last executing test programs: 1m44.267218166s ago: executing program 2 (id=132): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x8) syz_clone3(&(0x7f00000002c0)={0x20040400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x17}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000200)=""/180, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x58) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) fcntl$lock(r0, 0x24, &(0x7f0000000340)={0x1, 0x1, 0x7, 0x7, r1}) 1m43.300972855s ago: executing program 2 (id=136): bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfd3fc}, 0x1c}, 0x1, 0x0, 0x0, 0x20060054}, 0x20008850) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xfffffffffffffc47) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0x3f, &(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffef5, &(0x7f000000cf3d)=""/195, 0x0, 0x7b, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000000c0)={0x2, 0x8}) 1m42.90772653s ago: executing program 2 (id=138): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_newnexthop={0x24, 0x68, 0x521, 0x70bd2a, 0x0, {}, [@NHA_OIF={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40020042, 0x0, 0x0) 1m42.486671368s ago: executing program 2 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0x7b}}], 0x48}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8735, 0x204401) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/bnep\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 1m41.598583394s ago: executing program 2 (id=143): r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/128, 0x80}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x14021, 0x104) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) futex(&(0x7f0000001cc0), 0xabb972f8bb74d1b2, 0x0, 0x0, &(0x7f0000000100)=0x1000000, 0x8ffffff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)="d6", 0x3, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000847fff)="d6", 0x3, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[{0xfff7, 0x2, 0x5, 0x8}, {0x3, 0x7f, 0x6, 0x4}, {0x3, 0x8, 0xff, 0x100}]}) io_submit(r1, 0x0, 0x0) 1m41.080982163s ago: executing program 2 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, 0x0, 0x2a0101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r5, &(0x7f0000000080)) (async) timer_gettime(r5, &(0x7f0000000080)) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000300)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0xe, &(0x7f0000000340)=""/228) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0xe, &(0x7f0000000340)=""/228) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) (async) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m25.756840596s ago: executing program 32 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, 0x0, 0x2a0101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r5, &(0x7f0000000080)) (async) timer_gettime(r5, &(0x7f0000000080)) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000300)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0xe, &(0x7f0000000340)=""/228) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0xe, &(0x7f0000000340)=""/228) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) (async) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 9.189593773s ago: executing program 4 (id=445): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000540)="0503092c8f0b480301020d0086ddf7c25975e014b02f0800eb2b2ff0dac8897c6b118777faff30236beae6efafbb1c65f7ffff306610", 0x36, 0x800, 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000000)={0x6c, 0x7, 0x52, 0x32, "f59c91f7917f11c08454403ed242c541c0f9ec818f2f3a60848b92a6a67930e48c22e3f0e6c2b187970ca548a0b2e2f573b7"}, 0x52, 0x0) 9.116206623s ago: executing program 4 (id=446): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000340)='./file0/file0\x00', 0x30200, 0x10) accept4$unix(r3, &(0x7f0000000240)=@abs, &(0x7f00000003c0)=0x6e, 0x80000) pipe(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040), 0x3b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x8, [0x400, 0x9]}, {0x80000000, 0x0, 0x2, [0x2]}, 0x0, [0x0, 0xfffffffc]}) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707573657420c5302dc6d43bfafecba2135547819df763fa577ce60de286307b4e3f36dcd3ed80d9246b"], 0x8) 8.247947583s ago: executing program 1 (id=450): mkdir(&(0x7f0000000380)='./file0\x00', 0xb0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) openat(r1, &(0x7f0000000500)='./file0/file0\x00', 0x40, 0x48) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fallocate(r0, 0x0, 0x9, 0x22) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)="d8", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x0, 0x9, 0x2, 0x5, 0x8, 0xfffffffffffffff0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f00000002c0)=0x8001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000340)={0x1000, 0x80a0000, 0x1, 0x5, 0x6}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) mq_open(&(0x7f0000000100)='${*,\xa0', 0x40, 0x69, &(0x7f0000000140)={0x800, 0xc000000000000, 0x37cb, 0x3}) setsockopt$ax25_int(r10, 0x101, 0x1, &(0x7f0000000000), 0x4) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0x7f, 0xfffffffb}}) 7.928274767s ago: executing program 5 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xb8, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x20000}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b15, &(0x7f00000006c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000800)='qnx4\x00', 0x2200c, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000020000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) 6.524834074s ago: executing program 5 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f00000005c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) creat(0x0, 0x2a) (async) creat(0x0, 0x2a) syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r8, r7, 0x0) (async) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000840)=[@acquire_done, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0xdddd0000, 0x80, &(0x7f0000000680)=""/128}]}) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r6, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000711041000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 6.352412565s ago: executing program 3 (id=455): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001a70adb08a11728010abf010203010902120001000000000904c4"], 0x0) 6.254605701s ago: executing program 1 (id=456): syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff0001220500090581"], 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback, 0xffffffffffffffff, 0x36, 0x20, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (rerun: 32) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x34, &(0x7f0000000140)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) io_uring_enter(r3, 0x7e77, 0x2b49, 0x0, 0x0, 0x0) (rerun: 64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) (rerun: 64) 6.043935577s ago: executing program 5 (id=457): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x4a, 0x0, &(0x7f0000000ec0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/31, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a80)={0x2, 0x0, [{0xd000, 0x56, &(0x7f0000000780)=""/86}, {0x4692a6a7eac05d15, 0xc7, &(0x7f0000000880)=""/199}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0xffffffdd) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r3 = userfaultfd(0x1) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010043bd7000fddbdf250900000030000380060007004e2100000800010001002000140002206272696467655f5b6c6176655f3000000800030000000000"], 0x44}}, 0x48040) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) io_uring_setup(0x9f7, &(0x7f0000000080)={0x0, 0x6fb5, 0x4, 0x0, 0x14f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioperm(0x8, 0x2, 0x747) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) unshare(0x10020280) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 5.816051866s ago: executing program 1 (id=458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="8d31b464216b2c93288fc6130141012f362da490161eff468a4527ade0e4cfdaf819f7967ac0f357aa9b7b4a51a87a406251e965143485dff65d9e3795c1c909eea897e724ef3715ef43d39ba297711f99b1083283d8e0678d7b175ead97a86a18a4d89ff3336b9e", @ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.668740537s ago: executing program 4 (id=460): setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x10000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0xc, 0x0, 0x401, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = dup3(r2, r0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r6, r4, 0x18, 0x28, 0x0, @void, @void, @void, @value=r8, r5}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000001340)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a157f}) 5.463766156s ago: executing program 4 (id=461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="e4cfd50df7f83399bd3afda7d618000000ffffffff000000000000020018010000786c6c2500000000002020207b1af8ff00000000bfa100000008000000cd0300000600000085000000060000009500"/101], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000005c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x80, 0xffffffffffffffff}, @generic={0x6, 0x6, 0xf, 0x5, 0x1000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2a1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x48000006) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000bc0), 0x20000000}, 0x20) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_int(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000880f0a7cc22dbda15ed9fb9c8eb52aef00"/44], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001812000a195630003fa5b151a25060d4cadf6cdc88b7799c6c32e29fc8786f592a89d3e8a7479eb0edfe8b995d326963a4609f68e88605e9730688be14fa7b7ec369ff141e80dd087ef04395202a97100cc6eec1e81215d749389568c6a7a93c49a8491a1918af9aaabca7f4e3034b1b5867b5609aa96af298f49aae94903ee2ac96eee8e174a49459b0aa73fe126aba878b26c0f2cf487ad273a2913a9511a0ddf378bac80a2080d59a223012f2d17eaeb93bc9ecaf53000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000000008500000039000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.108246272s ago: executing program 0 (id=464): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc000000", @ANYRES32=0x0, @ANYBLOB="0000000044200000bc0012800b0001006970367674690000ac000280140005000000000000000000000000000000000114000400fe8000000000000000000000000000aa14000400fe8800000000000000000000000000011400040000000000000000000000ffff00000000080002000100010014000500fc000000000000000000000000000000140004000000000000000000000000000000000014000400ff02000000000000000000000000000114000400ff010000000000000000000000000001"], 0xdc}}, 0x4014) 3.888801737s ago: executing program 0 (id=465): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xf590, 0x6, 0x1, 0x0, 0xfe}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000100)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x6, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x9, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x9, '\x00', 0x3, 0x8000000000000001}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.580684453s ago: executing program 5 (id=466): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x503, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "eb6aa827f51d8dd0ff71beebecec97da0ab8442c3b0ff68676320ab5a677c871"}, @IFLA_BROADCAST={0xa, 0x2, @random="092d027cdee6"}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}}, 0x0) 3.465907662s ago: executing program 0 (id=467): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.346390529s ago: executing program 5 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x447c, 0x400, 0x1, 0x380, 0x0, 0x0}, &(0x7f0000000100)=0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) syz_io_uring_submit(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020}, 0x2020) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["26bfd5a484bab157258b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) 3.247270517s ago: executing program 0 (id=469): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xb0, 0x0, 0x8000000000000001, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, {0x1, 0x0, 0xfffffffffffffffe, 0x20000, 0x10000000000000, 0x3, 0x0, 0x0, 0x7, 0x1000, 0x2}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}]}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2018000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) ppoll(&(0x7f0000000100)=[{r0}, {r0}], 0x2, &(0x7f0000000180), 0x0, 0x0) 3.224552379s ago: executing program 3 (id=470): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$bind(0x0, 0x0, &(0x7f0000000300), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f, 0x20, 0x4, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x80000000, 0x8, 0x1, "ade18d5c6d435e3120ef018591a47520d29859ff1d463b50b02cc2ee8640a80b", 0x3031334d}) syz_open_dev$media(0x0, 0x1, 0xb4d01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)='X', 0x1}], 0x1) 3.11074998s ago: executing program 1 (id=471): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046, 0x0, 0x1}, &(0x7f0000002500), &(0x7f0000002540)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x58b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x5767c000) 2.988048028s ago: executing program 5 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0xd9084, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef}]}) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') creat(&(0x7f0000000200)='./file5\x00', 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) 2.145572087s ago: executing program 1 (id=473): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c76a3ae9f5216cae583170000fcdbf3c00d1c070a017b97eb35156f81df2502002016c300000604000000000036a60a24889c2e167700"/65], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x81, 0x2, 0x40, @remote, @private2, 0x8000, 0x10, 0x6, 0x7}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private2, 0x1e, r2}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000300)=0xfffffffffffffec1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.100045132s ago: executing program 4 (id=474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xb8, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x20000}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b15, &(0x7f00000006c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000800)='qnx4\x00', 0x2200c, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000020000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) 2.032052187s ago: executing program 3 (id=475): setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x10000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000001340)={0x48, 0x7, r4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2a157f}) 1.916481227s ago: executing program 0 (id=476): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.838467618s ago: executing program 3 (id=477): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) tee(r0, r0, 0x3, 0x5) 1.747282855s ago: executing program 3 (id=478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4) 239.245601ms ago: executing program 3 (id=479): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2", 0xffffffffffffffff}) getpid() ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r4, 0xffffffffffffffff}) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@arm64={0x4, 0x1, 0x0, '\x00', 0x7}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0x7}}]}]}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r1, 0x25, 0x8, @void}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0xa, "4fd9"}, @global=@item_012={0x2, 0x1, 0x1, "0911"}]}}, 0x0}, 0x0) 25.941496ms ago: executing program 1 (id=480): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4008000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001"], 0x114}], 0x1}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xb2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x1127000, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x8}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB="240000000104010100b180b5db5a66b04500000605000100010000000800034000002028"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x7, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20a100, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 23.132556ms ago: executing program 4 (id=481): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000002c0)={0x0, 0x2, 0x5, '\x00', &(0x7f0000000200)=0x7}) (async) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="2018e810c9213c5f907960933dbfab57fb35cdd271", 0x15}, {&(0x7f0000000f40)='~', 0x1}], 0x2, 0x0, 0x0, 0x40}}], 0x1, 0x40811) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x240400c1) (async) r5 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x98d}) 0s ago: executing program 0 (id=482): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c}) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="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", 0xfd29}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x246000, 0x0) r6 = dup2(r5, r0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x3, r6}) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 65.164127][ T5823] veth0_vlan: entered promiscuous mode [ 65.182376][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.193966][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.206752][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.221492][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.232371][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.243454][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.254573][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.265947][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.285745][ T5823] veth1_vlan: entered promiscuous mode [ 65.296266][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.307004][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.319347][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.331361][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.341575][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.351052][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.359848][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.372855][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.383722][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.393990][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.407276][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.418396][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.444644][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.456299][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.466808][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478079][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.601334][ T5823] veth0_macvtap: entered promiscuous mode [ 65.614031][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.629729][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.637842][ T5817] veth0_vlan: entered promiscuous mode [ 65.658984][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.661124][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.675160][ T5817] veth1_vlan: entered promiscuous mode [ 65.680995][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.684204][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.722848][ T5823] veth1_macvtap: entered promiscuous mode [ 65.743272][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.753602][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.786062][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.793928][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.817799][ T5817] veth0_macvtap: entered promiscuous mode [ 65.832727][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.843432][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.857270][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.868090][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.879810][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.890345][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.900325][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.910874][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.923831][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.938137][ T5817] veth1_macvtap: entered promiscuous mode [ 65.957977][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.992308][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.007811][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.017770][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.028718][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.038870][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.049452][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.060463][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.080944][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.091761][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.101746][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.112280][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.122274][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.132818][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.142779][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.153293][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.164338][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.174777][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.185610][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.195945][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.206553][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.216455][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.226943][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.236831][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.247301][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.258652][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.271608][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282045][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292959][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302127][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.340487][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.349790][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.360790][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385940][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.457680][ T5904] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.504525][ T5904] Zero length message leads to an empty skb [ 66.519298][ T5904] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.564125][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.579386][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.769197][ T5834] Bluetooth: hci2: command tx timeout [ 66.769214][ T5831] Bluetooth: hci0: command tx timeout [ 66.836160][ T5834] Bluetooth: hci3: command tx timeout [ 66.838411][ T5831] Bluetooth: hci1: command tx timeout [ 66.842607][ T5834] Bluetooth: hci4: command tx timeout [ 66.852113][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.884612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.987325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.061962][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.423007][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.446614][ T29] audit: type=1800 audit(1735174662.157:2): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.6" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 67.487462][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.501296][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.523693][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.480909][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.826154][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.838437][ T5834] Bluetooth: hci0: command tx timeout [ 68.844139][ T5834] Bluetooth: hci2: command tx timeout [ 68.916392][ T5831] Bluetooth: hci1: command tx timeout [ 68.921980][ T5834] Bluetooth: hci3: command tx timeout [ 68.927738][ T5834] Bluetooth: hci4: command tx timeout [ 69.067527][ T5821] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 69.086027][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.188753][ T5821] usb 3-1: config 0 descriptor?? [ 70.842757][ T5821] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 70.854772][ T5821] asix 3-1:0.0: probe with driver asix failed with error -71 [ 70.934330][ T5821] usb 3-1: USB disconnect, device number 2 [ 71.724409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731046][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.975930][ T57] cfg80211: failed to load regulatory.db [ 133.158374][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164770][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.116369][ T5977] process 'syz.1.13' launched '/dev/fd/4' with NULL argv: empty string added [ 166.325846][ T57] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 166.595609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 166.787878][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 166.798719][ T57] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 166.816855][ T57] usb 4-1: config 0 has no interface number 0 [ 166.832522][ T57] usb 4-1: config 0 interface 237 has no altsetting 0 [ 166.843397][ T57] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 166.852656][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.865770][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.873950][ T57] usb 4-1: Product: syz [ 166.878621][ T57] usb 4-1: Manufacturer: syz [ 166.883299][ T57] usb 4-1: SerialNumber: syz [ 166.897015][ T57] usb 4-1: config 0 descriptor?? [ 166.913233][ T57] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 167.007347][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.021596][ T25] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.051125][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.066061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 167.073591][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 167.156151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #101!!! [ 167.165594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 167.176949][ T5979] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 167.195652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 167.209111][ T6000] netlink: 'syz.1.20': attribute type 3 has an invalid length. [ 167.215608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 167.228040][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.237733][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.246205][ T25] usb 3-1: Product: syz [ 167.250482][ T25] usb 3-1: Manufacturer: syz [ 167.260685][ T57] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 167.269171][ T57] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 167.277924][ T57] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 167.291849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.301053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 167.313912][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 167.339604][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 167.346570][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 167.373440][ T11] tipc: Subscription rejected, illegal request [ 167.484060][ T9] usb 4-1: USB disconnect, device number 2 [ 167.615865][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.123388][ T25] usb 3-1: USB disconnect, device number 3 [ 168.129740][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 168.155203][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.171805][ T6010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.200238][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.242028][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.260120][ T6010] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 168.269444][ T6010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 168.289838][ T5874] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 168.331846][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.343909][ T6000] syz.1.20 (6000): drop_caches: 2 [ 168.403663][ T5874] usb 5-1: config 0 descriptor?? [ 168.650870][ T6018] tmpfs: Unknown parameter 'grpquotar' [ 168.926597][ T5874] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 168.959890][ T5874] razer 0003:1532:010D.0001: unknown main item tag 0xd [ 168.997131][ T5874] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 169.087485][ T5874] razer 0003:1532:010D.0001: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.4-1/input0 [ 169.199333][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.419102][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.525361][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.582147][ T5871] usb 5-1: USB disconnect, device number 2 [ 170.756936][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.815557][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 170.923689][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 170.951034][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 170.971483][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.008707][ T9] usb 1-1: Product: syz [ 171.012891][ T9] usb 1-1: Manufacturer: syz [ 171.379276][ T9] usb 1-1: SerialNumber: syz [ 171.403157][ T9] usb 1-1: config 0 descriptor?? [ 171.420738][ T6022] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.489216][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 171.524980][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 171.574266][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 172.025850][ T57] usb 1-1: USB disconnect, device number 2 [ 172.025901][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 172.213428][ T6058] can0: slcan on ttyS3. [ 172.825797][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.142194][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.225669][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.232353][ T5874] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 173.257360][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.315816][ T5874] usb 4-1: config 0 descriptor?? [ 173.340448][ T6058] can0 (unregistered): slcan off ttyS3. [ 173.636776][ T6072] overlayfs: missing 'lowerdir' [ 173.671024][ T6076] fuse: Bad value for 'rootmode' [ 174.089234][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 174.241880][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.038677][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 175.044735][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.972430][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.998171][ T5874] usb 4-1: USB disconnect, device number 3 [ 176.152105][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 176.164766][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.296486][ T9] usb 5-1: config 0 descriptor?? [ 177.118018][ T5825] Bluetooth: Unexpected continuation frame (len 18) [ 177.956669][ T6124] Cannot find del_set index 0 as target [ 178.005923][ T6107] netlink: ct family unspecified [ 178.011683][ T6107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.025779][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.186194][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 178.204873][ T5871] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 178.215685][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.229431][ T5871] usb 2-1: Product: syz [ 178.234628][ T5871] usb 2-1: Manufacturer: syz [ 178.240231][ T5871] usb 2-1: SerialNumber: syz [ 178.254304][ T5871] usb 2-1: config 0 descriptor?? [ 178.268020][ T5871] usb 2-1: active config #0 != 1 ?? [ 178.474004][ T5871] usb 2-1: USB disconnect, device number 2 [ 178.639578][ T9] pegasus 5-1:0.0: setup Pegasus II specific registers [ 178.765177][ T9] pegasus 5-1:0.0: can't locate MII phy, using default [ 178.787976][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.817766][ T9] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, be:33:d6:7c:7b:75 [ 178.840371][ T9] usb 5-1: USB disconnect, device number 3 [ 178.900023][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.52'. [ 178.915608][ T6131] bond0: entered allmulticast mode [ 178.922779][ T6131] bond_slave_0: entered allmulticast mode [ 178.929401][ T6131] bond_slave_1: entered allmulticast mode [ 178.939636][ T6131] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 178.964480][ T6131] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 178.973289][ T6131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 179.005811][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 179.019910][ T6131] loop2: detected capacity change from 0 to 7 [ 179.027855][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.052541][ T6131] Dev loop2: unable to read RDB block 7 [ 179.058555][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.077499][ T6131] loop2: AHDI p2 p3 p4 [ 179.081874][ T6131] loop2: partition table partially beyond EOD, truncated [ 179.097879][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.320381][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.343308][ T6131] loop2: p2 start 131072 is beyond EOD, truncated [ 179.346028][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.376215][ T6131] loop2: p3 start 16777216 is beyond EOD, truncated [ 179.387907][ T5872] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.398893][ T5872] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.422869][ T5872] usb 1-1: Manufacturer: syz [ 179.485046][ T5872] usb 1-1: config 0 descriptor?? [ 180.433152][ T6153] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 180.495729][ T5872] rc_core: IR keymap rc-hauppauge not found [ 180.531832][ T5872] Registered IR keymap rc-empty [ 180.588982][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.631449][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.697298][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 180.764886][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 180.812208][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.906578][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.955994][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.034827][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.088857][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.156907][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.179356][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.226897][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.295768][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.367289][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 181.436698][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.513977][ T6168] tipc: Started in network mode [ 181.529456][ T5871] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 181.546081][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.546570][ T6168] tipc: Node identity 6, cluster identity 2 [ 181.555371][ T5871] usb 3-1: Product: syz [ 181.567160][ T5872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 181.599286][ T5871] usb 3-1: Manufacturer: syz [ 181.646610][ T6168] tipc: Node number set to 6 [ 181.664688][ T5871] usb 3-1: SerialNumber: syz [ 181.677732][ T5872] mceusb 1-1:0.0: Registered Е with mce emulator interface version 1 [ 181.695656][ T6168] tipc: Cannot configure node identity twice [ 181.712263][ T5872] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 181.731661][ T5871] usb 3-1: config 0 descriptor?? [ 181.804816][ T5872] usb 1-1: USB disconnect, device number 3 [ 182.005697][ T5871] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 182.216551][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.225258][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.296081][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.536252][ T5871] usb write operation failed. (-71) [ 182.595806][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 182.661535][ T5836] usb 5-1: config 143 has an invalid interface number: 95 but max is 3 [ 182.675718][ T5836] usb 5-1: config 143 contains an unexpected descriptor of type 0x1, skipping [ 182.684713][ T5836] usb 5-1: config 143 contains an unexpected descriptor of type 0x1, skipping [ 182.693737][ T5836] usb 5-1: config 143 contains an unexpected descriptor of type 0x2, skipping [ 182.731813][ T5836] usb 5-1: config 143 contains an unexpected descriptor of type 0x1, skipping [ 182.740867][ T5836] usb 5-1: config 143 has an invalid descriptor of length 252, skipping remainder of the config [ 182.751586][ T5836] usb 5-1: config 143 has 1 interface, different from the descriptor's value: 4 [ 182.760867][ T5836] usb 5-1: config 143 has no interface number 0 [ 182.767395][ T5836] usb 5-1: config 143 interface 95 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.780841][ T5836] usb 5-1: config 143 interface 95 has no altsetting 0 [ 182.789449][ T5871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.816142][ T5871] dvbdev: DVB: registering new adapter (Terratec H7) [ 182.842792][ T5871] usb 3-1: media controller created [ 182.844810][ T5836] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b7, bcdDevice=ae.00 [ 182.857637][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.859852][ T5871] usb read operation failed. (-71) [ 182.865857][ T5836] usb 5-1: Product: О [ 182.876354][ T5836] usb 5-1: Manufacturer: ŷꡕퟂ폿年㕢Ῡ轾명ᶾ䨪䭋ᢴ䌯唨黔䯘懼騪苻欹邜଩仝歜珢Ⓕ莅䀯㓗匢㮀ૡ같῏ᒰYᐘ꘧ᤖ⼽喦‴嚬 [ 182.894445][ T5836] usb 5-1: SerialNumber: 壻銮졇㧎㗡툖ꄇ駯直आｦ뙚ܽ뱲㡚ģ챉ఒົ諦嚽缻䳐⼗햨鬺⑬╶㵗䥩됫걑냤㥽䤞㬴ཝ琿弦⋇鴔艹ᖽ풤耏꿎ꏑ꼎炟렡⥕ꇣ玆≑㹗ḵ廱ሴ㻀⡦ਣ磳⚐瘛ꢭ➒ﰘ嘷郃뤻똼濟 [ 182.945642][ T5871] usb write operation failed. (-71) [ 182.963099][ T5871] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 183.024980][ T5871] usb 3-1: USB disconnect, device number 4 [ 183.192110][ T6171] usb usb7: usbfs: process 6171 (syz.4.65) did not claim interface 0 before use [ 183.332138][ T5836] option 5-1:143.95: GSM modem (1-port) converter detected [ 183.389035][ T5836] usb 5-1: USB disconnect, device number 4 [ 183.409895][ T5836] option 5-1:143.95: device disconnected [ 183.984077][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 184.145759][ T5871] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.328572][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 184.394115][ T5871] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 184.508118][ T5871] usb 4-1: config 0 has no interface number 0 [ 184.820667][ T5871] usb 4-1: New USB device found, idVendor=1c40, idProduct=052f, bcdDevice=70.6d [ 184.830732][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.845337][ T5871] usb 4-1: Product: syz [ 184.850321][ T5871] usb 4-1: Manufacturer: syz [ 184.855734][ T5871] usb 4-1: SerialNumber: syz [ 184.904063][ T5871] usb 4-1: config 0 descriptor?? [ 185.226292][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 185.233993][ T6228] Unsupported ieee802154 address type: 0 [ 186.417348][ T29] audit: type=1326 audit(1735174781.157:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922385d29 code=0x7ffc0000 [ 186.438781][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 186.439899][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 186.448577][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 186.453740][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 186.457579][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 186.502755][ T29] audit: type=1326 audit(1735174781.237:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6253 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0922385d29 code=0x7ffc0000 [ 186.507032][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 187.343233][ T57] usb 4-1: USB disconnect, device number 4 [ 187.879293][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'. [ 188.032261][ T6272] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 188.325654][ T5836] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 188.395715][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.425646][ T5871] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 188.477098][ T5836] usb 1-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 188.486521][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.497258][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.500174][ T5836] usb 1-1: config 0 descriptor?? [ 188.523092][ T5836] pwc: Samsung MPC-C30 USB webcam detected. [ 188.555663][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 188.562622][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.573648][ T5870] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.586755][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 188.596387][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.604635][ T5870] usb 2-1: Product: syz [ 188.609820][ T5870] usb 2-1: Manufacturer: syz [ 188.614826][ T5870] usb 2-1: SerialNumber: syz [ 188.615093][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.649002][ T5870] usb 2-1: config 0 descriptor?? [ 188.654137][ T5871] usb 5-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 188.676209][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 188.681525][ T5871] usb 5-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 188.696284][ T5871] usb 5-1: config 1 interface 0 altsetting 210 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.706547][ T5871] usb 5-1: config 1 interface 0 has no altsetting 0 [ 188.713563][ T5872] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 188.722129][ T5872] usb 4-1: config 0 has no interface number 0 [ 188.724186][ T5836] pwc: send_video_command error -71 [ 188.733980][ T5871] usb 5-1: string descriptor 0 read error: -22 [ 188.744029][ T5872] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 188.753246][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.753758][ T5836] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 188.762473][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.762501][ T5872] usb 4-1: Product: syz [ 188.771741][ T5836] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 188.792263][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.801936][ T5872] usb 4-1: Manufacturer: syz [ 188.811853][ T5836] usb 1-1: USB disconnect, device number 4 [ 188.816049][ T6279] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 188.825059][ T6279] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 188.832338][ T5872] usb 4-1: SerialNumber: syz [ 188.850674][ T5871] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 188.858764][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 188.867051][ T5872] usb 4-1: config 0 descriptor?? [ 188.898221][ T5872] i2c-tiny-usb 4-1:0.39: version 70.6d found at bus 004 address 005 [ 188.943868][ T5871] usb 2-1: USB disconnect, device number 3 [ 189.018917][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 189.027336][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 189.035428][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 189.044586][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 189.055714][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 189.056762][ T5836] usb 5-1: USB disconnect, device number 5 [ 189.083280][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 189.092747][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.103806][ T9] usb 3-1: config 0 descriptor?? [ 189.110845][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 189.118716][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 189.130643][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 189.323531][ T6280] input: syz0 as /devices/virtual/input/input8 [ 189.351578][ T5836] usb 3-1: USB disconnect, device number 5 [ 189.427324][ T5872] (null): failure reading functionality [ 189.448026][ T5872] i2c i2c-1: failure reading functionality [ 189.474473][ T5872] i2c i2c-1: connected i2c-tiny-usb device [ 189.506133][ T5872] usb 4-1: USB disconnect, device number 5 [ 189.588402][ T6289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.605058][ T6289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 189.623213][ T6290] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 189.632112][ T5828] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 189.635786][ T6289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.656803][ T6289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.672385][ T6289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.682517][ T6289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.688949][ T6289] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.697588][ T6289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.704128][ T6289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.927868][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 189.945896][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.947347][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'. [ 190.011953][ T6306] IPv6: sit1: Disabled Multicast RS [ 190.206294][ T5836] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.208584][ T6312] overlayfs: failed to resolve './file0': -2 [ 190.405701][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 190.574735][ T5836] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 190.587708][ T5836] usb 1-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 190.610306][ T5836] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 190.620496][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.636024][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.649609][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.649779][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.668790][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 190.681763][ T5872] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 190.694003][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.727529][ T5872] usb 2-1: config 0 descriptor?? [ 190.750384][ T6319] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 190.764283][ T6319] Tq: entered promiscuous mode [ 190.778985][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 191.657096][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 191.660178][ T5872] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 191.674881][ T5872] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 191.684516][ T5872] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 191.695171][ T5872] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 191.702675][ T5872] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 191.715776][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 191.719313][ T5872] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 191.722060][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 191.734446][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 191.806456][ T5872] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 192.089006][ T5872] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0002/input/input9 [ 192.115974][ T5871] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 192.234992][ T5872] usb 2-1: USB disconnect, device number 4 [ 192.359520][ T5871] usb 4-1: device descriptor read/64, error -71 [ 192.933650][ T5874] usb 1-1: USB disconnect, device number 5 [ 193.007749][ T6338] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 193.016121][ T6338] netlink: 55 bytes leftover after parsing attributes in process `syz.0.112'. [ 193.105580][ T5871] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 193.121117][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 193.164882][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 193.650250][ T5871] usb 4-1: device descriptor read/64, error -71 [ 193.766159][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 193.796086][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 193.802636][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 193.808867][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 193.835755][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 193.877387][ T5871] usb usb4-port1: attempt power cycle [ 194.156674][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 194.174593][ T5872] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 194.187390][ T5872] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.204372][ T5872] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.220079][ T5872] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.237044][ T6353] Bluetooth: MGMT ver 1.23 [ 194.247094][ T5872] usb 2-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 194.260052][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.277530][ T5872] usb 2-1: Product: syz [ 194.281814][ T5872] usb 2-1: Manufacturer: syz [ 194.286676][ T5872] usb 2-1: SerialNumber: syz [ 194.525932][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.533589][ T5871] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 194.624910][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.631614][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759470][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 194.767142][ T5871] usb 