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.748413][ T5917] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1140.919372][ T5917] usb 8-1: Using ep0 maxpacket: 16 [ 1140.942329][ T5917] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 1140.950869][ T5917] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1141.014249][ T5917] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1141.053524][ T5917] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1141.085065][ T5917] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1141.128884][ T5917] usb 8-1: config 0 has no interface number 0 [ 1141.157130][ T5917] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1141.207646][ T5917] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1141.234928][ T5917] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.275256][ T5917] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1141.372611][T16758] sctp: [Deprecated]: syz.2.2828 (pid 16758) Use of int in max_burst socket option. [ 1141.372611][T16758] Use struct sctp_assoc_value instead [ 1141.399082][ T5917] usb 8-1: config 0 interface 125 has no altsetting 0 [ 1141.474029][ T5917] usb 8-1: config 0 interface 125 has no altsetting 2 [ 1141.588016][ T5917] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1141.643225][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.694038][ T5917] usb 8-1: Product: syz [ 1141.719363][ T5917] usb 8-1: Manufacturer: syz [ 1141.810877][ T5917] usb 8-1: SerialNumber: syz [ 1141.897750][ T5917] usb 8-1: config 0 descriptor?? [ 1141.911132][ T5917] usb 8-1: selecting invalid altsetting 2 [ 1143.096595][ T5917] get_1284_register timeout [ 1143.143212][ C1] usb 8-1: async_complete: urb error -104 [ 1143.150170][ T5917] uss720 8-1:0.125: probe with driver uss720 failed with error -5 [ 1145.398369][T16817] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2845'. [ 1145.459753][ T5917] usb 8-1: USB disconnect, device number 38 [ 1147.314816][T16839] fuse: Bad value for 'fd' [ 1147.964401][T11991] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1148.012208][T16862] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2860'. [ 1148.137134][T11991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.163222][T11991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.188380][T11991] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1148.212257][T11991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.245760][T11991] usb 9-1: config 0 descriptor?? [ 1148.284014][ T29] audit: type=1804 audit(1735356957.255:416): pid=16868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2863" name="/newroot/496/bus/bus" dev="overlay" ino=2577 res=1 errno=0 [ 1148.312613][T16868] Invalid ELF header magic: != ELF [ 1149.622717][T11991] usb 9-1: string descriptor 0 read error: -71 [ 1149.671212][T11991] usb 9-1: Max retries (5) exceeded reading string descriptor 200 [ 1149.679288][T11991] letsketch 0003:6161:4D15.002A: probe with driver letsketch failed with error -32 [ 1149.713567][T11991] usb 9-1: USB disconnect, device number 9 [ 1150.465442][ T46] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1150.629304][ T46] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.697920][ T46] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.794351][ T46] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1150.896479][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1151.044442][ T46] usb 8-1: SerialNumber: syz [ 1151.337299][ T46] usb 8-1: 0:2 : does not exist [ 1151.383907][ T46] usb 8-1: USB disconnect, device number 39 [ 1152.134067][ T9955] udevd[9955]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.586274][ T5874] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1155.781341][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1155.796578][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.817703][ T5874] usb 4-1: config 0 descriptor?? [ 1155.834244][ T5874] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1157.377601][T16926] tipc: Enabling of bearer rejected, failed to enable media [ 1157.929812][ T5874] gspca_stv06xx: I2C: Read error writing address: -71 [ 1157.935955][ T5874] usb 4-1: USB disconnect, device number 35 [ 1158.267329][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 1158.680386][T16966] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 1158.905431][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2890'. [ 1158.970696][T16970] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2890'. [ 1158.985767][ T46] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1159.167469][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 1159.311967][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.436293][T16982] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1159.644818][T16985] orangefs_devreq_open: device cannot be opened in blocking mode [ 1159.974003][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.983918][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1160.040728][ T46] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1160.049958][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.070049][ T46] usb 6-1: config 0 descriptor?? [ 