last executing test programs: 13m44.967788544s ago: executing program 4 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m44.104426532s ago: executing program 4 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x786d) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb66f328ac2f"}, 0x28) ioctl$KDSKBLED(r1, 0x4b65, 0x5) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x401, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf55}}, {{0xa, 0x4e21, 0xf, @local, 0xca3b}}}, 0x108) 13m43.635105343s ago: executing program 4 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000300)={0x314, 0x1, 'client0\x00', 0x1, "7e02000000350a00", "3b25d78e50d5db3dcf3ff819bbf0b9d075c6ae974227f2436640bd0c2f5720ee", 0x2, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc05c5340, &(0x7f0000000440)) tkill(r0, 0x7) 13m43.220280069s ago: executing program 4 (id=13): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m42.955022658s ago: executing program 4 (id=14): syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@udp6, 0x4}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13m42.842345358s ago: executing program 4 (id=16): r0 = epoll_create(0x1fffffe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x20002021}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000001c0)={0xc0000019}) epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0xfffc, 0x0, 0x0, 0x0) 13m27.091083333s ago: executing program 32 (id=16): r0 = epoll_create(0x1fffffe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x20002021}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000001c0)={0xc0000019}) epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0xfffc, 0x0, 0x0, 0x0) 12m52.334569867s ago: executing program 5 (id=182): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x58, r2, 0x605, 0x0, 0x3, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 12m51.295732665s ago: executing program 5 (id=185): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m50.886131899s ago: executing program 5 (id=188): close(0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x34}], 0x1}, 0x0) 12m50.47201165s ago: executing program 5 (id=193): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000500), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0284994350830d94"}}, 0x48}}, 0x40804) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 12m50.010817914s ago: executing program 5 (id=197): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'}) 12m48.932674928s ago: executing program 5 (id=201): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009400"/18], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r4, 0x4) close(r0) 12m33.530124064s ago: executing program 33 (id=201): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009400"/18], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r4, 0x4) close(r0) 12m20.669097717s ago: executing program 0 (id=300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x850, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="00000000005fb43c583a484f4e0000000000", @ANYRES32=0x0, @ANYRES32], 0x48) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m20.13477409s ago: executing program 0 (id=302): creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = open(&(0x7f00000016c0)='./file0\x00', 0x44142, 0x0) copy_file_range(r4, &(0x7f0000000180)=0x1ff, r4, 0x0, 0xfffffffffffffffa, 0x0) 12m19.603157736s ago: executing program 0 (id=305): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x6) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m19.037062845s ago: executing program 0 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12m18.386796145s ago: executing program 0 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x1000084}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000030801040000000000000000000000000c0004800800054000000000060002400000000005000300210000000ce5bc7521a028bfe70ffa7b75a4e6507ff2ec7b969f082b8b1919ae97021adb2fc207bc581e53f6d1617fb625f6f6e994a265fe86b92362b27880766acc09f73c74f73af8708bf1416f82345d24"], 0x30}}, 0x0) 12m18.039192486s ago: executing program 0 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12030, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) 12m17.772303874s ago: executing program 34 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12030, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) 7m21.704016938s ago: executing program 7 (id=1283): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv4_newrule={0x3c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x8000}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 7m20.418129057s ago: executing program 7 (id=1287): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 7m19.074007024s ago: executing program 7 (id=1293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) 7m17.831302352s ago: executing program 7 (id=1296): mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r1}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20c00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 7m17.541329738s ago: executing program 7 (id=1299): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0xc1800) read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0x2020) 7m17.11011354s ago: executing program 7 (id=1302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 7m16.809960025s ago: executing program 35 (id=1302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 22.333007966s ago: executing program 6 (id=2391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@random={'user.', 'cgroup.controllers\x00'}, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) rseq(&(0x7f0000000040), 0xfffffffffffffdb2, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) mmap$xdp(&(0x7f00009eb000/0x4000)=nil, 0x4000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 19.918594965s ago: executing program 8 (id=2396): socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18cb6cc3010000000000000000000000000000850000cbe8da62cc051207ed00"/55], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 19.917008413s ago: executing program 6 (id=2398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 18.941088467s ago: executing program 8 (id=2401): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x56a9da11, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201", @ANYBLOB="0bfbf6c0e8053f0616a09664c1749787015a251bf487738d697e060324824de75a"], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x30}}], 0x2, 0x0) 18.595397912s ago: executing program 6 (id=2404): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f3400f221c450f01c266b85c008ec8c4217a12550b66baf80cb8f24eff86ef66bafc0c66b8cf0466ef0f01c2420f211848b88000c0fe000000000f23d00f21f835100000060f23f80f005d00f3470fc7b6d5000000", 0x55}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.413926748s ago: executing program 8 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 12.613299392s ago: executing program 3 (id=2415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x3}) 12.513471734s ago: executing program 3 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000300)="bd151736d95b0c7a88f14fe5ceff47c6f9340e638de2117a6c88ecc56f1faec71e0dd0e89d2a7fbccb773393887e39fabadc566d0227ad5b0ca12668cd82197aee1f707ba3b6804a9fc452e08e706e29de7199f71ffe503908f4ca0b3f4ea2476db893e3d76cb98c6a070f2e522d6bfaa50fc3b27ea59636a5c3") write$binfmt_script(0xffffffffffffffff, &(0x7f0000004180), 0xff77) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) personality(0x500006) 12.408557528s ago: executing program 1 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0) 12.408346246s ago: executing program 6 (id=2418): add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000b, 0x42031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 9.842598665s ago: executing program 3 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x3008000, &(0x7f0000000b00)={[{@xattr}]}) 9.633271118s ago: executing program 1 (id=2420): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4b4a, 0x0) 8.541795778s ago: executing program 3 (id=2421): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) 8.242426746s ago: executing program 2 (id=2422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) close_range(r3, 0xffffffffffffffff, 0x0) 8.191833265s ago: executing program 8 (id=2423): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) 8.190781832s ago: executing program 1 (id=2424): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x7, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0x10, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.122886043s ago: executing program 6 (id=2425): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1418c2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f00000019c0)=0x8800000, 0x0, 0x0) 7.668496289s ago: executing program 2 (id=2426): r0 = socket$netlink(0x10, 0x3, 0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) read$msr(r1, &(0x7f0000019680)=""/102360, 0x18fd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x10) userfaultfd(0x801) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_dev$usbfs(0x0, 0x8, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) 6.505180986s ago: executing program 6 (id=2427): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.06483228s ago: executing program 8 (id=2428): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 4.865919056s ago: executing program 1 (id=2429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm], 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.802961886s ago: executing program 3 (id=2430): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) preadv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) 4.797357627s ago: executing program 2 (id=2431): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="020100020e000000000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000020013"], 0x70}, 0x1, 0x7}, 0x0) 4.625512207s ago: executing program 8 (id=2432): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0x1}}) listen(r0, 0x5) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x3) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.376558068s ago: executing program 2 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) socket(0x5, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001100)={0x0, 0x6, 0xee8}, &(0x7f0000001140)=0x8) 3.375313662s ago: executing program 1 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008094}, 0x80) 1.038008709s ago: executing program 1 (id=2435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x101, 0x6701e32d}}, 0x28) 1.037256882s ago: executing program 2 (id=2436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.036847668s ago: executing program 3 (id=2437): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, 0x0) fsync(r5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000180)) 0s ago: executing program 2 (id=2438): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x200008}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) kernel console output (not intermixed with test programs): 35][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.700355][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.756767][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.788157][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.844312][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.854789][ T5900] usbhid 7-1:0.0: can't add hid device: -71 [ 275.863279][ T5900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 275.898854][ T5900] usb 7-1: USB disconnect, device number 6 [ 275.931770][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.977202][ T5833] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.029666][ T5833] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.039236][ T5833] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.047020][ T5833] usb 2-1: USB disconnect, device number 10 [ 277.658203][ T8986] dccp_close: ABORT with 1 bytes unread [ 279.964455][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.013258][ T5833] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 283.226795][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 283.250145][ T5833] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 283.260891][ T5833] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.283995][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.306411][ T5833] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.317121][ T5833] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.337048][ T5833] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.353669][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.776885][ T5833] usb 7-1: usb_control_msg returned -32 [ 284.783166][ T5833] usbtmc 7-1:16.0: can't read capabilities [ 285.168072][ T9076] xt_TCPMSS: Only works on TCP SYN packets [ 286.813672][ T5906] usb 7-1: USB disconnect, device number 7 [ 288.581868][ T5833] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 288.697665][ T5906] IPVS: starting estimator thread 0... [ 288.739117][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 288.749267][ T5833] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 288.765128][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 288.775578][ T5833] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 288.788550][ T5833] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 288.797910][ T9120] IPVS: using max 26 ests per chain, 62400 per kthread [ 288.805747][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.818906][ T5833] usb 2-1: Product: syz [ 288.823112][ T5833] usb 2-1: Manufacturer: syz [ 288.828096][ T5833] usb 2-1: SerialNumber: syz [ 288.845000][ T5833] usb 2-1: config 0 descriptor?? [ 288.855736][ T5833] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 290.232976][ T9131] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QhI¸% [ 290.232976][ T9131] [ 292.337798][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 292.347293][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.809'. [ 293.980115][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.7.799'. [ 293.989309][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.7.799'. [ 294.031571][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 294.071797][ T5833] scsi host1: usb-storage 2-1:0.0 [ 294.102293][ T5833] usb 2-1: USB disconnect, device number 11 [ 294.755626][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 295.548155][ T29] audit: type=1326 audit(1733791701.894:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.570561][ T5833] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 295.622285][ T9190] binder: 9189:9190 ioctl c0306201 0 returned -14 [ 295.643430][ T29] audit: type=1326 audit(1733791701.934:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.672305][ T29] audit: type=1326 audit(1733791701.934:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.750654][ T29] audit: type=1326 audit(1733791701.934:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.773485][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 295.780826][ T29] audit: type=1326 audit(1733791701.934:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.805841][ T29] audit: type=1326 audit(1733791701.944:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 