4-1: device not accepting address 8, error -71 [ 194.796079][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.806241][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 194.829130][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 194.838774][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.846964][ T9] usb 3-1: Product: syz [ 194.851215][ T9] usb 3-1: Manufacturer: syz [ 194.855923][ T9] usb 3-1: SerialNumber: syz [ 194.898340][ T5872] usbhid 2-1:1.0: can't add hid device: -22 [ 194.904447][ T5872] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 194.923096][ T9] usb 3-1: config 0 descriptor?? [ 194.931343][ T5872] usb 2-1: USB disconnect, device number 5 [ 195.353710][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 195.491349][ T9] usb 3-1: USB disconnect, device number 6 [ 195.625609][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 195.643066][ T57] usb 5-1: config 0 has an invalid interface number: 227 but max is 0 [ 195.651470][ T57] usb 5-1: config 0 has no interface number 0 [ 195.715653][ T57] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 195.736821][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.749163][ T57] usb 5-1: config 0 descriptor?? [ 195.764066][ T57] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 195.772344][ T57] cxusb: set interface failed [ 195.777669][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 195.789079][ T57] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.801373][ T57] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 195.810630][ T57] usb 5-1: media controller created [ 195.830074][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.061831][ T6379] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 196.111309][ T57] DVB: Unable to find symbol lgdt330x_attach() [ 196.118703][ T57] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 196.134112][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 196.140477][ T57] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 196.159010][ T57] usb 5-1: USB disconnect, device number 6 [ 196.769302][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.209174][ T57] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 197.219395][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.227033][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.234471][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.244098][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.252534][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.260381][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.268341][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.276283][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.283709][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.291581][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.299530][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.307384][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.314893][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.323346][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.331269][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.339663][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.348597][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.356945][ T5836] hid-generic 0080:0000:0003.0003: unknown main item tag 0x0 [ 197.377952][ T5836] hid-generic 0080:0000:0003.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 197.543880][ T6392] kvm: emulating exchange as write [ 198.292099][ T57] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.657354][ T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.667773][ T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.690179][ T57] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.708653][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.769311][ T57] usb 4-1: SerialNumber: syz [ 199.044719][ T57] usb 4-1: 0:2 : does not exist [ 199.052579][ T57] usb 4-1: unit 5: unexpected type 0x0b [ 199.670648][ T6427] overlayfs: failed to resolve './file0': -2 [ 199.724680][ T6392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.191289][ T6392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.217292][ T6441] overlayfs: failed to resolve './file0': -2 [ 200.352328][ T6392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.819041][ T6392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.213632][ T6451] mmap: syz.0.142 (6451) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.369153][ T6392] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.412478][ T6454] 9pnet_fd: Insufficient options for proto=fd [ 201.427454][ T6392] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.442227][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.467499][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.492491][ T6392] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.563704][ T29] audit: type=1326 audit(1735174796.297:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28785d29 code=0x7ffc0000 [ 201.602875][ T6392] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.629335][ T29] audit: type=1326 audit(1735174796.297:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28785d29 code=0x7ffc0000 [ 201.672959][ T9] usb 4-1: USB disconnect, device number 10 [ 201.688997][ T57] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.839764][ T5871] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.061006][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.121834][ T5871] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 202.142475][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.181693][ T5871] usb 1-1: config 0 descriptor?? [ 202.889143][ T6490] overlayfs: failed to resolve './file0': -2 [ 203.842281][ T6497] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 203.949001][ T6497] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 204.118218][ T6497] overlayfs: missing 'lowerdir' [ 204.169055][ T5871] uclogic 0003:5543:0003.0004: No inputs registered, leaving [ 204.917190][ T5871] uclogic 0003:5543:0003.0004: hidraw0: USB HID v0.01 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 205.282329][ T6510] netlink: 'syz.3.155': attribute type 11 has an invalid length. [ 205.290340][ T6510] netlink: 204 bytes leftover after parsing attributes in process `syz.3.155'. [ 205.910051][ T6517] x_tables: duplicate entry at hook 2 [ 206.831969][ T5871] usb 1-1: USB disconnect, device number 6 [ 207.128200][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 208.928271][ T6527] input: syz0 as /devices/virtual/input/input12 [ 208.989726][ T6529] binder: BINDER_SET_CONTEXT_MGR already set [ 209.036810][ T6529] binder: 6522:6529 ioctl 4018620d 200001c0 returned -16 [ 209.455564][ T9] usb 2-1: device descriptor read/64, error -71 [ 209.716136][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 209.809057][ T6532] bridge1: entered promiscuous mode [ 209.875861][ T6532] bridge1: entered allmulticast mode [ 209.925676][ T9] usb 2-1: device descriptor read/64, error -71 [ 210.115898][ T9] usb usb2-port1: attempt power cycle [ 210.411732][ T6532] team0: Port device bridge1 added [ 210.938635][ T6539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.323709][ T5871] IPVS: starting estimator thread 0... [ 211.585810][ T6540] IPVS: using max 30 ests per chain, 72000 per kthread [ 211.955690][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.086612][ T6548] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 212.995560][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.035802][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.263865][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 215.665759][ T6553] x_tables: duplicate entry at hook 2 [ 217.045781][ T5870] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.381650][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.417394][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.475734][ T5870] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 217.491001][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.529418][ T5870] usb 2-1: config 0 descriptor?? [ 217.610303][ T6578] input: syz0 as /devices/virtual/input/input13 [ 218.901223][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.912268][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.933981][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 218.969436][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 218.974279][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.984639][ T5870] usb 2-1: USB disconnect, device number 9 [ 218.994238][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.003804][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.013794][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.315522][ T5870] IPVS: starting estimator thread 0... [ 219.388309][ T6603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.515926][ T6604] IPVS: using max 21 ests per chain, 50400 per kthread [ 219.547253][ T5871] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.609417][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.980104][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.989504][ T5871] usb 4-1: config 151 has an invalid interface number: 192 but max is 0 [ 220.004728][ T5871] usb 4-1: config 151 has no interface number 0 [ 220.038601][ T5871] usb 4-1: config 151 interface 192 has no altsetting 0 [ 220.073928][ T6613] xt_policy: too many policy elements [ 220.090432][ T5871] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b8.85 [ 220.109216][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.122359][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.142327][ T5871] usb 4-1: Product: syz [ 220.156123][ T5871] usb 4-1: Manufacturer: syz [ 220.162782][ T5871] usb 4-1: SerialNumber: syz [ 220.222983][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.420275][ T5871] ldusb 4-1:151.192: Interrupt in endpoint not found [ 220.445992][ T5871] usb 4-1: USB disconnect, device number 11 [ 220.463798][ T82] bond0: (slave netdevsim0): Releasing backup interface [ 220.472244][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 220.491570][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.580191][ T6593] chnl_net:caif_netlink_parms(): no params data found [ 220.625034][ T6632] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 220.666064][ T6632] veth0_macvtap: left promiscuous mode [ 220.713689][ T6632] batman_adv: batadv0: Adding interface: macvtap0 [ 220.720645][ T6632] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.749643][ T6632] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 221.075726][ T5834] Bluetooth: hci0: command tx timeout [ 221.213760][ T82] bridge_slave_1: left allmulticast mode [ 221.219832][ T82] bridge_slave_1: left promiscuous mode [ 221.227282][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.614551][ T82] bridge_slave_0: left allmulticast mode [ 221.628201][ T82] bridge_slave_0: left promiscuous mode [ 221.636966][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.981314][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.990611][ T82] bond_slave_0: left allmulticast mode [ 222.999202][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.008706][ T82] bond_slave_1: left allmulticast mode [ 223.015147][ T82] bond0 (unregistering): Released all slaves [ 223.032754][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 223.134675][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.156177][ T5834] Bluetooth: hci0: command tx timeout [ 223.165669][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.172955][ T6593] bridge_slave_0: entered allmulticast mode [ 223.210916][ T6593] bridge_slave_0: entered promiscuous mode [ 223.229121][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.242155][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.250520][ T6665] xt_TCPMSS: Only works on TCP SYN packets [ 223.252216][ T6593] bridge_slave_1: entered allmulticast mode [ 223.263673][ T6593] bridge_slave_1: entered promiscuous mode [ 223.636345][ T5874] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 223.780951][ T6593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.795611][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 223.803049][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.814590][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.824891][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.838312][ T5874] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.847836][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.859388][ T5874] usb 5-1: config 0 descriptor?? [ 223.937469][ T6593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.310600][ T6593] team0: Port device team_slave_0 added [ 224.331539][ T6593] team0: Port device team_slave_1 added [ 224.368261][ T82] hsr_slave_0: left promiscuous mode [ 224.387609][ T82] hsr_slave_1: left promiscuous mode [ 224.393808][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.408518][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.421454][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.432767][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.470759][ T82] veth1_macvtap: left promiscuous mode [ 224.482675][ T82] veth0_macvtap: left promiscuous mode [ 224.494044][ T82] veth1_vlan: left promiscuous mode [ 224.503929][ T82] veth0_vlan: left promiscuous mode [ 224.564158][ T29] audit: type=1326 audit(1735174819.297:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.594442][ T29] audit: type=1326 audit(1735174819.297:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.625145][ T29] audit: type=1326 audit(1735174819.327:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.661145][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 224.676873][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.702140][ T5874] usb 5-1: USB disconnect, device number 7 [ 224.749526][ T29] audit: type=1326 audit(1735174819.327:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.825631][ T29] audit: type=1326 audit(1735174819.