1160.146977][T16991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1160.561761][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002B/input/input47 [ 1160.631961][ T5874] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1160.643827][ T46] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002B/input/input48 [ 1160.674935][ T46] kye 0003:0458:5011.002B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 1160.687466][T11991] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1160.738434][T16996] »»»»»» speed is unknown, defaulting to 1000 [ 1160.832413][ T5874] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1160.869426][T11991] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.881647][T11991] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1160.887297][ T5874] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1160.897275][T11991] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.915122][T11991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.948444][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.960151][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1160.979372][ T5874] usb 3-1: SerialNumber: syz [ 1160.997232][T17002] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1161.009818][T11991] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.026622][T17000] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1161.082742][T17006] uprobe: syz.7.2904:17006 failed to unregister, leaking uprobe [ 1161.215910][ T9938] udevd[9938]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1161.283648][T11022] usb 9-1: USB disconnect, device number 10 [ 1161.294953][ T5874] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1161.383241][ T5874] usb 3-1: USB disconnect, device number 40 [ 1161.456774][T16996] »»»»»» speed is unknown, defaulting to 1000 [ 1161.512342][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1161.518916][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1161.693618][ C1] kye 0003:0458:5011.002B: usb_submit_urb(ctrl) failed: -1 [ 1162.603579][ T5874] usb 6-1: USB disconnect, device number 41 [ 1163.815771][ T29] audit: type=1800 audit(1735356971.783:417): pid=17032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2910" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1167.314105][T17071] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1168.796081][T17011] syz.7.2905 (17011): drop_caches: 1 [ 1168.996230][T17096] syzkaller0: entered promiscuous mode [ 1169.001792][T17096] syzkaller0: entered allmulticast mode [ 1171.461254][T17126] overlayfs: statfs failed on './file0' [ 1171.686045][ T5874] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1171.876180][ T5874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.722950][ T5874] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1172.732083][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.887676][ T5874] usb 9-1: config 0 descriptor?? [ 1174.061738][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1174.074062][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1174.089474][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 1174.313025][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 1174.328816][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 1174.390845][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 1174.391309][ T46] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1174.424801][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 1174.432161][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 1174.455341][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 1174.660958][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1175.463976][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 1175.470888][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 1175.477831][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 1175.484797][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 1175.491823][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 1175.498645][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1176.235733][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.245770][ T46] usb 3-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 1176.255121][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.531688][ T5874] pwc: Registered as video103. [ 1176.538502][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input49 [ 1176.559889][ T46] usb 3-1: config 0 descriptor?? [ 1176.778664][ T5874] usb 9-1: USB disconnect, device number 11 [ 1177.509902][ T46] aquacomputer_d5next 0003:0C70:F012.002C: unknown main item tag 0x0 [ 1178.013575][ T46] aquacomputer_d5next 0003:0C70:F012.002C: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.2-1/input0 [ 1178.156187][ T46] usb 3-1: USB disconnect, device number 41 [ 1178.792877][T17204] tipc: Enabling of bearer rejected, failed to enable media [ 1183.498351][ T5917] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1183.658876][ T5917] usb 8-1: Using ep0 maxpacket: 8 [ 1183.686044][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.700987][ T5917] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1183.715199][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.751287][ T5917] usb 8-1: config 0 descriptor?? [ 1184.371723][T17251] tipc: Enabling of bearer rejected, failed to enable media [ 1184.858043][ T5917] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1185.166654][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1186.330431][ T5917] usb 8-1: USB disconnect, device number 40 [ 1188.822221][ T5829] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1189.080323][T17302] tipc: Enabling of bearer rejected, failed to enable media [ 1189.741563][ T5829] usb 9-1: Using ep0 maxpacket: 32 [ 1189.754674][ T5829] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1189.795538][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1189.815649][ T5829] usb 9-1: config 0 has no interface number 0 [ 1190.183998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f80cc00: rx timeout, send abort [ 1190.218900][ T5829] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1190.237917][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.350255][ T5829] usb 9-1: Product: syz [ 1190.394054][ T5829] usb 9-1: Manufacturer: syz [ 1190.404190][ T5829] usb 9-1: SerialNumber: syz [ 1190.729084][ T5829] usb 9-1: config 0 descriptor?? [ 1190.913704][ T5829] smsc95xx v2.0.0 [ 1191.428209][ T5829] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1191.439658][ T5829] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1193.005159][T17336] tipc: Enabling of bearer rejected, failed to enable media [ 1194.954555][T17351] tipc: Enabling of bearer rejected, failed to enable media [ 1195.609508][ T5829] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1195.633047][ T5829] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1195.679435][ T5829] usb 9-1: USB disconnect, device number 12 [ 1199.029587][ T5829] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1199.880315][T17387] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1200.848677][ T5829] usb 9-1: Using ep0 maxpacket: 32 [ 1200.855161][ T5829] usb 9-1: device descriptor read/all, error -71 [ 1201.099908][ T5879] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1201.535118][ T5879] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1201.551417][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.553734][T11022] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1201.563286][ T5879] usb 8-1: config 0 descriptor?? [ 1201.600300][ T5879] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1201.768153][T11022] usb 3-1: Using ep0 maxpacket: 16 [ 1201.775986][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.797303][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.807800][T11022] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1201.827401][T11022] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1201.839359][T11022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.850835][T11022] usb 3-1: config 0 descriptor?? [ 1202.305020][T11022] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 1202.351265][T11022] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 1202.594861][T11022] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 1202.608340][T11022] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002D/input/input50 [ 1202.989898][T17419] tipc: Enabling of bearer rejected, failed to enable media [ 1203.531397][T11022] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1203.697348][ T5879] usb 8-1: USB disconnect, device number 41 [ 1204.045278][T11022] usb 3-1: USB disconnect, device number 42 [ 1206.776207][T17460] tipc: Enabling of bearer rejected, failed to enable media [ 1207.716465][ T119] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1207.925607][ T119] usb 6-1: Using ep0 maxpacket: 16 [ 1208.112037][ T119] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.157174][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.053216][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1209.063268][ T119] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1209.073296][ T119] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.105213][ T119] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1209.114464][ T119] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1209.125344][ T119] usb 6-1: Manufacturer: syz [ 1209.138766][ T119] usb 6-1: config 0 descriptor?? [ 1209.594425][T17488] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1210.277453][ T119] rc_core: IR keymap rc-hauppauge not found [ 1210.283435][ T119] Registered IR keymap rc-empty [ 1210.307040][T17498] pim6reg: entered allmulticast mode [ 1210.348185][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1210.363525][T17500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.416859][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1210.467748][ T119] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1210.885180][ T119] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 1210.952726][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1210.972274][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.004614][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.076102][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.228900][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.281731][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.314788][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.357557][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.411520][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.474725][ T119] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1211.526869][T17514] dvmrp0: entered allmulticast mode [ 1211.544348][ T119] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1211.580490][ T119] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1211.587199][T17514] pimreg: entered allmulticast mode [ 1211.629611][ T119] usb 6-1: USB disconnect, device number 42 [ 1211.636698][T17514] batadv_slave_1: entered promiscuous mode [ 1211.952506][ T5879] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1212.133824][ T5879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.154636][ T5879] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1212.863157][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.929717][ T5879] usb 8-1: config 0 descriptor?? [ 1212.968141][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 1213.386190][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1213.397986][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 1213.399017][ T119] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1213.427398][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1213.437932][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 1213.459977][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 1213.473764][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 1213.481474][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 1213.494573][ T5879] pwc: recv_control_msg error -32 req 02 val 2100 [ 1213.503290][ T5879] pwc: recv_control_msg error -32 req 04 val 1500 [ 1213.594440][ T119] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1213.604356][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.624723][ T119] usb 4-1: config 0 descriptor?? [ 1213.641846][ T119] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1213.731474][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1213.740627][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1213.754987][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1213.771679][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1213.808949][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1213.817157][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1213.834736][ T5879] pwc: Registered as video103. [ 1213.849982][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input52 [ 1214.339721][ T119] gp8psk: usb in 128 operation failed. [ 1214.354530][ T119] gp8psk: usb in 137 operation failed. [ 1214.379233][ T119] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1214.379441][ T5879] usb 8-1: USB disconnect, device number 42 [ 1214.397197][ T119] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1214.456618][ T119] usb 4-1: media controller created [ 1214.585207][ T119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1214.649946][ T119] gp8psk_fe: Frontend attached [ 1214.655801][ T119] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1215.515581][T17544] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1215.579794][ T119] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1215.621402][ T119] gp8psk: usb in 138 operation failed. [ 1215.642047][ T119] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1215.700881][ T119] gp8psk: found Genpix USB device pID = 203 (hex) [ 1215.747433][ T119] usb 4-1: USB disconnect, device number 36 [ 1216.119895][T17553] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1216.962340][ T119] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1217.570007][T17562] tipc: Enabling of bearer rejected, failed to enable media [ 1218.498268][ T5879] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1219.023195][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 1219.038492][ T5879] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1219.052637][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.085526][ T5879] usb 6-1: config 0 descriptor?? [ 1219.111275][ T5879] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1219.686539][ T5879] gspca_vc032x: reg_r err -110 [ 1219.727635][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.751039][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.780808][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.813101][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.818483][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.870923][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.876295][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.906908][T17584] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1219.921469][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.927428][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.941467][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.946856][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.973055][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.979114][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1219.990774][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1220.002660][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1220.013591][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1220.026882][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1220.032400][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 