295.858801][ T5833] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 295.877006][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.898662][ T5833] usb 7-1: Product: syz [ 295.913209][ T5833] usb 7-1: Manufacturer: syz [ 295.925831][ T5833] usb 7-1: SerialNumber: syz [ 295.936465][ T5833] usb 7-1: config 0 descriptor?? [ 295.943499][ T29] audit: type=1326 audit(1733791701.964:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 296.038727][ T29] audit: type=1326 audit(1733791701.964:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 296.126998][ T29] audit: type=1326 audit(1733791701.964:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 296.178086][ T5833] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 296.187118][ T29] audit: type=1326 audit(1733791701.964:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 296.836267][ T9211] uprobe: syz.1.828:9211 failed to unregister, leaking uprobe [ 297.636898][ T5871] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 297.692266][ T5833] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 297.719057][ T5833] usb 7-1: USB disconnect, device number 8 [ 297.796783][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 297.812981][ T5871] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 297.843062][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.854190][ T5871] usb 2-1: config 0 descriptor?? [ 298.071659][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.834'. [ 298.072931][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 298.096166][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.109818][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 298.117657][ T5871] usb 2-1: media controller created [ 298.160668][ T9229] vlan2: entered promiscuous mode [ 298.165104][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.165796][ T9229] team_slave_1: entered promiscuous mode [ 298.357841][ T9229] team_slave_1: left promiscuous mode [ 299.119813][ T9237] overlayfs: statfs failed on './file0' [ 299.513495][ T9250] overlayfs: failed to get inode (-116) [ 299.551737][ T9250] overlayfs: failed to get inode (-116) [ 299.577071][ T9250] overlayfs: failed to get inode (-116) [ 299.582802][ T9250] overlayfs: failed to get inode (-116) [ 299.925469][ T5871] stb0899_attach: Driver disabled by Kconfig [ 300.003531][ T5871] az6027: no front-end attached [ 300.003531][ T5871] [ 300.445281][ T5871] az6027: usb out operation failed. (-71) [ 300.465544][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 300.486854][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 300.517193][ T5871] dvb-usb: schedule remote query interval to 400 msecs. [ 300.524692][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 300.614095][ T5871] usb 2-1: USB disconnect, device number 12 [ 300.690214][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 303.640939][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 304.088722][ T5871] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.099896][ T5871] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 304.115463][ T5871] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 304.125461][ T5871] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.134731][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.022717][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.524520][ T5871] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 305.589587][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 305.629339][ T5871] usb 2-1: USB disconnect, device number 13 [ 305.931783][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.834865][ T9315] VFS: could not find a valid V7 on nullb0. [ 307.625357][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 307.625375][ T29] audit: type=1800 audit(1733791713.964:108): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.860" name="/" dev="fuse" ino=1 res=0 errno=0 [ 308.191718][ T9331] syz.6.864: attempt to access beyond end of device [ 308.191718][ T9331] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 308.205115][ T9331] EXT4-fs (nbd6): unable to read superblock [ 309.332402][ T9346] binder_alloc: 9345: pid 9345 spamming oneway? 1 buffers allocated for a total size of 4096 [ 314.215427][ T29] audit: type=1326 audit(1733791720.554:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d17fed9 code=0x7ffc0000 [ 314.236805][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.325540][ T29] audit: type=1326 audit(1733791720.554:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba7d17e840 code=0x7ffc0000 [ 314.348592][ T29] audit: type=1326 audit(1733791720.554:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.370183][ T29] audit: type=1326 audit(1733791720.554:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.391631][ T29] audit: type=1326 audit(1733791720.554:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.413498][ T29] audit: type=1326 audit(1733791720.554:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.435263][ T29] audit: type=1326 audit(1733791720.664:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.456752][ T5871] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 314.465194][ T29] audit: type=1326 audit(1733791720.734:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.486696][ T29] audit: type=1326 audit(1733791720.804:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.508518][ T29] audit: type=1326 audit(1733791720.804:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.6.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba7d17fadb code=0x7ffc0000 [ 314.626909][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 314.639645][ T5871] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.660930][ T9406] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 314.692618][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.804751][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.847934][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.049430][ T5871] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.066479][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 315.159847][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.283709][ T5871] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.293366][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.308063][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.316219][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 315.333993][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.345401][ T25] usb 2-1: config 0 descriptor?? [ 315.624980][ T5871] usb 7-1: GET_CAPABILITIES returned 0 [ 315.668458][ T5871] usbtmc 7-1:16.0: can't read capabilities [ 316.175853][ T5871] usb 7-1: USB disconnect, device number 9 [ 316.188426][ T25] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0008/input/input20 [ 316.275211][ T25] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 317.233417][ T9443] xt_socket: unknown flags 0x8 [ 317.418546][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.437237][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.374275][ T5871] usb 2-1: USB disconnect, device number 14 [ 318.599992][ T9451] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 320.764183][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 321.667032][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 321.667052][ T29] audit: type=1804 audit(1733791727.954:150): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.909" name="/newroot/101/bus/file0" dev="overlay" ino=598 res=1 errno=0 [ 322.720452][ T9492] bridge_slave_0: left allmulticast mode [ 322.726149][ T9492] bridge_slave_0: left promiscuous mode [ 322.765917][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.027885][ T9492] bridge_slave_1: left allmulticast mode [ 324.034508][ T9492] bridge_slave_1: left promiscuous mode [ 324.141061][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.807352][ T9492] bond0: (slave bond_slave_0): Releasing backup interface [ 325.170760][ T29] audit: type=1326 audit(1733791731.504:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.256864][ T29] audit: type=1326 audit(1733791731.504:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.280114][ T9492] bond0: (slave bond_slave_1): Releasing backup interface [ 325.308079][ T29] audit: type=1326 audit(1733791731.504:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.334105][ T29] audit: type=1326 audit(1733791731.504:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.370645][ T29] audit: type=1326 audit(1733791731.504:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.397680][ T29] audit: type=1326 audit(1733791731.504:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.420635][ T29] audit: type=1326 audit(1733791731.504:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.443816][ T29] audit: type=1326 audit(1733791731.504:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.470624][ T29] audit: type=1326 audit(1733791731.504:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9516 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 325.497758][ T5905] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 325.508532][ T9492] team0: Port device team_slave_0 removed [ 325.539407][ T9492] team0: Port device team_slave_1 removed [ 325.558907][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.591217][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.602841][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.623290][ T9492] bond1: (slave batadv1): Releasing active interface [ 325.678953][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.703076][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.754435][ T9519] netlink: 32 bytes leftover after parsing attributes in process `syz.6.919'. [ 325.763556][ T5905] usb 2-1: New USB device found, idVendor=1e7d, idProduct=16f6, bcdDevice= 0.00 [ 325.794648][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.839921][ T9519] netlink: 124 bytes leftover after parsing attributes in process `syz.6.919'. [ 325.849078][ T9519] netlink: 508 bytes leftover after parsing attributes in process `syz.6.919'. [ 325.998899][ T5905] usb 2-1: config 0 descriptor?? [ 326.016100][ T5905] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 327.243119][ T5906] usb 2-1: USB disconnect, device number 15 [ 328.442371][ T9563] xt_bpf: check failed: parse error [ 332.488782][ T9617] kvm: vcpu 0: requested 62 ns lapic timer period limited to 200000 ns [ 338.355266][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.7.968'. [ 339.766962][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 339.976826][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 340.029283][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 340.046810][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.059235][ T25] usb 2-1: config 0 descriptor?? [ 340.149236][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 340.742471][ T9734] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 341.138162][ T25] gspca_sonixj: reg_r err -110 [ 341.437198][ T25] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 342.587863][ T9756] binder: BINDER_SET_CONTEXT_MGR already set [ 342.594379][ T9756] binder: 9755:9756 ioctl 4018620d 20000040 returned -16 [ 342.893022][ T5873] kernel write not supported for file [eventfd] (pid: 5873 comm: kworker/0:4) [ 342.930881][ T5873] usb 2-1: USB disconnect, device number 16 [ 343.038459][ T9766] xt_l2tp: invalid flags combination: 0 [ 345.428845][ T5833] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 345.866833][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 345.883789][ T5833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.907564][ T5833] usb 8-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 345.921083][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.946353][ T5833] usb 8-1: Product: syz [ 345.958113][ T5833] usb 8-1: Manufacturer: syz [ 345.973589][ T5833] usb 8-1: SerialNumber: syz [ 346.023539][ T5833] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input21 [ 346.776768][ T9801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1000'. [ 347.675848][ T9808] ISOFS: Unable to identify CD-ROM format. [ 348.049515][ T5178] bcm5974 8-1:1.0: could not read from device [ 348.069041][ T5178] bcm5974 8-1:1.0: could not read from device [ 348.077618][ T5833] usb 8-1: USB disconnect, device number 10 [ 348.172185][ T9810] ptrace attach of ""[9811] was attempted by "./syz-executor exec"[9810] [ 349.022227][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 349.527069][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 349.550413][ T5873] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.562212][ T5873] usb 3-1: config 179 has no interface number 0 [ 349.586825][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.614440][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.636335][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.657568][ T5873] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.669207][ T9834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 349.683341][ T9833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.691059][ T9833] IPv6: NLM_F_CREATE should be set when creating new route [ 349.697114][ T5873] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.721894][ T5873] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.723777][ T9833] netlink: 'syz.3.1011': attribute type 27 has an invalid length. [ 349.737170][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.769104][ T9816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 349.817655][ T5900] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 349.988329][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 350.010998][ T5900] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 350.019552][ T5900] usb 2-1: config 0 has no interface number 0 [ 350.025740][ T5900] usb 2-1: config 0 interface 185 has no altsetting 0 [ 350.063625][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=23.b7 [ 350.096662][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.100407][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.148255][ T5873] usb 3-1: USB disconnect, device number 11 [ 350.154233][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 350.154280][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 350.172598][ T5900] usb 2-1: config 0 descriptor?? [ 350.185158][ T5900] smsc75xx v1.0.0 [ 350.193144][ T5900] smsc75xx 2-1:0.185 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 350.216773][ T5900] smsc75xx 2-1:0.185: probe with driver smsc75xx failed with error -22 [ 350.221675][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.424700][ T5873] usb 2-1: USB disconnect, device number 17 [ 350.457597][ T5833] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 350.545461][ T9833] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.564299][ T9833] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.586732][ T9833] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.626457][ T9833] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.750827][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 350.850007][ T5833] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 