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.903447][ T29] audit: type=1326 audit(1735174819.327:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 224.988451][ T29] audit: type=1326 audit(1735174819.327:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 225.063436][ T29] audit: type=1326 audit(1735174819.327:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 225.108320][ T29] audit: type=1326 audit(1735174819.327:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 225.173403][ T29] audit: type=1326 audit(1735174819.327:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6664 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff995b85d29 code=0x7ffc0000 [ 225.235772][ T5834] Bluetooth: hci0: command tx timeout [ 225.376491][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.535780][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 225.547902][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.578359][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.651854][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 225.694182][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.751807][ T5871] usb 4-1: config 0 descriptor?? [ 226.334850][ T82] team0 (unregistering): Port device team_slave_1 removed [ 226.434558][ T82] team0 (unregistering): Port device team_slave_0 removed [ 227.318907][ T5834] Bluetooth: hci0: command tx timeout [ 227.610694][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 227.682112][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 227.724347][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 227.827595][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.827609][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.827624][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.828614][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.828625][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.828638][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.868407][ T5871] usb 4-1: USB disconnect, device number 12 [ 228.039120][ T6593] hsr_slave_0: entered promiscuous mode [ 228.046099][ T6593] hsr_slave_1: entered promiscuous mode [ 228.049065][ T6593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.049158][ T6593] Cannot create hsr debugfs directory [ 230.005951][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.075925][ T6593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.097202][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 230.133453][ T6593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.140496][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 230.175632][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 230.188159][ T6593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.202756][ T5874] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.244949][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.255775][ T6763] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 230.287422][ T5874] usb 5-1: Product: syz [ 230.296492][ T5874] usb 5-1: Manufacturer: syz [ 230.341147][ T6775] batman_adv: batadv0: Adding interface: ip6gretap1 [ 230.348778][ T5874] usb 5-1: SerialNumber: syz [ 230.364041][ T5874] r8152-cfgselector 5-1: Unknown version 0x0000 [ 230.373000][ T6775] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.399465][ T5874] r8152-cfgselector 5-1: config 0 descriptor?? [ 230.410524][ T6775] batman_adv: batadv0: Interface activated: ip6gretap1 [ 230.433009][ T6593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.629772][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.647074][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.655695][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 230.731428][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.808875][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.837453][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 230.846614][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.887634][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.907513][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.914739][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.942804][ T5836] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 230.980597][ T5874] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 230.981901][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.994884][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.025816][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 231.034629][ T5836] usb 1-1: Product: syz [ 231.041956][ T5836] usb 1-1: Manufacturer: syz [ 231.060486][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 231.081582][ T5836] usb 1-1: SerialNumber: syz [ 231.118303][ T5836] usb 1-1: config 0 descriptor?? [ 231.136399][ T5836] usb 1-1: NFC: intf ffff88805b88c000 id ffffffff8f2fa3a0 [ 231.602407][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.509863][ T6593] veth0_vlan: entered promiscuous mode [ 232.520090][ T5836] usb 1-1: USB disconnect, device number 8 [ 232.590303][ T6593] veth1_vlan: entered promiscuous mode [ 232.927868][ T6834] fuse: Unknown parameter '000000000000000000000100xffffffffffffffff' [ 233.499093][ T6593] veth0_macvtap: entered promiscuous mode [ 233.557929][ T6593] veth1_macvtap: entered promiscuous mode [ 233.641569][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'. [ 233.653889][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.677137][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.701114][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.746922][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.797746][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.829522][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.834989][ T6848] netlink: 76 bytes leftover after parsing attributes in process `syz.0.221'. [ 233.860621][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.901967][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.932675][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.972981][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.007993][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.051142][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.087190][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.119315][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.135067][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.151994][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.171780][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.185043][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.243424][ T6593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.253967][ T6593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.275120][ T6593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.292570][ T6593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.455382][ T6709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.488634][ T6709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.566740][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.588907][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.591323][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'. [ 234.658299][ T6879] x_tables: duplicate entry at hook 2 [ 234.663831][ T6879] x_tables: duplicate entry at hook 2 [ 235.343210][ T6906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.105628][ T5870] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.640619][ T6942] syz.5.240: attempt to access beyond end of device [ 236.640619][ T6942] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 237.229522][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 237.349419][ T5870] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 237.376362][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.417566][ T5870] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 237.448859][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.479378][ T5870] usb 1-1: config 0 descriptor?? [ 237.505737][ T9] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 237.659067][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 237.673973][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 237.704813][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 237.724920][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 237.735722][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 237.745891][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 237.772539][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 237.789264][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.825055][ T9] usb 2-1: config 0 descriptor?? [ 237.833744][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 237.840092][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 237.850369][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 237.945661][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 237.957422][ T5871] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.965788][ T5871] usb 5-1: config 0 has no interface number 0 [ 237.978578][ T5871] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 237.987971][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.019016][ T5871] usb 5-1: Product: syz [ 238.023399][ T5871] usb 5-1: Manufacturer: syz [ 238.033176][ T5871] usb 5-1: SerialNumber: syz [ 238.049759][ T5871] usb 5-1: config 0 descriptor?? [ 238.092955][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 238.094390][ T57] usb 2-1: USB disconnect, device number 10 [ 238.111718][ T6960] Bluetooth: MGMT ver 1.23 [ 238.460459][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.474501][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.493834][ T6952] [U] [ 238.497027][ T6952] [U] [ 238.499758][ T6952] [U] [ 238.502493][ T6952] [U] [ 238.515040][ T6952] [U] [ 238.517816][ T6952] [U] [ 238.520542][ T6952] [U] [ 238.523264][ T6952] [U] [ 238.533356][ T6952] [U] [ 238.536136][ T6952] [U] [ 238.538858][ T6952] [U] [ 238.541580][ T6952] [U] [ 238.550377][ T6974] netlink: 'syz.4.242': attribute type 3 has an invalid length. [ 238.559557][ T6952] [U] [ 238.562304][ T6952] [U] [ 238.565023][ T6952] [U] [ 238.567745][ T6952] [U] [ 238.570674][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.579640][ T6974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.242'. [ 238.597511][ T6952] [U] [ 238.600275][ T6952] [U] [ 238.602995][ T6952] [U] [ 238.605709][ T6952] [U] [ 238.650745][ T6952] [U] [ 238.655429][ T5871] gspca_spca1528: reg_w err -71 [ 238.719287][ T5871] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 238.778452][ T5871] usb 5-1: USB disconnect, device number 9 [ 238.849468][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 238.893872][ T9] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 238.923087][ T9] usb 4-1: config 0 has no interface number 0 [ 238.973964][ T5870] usb 1-1: string descriptor 0 read error: -71 [ 238.982968][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 239.002514][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.016987][ T9] usb 4-1: Product: syz [ 239.022280][ T9] usb 4-1: Manufacturer: syz [ 239.027152][ T9] usb 4-1: SerialNumber: syz [ 239.056625][ T9] usb 4-1: config 0 descriptor?? [ 239.074294][ T5870] usb 1-1: USB disconnect, device number 9 [ 239.245691][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 240.083246][ T6188] udevd[6188]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.104815][ T9] msi2500 4-1:0.246: Registered as swradio24 [ 240.111008][ T9] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 240.125618][ T5871] usb 5-1: device descriptor read/64, error -71 [ 240.155945][ T9] usb 4-1: USB disconnect, device number 13 [ 240.442377][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 240.581886][ T57] hid-generic 0000:0003:0000.0005: item fetching failed at offset 0/2 [ 240.596423][ T57] hid-generic 0000:0003:0000.0005: probe with driver hid-generic failed with error -22 [ 240.665580][ T5871] usb 5-1: device descriptor read/64, error -71 [ 240.776861][ T5871] usb usb5-port1: attempt power cycle [ 240.795727][ T7031] overlayfs: failed to resolve './file0': -2 [ 241.076941][ T7043] capability: warning: `syz.5.255' uses 32-bit capabilities (legacy support in use) [ 241.125645][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 241.128440][ T57] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.166538][ T5871] usb 5-1: device descriptor read/8, error -71 [ 241.355572][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 241.382267][ T57] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.391696][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.418245][ T57] usb 4-1: Product: syz [ 241.422752][ T57] usb 4-1: Manufacturer: syz [ 241.428119][ T57] usb 4-1: SerialNumber: syz [ 241.435798][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.480732][ T5871] usb 5-1: device descriptor read/8, error -71 [ 241.492613][ T57] usb 4-1: config 0 descriptor?? [ 241.596122][ T5871] usb usb5-port1: unable to enumerate USB device [ 241.719306][ T57] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.835671][ T57] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 244.684812][ T57] usb 4-1: USB disconnect, device number 14 [ 245.082114][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 245.124853][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.154545][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.195824][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.221483][ T5828] Bluetooth: hci5: sending frame failed (-49) [ 245.230332][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 245.247484][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.787056][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.056476][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 246.079967][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 246.091561][ T9] usb 4-1: config 0 has an invalid interface number: 69 but max is 1 [ 246.107515][ T7095] ======================================================= [ 246.107515][ T7095] WARNING: The mand mount option has been deprecated and [ 246.107515][ T7095] and is ignored by this kernel. Remove the mand [ 246.107515][ T7095] option from the mount to silence this warning. [ 246.107515][ T7095] ======================================================= [ 246.123228][ T9] usb 4-1: config 0 has no interface number 0 [ 246.142649][ T7095] securityfs: Unknown parameter 'erofs' [ 246.171061][ T7101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.220638][ T9] usb 4-1: config 0 has no interface number 1 [ 246.227511][ T9] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 246.238281][ T9] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 246.249973][ T9] usb 4-1: config 0 interface 255 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 246.261698][ T9] usb 4-1: config 0 interface 255 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 246.280609][ T9] usb 4-1: New USB device found, idVendor=0cde, idProduct=0013, bcdDevice=e9.ae [ 246.291600][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.300235][ T9] usb 4-1: Product: syz [ 246.304829][ T9] usb 4-1: Manufacturer: syz [ 246.310165][ T9] usb 4-1: SerialNumber: syz [ 246.324894][ T9] usb 4-1: config 0 descriptor?? [ 246.331825][ T7089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.405848][ T57] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 246.547063][ T9] usb 4-1: Could not find all expected endpoints [ 246.555670][ T57] usb 6-1: Invalid ep0 maxpacket: 16 [ 246.618303][ T9] usb 4-1: Could not find all expected endpoints [ 246.631587][ T9] usb 4-1: USB disconnect, device number 15 [ 246.705739][ T57] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 246.775573][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.942574][ T57] usb 6-1: Invalid ep0 maxpacket: 16 [ 246.978605][ T57] usb usb6-port1: attempt power cycle [ 247.061872][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 247.235539][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.358838][ T5871] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 247.385620][ T57] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 247.410935][ T5871] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 247.417074][ T57] usb 6-1: Invalid ep0 maxpacket: 16 [ 247.426786][ T5871] usb 1-1: can't read configurations, error -61 [ 247.565676][ T57] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 247.619018][ T57] usb 6-1: Invalid ep0 maxpacket: 16 [ 247.635400][ T57] usb usb6-port1: unable to enumerate USB device [ 247.783292][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.065571][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 248.071445][ T5871] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 248.087256][ T5871] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.094887][ T5871] usb 1-1: can't read configurations, error -61 [ 248.777282][ T5871] usb usb1-port1: attempt power cycle [ 249.998364][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 250.655765][ T5871] usb 1-1: device descriptor read/8, error -71 [ 250.735592][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 250.779883][ T7158] netlink: 88 bytes leftover after parsing attributes in process `syz.3.280'. [ 253.435118][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 253.481572][ T7185] batadv0: entered promiscuous mode [ 253.502522][ T7204] warning: `syz.4.290' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.595648][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 253.605072][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.645538][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.685119][ T8] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 253.694495][ T8] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 253.702772][ T8] usb 2-1: Product: syz [ 253.707040][ T8] usb 2-1: Manufacturer: syz [ 253.711621][ T8] usb 2-1: SerialNumber: syz [ 253.777687][ T8] usb 2-1: config 0 descriptor?? [ 253.823878][ T8] usb 2-1: NFC: intf ffff88805b5e3000 id ffffffff8f2fa3a0 [ 254.695577][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.755701][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.845720][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 254.868190][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.885585][ T5871] usb 6-1: device descriptor read/64, error -71 [ 254.897161][ T8] usb 1-1: config 4 has an invalid interface number: 3 but max is 0 [ 254.921130][ T8] usb 1-1: config 4 has no interface number 0 [ 254.943158][ T8] usb 1-1: config 4 interface 3 has no altsetting 0 [ 254.967927][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=da.af [ 