1220.064891][ T5879] gspca_vc032x: Unknown sensor... [ 1220.075176][ T5879] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1220.961919][T17606] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1221.976769][T17619] tipc: Enabling of bearer rejected, failed to enable media [ 1222.041418][ T119] usb 6-1: USB disconnect, device number 43 [ 1222.786202][T17624] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1223.486148][T17640] [ 1223.488541][T17640] ====================================================== [ 1223.495668][T17640] WARNING: possible circular locking dependency detected [ 1223.502695][T17640] 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 Not tainted [ 1223.509807][T17640] ------------------------------------------------------ [ 1223.516824][T17640] syz.2.3079/17640 is trying to acquire lock: [ 1223.522904][T17640] ffff8880258405d8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1223.533130][T17640] [ 1223.533130][T17640] but task is already holding lock: [ 1223.540510][T17640] ffff8880258400a8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1223.550818][T17640] [ 1223.550818][T17640] which lock already depends on the new lock. [ 1223.550818][T17640] [ 1223.561259][T17640] [ 1223.561259][T17640] the existing dependency chain (in reverse order) is: [ 1223.570279][T17640] [ 1223.570279][T17640] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1223.578908][T17640] lock_acquire+0x1ed/0x550 [ 1223.583947][T17640] blk_mq_submit_bio+0x1536/0x2390 [ 1223.589586][T17640] __submit_bio+0x2c6/0x560 [ 1223.594618][T17640] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1223.600777][T17640] block_read_full_folio+0x9b3/0xae0 [ 1223.606610][T17640] filemap_read_folio+0x148/0x3b0 [ 1223.612179][T17640] filemap_get_pages+0x18ca/0x2080 [ 1223.617835][T17640] filemap_read+0x452/0xf50 [ 1223.622884][T17640] blkdev_read_iter+0x2d8/0x430 [ 1223.628275][T17640] vfs_read+0x991/0xb70 [ 1223.632965][T17640] ksys_read+0x18f/0x2b0 [ 1223.637737][T17640] do_syscall_64+0xf3/0x230 [ 1223.642775][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.649205][T17640] [ 1223.649205][T17640] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1223.657744][T17640] lock_acquire+0x1ed/0x550 [ 1223.662777][T17640] down_read+0xb1/0xa40 [ 1223.667555][T17640] filemap_fault+0x615/0x1490 [ 1223.672763][T17640] __do_fault+0x135/0x390 [ 1223.677623][T17640] handle_pte_fault+0x39eb/0x5ed0 [ 1223.683203][T17640] handle_mm_fault+0x1053/0x1ad0 [ 1223.688667][T17640] __get_user_pages+0x1c82/0x49e0 [ 1223.694218][T17640] populate_vma_page_range+0x264/0x330 [ 1223.700203][T17640] __mm_populate+0x27a/0x460 [ 1223.705320][T17640] vm_mmap_pgoff+0x2c3/0x3d0 [ 1223.710444][T17640] ksys_mmap_pgoff+0x4eb/0x720 [ 1223.715735][T17640] do_syscall_64+0xf3/0x230 [ 1223.720855][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.727284][T17640] [ 1223.727284][T17640] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1223.734857][T17640] lock_acquire+0x1ed/0x550 [ 1223.739888][T17640] __might_fault+0xc6/0x120 [ 1223.744920][T17640] _copy_from_user+0x2a/0xc0 [ 1223.750046][T17640] blk_trace_ioctl+0x1ad/0x9a0 [ 1223.755335][T17640] blkdev_ioctl+0x40c/0x6a0 [ 1223.760362][T17640] __se_sys_ioctl+0xf5/0x170 [ 1223.765479][T17640] do_syscall_64+0xf3/0x230 [ 1223.770514][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.776945][T17640] [ 1223.776945][T17640] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1223.784777][T17640] lock_acquire+0x1ed/0x550 [ 1223.789805][T17640] __mutex_lock+0x1ac/0xee0 [ 1223.794840][T17640] blk_register_queue+0x15a/0x400 [ 1223.800395][T17640] add_disk_fwnode+0x648/0xf80 [ 1223.805707][T17640] brd_alloc+0x547/0x790 [ 1223.810502][T17640] brd_init+0x126/0x1b0 [ 1223.815210][T17640] do_one_initcall+0x248/0x870 [ 1223.820514][T17640] do_initcall_level+0x157/0x210 [ 1223.825982][T17640] do_initcalls+0x3f/0x80 [ 1223.830840][T17640] kernel_init_freeable+0x435/0x5d0 [ 1223.836572][T17640] kernel_init+0x1d/0x2b0 [ 1223.841424][T17640] ret_from_fork+0x4b/0x80 [ 1223.846362][T17640] ret_from_fork_asm+0x1a/0x30 [ 1223.851660][T17640] [ 1223.851660][T17640] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1223.859236][T17640] validate_chain+0x18ef/0x5920 [ 1223.864625][T17640] __lock_acquire+0x1397/0x2100 [ 1223.870011][T17640] lock_acquire+0x1ed/0x550 [ 1223.875044][T17640] __mutex_lock+0x1ac/0xee0 [ 1223.880080][T17640] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1223.886415][T17640] nbd_start_device+0x16c/0xaa0 [ 1223.891796][T17640] nbd_ioctl+0x5dc/0xf40 [ 1223.896570][T17640] blkdev_ioctl+0x57d/0x6a0 [ 1223.901603][T17640] __se_sys_ioctl+0xf5/0x170 [ 1223.906721][T17640] do_syscall_64+0xf3/0x230 [ 1223.911758][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.918186][T17640] [ 1223.918186][T17640] other info that might help us debug this: [ 1223.918186][T17640] [ 1223.928410][T17640] Chain