350.859495][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.867960][ T5833] usb 8-1: Product: syz [ 350.872152][ T5833] usb 8-1: Manufacturer: syz [ 350.876831][ T5833] usb 8-1: SerialNumber: syz [ 350.907867][ T5833] usb 8-1: config 0 descriptor?? [ 350.961625][ T9842] mkiss: ax0: crc mode is auto. [ 350.969689][ T5833] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 351.106813][ T5873] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 351.337012][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 351.503057][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.673524][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.776995][ T5873] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 351.799886][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.818810][ T5873] usb 3-1: config 0 descriptor?? [ 352.046923][ T35] usb 8-1: Failed to submit usb control message: -110 [ 352.074443][ T35] usb 8-1: unable to send the bmi data to the device: -110 [ 352.093072][ T5900] usb 8-1: USB disconnect, device number 11 [ 352.107164][ T35] usb 8-1: unable to get target info from device [ 352.126866][ T35] usb 8-1: could not get target info (-110) [ 352.132844][ T35] usb 8-1: could not probe fw (-110) [ 352.238736][ T5873] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 352.245503][ T5873] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 352.268604][ T5873] kye 0003:0458:0138.0009: unexpected long global item [ 352.293269][ T5873] kye 0003:0458:0138.0009: parse failed [ 352.334608][ T5873] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 352.633069][ T5905] usb 3-1: USB disconnect, device number 12 [ 354.867161][ T9881] ip6t_rpfilter: unknown options [ 361.492583][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 361.492601][ T29] audit: type=1326 audit(1733791767.824:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9938 comm="syz.3.1041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x0 [ 361.655023][ T9945] xt_l2tp: missing protocol rule (udp|l2tpip) [ 361.656705][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 362.491840][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.504090][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.526041][ T25] usb 3-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 362.535782][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.870794][ T25] usb 3-1: config 0 descriptor?? [ 363.210385][ T9967] hub 6-0:1.0: USB hub found [ 363.216823][ T9967] hub 6-0:1.0: 1 port detected [ 363.488911][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 363.514854][ T25] usb 3-1: USB disconnect, device number 13 [ 365.490455][ T9985] Unsupported ieee802154 address type: 0 [ 372.677849][T10056] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 374.301457][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.398252][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 376.449123][T10107] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.458871][T10107] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.467914][T10107] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.476677][T10107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.932852][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.940047][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.120311][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022f1c800: rx timeout, send abort [ 381.136690][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022f1c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 384.417059][T10168] syz.1.1104 (10168): drop_caches: 2 [ 386.479908][T10181] block nbd1: NBD_DISCONNECT [ 386.485560][T10181] block nbd1: Send disconnect failed -22 [ 386.503863][T10181] input: syz0 as /devices/virtual/input/input22 [ 386.635954][T10180] block nbd1: Disconnected due to user request. [ 386.653804][T10180] block nbd1: shutting down sockets [ 386.662884][T10193] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 386.669722][T10193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 386.865316][T10193] vhci_hcd vhci_hcd.0: Device attached [ 386.956822][ T25] vhci_hcd: vhci_device speed not set [ 387.129292][ T25] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 388.127055][T10195] vhci_hcd: connection reset by peer [ 388.407211][ T199] vhci_hcd: stop threads [ 388.413269][ T199] vhci_hcd: release socket [ 388.434260][ T199] vhci_hcd: disconnect device [ 389.536836][ T5833] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.687954][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.712411][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.742847][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.834603][ T5833] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 389.884957][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.923665][ T5833] usb 2-1: config 0 descriptor?? [ 390.115705][T10236] netlink: 341 bytes leftover after parsing attributes in process `syz.7.1119'. [ 390.801351][ T5833] wacom 0003:056A:00C6.000A: unknown main item tag 0x0 [ 390.808406][ T5833] wacom 0003:056A:00C6.000A: unknown main item tag 0x0 [ 390.815334][ T5833] wacom 0003:056A:00C6.000A: unknown main item tag 0x0 [ 390.822372][ T5833] wacom 0003:056A:00C6.000A: unknown main item tag 0x0 [ 390.897371][ T5833] wacom 0003:056A:00C6.000A: unknown main item tag 0x0 [ 390.911875][T10242] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 390.926684][ T5833] wacom 0003:056A:00C6.000A: hidraw0: USB HID vff.fe Device [HID 056a:00c6] on usb-dummy_hcd.1-1/input0 [ 391.055277][T10242] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 391.353905][ T974] usb 2-1: USB disconnect, device number 18 [ 392.286943][ T25] vhci_hcd: vhci_device speed not set [ 392.726935][T10265] Invalid ELF header magic: != ELF [ 394.370030][T10270] syz.1.1129 (10270) used greatest stack depth: 18448 bytes left [ 399.698481][ T5833] IPVS: starting estimator thread 0... [ 399.797497][T10312] IPVS: using max 37 ests per chain, 88800 per kthread [ 399.976721][ T974] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 399.977412][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 400.737295][ T974] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.748911][ T25] usb 3-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=21.fa [ 400.769363][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.804996][ T25] usb 3-1: config 0 descriptor?? [ 400.813726][ T25] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 400.822622][ T25] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 400.909136][ T974] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.928979][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 400.946359][ T974] usb 7-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 400.957164][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.969076][ T974] usb 7-1: config 0 descriptor?? [ 401.200914][ T25] usb 3-1: USB disconnect, device number 14 [ 401.244970][T10328] binder_alloc: 10327: pid 10327 spamming oneway? 1 buffers allocated for a total size of 4096 [ 402.235215][ T974] usbhid 7-1:0.0: can't add hid device: -71 [ 402.244672][ T974] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 402.265335][ T974] usb 7-1: USB disconnect, device number 10 [ 402.502402][T10336] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 403.204694][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 404.076774][ T5905] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 404.356725][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 404.990074][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.120006][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.130393][ T5905] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 405.139942][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.150462][ T5905] usb 3-1: config 0 descriptor?? [ 407.466050][ T5905] usbhid 3-1:0.0: can't add hid device: -71 [ 407.476264][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 407.491550][ T5905] usb 3-1: USB disconnect, device number 15 [ 408.216923][ T5905] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 408.395193][ T5905] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 408.421282][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.845586][ T5905] usb 7-1: config 0 descriptor?? [ 408.870310][ T5905] bfusb 7-1:0.0: probe with driver bfusb failed with error -5 [ 409.151070][ T5905] usb 7-1: USB disconnect, device number 11 [ 414.313766][T10462] netlink: 'syz.3.1188': attribute type 8 has an invalid length. [ 415.437583][ T29] audit: type=1326 audit(1733791821.784:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10473 comm="syz.6.1192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7d17fed9 code=0x0 [ 415.696136][T10483] overlayfs: statfs failed on './file0' [ 417.816469][T10498] No control pipe specified [ 418.117002][ T5873] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 418.623714][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.707090][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 418.713910][ T5873] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.724989][ T5873] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.747280][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.885247][ T5873] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.924953][ T5873] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.982321][ T5873] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.024834][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.249483][ T5873] usb 7-1: GET_CAPABILITIES returned 0 [ 419.255108][ T5873] usbtmc 7-1:16.0: can't read capabilities [ 419.307487][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 419.502664][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 419.639121][ T25] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 419.687012][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.732101][ T25] usb 3-1: config 0 descriptor?? [ 419.778710][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.854298][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 419.918890][ T5905] usb 7-1: USB disconnect, device number 12 [ 420.064027][T10522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.645074][T10538] Unsupported ieee802154 address type: 0 [ 421.657972][ T25] gspca_sq930x: ucbus_write failed -71 [ 421.664121][ T25] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 421.673758][ T25] usb 3-1: USB disconnect, device number 16 [ 425.276018][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 425.282894][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 432.541560][T10638] netlink: 'syz.7.1238': attribute type 10 has an invalid length. [ 432.654643][T10641] rdma_rxe: rxe_newlink: failed to add team0 [ 432.693559][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.707408][T10640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.716056][T10638] bond0: (slave team0): Enslaving as an active interface with an up link [ 433.772977][ T5871] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 433.806859][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.496666][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 434.517616][ T5871] usb 3-1: config index 0 descriptor too short (expected 61467, got 27) [ 434.527092][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 434.538540][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 434.559537][ T5871] usb 3-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 434.568920][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.577257][ T5871] usb 3-1: Product: syz [ 434.582351][ T5871] usb 3-1: Manufacturer: syz [ 434.587036][ T5871] usb 3-1: SerialNumber: syz [ 434.599384][ T5871] usb 3-1: config 0 descriptor?? [ 434.623140][ T5871] usb-storage 3-1:0.0: USB Mass Storage device detected [ 434.650854][ T5871] usb-storage 3-1:0.0: This device (04e6,0001,0200 S a6 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.13.0-rc2-syzkaller-00018-g7cb1b4663150) [ 434.650854][ T5871] Please send a copy of this message to and [ 434.894814][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.926545][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.871380][ T5871] usb 3-1: USB disconnect, device number 17 [ 437.669368][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1253'. [ 437.979405][T10691] binder: 10688:10691 ioctl c0306201 0 returned -14 [ 438.826890][ T5900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 439.140326][ T5900] usb 3-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 439.150601][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.285277][T10707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1258'. [ 440.119420][ T5900] usb 3-1: Product: syz [ 440.123650][ T5900] usb 3-1: Manufacturer: syz [ 440.128384][ T5900] usb 3-1: SerialNumber: syz [ 440.139501][ T5900] usb 3-1: config 0 descriptor?? [ 440.678814][ T5900] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 440.743361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.749823][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.894997][T10720] loop5: detected capacity change from 0 to 7 [ 440.901656][T10720] buffer_io_error: 42 callbacks suppressed [ 440.901672][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.915536][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.923734][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.931900][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.939916][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.948053][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.956051][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.964087][T10720] ldm_validate_partition_table(): Disk read failed. [ 440.971816][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.980027][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.988131][T10720] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.996156][T10720] Dev loop5: unable to read RDB block 0 [ 441.002227][T10720] loop5: unable to read partition table [ 441.008142][T10720] loop5: partition table beyond EOD, truncated [ 441.014379][T10720] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 441.014379][T10720] ) failed (rc=-5) [ 441.460730][ T5900] gspca_sn9c20x: Write register 1000 failed -110 [ 441.501182][ T5900] gspca_sn9c20x: Device initialization failed [ 441.585278][ T5900] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 441.759659][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 441.785637][ T5900] usb 3-1: USB disconnect, device number 18 [ 441.795422][T10718] dummy0: entered promiscuous mode [ 441.810617][T10718] macsec0: entered promiscuous mode [ 441.833567][T10718] macsec0: entered allmulticast mode [ 441.851345][T10718] dummy0: entered allmulticast mode [ 442.342838][T10730] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 445.132239][T10748] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 445.986694][ T29] audit: type=1326 audit(1733791852.324:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.036674][ T29] audit: type=1326 audit(1733791852.374:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.086677][ T29] audit: type=1326 audit(1733791852.374:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.126938][ T29] audit: type=1326 audit(1733791852.374:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.186942][ T29] audit: type=1326 audit(1733791852.374:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.226687][ T29] audit: type=1326 audit(1733791852.374:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.275497][ T29] audit: type=1326 audit(1733791852.374:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.336683][ T29] audit: type=1326 audit(1733791852.374:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.376825][ T29] audit: type=1326 audit(1733791852.374:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.426879][ T29] audit: type=1326 audit(1733791852.464:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10750 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5cd6d7fed9 code=0x7ffc0000 [ 446.975169][T10764] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1270'. [ 448.306906][T10764] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1270'. [ 448.662745][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 448.679470][T10200] Bluetooth: hci6: Frame reassembly failed (-84) [ 448.726936][ T5905] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 448.869943][T10203] Bluetooth: Error in BCSP hdr checksum [ 448.893316][ T5905] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 448.915339][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.947514][ T5905] usb 2-1: config 0 descriptor?? [ 448.963224][ T5905] cp210x 2-1:0.0: cp210x converter detected [ 449.039724][T10788] mmap: syz.7.1280 (10788) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 449.130357][T10203] Bluetooth: Error in BCSP hdr checksum [ 449.409863][T10203] Bluetooth: Error in BCSP hdr checksum [ 449.453986][ T5905] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 449.461877][ T5905] cp210x 2-1:0.0: querying part number failed [ 449.492355][ T5905] usb 2-1: cp210x converter now attached to ttyUSB0 [ 449.533186][ T5905] usb 2-1: USB disconnect, device number 19 [ 449.577668][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 449.597428][ T5905] cp210x 2-1:0.0: device disconnected [ 449.667905][T10203] Bluetooth: Error in BCSP hdr checksum [ 449.930991][ T12] Bluetooth: Error in BCSP hdr checksum [ 450.646694][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 450.686847][ T5823] Bluetooth: hci6: command 0xfc11 tx timeout [ 450.718288][ T54] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 451.040651][T10817] input: syz0 as /devices/virtual/input/input26 [ 451.220674][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 451.220724][ T29] audit: type=1326 audit(1733791857.564:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.498729][ T29] audit: type=1326 audit(1733791857.844:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.521293][ T29] audit: type=1326 audit(1733791857.844:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.543073][ T29] audit: type=1326 audit(1733791857.844:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.564622][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.693924][ T29] audit: type=1326 audit(1733791857.904:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.715775][ T29] audit: type=1326 audit(1733791857.904:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.737927][ T29] audit: type=1326 audit(1733791857.904:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.759895][ T29] audit: type=1326 audit(1733791857.904:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.781450][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.787701][ T29] audit: type=1326 audit(1733791857.904:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.809451][ T29] audit: type=1326 audit(1733791857.904:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 451.830991][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.671969][T10856] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 454.186723][ T5873] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 454.336754][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 454.346236][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.376728][ T5873] usb 2-1: config 0 has no interfaces? [ 454.382295][ T5873] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.414563][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.448482][ T5873] usb 2-1: config 0 descriptor?? [ 454.669808][ T5905] usb 2-1: USB disconnect, device number 20 [ 454.819163][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1306'. [ 454.849593][T10877] usb usb9: usbfs: process 10877 (syz.6.1306) did not claim interface 0 before use [ 454.890900][T10877] pimreg: entered allmulticast mode [ 454.906250][T10877] pimreg: left allmulticast mode [ 454.916111][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.928776][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.937918][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.962905][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.972205][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.979829][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.073408][T10878] lo speed is unknown, defaulting to 1000 [ 455.179775][T10878] lo speed is unknown, defaulting to 1000 [ 455.447691][T10886] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 455.490964][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 455.538888][T10878] chnl_net:caif_netlink_parms(): no params data found [ 456.533644][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.557457][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.568526][T10878] bridge_slave_0: entered allmulticast mode [ 456.578604][T10878] bridge_slave_0: entered promiscuous mode [ 456.598844][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.616543][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.634654][T10878] bridge_slave_1: entered allmulticast mode [ 456.650833][T10878] bridge_slave_1: entered promiscuous mode [ 456.733015][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.769818][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.859821][T10878] team0: Port device team_slave_0 added [ 456.889977][T10878] team0: Port device team_slave_1 added [ 456.985277][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.992799][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.018899][ T5823] Bluetooth: hci0: command tx timeout [ 457.040826][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.080416][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.087836][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.114247][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.177122][T10878] hsr_slave_0: entered promiscuous mode [ 457.199734][T10878] hsr_slave_1: entered promiscuous mode [ 457.221092][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.247567][T10878] Cannot create hsr debugfs directory [ 457.486797][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 457.487325][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 458.867883][ T5873] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 458.982830][T10878] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.016488][T10878] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.048439][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 459.059349][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.079352][T10878] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.098670][ T54] Bluetooth: hci0: command tx timeout [ 459.099540][ T5873] usb 2-1: config 0 descriptor?? [ 459.134642][T10878] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.149149][ T5873] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 459.356884][ T5873] pwc: Failed to set LED on/off time (-71) [ 459.383568][ T5873] pwc: send_video_command error -71 [ 459.402907][ T5873] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 459.431094][ T5873] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 459.451721][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.482291][ T5873] usb 2-1: USB disconnect, device number 21 [ 459.521558][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.699335][T10878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.780863][T10878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.558367][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.565511][T10200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.598650][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.605812][T10200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.196907][ T54] Bluetooth: hci0: command tx timeout [ 461.804843][T10957] 8021q: VLANs not supported on ipvlan0 [ 461.889434][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.329591][T10979] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.1327'. [ 462.427277][ T5873] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 462.927509][ T5873] usb 3-1: config 14 has an invalid interface number: 41 but max is 1 [ 462.935751][ T5873] usb 3-1: config 14 has an invalid interface number: 170 but max is 1 [ 462.945273][ T5873] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 462.998291][ T5873] usb 3-1: config 14 has no interface number 0 [ 463.019386][ T5873] usb 3-1: config 14 has no interface number 1 [ 463.026359][ T5873] usb 3-1: config 14 interface 41 altsetting 6 has an endpoint descriptor with address 0x58, changing to 0x8 [ 463.265500][ T54] Bluetooth: hci0: command tx timeout [ 463.371069][ T5873] usb 3-1: config 14 interface 41 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 463.797655][ T5873] usb 3-1: config 14 interface 41 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 463.809050][ T5873] usb 3-1: config 14 interface 41 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.819282][ T5873] usb 3-1: config 14 interface 170 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 463.832535][ T5873] usb 3-1: config 14 interface 41 has no altsetting 0 [ 463.880012][T10878] veth0_vlan: entered promiscuous mode [ 463.891610][T10878] veth1_vlan: entered promiscuous mode [ 463.918371][T10878] veth0_macvtap: entered promiscuous mode [ 463.927977][T10878] veth1_macvtap: entered promiscuous mode [ 463.943350][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.953913][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.963902][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.974983][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.987828][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.997742][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.008247][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.018744][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.029568][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.040529][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.050535][T10878] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.059351][T10878] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.068152][T10878] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.077002][T10878] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.109716][ T5873] usb 3-1: string descriptor 0 read error: -22 [ 464.122182][ T5873] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=97.d0 [ 464.153690][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.253005][ T5873] kvaser_usb 3-1:14.41: error -ENODEV: Cannot get usb endpoint(s) [ 464.309102][ T5873] kvaser_usb 3-1:14.170: error -ENODEV: Cannot get usb endpoint(s) [ 464.342746][T10200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.357797][T10200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.445774][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.465620][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.871121][ T5873] usb 3-1: USB disconnect, device number 19 [ 467.141374][T11030] syz.2.1338: attempt to access beyond end of device [ 467.141374][T11030] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 467.154750][T11030] EXT4-fs (nbd2): unable to read superblock [ 468.670117][T11036] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.1340'. [ 470.733849][T11059] xt_socket: unknown flags 0x58 [ 471.426712][ T5900] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 471.697037][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 471.713990][ T5900] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 471.730418][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.769656][ T5900] usb 7-1: Product: syz [ 471.785089][ T5900] usb 7-1: Manufacturer: syz [ 471.798619][ T5900] usb 7-1: SerialNumber: syz [ 471.809029][ T5900] usb 7-1: config 0 descriptor?? [ 471.824047][ T5900] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 472.797415][ T5900] gspca_sn9c2028: read1 error -110 [ 473.396739][ T5900] gspca_sn9c2028: read1 error -110 [ 473.403214][ T5900] gspca_sn9c2028: read1 error -32 [ 473.419065][ T5900] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 474.448670][ T5871] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 475.754248][ T5871] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 475.762828][ T5871] usb 9-1: config 0 has no interface number 0 [ 475.777583][ T5871] usb 9-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 475.795210][ T5871] usb 9-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 475.808606][ T5871] usb 9-1: config 0 interface 49 has no altsetting 0 [ 475.815538][ T5871] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 475.825504][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.848566][ T5871] usb 9-1: config 0 descriptor?? [ 476.352637][ T5900] usb 7-1: USB disconnect, device number 13 [ 477.098183][ T5871] usb 9-1: string descriptor 0 read error: -32 [ 477.714371][ T5871] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 478.868109][T11116] syz.1.1364 (11116): /proc/11116/oom_adj is deprecated, please use /proc/11116/oom_score_adj instead. [ 479.054839][ T5871] gspca_stv06xx: I2C: Read error writing address: -71 [ 479.070185][ T5871] usb 9-1: USB disconnect, device number 2 [ 480.154432][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1367'. [ 480.526134][T11141] syz.1.1371: attempt to access beyond end of device [ 480.526134][T11141] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 480.539625][T11141] EXT4-fs (nbd1): unable to read superblock [ 482.460231][ T5871] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 483.316812][ T5871] usb 9-1: Using ep0 maxpacket: 8 [ 483.336749][ T5871] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 483.350279][T11158] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1377'. [ 483.377833][ T5871] usb 9-1: config 179 has no interface number 0 [ 483.396875][ T5871] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 483.416640][ T5871] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 483.435977][ T5871] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 483.455548][ T5871] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 483.467740][ T5871] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 483.481548][ T5871] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 483.490844][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.504456][T11146] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 483.878221][ T5871] usb 9-1: USB disconnect, device number 3 [ 483.878301][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 483.892455][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.575406][T11202] wg2: entered promiscuous mode [ 485.658916][T11202] wg2: entered allmulticast mode [ 493.495607][T11274] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 495.227300][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 495.387536][T11307] bridge0: port 1(macvlan2) entered blocking state [ 495.428132][T11307] bridge0: port 1(macvlan2) entered disabled state [ 495.502152][T11307] macvlan2: entered allmulticast mode [ 495.545774][T11307] macvlan2: entered promiscuous mode [ 495.735305][T11315] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 495.776811][T11315] overlayfs: failed to set xattr on upper [ 495.782579][T11315] overlayfs: ...falling back to redirect_dir=nofollow. [ 495.820018][T11318] binder: BINDER_SET_CONTEXT_MGR already set [ 495.826191][T11318] binder: 11317:11318 ioctl 4018620d 200001c0 returned -16 [ 495.826807][T11315] overlayfs: ...falling back to index=off. [ 495.865501][T11315] overlayfs: ...falling back to uuid=null. [ 496.160125][T11324] kvm: pic: non byte read [ 496.531177][T11329] netlink: 'syz.1.1425': attribute type 4 has an invalid length. [ 497.140258][T11340] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1427'. [ 497.245297][T11340] netlink: 'syz.3.1427': attribute type 1 has an invalid length. [ 499.978050][T11381] Trying to write to read-only block-device nullb0 [ 500.625719][T11381] nullb0: [POWERTEC] p1 [ 500.889960][T11390] netlink: 'syz.6.1443': attribute type 4 has an invalid length. [ 501.741983][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.753031][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.896916][ T5872] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 503.062875][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.073074][ T5872] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.268003][ T5872] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.615806][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.633606][ T5872] usb 7-1: SerialNumber: syz [ 503.736414][T11422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.743751][T11422] IPv6: NLM_F_CREATE should be set when creating new route [ 503.879344][ T5872] usb 7-1: cannot find UAC_HEADER [ 503.943375][ T5872] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 504.182229][ T5872] usb 7-1: USB disconnect, device number 14 [ 504.323881][T11438] Bluetooth: MGMT ver 1.23 [ 504.424719][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.523700][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 509.523719][ T29] audit: type=1800 audit(1733791915.864:212): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1476" name="/" dev="9p" ino=2 res=0 errno=0 [ 512.645789][T11514] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 513.175329][T11539] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 513.457870][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 515.537841][T11558] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1491'. [ 516.681519][T11586] ALSA: mixer_oss: invalid OSS volume '' [ 520.494385][T11626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1510'. [ 521.750206][ T54] Bluetooth: hci4: unexpected event for opcode 0x003d [ 523.080658][T11640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 526.162456][ T29] audit: type=1800 audit(1733791932.504:213): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1522" name="/" dev="9p" ino=2 res=0 errno=0 [ 526.190846][T11674] netfs: Couldn't get user pages (rc=-14) [ 527.332489][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 528.263742][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 528.274047][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 528.284760][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.294845][ T54] Workqueue: hci4 hci_rx_work [ 528.299561][ T54] Call Trace: [ 528.302843][ T54] [ 528.305774][ T54] dump_stack_lvl+0x241/0x360 [ 528.310461][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.315669][ T54] ? __pfx__printk+0x10/0x10 [ 528.320275][ T54] ? __kmalloc_cache_noprof+0x243/0x390 [ 528.325826][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 528.331117][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 528.336234][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 528.341873][ T54] kobject_add_internal+0x435/0x8d0 [ 528.347082][ T54] kobject_add+0x152/0x220 [ 528.351500][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 528.356700][ T54] ? device_add+0x3e7/0xbf0 [ 528.361199][ T54] ? __pfx_kobject_add+0x10/0x10 [ 528.366140][ T54] ? _raw_spin_unlock+0x28/0x50 [ 528.370996][ T54] ? get_device_parent+0x165/0x410 [ 528.376140][ T54] device_add+0x4e5/0xbf0 [ 528.380490][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 528.385447][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 528.390753][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 528.396478][ T54] ? __mutex_unlock_slowpath+0x21e/0x790 [ 528.402119][ T54] ? __pfx___mutex_lock+0x10/0x10 [ 528.407150][ T54] ? skb_pull_data+0x112/0x230 [ 528.411920][ T54] hci_le_conn_complete_evt+0x18c/0x420 [ 528.417470][ T54] hci_event_packet+0xa55/0x1540 [ 528.422438][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 528.427736][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 528.433114][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 528.438339][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 528.443560][ T54] ? kcov_remote_start+0x97/0x7d0 [ 528.448603][ T54] hci_rx_work+0x3f3/0xdb0 [ 528.453046][ T54] ? process_scheduled_works+0x976/0x1840 [ 528.458773][ T54] process_scheduled_works+0xa66/0x1840 [ 528.464377][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.470396][ T54] ? assign_work+0x364/0x3d0 [ 528.475009][ T54] worker_thread+0x870/0xd30 [ 528.479619][ T54] ? __kthread_parkme+0x169/0x1d0 [ 528.484645][ T54] ? __pfx_worker_thread+0x10/0x10 [ 528.489753][ T54] kthread+0x2f0/0x390 [ 528.493822][ T54] ? __pfx_worker_thread+0x10/0x10 [ 528.498928][ T54] ? __pfx_kthread+0x10/0x10 [ 528.503546][ T54] ret_from_fork+0x4b/0x80 [ 528.507988][ T54] ? __pfx_kthread+0x10/0x10 [ 528.512591][ T54] ret_from_fork_asm+0x1a/0x30 [ 528.517377][ T54] [ 528.520447][ T29] audit: type=1326 audit(1733791934.604:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11705 comm="syz.3.1533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x0 [ 528.521460][ T54] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 528.556825][ T54] Bluetooth: hci4: failed to register connection device [ 528.696769][T10991] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 528.846784][T10991] usb 3-1: Using ep0 maxpacket: 32 [ 528.855294][T10991] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 528.864068][T10991] usb 3-1: config 1 has no interface number 0 [ 528.879625][T10991] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 528.900180][T10991] usb 3-1: config 1 interface 236 has no altsetting 0 [ 528.913360][T10991] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 528.922857][T10991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.935612][T10991] usb 3-1: Product: syz [ 528.940485][T10991] usb 3-1: Manufacturer: syz [ 528.945526][T10991] usb 3-1: SerialNumber: syz [ 528.955211][T11704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 528.969256][T10991] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 529.223453][T10991] usb 3-1: USB disconnect, device number 20 [ 529.584510][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 532.826918][ T5833] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 533.185225][T11739] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 533.923342][T11740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.968373][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.981499][ T5833] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 533.995409][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.012090][ T5833] usb 2-1: config 0 descriptor?? [ 535.006856][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.120868][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 535.175540][ T5833] holtek 0003:1241:5015.000B: item fetching failed at offset 1/3 [ 535.186423][ T5833] holtek 0003:1241:5015.000B: parse failed [ 535.193046][ T5833] holtek 0003:1241:5015.000B: probe with driver holtek failed with error -22 [ 536.947444][ T5905] usb 2-1: USB disconnect, device number 22 [ 539.802703][T11793] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1557'. [ 541.196193][T11804] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 541.209740][T11804] Error validating options; rc = [-22] [ 546.787387][ T5872] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 552.670074][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'. [ 553.961223][ T29] audit: type=1326 audit(1733791960.304:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11922 comm="syz.1.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639237fed9 code=0x0 [ 556.830976][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 556.841598][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 556.940300][T11953] tap0: tun_chr_ioctl cmd 35111 [ 556.998798][T11951] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 558.950879][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 559.107637][T11984] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 559.115074][T11984] PKCS7: Only support pkcs7_signedData type [ 559.693447][T11987] vxcan2: entered allmulticast mode [ 560.166811][ T5871] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 560.436805][ T5871] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 560.573541][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.661025][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.694073][ T5871] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 560.718719][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 560.728137][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 560.886829][ T29] audit: type=1800 audit(1733791967.164:216): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1625" name="/" dev="9p" ino=2 res=0 errno=0 [ 560.916367][ T29] audit: type=1804 audit(1733791967.164:217): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1625" name="/newroot/362/file0" dev="9p" ino=2 res=1 errno=0 [ 560.957155][ T5871] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 560.976905][ T5871] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 561.025091][ T5871] usb 9-1: Manufacturer: syz [ 561.033495][ T5871] usb 9-1: config 0 descriptor?? [ 562.141594][ T5871] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 562.830097][ T5871] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 562.840611][ T5871] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 563.086236][ T5871] usb 9-1: USB disconnect, device number 4 [ 563.462000][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.468642][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.481853][T12029] Bluetooth: MGMT ver 1.23 [ 564.495272][T12029] hsr0: entered promiscuous mode [ 564.567886][T12029] hsr0: left promiscuous mode [ 568.757000][T12071] kvm: pic: level sensitive irq not supported [ 568.768330][T12071] kvm: pic: single mode not supported [ 574.727493][T12132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 574.739474][T12132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 574.800594][T12135] IPv6: sit1: Disabled Multicast RS [ 574.830399][T12132] vhci_hcd vhci_hcd.0: Device attached [ 575.043850][ T5872] vhci_hcd: vhci_device speed not set [ 575.318912][T12134] vhci_hcd: connection closed [ 575.516759][ T63] vhci_hcd: stop threads [ 575.596869][ T5872] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 575.609811][ T63] vhci_hcd: release socket [ 575.614621][ T63] vhci_hcd: disconnect device [ 581.291490][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 581.376744][ T5872] vhci_hcd: vhci_device speed not set [ 582.266708][ T5871] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 582.426837][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 582.481345][ T5871] usb 7-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 582.504005][ T5871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 584.789809][ T5871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 584.798932][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 584.807140][ T5871] usb 7-1: SerialNumber: syz [ 584.974070][ T5871] usb 7-1: can't set config #1, error -71 [ 584.981618][ T5871] usb 7-1: USB disconnect, device number 16 [ 587.506729][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 587.971077][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.986530][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.038094][ T5905] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.058613][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.086374][ T5905] usb 2-1: config 0 descriptor?? [ 588.804325][ T5905] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 588.868039][ T5905] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 589.563430][ T5872] usb 2-1: USB disconnect, device number 23 [ 590.528442][T12281] xt_CT: No such helper "snmp_trap" [ 591.066787][ T5900] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 591.217328][ T5900] usb 9-1: Using ep0 maxpacket: 16 [ 591.603737][ T5900] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 591.650395][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.670657][ T5900] usb 9-1: Product: syz [ 591.674861][ T5900] usb 9-1: Manufacturer: syz [ 591.691457][ T5900] usb 9-1: SerialNumber: syz [ 591.718381][ T5900] usb 9-1: config 0 descriptor?? [ 591.795197][ T5900] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 592.396463][ T12] usb 9-1: Failed to submit usb control message: -71 [ 592.408888][ T5900] usb 9-1: USB disconnect, device number 5 [ 592.418969][ T54] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 592.454944][ T12] usb 9-1: unable to send the bmi data to the device: -71 [ 592.463426][ T12] usb 9-1: unable to get target info from device [ 592.469895][ T12] usb 9-1: could not get target info (-71) [ 592.476337][ T12] usb 9-1: could not probe fw (-71) [ 592.847229][ T5833] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 592.855081][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 593.036747][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 593.041975][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 593.051958][ T5833] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 593.063421][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 593.086040][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 593.096568][ T5833] usb 2-1: config 0 has no interface number 0 [ 593.102814][ T5833] usb 2-1: config 0 interface 185 has no altsetting 0 [ 593.110888][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 593.122453][ T5833] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=23.b7 [ 593.134161][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.144322][ T5905] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=a9.fa [ 593.153717][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.162311][ T5905] usb 3-1: Product: syz [ 593.173163][ T5833] usb 2-1: config 0 descriptor?? [ 593.178425][ T5905] usb 3-1: Manufacturer: syz [ 593.186813][ T5905] usb 3-1: SerialNumber: syz [ 593.193939][ T5833] smsc75xx v1.0.0 [ 593.200161][ T5833] smsc75xx 2-1:0.185 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 593.214062][ T5905] usb 3-1: config 0 descriptor?? [ 593.219803][ T5833] smsc75xx 2-1:0.185: probe with driver smsc75xx failed with error -22 [ 593.232212][ T5905] option 3-1:0.0: GSM modem (1-port) converter detected [ 593.415280][ T5905] usb 2-1: USB disconnect, device number 24 [ 593.464026][ T5900] usb 3-1: USB disconnect, device number 21 [ 593.473242][ T5900] option 3-1:0.0: device disconnected [ 593.937191][ T5905] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 593.997592][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 594.096771][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 594.124057][ T5905] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 594.153893][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.189827][ T5905] usb 7-1: Product: syz [ 594.194070][ T5905] usb 7-1: Manufacturer: syz [ 594.217870][ T5905] usb 7-1: SerialNumber: syz [ 594.230248][ T5905] usb 7-1: config 0 descriptor?? [ 594.250764][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 594.278625][ T5905] pvrusb2: ********** [ 594.288389][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.320064][ T5905] pvrusb2: Important functionality might not be entirely working. [ 594.348782][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.390393][ T5905] pvrusb2: ********** [ 594.477371][ T2338] pvrusb2: Invalid write control endpoint [ 594.508622][ T5905] usb 7-1: USB disconnect, device number 17 [ 594.527689][ T54] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 595.345229][ T2338] pvrusb2: Invalid write control endpoint [ 595.364471][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 596.096846][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 596.104461][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.150315][ T2338] pvrusb2: Device being rendered inoperable [ 596.176954][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 596.216903][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 596.316385][ T2338] pvrusb2: Attached sub-driver cx25840 [ 596.322606][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.332782][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 605.111226][T12419] binder: BINDER_SET_CONTEXT_MGR already set [ 605.117471][T12419] binder: 12418:12419 ioctl 4018620d 200001c0 returned -16 [ 605.323335][T12422] 9pnet_fd: p9_fd_create_tcp (12422): problem connecting socket to 127.0.0.1 [ 607.406963][ T5905] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 607.635496][T12438] dummy0: Device is already in use. [ 607.840939][T12439] syz.6.1738: attempt to access beyond end of device [ 607.840939][T12439] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 608.731535][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.740122][ T5905] usb 3-1: no configurations [ 608.744760][ T5905] usb 3-1: can't read configurations, error -22 [ 608.786114][T12446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.987502][T12457] team0: Port device virt_wifi0 added [ 614.842049][T12503] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 614.868756][T12503] CIFS mount error: No usable UNC path provided in device string! [ 614.868756][T12503] [ 614.879035][T12503] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 616.376685][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1766'. [ 616.889418][T12541] input: syz1 as /devices/virtual/input/input28 [ 618.870843][ T29] audit: type=1107 audit(1733792024.944:218): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='3¹Ÿ€+ÿ’3iá.Ê7J\£U@G' [ 620.340889][T12569] xt_hashlimit: invalid rate [ 624.326817][ T5871] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 624.612452][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.625250][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.825862][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.875483][ T5871] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.897777][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.991710][ T5871] usb 3-1: config 0 descriptor?? [ 625.032379][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 625.261765][T12606] kvm: kvm [12605]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0x27 [ 625.295571][T12606] kvm: kvm [12605]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0x201f [ 625.336426][T12606] kvm: kvm [12605]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0x201f [ 625.416209][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 625.423758][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 625.431430][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 625.440500][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 625.450514][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 625.469942][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 625.477935][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 625.486208][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 625.502985][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 625.514623][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 625.546393][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 625.787544][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 626.555476][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 626.573382][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 626.580285][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.780801][ T5871] pwc: Registered as video103. [ 626.786450][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 627.566495][ T5871] usb 3-1: USB disconnect, device number 24 [ 627.595827][T12633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.761710][T12674] proc: Bad value for 'gid' [ 629.086925][T10991] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 629.266771][T10991] usb 2-1: Using ep0 maxpacket: 32 [ 629.337291][T10991] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 629.441215][T10991] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 629.454370][T10991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.481664][T10991] usb 2-1: Product: syz [ 629.505467][T10991] usb 2-1: Manufacturer: syz [ 629.518942][T10991] usb 2-1: SerialNumber: syz [ 629.549832][T10991] usb 2-1: config 0 descriptor?? [ 629.555432][T12702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.605025][T10991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.046525][ T29] audit: type=1326 audit(1733792036.384:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.106743][ T29] audit: type=1326 audit(1733792036.414:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.175909][ T29] audit: type=1326 audit(1733792036.424:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.212603][ T29] audit: type=1326 audit(1733792036.424:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.235277][ T29] audit: type=1326 audit(1733792036.434:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.257984][ T29] audit: type=1326 audit(1733792036.434:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.286230][ T29] audit: type=1326 audit(1733792036.434:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.320925][ T29] audit: type=1326 audit(1733792036.434:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.416898][ T29] audit: type=1326 audit(1733792036.434:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 630.490797][ T29] audit: type=1326 audit(1733792036.434:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 631.604700][T12730] vlan2: entered promiscuous mode [ 632.476242][T12734] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 632.507046][ T5872] usb 2-1: USB disconnect, device number 25 [ 633.722349][T12734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.869882][T12747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1808'. [ 634.088210][T12756] kvm: kvm [12755]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 634.436533][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 634.460529][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 634.486497][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 634.547794][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 634.577066][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 634.598907][T12769] kvm: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 634.634809][T12769] kvm_intel: kvm [12768]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 636.198140][T12794] 9pnet_fd: Insufficient options for proto=fd [ 639.620124][T12835] Attempt to restore checkpoint with obsolete wellknown handles [ 647.008361][T10991] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 647.026703][ T5900] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 647.058469][T10991] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 647.329719][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 647.336912][ T5872] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 647.471997][ T5900] usb 9-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 647.735557][ T5900] usb 9-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 647.748705][ T5900] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 647.757921][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.877901][ T5900] usbhid 9-1:32.0: couldn't find an input interrupt endpoint [ 649.358393][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 649.940338][T12935] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 650.054728][T12936] kvm: kvm [12930]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0x27 [ 650.084825][ T5872] usb 3-1: no configurations [ 650.091955][ T5872] usb 3-1: can't read configurations, error -22 [ 650.192105][ T25] usb 9-1: USB disconnect, device number 6 [ 659.607133][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 659.844477][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.866933][ T25] usb 9-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 659.881608][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.912094][ T25] usb 9-1: config 0 descriptor?? [ 659.959522][ T25] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 660.339826][ T25] usb 9-1: USB disconnect, device number 7 [ 661.817495][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 661.985749][T13102] Bluetooth: MGMT ver 1.23 [ 664.779278][T13122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.910524][T13128] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1910'. [ 664.996753][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 664.996770][ T29] audit: type=1326 audit(1733792071.334:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.052588][T13133] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 665.106751][ T29] audit: type=1326 audit(1733792071.334:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.173367][ T29] audit: type=1326 audit(1733792071.374:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.397371][ T29] audit: type=1326 audit(1733792071.374:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.689421][ T29] audit: type=1326 audit(1733792071.374:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.804417][ T29] audit: type=1326 audit(1733792071.374:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.847406][ T29] audit: type=1326 audit(1733792071.374:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.869318][ T29] audit: type=1326 audit(1733792071.374:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 665.959919][ T29] audit: type=1326 audit(1733792071.374:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 666.035752][ T29] audit: type=1326 audit(1733792071.374:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13131 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 669.405815][T13172] binder: 13162:13172 ioctl c0306201 20000780 returned -14 [ 670.146140][T13182] xt_hashlimit: max too large, truncated to 1048576 [ 670.159293][T13182] Cannot find set identified by id 0 to match [ 673.781711][T13221] xt_cgroup: xt_cgroup: no path or classid specified [ 675.190267][T13228] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1935'. [ 675.599175][ T5872] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 675.793917][ T5872] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 676.098721][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.250101][ T5872] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 676.261217][ T5872] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 676.274985][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 676.341702][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 676.348175][ T5872] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 676.369153][ T5872] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 676.427853][ T5872] usb 3-1: config 0 descriptor?? [ 676.447918][ T5872] usb 3-1: can't set config #0, error -71 [ 676.578719][ T5872] usb 3-1: USB disconnect, device number 27 [ 676.583443][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 676.583461][ T29] audit: type=1326 audit(1733792082.924:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 676.921963][ T29] audit: type=1326 audit(1733792082.924:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 676.947932][ T29] audit: type=1326 audit(1733792082.924:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 677.956708][ T29] audit: type=1326 audit(1733792082.924:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 677.978719][ T29] audit: type=1326 audit(1733792082.924:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 678.182748][ T29] audit: type=1326 audit(1733792082.924:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 678.436644][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.443490][ T29] audit: type=1326 audit(1733792082.924:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 678.467505][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.473734][ T29] audit: type=1326 audit(1733792082.924:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 678.495406][ T29] audit: type=1326 audit(1733792082.924:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 678.516965][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.523092][ T29] audit: type=1326 audit(1733792082.924:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13236 comm="syz.8.