254.985637][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.008238][ T8] usb 1-1: Product: syz [ 255.012479][ T8] usb 1-1: Manufacturer: syz [ 255.025518][ T8] usb 1-1: SerialNumber: syz [ 255.162620][ T25] usb 2-1: USB disconnect, device number 11 [ 255.635607][ T5871] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 255.726759][ T8] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 255.831831][ T8] sonixb 1-1:4.3: Error reading register 00: -71 [ 255.842570][ T5871] usb 6-1: device descriptor read/64, error -71 [ 255.899075][ T8] usb 1-1: USB disconnect, device number 14 [ 256.057726][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.064330][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.100218][ T5871] usb usb6-port1: attempt power cycle [ 256.269128][ T7288] Invalid ELF header magic: != ELF [ 256.292437][ T7288] ntfs3(nullb0): Primary boot signature is not NTFS. [ 256.300337][ T7288] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 256.329625][ T7288] bridge0: port 3(erspan0) entered blocking state [ 256.336473][ T7288] bridge0: port 3(erspan0) entered disabled state [ 256.343797][ T7288] erspan0: entered allmulticast mode [ 256.354323][ T7288] erspan0: entered promiscuous mode [ 256.361661][ T7288] bridge0: port 3(erspan0) entered blocking state [ 256.368551][ T7288] bridge0: port 3(erspan0) entered forwarding state [ 256.504555][ T5871] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 256.555877][ T5871] usb 6-1: device descriptor read/8, error -71 [ 257.045871][ T7295] overlay: ./file0 is not a directory [ 257.688698][ T5871] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 257.782154][ T5871] usb 6-1: device descriptor read/8, error -71 [ 257.955067][ T7314] xt_hashlimit: max too large, truncated to 1048576 [ 258.214557][ T5871] usb usb6-port1: unable to enumerate USB device [ 258.445688][ T5836] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.605835][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 258.622295][ T5836] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 258.645560][ T5871] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 258.652644][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.704869][ T5836] usb 4-1: config 0 descriptor?? [ 258.747515][ T5836] gspca_main: sunplus-2.14.0 probing 041e:400b [ 258.785195][ T7339] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.317' sets config #0 [ 258.798774][ T5871] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 258.807448][ T5871] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 258.817731][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 258.833501][ T5871] usb 6-1: config 1 has no interface number 0 [ 258.849957][ T5871] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 258.905535][ T5871] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.973686][ T5871] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 258.983514][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.006432][ T5871] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 259.017861][ T5834] Bluetooth: hci3: Malformed Event: 0x13 [ 259.303217][ T5871] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 259.472443][ T5836] gspca_sunplus: reg_w_riv err -110 [ 259.478105][ T5836] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 259.488902][ T5836] usb 4-1: USB disconnect, device number 16 [ 259.574119][ T5871] usb 6-1: USB disconnect, device number 10 [ 259.585205][ T5871] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 260.150701][ T7347] 9pnet_virtio: no channels available for device 127.0.0.1 [ 260.517211][ T7372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 260.517211][ T7372] The task syz.4.323 (7372) triggered the difference, watch for misbehavior. [ 263.457484][ T5870] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 263.705530][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 263.745156][ T5870] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.760897][ T5870] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.781223][ T5870] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.824715][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.010252][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 264.019382][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.036935][ T5870] usb 2-1: config 0 descriptor?? [ 264.548312][ T5870] hid-generic 0003:045E:05DA.0006: unbalanced collection at end of report description [ 264.579203][ T5870] hid-generic 0003:045E:05DA.0006: probe with driver hid-generic failed with error -22 [ 264.752497][ T8] usb 2-1: USB disconnect, device number 12 [ 264.911991][ T7437] netlink: 'syz.0.335': attribute type 2 has an invalid length. [ 265.727835][ T7454] syz.3.334[7454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.727951][ T7454] syz.3.334[7454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.756589][ T7480] usb usb7: usbfs: process 7480 (syz.0.337) did not claim interface 0 before use [ 267.458291][ T7486] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 267.465280][ T7486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.651376][ T7486] vhci_hcd vhci_hcd.0: Device attached [ 267.885667][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.996782][ T5871] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 268.059772][ T5874] usb 5-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 268.071767][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.129753][ T5874] usb 5-1: config 0 descriptor?? [ 268.243189][ T7504] input: syz1 as /devices/virtual/input/input15 [ 268.417513][ T7508] netlink: 108 bytes leftover after parsing attributes in process `syz.0.348'. [ 268.426551][ T7508] netlink: 236 bytes leftover after parsing attributes in process `syz.0.348'. [ 268.435910][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 268.688200][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.710695][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.685503][ T7487] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 269.701196][ T6264] vhci_hcd: stop threads [ 269.714710][ T6264] vhci_hcd: release socket [ 269.727137][ T6264] vhci_hcd: disconnect device [ 269.757899][ T5874] usb 5-1: USB disconnect, device number 14 [ 270.275137][ T9] hid-generic 0005:0B57:07FF.0007: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 271.288657][ T7543] binder: 7542:7543 ioctl c0306201 20000480 returned -22 [ 271.668449][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.885691][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 271.893889][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 271.904069][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.920986][ T5874] usb 4-1: config 0 descriptor?? [ 271.933281][ T5874] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.958509][ T5874] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 272.166403][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.266047][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.318571][ T9] usb 4-1: USB disconnect, device number 17 [ 272.515657][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 272.544697][ T7573] block nbd4: NBD_DISCONNECT [ 272.551799][ T7573] block nbd4: Disconnected due to user request. [ 272.569751][ T7573] block nbd4: shutting down sockets [ 272.655607][ T5870] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.667506][ T8] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 272.676097][ T8] usb 1-1: config 0 has no interface number 0 [ 272.682205][ T8] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.693735][ T8] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.703971][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.714457][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.725117][ T8] usb 1-1: config 0 descriptor?? [ 272.807363][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.822039][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.866298][ T5870] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 272.875627][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 272.905934][ T5870] usb 2-1: Product: syz [ 272.925805][ T5870] usb 2-1: config 0 descriptor?? [ 273.155734][ T5871] vhci_hcd: vhci_device speed not set [ 273.207885][ T8] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 273.266597][ T8] usb 1-1: USB disconnect, device number 15 [ 273.344987][ T5870] samsung 0003:0419:0600.0009: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 273.560124][ T7572] bridge1: entered promiscuous mode [ 273.576263][ T7572] bridge1: entered allmulticast mode [ 273.624837][ T8] usb 2-1: USB disconnect, device number 13 [ 274.425239][ T5870] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 274.635246][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 274.925655][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.947051][ T5836] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 274.951657][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 274.972158][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 274.983620][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.993206][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.010301][ T5870] usb 4-1: config 0 descriptor?? [ 275.017189][ T7610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 275.025797][ T5870] hub 4-1:0.0: USB hub found [ 275.040954][ T7626] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 275.128523][ T7626] x_tables: duplicate underflow at hook 2 [ 275.128598][ T7630] x_tables: duplicate underflow at hook 2 [ 275.275002][ T5870] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 275.452704][ T5870] hid-generic 0003:046D:C314.000A: unknown main item tag 0x0 [ 275.460763][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.558455][ T7628] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 275.685559][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 275.693105][ T5836] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023 [ 275.705530][ T5836] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 275.720155][ T8] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 275.729526][ T5836] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.733481][ T5870] hid-generic 0003:046D:C314.000A: hidraw1: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 275.747976][ T5836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.761685][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.770002][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.770780][ T5836] usb 5-1: Product: 唊쵀ꍛ࣏紖젗ﯛˤ系⬟㯵圬뎱斢牘逧ᴥ猤㴁홶䱉褨ה斏଒닑짓㼰詡ਡ皣滐ꎭ恢ኡ롼⁎账蹆䵪䯠잮聾㿓ꀃ㳠曩誎惤율ॻ攡嗠죖㦴犀➽逹枩Υᬺ乲ツ웷ઉ鱅骒ꈓᘆ緯ք꡽㙛♥㥶✡泂圆쏘艟쵙ﮧ쓍㟶㊼憧助焉㊳ᕁ盔뀯 [ 275.795647][ T8] usb 2-1: Product: syz [ 275.857072][ T5870] usb 4-1: USB disconnect, device number 18 [ 275.872993][ T5836] usb 5-1: Manufacturer: 黬傗엟竛啖뱙毃喩΅詻맪꿮ᳮ妡逇鱓≭ᡴ䙎㮑艮蘮㷸킦哳퍿⌧ྉ輅릭빠邰洵쯵䚫楗ﺚ线Ꮦ㌕祙㷀찂途ꗚɎꫤᴈ痐늸く܅蟌䅣餿ᬷ坝쯞坃갓쪡垊쿂 [ 275.878823][ T8] usb 2-1: Manufacturer: syz [ 275.898763][ T5836] usb 5-1: SerialNumber: 㑛㐆찧浳勎軸ད㷚됕힑fl怞쟒醮븓묑퍐譽蹔ᎀꍎ뤭衪虇颲篹䦩ퟆ샫ྈ⳯였ﯘῗꅌ찘ꮜ뻘峈 [ 276.099491][ T8] usb 2-1: SerialNumber: syz [ 276.106474][ T7605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.134488][ T7605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.283638][ T8] usb 2-1: config 0 descriptor?? [ 276.479339][ T8] ch341 2-1:0.0: ch341-uart converter detected [ 276.505756][ T5836] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 276.553144][ T7642] xt_addrtype: ipv6 does not support BROADCAST matching [ 276.563801][ T5836] usb 5-1: USB disconnect, device number 15 [ 276.876322][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 276.876340][ T29] audit: type=1326 audit(1735174871.617:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7647 comm="syz.3.392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74c385d29 code=0x0 [ 277.170063][ T5836] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 277.335595][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 277.349572][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.372744][ T5836] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 277.414018][ T5836] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 277.456984][ T5836] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 277.484114][ T5836] usb 4-1: config 128 has no interface number 0 [ 277.510216][ T5836] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 277.620914][ T5836] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.636024][ T5836] usb 4-1: config 128 interface 127 has no altsetting 0 [ 277.646001][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 277.660708][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.671223][ T5836] usb 4-1: Product: syz [ 277.679838][ T5836] usb 4-1: Manufacturer: syz [ 277.684780][ T5836] usb 4-1: SerialNumber: syz [ 277.845616][ T5874] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 278.070534][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.083061][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.109523][ T5874] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.116073][ T8] usb 2-1: failed to send control message: -110 [ 278.119894][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.141764][ T5874] usb 5-1: Product: syz [ 278.146536][ T5874] usb 5-1: Manufacturer: syz [ 278.151173][ T5874] usb 5-1: SerialNumber: syz [ 278.152490][ T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 278.169266][ T5836] usb 4-1: USB disconnect, device number 19 [ 278.311425][ T5821] usb 2-1: USB disconnect, device number 14 [ 278.318668][ T5821] ch341 2-1:0.0: device disconnected [ 278.525282][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.013237][ T5874] usb 5-1: 0:2 : does not exist [ 279.115157][ T5874] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 279.153278][ T5874] usb 5-1: USB disconnect, device number 16 [ 279.273802][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.309285][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.325679][ T57] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.357499][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.380527][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.397562][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.397770][ T7692] program syz.3.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.455964][ T7691] program syz.3.