exists of: [ 1223.928410][T17640] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51 [ 1223.928410][T17640] [ 1223.943219][T17640] Possible unsafe locking scenario: [ 1223.943219][T17640] [ 1223.950665][T17640] CPU0 CPU1 [ 1223.956030][T17640] ---- ---- [ 1223.961391][T17640] lock(&q->q_usage_counter(io)#51); [ 1223.966777][T17640] lock(mapping.invalidate_lock#2); [ 1223.974598][T17640] lock(&q->q_usage_counter(io)#51); [ 1223.982504][T17640] lock(&q->sysfs_lock); [ 1223.986838][T17640] [ 1223.986838][T17640] *** DEADLOCK *** [ 1223.986838][T17640] [ 1223.995001][T17640] 4 locks held by syz.2.3079/17640: [ 1224.000203][T17640] #0: ffff8880257aa198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 1224.009540][T17640] #1: ffff8880257aa0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0 [ 1224.020525][T17640] #2: ffff8880258400a8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1224.031261][T17640] #3: ffff8880258400e0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1224.042257][T17640] [ 1224.042257][T17640] stack backtrace: [ 1224.048146][T17640] CPU: 1 UID: 0 PID: 17640 Comm: syz.2.3079 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 1224.058913][T17640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1224.068971][T17640] Call Trace: [ 1224.072252][T17640] [ 1224.075186][T17640] dump_stack_lvl+0x241/0x360 [ 1224.079891][T17640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.085099][T17640] ? __pfx__printk+0x10/0x10 [ 1224.089702][T17640] print_circular_bug+0x13a/0x1b0 [ 1224.094740][T17640] check_noncircular+0x36a/0x4a0 [ 1224.099689][T17640] ? __pfx_check_noncircular+0x10/0x10 [ 1224.105169][T17640] validate_chain+0x18ef/0x5920 [ 1224.110042][T17640] ? __pfx_validate_chain+0x10/0x10 [ 1224.115263][T17640] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1224.121249][T17640] ? mark_lock+0x9a/0x360 [ 1224.125586][T17640] __lock_acquire+0x1397/0x2100 [ 1224.130450][T17640] lock_acquire+0x1ed/0x550 [ 1224.134964][T17640] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1224.140958][T17640] ? __pfx_lock_acquire+0x10/0x10 [ 1224.145987][T17640] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 1224.151975][T17640] ? nbd_start_device+0x16c/0xaa0 [ 1224.157009][T17640] ? __pfx___might_resched+0x10/0x10 [ 1224.162308][T17640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.168394][T17640] __mutex_lock+0x1ac/0xee0 [ 1224.172913][T17640] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1224.178907][T17640] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1224.184900][T17640] ? __pfx___mutex_lock+0x10/0x10 [ 1224.189943][T17640] ? __kasan_kmalloc+0x98/0xb0 [ 1224.194720][T17640] ? __kmalloc_cache_noprof+0x243/0x390 [ 1224.200270][T17640] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 1224.206261][T17640] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1224.212078][T17640] ? __pfx___might_resched+0x10/0x10 [ 1224.217383][T17640] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1224.223632][T17640] ? rcu_is_watching+0x15/0xb0 [ 1224.228407][T17640] ? trace_contention_end+0x3c/0x120 [ 1224.233701][T17640] ? __mutex_lock+0x37f/0xee0 [ 1224.238393][T17640] ? tomoyo_path_number_perm+0x679/0x860 [ 1224.244033][T17640] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1224.249413][T17640] ? __lock_acquire+0x1397/0x2100 [ 1224.254447][T17640] ? nbd_ioctl+0x13c/0xf40 [ 1224.258875][T17640] ? __pfx___mutex_lock+0x10/0x10 [ 1224.263915][T17640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1224.269906][T17640] nbd_start_device+0x16c/0xaa0 [ 1224.274769][T17640] nbd_ioctl+0x5dc/0xf40 [ 1224.279022][T17640] ? __pfx_nbd_ioctl+0x10/0x10 [ 1224.283796][T17640] ? __asan_memset+0x23/0x50 [ 1224.288400][T17640] ? smack_file_ioctl+0x29e/0x3a0 [ 1224.293454][T17640] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1224.298866][T17640] ? file_to_blk_mode+0xcc/0x140 [ 1224.303814][T17640] ? __pfx_nbd_ioctl+0x10/0x10 [ 1224.308592][T17640] blkdev_ioctl+0x57d/0x6a0 [ 1224.313101][T17640] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1224.318133][T17640] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1224.323163][T17640] __se_sys_ioctl+0xf5/0x170 [ 1224.327764][T17640] do_syscall_64+0xf3/0x230 [ 1224.332282][T17640] ? clear_bhb_loop+0x35/0x90 [ 1224.336964][T17640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.342886][T17640] RIP: 0033:0x7f2ea1d85d29 [ 1224.347317][T17640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.366929][T17640] RSP: 002b:00007f2ea2c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.375373][T17640] RAX: ffffffffffffffda RBX: 00007f2ea1f75fa0 RCX: 00007f2ea1d85d29 [ 1224.383394][T17640] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1224.391377][T17640] RBP: 00007f2ea1e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1224.399359][T17640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.407337][T17640] R13: 0000000000000000 R14: 00007f2ea1f75fa0 R15: 00007ffe7202aa68 [ 1224.415322][T17640] [ 1224.550442][T17643] block nbd2: shutting down sockets [ 1227.192092][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1227.198686][ T1296] ieee802154 phy1 wpan1: encryption failed: -22