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5d0a57fed9 code=0x7ffc0000 [ 681.117518][T13271] sd 0:0:1:0: device reset [ 686.462139][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.472879][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.893805][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1966'. [ 688.100989][T13346] hub 9-0:1.0: USB hub found [ 688.107407][T13346] hub 9-0:1.0: 1 port detected [ 688.803887][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 688.803906][ T29] audit: type=1326 audit(1733792095.144:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.6.1972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7d17fed9 code=0x0 [ 688.903323][T13357] capability: warning: `syz.6.1972' uses 32-bit capabilities (legacy support in use) [ 693.755758][T13399] pim6reg: entered allmulticast mode [ 693.780635][T13399] pim6reg: left allmulticast mode [ 696.041237][T13412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 696.051427][T13412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 696.117434][T13412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 696.127242][T13412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 696.140083][T13412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.146222][T13412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 696.162494][T13412] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 696.173036][T13412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.179570][T13412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 696.202412][T13412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.227502][T13412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 698.215571][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 698.222131][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 698.230351][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 698.236947][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 698.377656][T12965] Bluetooth: hci0: command 0x0406 tx timeout [ 699.451137][T13460] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2001'. [ 700.103558][ T29] audit: type=1326 audit(1733792106.444:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13473 comm="syz.1.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639237fed9 code=0x0 [ 700.287708][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 700.293791][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 700.296744][T12965] Bluetooth: hci3: command 0x0c1a tx timeout [ 700.302627][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 700.473395][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 701.822455][T13499] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 702.454163][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 703.752099][T13512] kvm: kvm [13511]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 704.613972][ T29] audit: type=1800 audit(1733792110.934:278): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2014" name="/" dev="9p" ino=2 res=0 errno=0 [ 705.479508][T13519] syz.6.2014 (13519) used greatest stack depth: 17040 bytes left [ 706.799208][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2018'. [ 706.814968][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2018'. [ 707.067360][T13549] batadv_slave_1: entered promiscuous mode [ 707.078342][T13549] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 707.537957][T13564] binder: 13563:13564 ioctl c00c620f 200007c0 returned -22 [ 709.806916][ T5872] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 709.965428][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 709.968309][ T5872] usb 7-1: Using ep0 maxpacket: 32 [ 710.018574][ T5872] usb 7-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 710.031425][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.052276][ T5872] usb 7-1: config 0 descriptor?? [ 710.146874][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 710.363771][ T25] usb 9-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 710.481714][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.687761][ T5872] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 710.813236][ T25] usb 9-1: Product: syz [ 710.817566][ T25] usb 9-1: Manufacturer: syz [ 710.822195][ T25] usb 9-1: SerialNumber: syz [ 710.830213][ T25] usb 9-1: config 0 descriptor?? [ 710.835788][ T25] usb 9-1: can't set config #0, error -71 [ 710.843402][ T25] usb 9-1: USB disconnect, device number 8 [ 712.187069][ T5872] gspca_sunplus: reg_w_riv err -110 [ 712.192370][ T5872] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 712.396949][ T5833] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 712.587225][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 712.661205][ T5833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 712.744111][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.762721][ T5833] usb 3-1: Product: syz [ 712.767702][ T5833] usb 3-1: Manufacturer: syz [ 712.772328][ T5833] usb 3-1: SerialNumber: syz [ 712.784659][ T5833] usb 3-1: config 0 descriptor?? [ 712.814999][ T5872] usb 7-1: USB disconnect, device number 18 [ 721.336678][ T5833] usb read operation failed. (-110) [ 721.352111][ T5833] usb write operation failed. (-32) [ 721.366029][ T5833] usb write operation failed. (-32) [ 721.406734][ T5833] usb write operation failed. (-32) [ 721.411997][ T5833] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 721.462167][ T5833] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 721.491886][ T5833] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 723.974959][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 730.793236][T13683] syz.8.2058: attempt to access beyond end of device [ 730.793236][T13683] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 730.806950][T13683] gfs2: error -5 reading superblock [ 731.577292][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 732.052593][T13703] ubi1: attaching mtd0 [ 732.115506][T13701] ceph: No mds server is up or the cluster is laggy [ 733.970157][T13719] syz.2.2068 (13719): drop_caches: 2 [ 735.121763][T13723] kvm: kvm [13722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 735.165359][T13723] kvm: kvm [13722]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 735.795031][T13738] syz.3.2074: attempt to access beyond end of device [ 735.795031][T13738] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 735.959402][T13742] xt_hashlimit: size too large, truncated to 1048576 [ 736.172302][T13745] syzkaller0: entered promiscuous mode [ 736.199622][T13745] syzkaller0: entered allmulticast mode [ 742.608977][T13803] input: syz1 as /devices/virtual/input/input30 [ 746.560576][T13810] netlink: 'syz.2.2090': attribute type 21 has an invalid length. [ 747.413657][T13820] syz.1.2092 (13820): drop_caches: 2 [ 747.541814][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.548383][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.999707][T13844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.233532][T13852] vlan2: entered promiscuous mode [ 749.728997][ T5872] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 749.737188][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 749.748505][T13852] bond0: (slave vlan2): Opening slave failed [ 749.757827][ T5872] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 750.152536][T13858] IPVS: Error connecting to the multicast addr [ 751.252149][T13870] syz.8.2105 (13870): attempted to duplicate a private mapping with mremap. This is not supported. [ 751.809000][ T5872] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 751.815263][ T5872] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 751.847059][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 752.961795][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2107'. [ 753.234343][T13892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 754.677441][ T5872] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 754.683562][ T5872] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 754.963026][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 755.447664][T13929] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 755.645446][T13938] kvm: pic: non byte read [ 755.647970][T13933] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.659073][T13933] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.668151][T13933] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.676930][T13933] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.679076][T13938] kvm: pic: level sensitive irq not supported [ 755.685875][T13938] kvm: pic: non byte read [ 756.367115][T13938] kvm: pic: level sensitive irq not supported [ 756.367209][T13938] kvm: pic: non byte read [ 756.604741][T13933] team0: Port device vxlan0 added [ 760.688741][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 760.694873][ T5872] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 760.702985][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 763.606000][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 763.797560][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 763.806286][ T5900] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 763.817073][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.825110][ T5900] usb 2-1: Product: syz [ 763.829607][ T5900] usb 2-1: Manufacturer: syz [ 763.834274][ T5900] usb 2-1: SerialNumber: syz [ 763.841788][ T5900] usb 2-1: config 0 descriptor?? [ 764.832622][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 764.839146][ T5900] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 764.848502][ T5872] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 765.474267][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 765.482248][ T5900] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 765.501971][ T5900] usb 2-1: USB disconnect, device number 26 [ 767.257991][T14054] xt_l2tp: unknown flags: 3b [ 768.333731][T14059] 9pnet: bogus RREAD count (69 > 41) [ 768.399544][ T29] audit: type=1800 audit(1733792174.684:279): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2144" name="/" dev="9p" ino=2 res=0 errno=0 [ 768.403776][T14062] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 769.383430][T14050] kvm: kvm [14049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 769.395624][T14050] kvm: kvm [14049]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 776.729947][T14151] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 777.536385][T14153] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 777.623090][T14144] kvm: kvm [14143]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 778.762677][ T29] audit: type=1326 audit(1733792185.094:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14167 comm="syz.8.2169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0a57fed9 code=0x0 [ 781.978995][T14196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2175'. [ 782.542529][T14200] binder: 14183:14200 ioctl c0306201 20000680 returned -14 [ 783.890337][ T5833] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 784.105083][ T5833] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 784.611341][ T5833] usb 3-1: USB disconnect, device number 28 [ 785.287605][T14225] syz.6.2184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 785.359500][T14226] bad cache= option: none [ 785.359500][T14226] [ 785.366798][T14226] CIFS: VFS: bad cache= option: none [ 790.723351][T14263] kvm: kvm [14261]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 790.775359][T14263] kvm: kvm [14261]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8ff [ 790.840776][T14263] kvm: kvm [14261]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff [ 790.900049][ T29] audit: type=1804 audit(1733792197.234:281): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2197" name="/newroot/457/bus/file1" dev="overlay" ino=2605 res=1 errno=0 [ 790.993010][T14263] kvm_intel: kvm [14261]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8ff [ 791.368321][T14280] rdma_op ffff88803377a9f0 conn xmit_rdma 0000000000000000 [ 792.309500][ T29] audit: type=1800 audit(1733792198.654:282): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2203" name="/" dev="9p" ino=2 res=0 errno=0 [ 796.729871][T14304] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 798.417800][T14334] binder: 14333:14334 ioctl c018aa3f 0 returned -22 [ 799.948378][T14357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.965998][T14354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.452091][T14372] ALSA: mixer_oss: invalid OSS volume '' [ 807.160999][T14416] syz.1.2237: attempt to access beyond end of device [ 807.160999][T14416] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 807.181490][T14416] syz.1.2237: attempt to access beyond end of device [ 807.181490][T14416] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 807.195125][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 807.215565][T14416] syz.1.2237: attempt to access beyond end of device [ 807.215565][T14416] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 807.229204][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 807.243140][T14416] syz.1.2237: attempt to access beyond end of device [ 807.243140][T14416] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 807.261823][T14416] syz.1.2237: attempt to access beyond end of device [ 807.261823][T14416] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 807.275442][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 807.286327][T14416] syz.1.2237: attempt to access beyond end of device [ 807.286327][T14416] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 807.301103][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 807.315280][T14416] syz.1.2237: attempt to access beyond end of device [ 807.315280][T14416] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 807.329965][T14416] syz.1.2237: attempt to access beyond end of device [ 807.329965][T14416] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 807.343579][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 807.354293][T14416] syz.1.2237: attempt to access beyond end of device [ 807.354293][T14416] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 807.368118][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 807.380638][T14416] syz.1.2237: attempt to access beyond end of device [ 807.380638][T14416] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 807.394889][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 807.407114][T14416] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 807.417694][T14416] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 809.007664][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.014063][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.866339][T14420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.125558][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2246'. [ 812.144496][T14455] netlink: 'syz.1.2247': attribute type 32 has an invalid length. [ 812.184218][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 812.208595][T14455] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 814.667829][T14477] x_tables: unsorted entry at hook 3 [ 820.095511][T14525] team_slave_0: entered promiscuous mode [ 820.101680][T14525] team_slave_1: entered promiscuous mode [ 820.118799][T14525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 820.145323][T14525] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 820.765371][T14529] bond0: entered promiscuous mode [ 820.830016][T14529] bond_slave_0: entered promiscuous mode [ 820.929350][T14529] bond_slave_1: entered promiscuous mode [ 820.978329][T14529] macvlan2: entered promiscuous mode [ 820.983678][T14529] team0: entered promiscuous mode [ 821.537651][T14536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 822.156377][T14556] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2275'. [ 823.043920][T14563] fuse: Unknown parameter '0x0000000000000006' [ 824.156773][ T29] audit: type=1800 