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.497948][ T57] usb 2-1: config 0 has an invalid interface number: 37 but max is 2 [ 279.506892][ T5821] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.534056][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.559973][ T57] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 279.587370][ T57] usb 2-1: config 0 has no interface number 0 [ 279.610999][ T57] usb 2-1: config 0 interface 37 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 279.640873][ T57] usb 2-1: config 0 interface 37 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 279.660644][ T57] usb 2-1: config 0 interface 37 has no altsetting 0 [ 279.719754][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.759462][ T57] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=dd.1e [ 279.783077][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.816390][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.832923][ T5821] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 279.867796][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.968927][ T57] usb 2-1: config 0 descriptor?? [ 280.032723][ T5821] usb 4-1: config 0 descriptor?? [ 280.265806][ T57] usb 2-1: string descriptor 0 read error: -71 [ 280.282466][ T5821] usbhid 4-1:0.0: can't add hid device: -71 [ 280.299102][ T5821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.310661][ T57] pn533_usb 2-1:0.37: NFC: Could not find bulk-in or bulk-out endpoint [ 280.530699][ T5821] usb 4-1: USB disconnect, device number 20 [ 280.541929][ T57] usb 2-1: USB disconnect, device number 15 [ 280.569889][ T7707] overlayfs: failed to resolve './file0': -2 [ 280.884218][ T7712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.915104][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.926528][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.027391][ T7718] kvm: kvm [7717]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 281.225558][ T5821] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.289305][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 281.452225][ T5821] usb 4-1: device descriptor read/64, error -71 [ 281.545719][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 281.955532][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.208711][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.308005][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 282.326390][ T5821] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 282.335583][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 282.351855][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 282.361861][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.371979][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 282.381731][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 282.391635][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 282.401547][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 48059, setting to 1024 [ 282.412785][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 282.597070][ T8] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 282.608035][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.617466][ T8] usb 2-1: Product: syz [ 282.625832][ T5821] usb 4-1: device descriptor read/64, error -71 [ 282.721859][ T8] usb 2-1: Manufacturer: syz [ 282.727286][ T8] usb 2-1: SerialNumber: syz [ 283.512648][ T5821] usb usb4-port1: attempt power cycle [ 283.513872][ T8] usb 2-1: config 0 descriptor?? [ 283.526103][ T7718] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 283.549644][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.724081][ T8] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 283.772532][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.800023][ T8] usb 2-1: USB disconnect, device number 16 [ 283.886454][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.416'. [ 283.896743][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.416'. [ 283.956280][ T5821] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.568113][ T5821] usb 4-1: device descriptor read/8, error -71 [ 284.754662][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.420'. [ 284.836604][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 285.412678][ T8] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 285.426934][ T8] usb 1-1: config 0 has no interface number 0 [ 285.467965][ T8] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 285.479888][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.492361][ T8] usb 1-1: Product: syz [ 285.529935][ T8] usb 1-1: Manufacturer: syz [ 285.534909][ T8] usb 1-1: SerialNumber: syz [ 285.559149][ T8] usb 1-1: config 0 descriptor?? [ 285.579121][ T8] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 285.589411][ T7753] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 285.624814][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 285.674303][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.711248][ T8] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 285.735613][ T8] usb 1-1: media controller created [ 285.781749][ T7742] input: syz0 as /devices/virtual/input/input17 [ 285.792797][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.945617][ T5836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 285.951374][ T29] audit: type=1326 audit(1735174880.000:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 285.987087][ T7765] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 285.999060][ T8] DVB: Unable to find symbol mt352_attach() [ 286.005153][ T29] audit: type=1326 audit(1735174880.000:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.028321][ T8] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 286.036942][ T29] audit: type=1326 audit(1735174880.010:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.058829][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 286.064788][ T29] audit: type=1326 audit(1735174880.010:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.087674][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 286.115661][ T57] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 286.131002][ T29] audit: type=1326 audit(1735174880.010:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.159933][ T5836] usb 6-1: Using ep0 maxpacket: 32 [ 286.162067][ T29] audit: type=1326 audit(1735174880.040:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.197115][ T29] audit: type=1326 audit(1735174880.040:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.234135][ T5836] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 286.246678][ T29] audit: type=1326 audit(1735174880.040:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.250427][ T5836] usb 6-1: config 0 has no interface number 0 [ 286.275571][ T57] usb 4-1: device descriptor read/64, error -71 [ 286.289224][ T29] audit: type=1326 audit(1735174880.040:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.291647][ T5836] usb 6-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 286.316768][ T29] audit: type=1326 audit(1735174880.040:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6042d85d29 code=0x7ffc0000 [ 286.383210][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.393009][ T5836] usb 6-1: Product: syz [ 286.397735][ T5836] usb 6-1: Manufacturer: syz [ 286.402468][ T5836] usb 6-1: SerialNumber: syz [ 286.423474][ T5836] usb 6-1: config 0 descriptor?? [ 286.535752][ T57] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 286.543364][ T5870] usb 1-1: USB disconnect, device number 16 [ 286.654162][ T5870] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 286.659542][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.684268][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.746485][ T57] usb 4-1: device descriptor read/64, error -71 [ 286.859160][ T57] usb usb4-port1: attempt power cycle [ 287.232392][ T5836] mos7840 6-1:0.186: missing endpoints [ 287.286047][ T57] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 287.394825][ T57] usb 4-1: device descriptor read/8, error -71 [ 287.739104][ T5836] usb 6-1: USB disconnect, device number 11 [ 287.795681][ T57] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 287.856599][ T57] usb 4-1: device descriptor read/8, error -71 [ 287.967260][ T57] usb usb4-port1: unable to enumerate USB device [ 290.910863][ T7797] netlink: 92 bytes leftover after parsing attributes in process `syz.3.434'. [ 291.745569][ T5870] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 292.078554][ T7807] futex_wake_op: syz.4.437 tries to shift op by 35; fix this program [ 292.563711][ T7814] netlink: 108 bytes leftover after parsing attributes in process `syz.4.441'. [ 292.580948][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 292.888527][ T7822] Invalid ELF header magic: != ELF [ 292.900917][ T7822] ntfs3(nullb0): Primary boot signature is not NTFS. [ 292.908221][ T7822] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 292.923890][ T7822] bridge0: port 3(erspan0) entered blocking state [ 292.930664][ T7822] bridge0: port 3(erspan0) entered disabled state [ 292.938207][ T7822] erspan0: entered allmulticast mode [ 292.948812][ T7822] erspan0: entered promiscuous mode [ 292.955569][ T7822] bridge0: port 3(erspan0) entered blocking state [ 292.962069][ T7822] bridge0: port 3(erspan0) entered forwarding state [ 292.986856][ T57] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 293.169034][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 293.205688][ T57] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 293.579028][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.623398][ T57] usb 4-1: config 0 descriptor?? [ 293.666187][ T7825] team0: Port device virt_wifi0 added [ 293.881299][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.895837][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.275619][ T5834] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 294.284005][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 296.466578][ T57] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 296.476806][ T57] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 296.515823][ T57] asix 4-1:0.0: probe with driver asix failed with error -71 [ 296.574699][ T57] usb 4-1: USB disconnect, device number 29 [ 297.065582][ T57] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 297.108521][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 297.205664][ T57] usb 4-1: device descriptor read/64, error -71 [ 297.277748][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.297425][ T7893] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 297.298322][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.349435][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.366307][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 297.368933][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 297.385205][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 297.400414][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.409784][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.420528][ T9] usb 6-1: Product: syz [ 297.424755][ T9] usb 6-1: Manufacturer: syz [ 297.429393][ T7896] xt_connbytes: Forcing CT accounting to be enabled [ 297.438486][ T7896] Cannot find set identified by id 0 to match [ 297.476850][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 297.482123][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 297.510799][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 297.521608][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 297.627229][ T57] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 297.720993][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.721618][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.732130][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.738773][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.755340][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.762000][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.768408][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.768719][ T5874] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 297.775029][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.775257][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.796822][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.804783][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.805886][ T57] usb 4-1: device descriptor read/64, error -71 [ 297.811421][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.824909][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.831570][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.835529][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.837912][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.852319][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.859297][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.865948][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.872310][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.878953][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.885494][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 297.892142][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 297.895403][ T5874] usb 2-1: config 0 descriptor?? [ 297.914855][ T7908] Smack: duplicate mount options [ 297.932688][ T57] usb usb4-port1: attempt power cycle [ 297.964859][ T9] usb 6-1: USB disconnect, device number 12 [ 297.970950][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 298.047905][ T7908] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 298.056829][ T7908] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 298.065410][ T7908] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 298.876900][ T7887] sctp: [Deprecated]: syz.1.458 (pid 7887) Use of int in max_burst socket option deprecated. [ 298.876900][ T7887] Use struct sctp_assoc_value instead [ 298.911256][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.918936][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.937446][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.950552][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.968064][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.982476][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 298.995924][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.005576][ T57] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 299.030862][ T57] usb 4-1: device descriptor read/8, error -71 [ 299.041848][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.069410][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.077509][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.084469][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.096702][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.103675][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.121788][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.140445][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.152062][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.159815][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.167094][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.174230][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.203986][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.213686][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.221850][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.229342][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.240014][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.247205][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.254372][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.275582][ T57] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 299.295596][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.302456][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.312694][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.322309][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.335888][ T57] usb 4-1: device descriptor read/8, error -71 [ 299.348120][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.355404][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.362955][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.372509][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.385753][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.399271][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.415602][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.424117][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.445932][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.452790][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.462283][ T57] usb usb4-port1: unable to enumerate USB device [ 299.477806][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.485320][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.492489][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.507028][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.514110][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.534514][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.548485][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.564510][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.585837][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.604209][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.633472][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.645171][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.678676][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.698535][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.720840][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.755594][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.778885][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.831413][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.881489][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x2 [ 299.940219][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.957246][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.964281][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 