audit(1733792230.414:283): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2280" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 825.415818][T14597] kvm: kvm [14591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 826.695983][T14592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 826.707844][T14592] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 826.734152][T14592] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 838.661083][T14702] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 843.130678][T14746] openvswitch: netlink: IP tunnel dst address not specified [ 844.985368][T14771] xt_bpf: check failed: parse error [ 852.648200][T14819] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 853.436384][T14824] xt_policy: neither incoming nor outgoing policy selected [ 853.915563][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 856.718732][T14857] mkiss: ax0: crc mode is auto. [ 857.861309][T14866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.818949][T14881] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2362'. [ 862.344792][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2365'. [ 862.353985][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2365'. [ 862.363062][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2365'. [ 862.372225][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2365'. [ 862.389062][T14892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.615467][T14888] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 865.281737][T14935] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 865.317931][T14935] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 870.868966][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.880420][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.423861][T14984] kvm: kvm [14983]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x220000000000 [ 871.436770][T15005] netlink: 'syz.8.2396': attribute type 1 has an invalid length. [ 871.444581][T15005] netlink: 'syz.8.2396': attribute type 3 has an invalid length. [ 871.452500][T15005] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2396'. [ 871.461631][T15005] NCSI netlink: No device for ifindex 813332851 [ 871.481700][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2397'. [ 871.490154][T14984] kvm: kvm [14983]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x2fff00000000 [ 871.670444][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 872.354289][T15013] netlink: 'syz.8.2401': attribute type 2 has an invalid length. [ 872.362523][T15013] netlink: 'syz.8.2401': attribute type 9 has an invalid length. [ 872.370648][T15013] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2401'. [ 872.933243][T15018] kvm: kvm [15014]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 872.985624][T15018] kvm: kvm [15014]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 878.663351][T15074] binder: BINDER_SET_CONTEXT_MGR already set [ 878.669800][T15074] binder: 15073:15074 ioctl 4018620d 20000040 returned -16 [ 878.976942][ T29] audit: type=1326 audit(1733792286.281:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 879.292923][ T29] audit: type=1326 audit(1733792286.291:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 879.573854][ T29] audit: type=1326 audit(1733792286.291:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 879.596829][ T29] audit: type=1326 audit(1733792286.291:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 879.618604][ T29] audit: type=1326 audit(1733792286.291:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 879.642903][ T29] audit: type=1326 audit(1733792286.291:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 881.420934][ T29] audit: type=1326 audit(1733792286.291:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 881.550385][ T29] audit: type=1326 audit(1733792286.291:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 881.625055][ T29] audit: type=1326 audit(1733792286.301:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 882.665833][ T29] audit: type=1326 audit(1733792286.301:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15075 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f68e097fed9 code=0x7ffc0000 [ 886.546765][ T25] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 886.772088][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.867597][ T25] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 886.911064][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.737880][ T25] usb 7-1: config 0 descriptor?? [ 887.749855][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 890.158149][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 890.180042][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 890.201496][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 890.236774][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 890.255455][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 890.264472][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 890.275899][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 890.298215][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 890.996915][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 891.004383][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 891.011796][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 891.019221][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 891.028700][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 891.370503][T15157] [ 891.372885][T15157] ====================================================== [ 891.379915][T15157] WARNING: possible circular locking dependency detected [ 891.386949][T15157] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 891.394071][T15157] ------------------------------------------------------ [ 891.401104][T15157] syz.3.2437/15157 is trying to acquire lock: [ 891.407208][T15157] ffff8881427f8fa0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 891.417446][T15157] [ 891.417446][T15157] but task is already holding lock: [ 891.424821][T15157] ffff8881427f8a70 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 891.435088][T15157] [ 891.435088][T15157] which lock already depends on the new lock. [ 891.435088][T15157] [ 891.445478][T15157] [ 891.445478][T15157] the existing dependency chain (in reverse order) is: [ 891.454477][T15157] [ 891.454477][T15157] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 891.463071][T15157] lock_acquire+0x1ed/0x550 [ 891.468085][T15157] blk_mq_submit_bio+0x1536/0x2390 [ 891.473700][T15157] __submit_bio+0x2c6/0x560 [ 891.478718][T15157] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 891.484855][T15157] block_read_full_folio+0x9b3/0xae0 [ 891.490639][T15157] filemap_read_folio+0x148/0x3b0 [ 891.496168][T15157] filemap_get_pages+0x18ca/0x2080 [ 891.501790][T15157] filemap_read+0x452/0xf50 [ 891.506805][T15157] blkdev_read_iter+0x2d8/0x430 [ 891.512158][T15157] vfs_read+0x991/0xb70 [ 891.516814][T15157] ksys_read+0x18f/0x2b0 [ 891.521557][T15157] do_syscall_64+0xf3/0x230 [ 891.526566][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.532976][T15157] [ 891.532976][T15157] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 891.541479][T15157] lock_acquire+0x1ed/0x550 [ 891.546489][T15157] down_read+0xb1/0xa40 [ 891.551151][T15157] filemap_fault+0xb3e/0x1490 [ 891.556332][T15157] __do_fault+0x135/0x390 [ 891.561165][T15157] handle_pte_fault+0x39eb/0x5ed0 [ 891.566694][T15157] handle_mm_fault+0x1053/0x1ad0 [ 891.572136][T15157] exc_page_fault+0x2b9/0x8b0 [ 891.577316][T15157] asm_exc_page_fault+0x26/0x30 [ 891.582675][T15157] iovec_from_user+0xfb/0x240 [ 891.587860][T15157] process_vm_rw+0x2d9/0xc50 [ 891.592950][T15157] __x64_sys_process_vm_readv+0xe0/0x100 [ 891.599083][T15157] do_syscall_64+0xf3/0x230 [ 891.604091][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.610486][T15157] [ 891.610486][T15157] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 891.618025][T15157] lock_acquire+0x1ed/0x550 [ 891.623029][T15157] __might_fault+0xc6/0x120 [ 891.628044][T15157] _copy_from_user+0x2a/0xc0 [ 891.633137][T15157] blk_trace_ioctl+0x1ad/0x9a0 [ 891.638401][T15157] blkdev_ioctl+0x40c/0x6a0 [ 891.643403][T15157] __se_sys_ioctl+0xf5/0x170 [ 891.648495][T15157] do_syscall_64+0xf3/0x230 [ 891.653505][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.659904][T15157] [ 891.659904][T15157] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 891.667724][T15157] lock_acquire+0x1ed/0x550 [ 891.672755][T15157] __mutex_lock+0x1ac/0xee0 [ 891.677765][T15157] blk_register_queue+0x15a/0x400 [ 891.683293][T15157] add_disk_fwnode+0x648/0xf80 [ 891.688559][T15157] brd_alloc+0x547/0x790 [ 891.693312][T15157] brd_init+0x126/0x1b0 [ 891.697970][T15157] do_one_initcall+0x248/0x870 [ 891.703236][T15157] do_initcall_level+0x157/0x210 [ 891.708674][T15157] do_initcalls+0x3f/0x80 [ 891.713508][T15157] kernel_init_freeable+0x435/0x5d0 [ 891.719210][T15157] kernel_init+0x1d/0x2b0 [ 891.724040][T15157] ret_from_fork+0x4b/0x80 [ 891.728953][T15157] ret_from_fork_asm+0x1a/0x30 [ 891.734221][T15157] [ 891.734221][T15157] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 891.741758][T15157] validate_chain+0x18ef/0x5920 [ 891.747116][T15157] __lock_acquire+0x1397/0x2100 [ 891.752466][T15157] lock_acquire+0x1ed/0x550 [ 891.757469][T15157] __mutex_lock+0x1ac/0xee0 [ 891.762474][T15157] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 891.768782][T15157] nbd_start_device+0x16c/0xaa0 [ 891.774133][T15157] nbd_ioctl+0x5dc/0xf40 [ 891.778883][T15157] blkdev_ioctl+0x57d/0x6a0 [ 891.783886][T15157] __se_sys_ioctl+0xf5/0x170 [ 891.788982][T15157] do_syscall_64+0xf3/0x230 [ 891.793989][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.800388][T15157] [ 891.800388][T15157] other info that might help us debug this: [ 891.800388][T15157] [ 891.810595][T15157] Chain exists of: [ 891.810595][T15157] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#52 [ 891.810595][T15157] [ 891.825354][T15157] Possible unsafe locking scenario: [ 891.825354][T15157] [ 891.832802][T15157] CPU0 CPU1 [ 891.838147][T15157] ---- ---- [ 891.843491][T15157] lock(&q->q_usage_counter(io)#52); [ 891.848850][T15157] lock(mapping.invalidate_lock#2); [ 891.856646][T15157] lock(&q->q_usage_counter(io)#52); [ 891.864524][T15157] lock(&q->sysfs_lock); [ 891.868838][T15157] [ 891.868838][T15157] *** DEADLOCK *** [ 891.868838][T15157] [ 891.876961][T15157] 4 locks held by syz.3.2437/15157: [ 891.882136][T15157] #0: ffff8880257c0998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 891.891429][T15157] #1: ffff8880257c08d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0 [ 891.902372][T15157] #2: ffff8881427f8a70 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 891.913058][T15157] #3: ffff8881427f8aa8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 891.924001][T15157] [ 891.924001][T15157] stack backtrace: [ 891.929875][T15157] CPU: 1 UID: 0 PID: 15157 Comm: syz.3.2437 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 891.940616][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 891.950653][T15157] Call Trace: [ 891.953921][T15157] [ 891.956838][T15157] dump_stack_lvl+0x241/0x360 [ 891.961504][T15157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.966688][T15157] ? __pfx__printk+0x10/0x10 [ 891.971273][T15157] print_circular_bug+0x13a/0x1b0 [ 891.976281][T15157] check_noncircular+0x36a/0x4a0 [ 891.981206][T15157] ? __pfx_check_noncircular+0x10/0x10 [ 891.986666][T15157] validate_chain+0x18ef/0x5920 [ 891.991510][T15157] ? __pfx_validate_chain+0x10/0x10 [ 891.996693][T15157] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 892.002653][T15157] ? preempt_schedule+0xe1/0xf0 [ 892.007494][T15157] ? preempt_schedule_common+0x84/0xd0 [ 892.012936][T15157] ? mark_lock+0x9a/0x360 [ 892.017251][T15157] __lock_acquire+0x1397/0x2100 [ 892.022086][T15157] lock_acquire+0x1ed/0x550 [ 892.026569][T15157] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 892.032540][T15157] ? __pfx_lock_acquire+0x10/0x10 [ 892.037549][T15157] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 892.043512][T15157] ? nbd_start_device+0x16c/0xaa0 [ 892.048519][T15157] ? __pfx___might_resched+0x10/0x10 [ 892.053791][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.059845][T15157] __mutex_lock+0x1ac/0xee0 [ 892.064336][T15157] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 892.070302][T15157] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 892.076264][T15157] ? __pfx___mutex_lock+0x10/0x10 [ 892.081278][T15157] ? __kasan_kmalloc+0x98/0xb0 [ 892.086031][T15157] ? __kmalloc_cache_noprof+0x243/0x390 [ 892.091560][T15157] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 892.097530][T15157] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 892.103320][T15157] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 892.109197][T15157] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 892.115421][T15157] ? __mutex_lock+0xd5f/0xee0 [ 892.120086][T15157] ? __mutex_lock+0x5ef/0xee0 [ 892.124748][T15157] ? nbd_ioctl+0x13c/0xf40 [ 892.129150][T15157] ? __pfx___mutex_lock+0x10/0x10 [ 892.134158][T15157] ? blkdev_common_ioctl+0xd4/0x2460 [ 892.139425][T15157] nbd_start_device+0x16c/0xaa0 [ 892.144262][T15157] nbd_ioctl+0x5dc/0xf40 [ 892.148489][T15157] ? __pfx_nbd_ioctl+0x10/0x10 [ 892.153258][T15157] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 892.159222][T15157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.165531][T15157] ? file_to_blk_mode+0xcc/0x140 [ 892.170449][T15157] ? __pfx_nbd_ioctl+0x10/0x10 [ 892.175203][T15157] blkdev_ioctl+0x57d/0x6a0 [ 892.179705][T15157] ? __pfx_blkdev_ioctl+0x10/0x10 [ 892.184735][T15157] ? do_vfs_ioctl+0x152/0x2e40 [ 892.189496][T15157] ? __se_sys_ioctl+0x8e/0x170 [ 892.194246][T15157] ? __pfx_blkdev_ioctl+0x10/0x10 [ 892.199254][T15157] __se_sys_ioctl+0xf5/0x170 [ 892.203856][T15157] do_syscall_64+0xf3/0x230 [ 892.208346][T15157] ? clear_bhb_loop+0x35/0x90 [ 892.213013][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.218890][T15157] RIP: 0033:0x7f68e097fed9 [ 892.223300][T15157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.242891][T15157] RSP: 002b:00007f68e1799058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.251292][T15157] RAX: ffffffffffffffda RBX: 00007f68e0b46080 RCX: 00007f68e097fed9 [ 892.259249][T15157] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 892.267202][T15157] RBP: 00007f68e09f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 892.275153][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.283116][T15157] R13: 0000000000000000 R14: 00007f68e0b46080 R15: 00007ffece0b4e48 [ 892.291073][T15157] [ 892.294089][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.341888][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 892.358751][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 892.372022][ T25] pwc: Registered as video103. [ 892.383980][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 892.466320][ T25] usb 7-1: USB disconnect, device number 19 [ 893.036806][ T5823] block nbd3: Receive control failed (result -32) [ 893.043339][ T5823] block nbd3: Receive control failed (result -32) [ 893.110604][T15154] block nbd3: shutting down sockets