299.971378][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.616494][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.623438][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.630494][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.637418][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.644255][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.651172][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.658068][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.784556][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.791549][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.798528][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.806211][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.813608][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.820649][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.829572][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.836805][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.844076][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.851003][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.857896][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.864733][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.872085][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.879404][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.886263][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.893068][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.899960][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.906929][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.913754][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.922891][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.929820][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.936924][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.943746][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.951896][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.958802][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.965674][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.973257][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.980222][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.987417][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 300.994224][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.001189][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.008436][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.015788][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.022613][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.029476][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.036370][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.043193][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.050140][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.057126][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.063950][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.070837][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.078185][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.085012][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.092330][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.099575][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x1 [ 301.106888][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.113718][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.120672][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.127552][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.134376][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x4 [ 301.141616][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.148498][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.155324][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.162262][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.169145][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.176561][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.183385][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.190749][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.197738][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.204574][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.221352][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.230648][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.238220][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.245047][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.252326][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.259218][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.266072][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.272878][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.280261][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.287534][ T5874] sony 0003:054C:024B.000B: unknown main item tag 0x0 [ 301.294352][ T5874] sony 0003:054C:024B.000B: unexpected long global item [ 301.301939][ T5874] sony 0003:054C:024B.000B: parse failed [ 301.308179][ T5874] sony 0003:054C:024B.000B: probe with driver sony failed with error -22 [ 301.323015][ T5874] usb 2-1: USB disconnect, device number 17 [ 302.816274][ T7535] ================================================================== [ 302.824384][ T7535] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 302.831893][ T7535] Read of size 8 at addr ffff88807db24060 by task khidpd_0b5707ff/7535 [ 302.840160][ T7535] [ 302.842523][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: khidpd_0b5707ff Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 302.853659][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.863736][ T7535] Call Trace: [ 302.867041][ T7535] [ 302.869997][ T7535] dump_stack_lvl+0x241/0x360 [ 302.874709][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.879940][ T7535] ? __pfx__printk+0x10/0x10 [ 302.884556][ T7535] ? _printk+0xd5/0x120 [ 302.888727][ T7535] ? __virt_addr_valid+0x183/0x530 [ 302.893849][ T7535] ? __virt_addr_valid+0x183/0x530 [ 302.898960][ T7535] print_report+0x169/0x550 [ 302.903464][ T7535] ? __virt_addr_valid+0x183/0x530 [ 302.908569][ T7535] ? __virt_addr_valid+0x183/0x530 [ 302.913673][ T7535] ? __virt_addr_valid+0x45f/0x530 [ 302.918826][ T7535] ? __phys_addr+0xba/0x170 [ 302.923329][ T7535] ? __mutex_lock+0x7fb/0xee0 [ 302.928012][ T7535] kasan_report+0x143/0x180 [ 302.932521][ T7535] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.938413][ T7535] ? __mutex_lock+0x7fb/0xee0 [ 302.943091][ T7535] __mutex_lock+0x7fb/0xee0 [ 302.947603][ T7535] ? __mutex_lock+0x5ef/0xee0 [ 302.952280][ T7535] ? l2cap_unregister_user+0x6a/0x1c0 [ 302.957653][ T7535] ? __pfx___mutex_lock+0x10/0x10 [ 302.962680][ T7535] ? __pfx___timer_delete_sync+0x10/0x10 [ 302.968309][ T7535] l2cap_unregister_user+0x6a/0x1c0 [ 302.973511][ T7535] hidp_session_thread+0x450/0x490 [ 302.978624][ T7535] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 302.984518][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 302.990151][ T7535] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 302.996054][ T7535] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 303.002296][ T7535] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 303.008537][ T7535] ? __kthread_parkme+0x169/0x1d0 [ 303.013566][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 303.019217][ T7535] kthread+0x2f0/0x390 [ 303.023287][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 303.028927][ T7535] ? __pfx_kthread+0x10/0x10 [ 303.033526][ T7535] ret_from_fork+0x4b/0x80 [ 303.037940][ T7535] ? __pfx_kthread+0x10/0x10 [ 303.042526][ T7535] ret_from_fork_asm+0x1a/0x30 [ 303.047296][ T7535] [ 303.050309][ T7535] [ 303.052622][ T7535] Allocated by task 6593: [ 303.056939][ T7535] kasan_save_track+0x3f/0x80 [ 303.061618][ T7535] __kasan_kmalloc+0x98/0xb0 [ 303.066203][ T7535] __kmalloc_noprof+0x285/0x4c0 [ 303.071045][ T7535] hci_alloc_dev_priv+0x27/0x2030 [ 303.076069][ T7535] vhci_create_device+0x116/0x6a0 [ 303.081097][ T7535] vhci_write+0x3cf/0x490 [ 303.085429][ T7535] vfs_write+0xaeb/0xd30 [ 303.089668][ T7535] ksys_write+0x18f/0x2b0 [ 303.093992][ T7535] do_syscall_64+0xf3/0x230 [ 303.098494][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.104387][ T7535] [ 303.106708][ T7535] Freed by task 6593: [ 303.110677][ T7535] kasan_save_track+0x3f/0x80 [ 303.115352][ T7535] kasan_save_free_info+0x40/0x50 [ 303.120390][ T7535] __kasan_slab_free+0x59/0x70 [ 303.125175][ T7535] kfree+0x196/0x430 [ 303.129081][ T7535] hci_release_dev+0x1525/0x16b0 [ 303.134027][ T7535] bt_host_release+0x83/0x90 [ 303.138612][ T7535] device_release+0x99/0x1c0 [ 303.143206][ T7535] kobject_put+0x22f/0x480 [ 303.147623][ T7535] vhci_release+0x88/0xd0 [ 303.151951][ T7535] __fput+0x23c/0xa50 [ 303.155924][ T7535] task_work_run+0x24f/0x310 [ 303.160508][ T7535] do_exit+0xa2a/0x28e0 [ 303.164654][ T7535] do_group_exit+0x207/0x2c0 [ 303.169237][ T7535] __x64_sys_exit_group+0x3f/0x40 [ 303.174256][ T7535] x64_sys_call+0x26a8/0x26b0 [ 303.178934][ T7535] do_syscall_64+0xf3/0x230 [ 303.183436][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.189330][ T7535] [ 303.191658][ T7535] Last potentially related work creation: [ 303.197366][ T7535] kasan_save_stack+0x3f/0x60 [ 303.202038][ T7535] __kasan_record_aux_stack+0xac/0xc0 [ 303.207425][ T7535] insert_work+0x3e/0x330 [ 303.211770][ T7535] __queue_work+0xb66/0xf50 [ 303.216278][ T7535] queue_work_on+0x1c2/0x380 [ 303.220866][ T7535] process_scheduled_works+0xa66/0x1840 [ 303.226420][ T7535] worker_thread+0x870/0xd30 [ 303.231009][ T7535] kthread+0x2f0/0x390 [ 303.235077][ T7535] ret_from_fork+0x4b/0x80 [ 303.239489][ T7535] ret_from_fork_asm+0x1a/0x30 [ 303.244249][ T7535] [ 303.246564][ T7535] Second to last potentially related work creation: [ 303.253135][ T7535] kasan_save_stack+0x3f/0x60 [ 303.257812][ T7535] __kasan_record_aux_stack+0xac/0xc0 [ 303.263181][ T7535] insert_work+0x3e/0x330 [ 303.267510][ T7535] __queue_work+0xb66/0xf50 [ 303.272003][ T7535] queue_work_on+0x1c2/0x380 [ 303.276583][ T7535] hci_cmd_sync_submit+0x2c3/0x2f0 [ 303.281698][ T7535] hci_discovery_set_state+0x95/0x180 [ 303.287067][ T7535] hci_cmd_sync_work+0x280/0x400 [ 303.292000][ T7535] process_scheduled_works+0xa66/0x1840 [ 303.297555][ T7535] worker_thread+0x870/0xd30 [ 303.302136][ T7535] kthread+0x2f0/0x390 [ 303.306197][ T7535] ret_from_fork+0x4b/0x80 [ 303.310608][ T7535] ret_from_fork_asm+0x1a/0x30 [ 303.315505][ T7535] [ 303.317833][ T7535] The buggy address belongs to the object at ffff88807db24000 [ 303.317833][ T7535] which belongs to the cache kmalloc-8k of size 8192 [ 303.331889][ T7535] The buggy address is located 96 bytes inside of [ 303.331889][ T7535] freed 8192-byte region [ffff88807db24000, ffff88807db26000) [ 303.345686][ T7535] [ 303.348008][ T7535] The buggy address belongs to the physical page: [ 303.354423][ T7535] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7db20 [ 303.363176][ T7535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 303.371668][ T7535] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 303.379228][ T7535] page_type: f5(slab) [ 303.383221][ T7535] raw: 00fff00000000040 ffff88801ac42280 ffffea0000d50600 0000000000000006 [ 303.391799][ T7535] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 303.400379][ T7535] head: 00fff00000000040 ffff88801ac42280 ffffea0000d50600 0000000000000006 [ 303.409044][ T7535] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 303.417710][ T7535] head: 00fff00000000003 ffffea0001f6c801 ffffffffffffffff 0000000000000000 [ 303.426376][ T7535] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 303.435040][ T7535] page dumped because: kasan: bad access detected [ 303.441460][ T7535] page_owner tracks the page as allocated [ 303.447167][ T7535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (kworker/u9:7), ts 60525317329, free_ts 60523635979 [ 303.468533][ T7535] post_alloc_hook+0x1f3/0x230 [ 303.473298][ T7535] get_page_from_freelist+0x3651/0x37a0 [ 303.478876][ T7535] __alloc_pages_noprof+0x292/0x710 [ 303.484076][ T7535] alloc_pages_mpol_noprof+0x3e8/0x680 [ 303.489534][ T7535] alloc_slab_page+0x6a/0x110 [ 303.494208][ T7535] allocate_slab+0x5a/0x2b0 [ 303.498709][ T7535] ___slab_alloc+0xc27/0x14a0 [ 303.503380][ T7535] __slab_alloc+0x58/0xa0 [ 303.507705][ T7535] __kmalloc_cache_noprof+0x27b/0x390 [ 303.513075][ T7535] __hci_conn_add+0x2f9/0x1890 [ 303.517844][ T7535] hci_conn_request_evt+0x5e8/0xdb0 [ 303.523038][ T7535] hci_event_packet+0xac2/0x1540 [ 303.527980][ T7535] hci_rx_work+0x3f3/0xdb0 [ 303.532405][ T7535] process_scheduled_works+0xa66/0x1840 [ 303.537960][ T7535] worker_thread+0x870/0xd30 [ 303.542554][ T7535] kthread+0x2f0/0x390 [ 303.546617][ T7535] page last free pid 5816 tgid 5816 stack trace: [ 303.552935][ T7535] free_unref_page+0xd2c/0x1000 [ 303.557786][ T7535] __slab_free+0x2c2/0x380 [ 303.562197][ T7535] qlist_free_all+0x9a/0x140 [ 303.566784][ T7535] kasan_quarantine_reduce+0x14f/0x170 [ 303.572246][ T7535] __kasan_slab_alloc+0x23/0x80 [ 303.577096][ T7535] __kmalloc_cache_noprof+0x1d9/0x390 [ 303.582462][ T7535] tomoyo_init_log+0x1ca/0x2050 [ 303.587307][ T7535] tomoyo_supervisor+0x38a/0x11f0 [ 303.592328][ T7535] tomoyo_path_number_perm+0x5d3/0x860 [ 303.597781][ T7535] security_file_ioctl+0xc6/0x2a0 [ 303.602799][ T7535] __se_sys_ioctl+0x46/0x170 [ 303.607388][ T7535] do_syscall_64+0xf3/0x230 [ 303.611893][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.617791][ T7535] [ 303.620112][ T7535] Memory state around the buggy address: [ 303.625735][ T7535] ffff88807db23f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.633793][ T7535] ffff88807db23f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.641850][ T7535] >ffff88807db24000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.649905][ T7535] ^ [ 303.657093][ T7535] ffff88807db24080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.665165][ T7535] ffff88807db24100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.673235][ T7535] ================================================================== [ 303.682935][ T7535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.690183][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: khidpd_0b5707ff Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 303.701314][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.711399][ T7535] Call Trace: [ 303.714693][ T7535] [ 303.717642][ T7535] dump_stack_lvl+0x241/0x360 [ 303.722360][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.727598][ T7535] ? __pfx__printk+0x10/0x10 [ 303.732226][ T7535] ? vscnprintf+0x5d/0x90 [ 303.736591][ T7535] panic+0x349/0x880 [ 303.740519][ T7535] ? check_panic_on_warn+0x21/0xb0 [ 303.745660][ T7535] ? __pfx_panic+0x10/0x10 [ 303.750107][ T7535] ? mark_lock+0x9a/0x360 [ 303.754462][ T7535] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 303.760384][ T7535] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 303.766304][ T7535] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 303.772646][ T7535] ? print_report+0x502/0x550 [ 303.777331][ T7535] check_panic_on_warn+0x86/0xb0 [ 303.782269][ T7535] ? __mutex_lock+0x7fb/0xee0 [ 303.786950][ T7535] end_report+0x77/0x160 [ 303.791204][ T7535] kasan_report+0x154/0x180 [ 303.795707][ T7535] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 303.801598][ T7535] ? __mutex_lock+0x7fb/0xee0 [ 303.806282][ T7535] __mutex_lock+0x7fb/0xee0 [ 303.810787][ T7535] ? __mutex_lock+0x5ef/0xee0 [ 303.815464][ T7535] ? l2cap_unregister_user+0x6a/0x1c0 [ 303.820837][ T7535] ? __pfx___mutex_lock+0x10/0x10 [ 303.825866][ T7535] ? __pfx___timer_delete_sync+0x10/0x10 [ 303.831497][ T7535] l2cap_unregister_user+0x6a/0x1c0 [ 303.836705][ T7535] hidp_session_thread+0x450/0x490 [ 303.841823][ T7535] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 303.847724][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 303.853362][ T7535] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 303.859254][ T7535] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 303.865493][ T7535] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 303.871739][ T7535] ? __kthread_parkme+0x169/0x1d0 [ 303.876760][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 303.882394][ T7535] kthread+0x2f0/0x390 [ 303.886463][ T7535] ? __pfx_hidp_session_thread+0x10/0x10 [ 303.892095][ T7535] ? __pfx_kthread+0x10/0x10 [ 303.896681][ T7535] ret_from_fork+0x4b/0x80 [ 303.901093][ T7535] ? __pfx_kthread+0x10/0x10 [ 303.905686][ T7535] ret_from_fork_asm+0x1a/0x30 [ 303.910461][ T7535] [ 303.913741][ T7535] Kernel Offset: disabled [ 303.918066][ T7535] Rebooting in 86400 seconds..