last executing test programs: 10m3.025407962s ago: executing program 1 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='0x00000000000000ba:0x0000000000000005:0x0000400000000002:0x0000000000000005:0x0000000000000004:0x0000000000000d52:0x000000000000329a:0x0003800000000000/00036028797018964095 +'], 0xb0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1f2) getdents64(r6, &(0x7f0000000000)=""/25, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000280)=0x3) r7 = userfaultfd(0x801) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x39}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2a000000040000000001ff0000000000000a0000000000000002000000000000000000"], 0x2a) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) lseek(r6, 0x2ad3, 0x4) 9m59.339989635s ago: executing program 1 (id=245): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000300000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) 9m57.290865228s ago: executing program 1 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3}, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 9m57.211071021s ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r3, 0x29, 0x2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x232862faddc89bef, &(0x7f0000000000)=0x5dc) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffff, 0x9, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$unix(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfb1, 0x0) read$usbfs(r4, &(0x7f0000002240)=""/96, 0x60) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x8000c61) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000020601080000000000000000000000080c0f55275c579d2f3600000500000000000900020073798f300000000014000300686173683a696f72742c50e67863697000"/79], 0x58}}, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x60caf68a) 9m51.551144828s ago: executing program 1 (id=263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0001460000004607f9d9855d539b05fb0f4526c99263e5d04046bd6e2bfec268b2368edc697a47e365f915760041c6da7cf2c5a6516a69f346f27665"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r5 = accept4(r0, 0x0, 0x0, 0x800) mount$pvfs2(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x280080, &(0x7f00000003c0)={[{'Y.).}^,:!'}, {'\x1b-'}, {}, {',}//}}\\@\'.\\'}, {'-^$@'}], [{@smackfsdef={'smackfsdef', 0x3d, 'sha512-generic\x00'}}]}) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 9m51.340366096s ago: executing program 4 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xffb0, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x8000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xfd, 0xf8, 0x60}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@random={0xff, 0x1, "c5"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 9m51.027611573s ago: executing program 4 (id=266): r0 = socket(0x6, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x5, 0x0, 0x8000000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESOCT=r0]) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000a000000080026000816"], 0x40}}, 0x200040b4) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001007f00000108000200ac141400080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff00, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="dd9d480e", 0x4) 9m48.477878848s ago: executing program 4 (id=268): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8d, 0x5, 0x4, 0x20, @loopback, @local, 0x10, 0x8000, 0x51, 0xfffffbff}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@private2, r6}, 0x14) write(r5, &(0x7f0000000140)="24000000010006", 0x7) 9m47.201821629s ago: executing program 4 (id=271): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m46.788744875s ago: executing program 4 (id=272): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000380)={0x1, 0x5, 0x1}) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f10fc000000000200000000000000000000ff020000000000000000000000000001042081000002892f00000800000086dd88a8"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c0009800800020003000000280002"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xffff}}, [@TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x20, 0x9bb7, 0xd, 0x2, 0x4d, 0x6060, 0x6}}, {0x10, 0x2, [0x0, 0x7, 0x6, 0x6, 0x9, 0x8]}}, {{0x1c, 0x1, {0x3, 0x7, 0xff, 0x0, 0x2, 0x8, 0x2, 0x5}}, {0xe, 0x2, [0x69b, 0x4, 0x9db5, 0x4, 0x3f53]}}, {{0x1c, 0x1, {0x1, 0x8, 0x5, 0x6000, 0x0, 0x6, 0x2, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0x4, 0x0, 0xfffa, 0x8, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0xf, 0xc184, 0x7, 0x2, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0xa94, 0x9]}}, {{0x1c, 0x1, {0x3, 0xc, 0x0, 0x9, 0x1, 0x3, 0x200, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x6f, 0x2, 0x8, 0x4, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x96d4]}}, {{0x1c, 0x1, {0x3, 0x8, 0x5580, 0x4, 0x2, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0x14, 0x2]}}, {{0x1c, 0x1, {0x45, 0x51, 0x5ff, 0x9, 0x78b7c5c187883588, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x4, 0x5, 0x9, 0x0, 0x7]}}, {{0x1c, 0x1, {0x2, 0x9, 0x0, 0x4, 0x1, 0xd, 0x7d, 0x3}}, {0xa, 0x2, [0x0, 0x94c, 0x5]}}]}]}, 0x194}}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ad1000/0x1000)=nil, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000532c5b14efc7a5b47d804a4c759b8891199906ef522da304cdd668f532f6a5baf429242ef417fb754cd919e26090075389874208e2eb3bd10bd35cdd99007d3c5f0945bd36ae6bcc60bfb1fc9a4c960800000095f8449400239e58b3420bd59b6ebec5f349e1e9b9097b21d3becda9c50dd3140b3f5ed105a5c5920748c4d10cca4a319b4e28ab5426e202fc25deeddc69d9d70c0609e0870233950012fff370b8c48a33210b099cfd821c1b6ac869bfe21a270f2298544c0ba4ca81463c", @ANYRES32=r5, @ANYBLOB="0000000000000000660000000000000018000000030000000000000000000000950000000000000024030000010000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 9m46.414191612s ago: executing program 4 (id=274): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x22) 9m45.248384841s ago: executing program 32 (id=274): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x22) 9m43.640768669s ago: executing program 1 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305fcffffff000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001756d6163767461700004000235a3000500333d14629cfa2ed86da1b0c7ce8014f0357ecac64a9a69654e9c44dbb84146fb4b89", @ANYRES32=0x0, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x10, 0x2166, 0x0, 0x100000, 0x88d7, 0x2, 0x1, 0x10, 0x1002, 0xffffffff, 0x600, 0x60e7b7b4, 0x1344, 0x1, 0x7, 0x1, 0x4, 0x3, 0x9, 0xb, 0x103, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x4, 0x8, 0x400007, 0x1]}) 9m31.448445211s ago: executing program 2 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0xb}, @volatile, @volatile, @volatile={0x2000000, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0xfffffffe}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x8, 0x3c, {0x3c, 0x23, "dc58d866ee2694ef357252fa9a8ad469eda76e3a4b43ee8df8ddc415c6809d21712fab65d108d3a4fd6006f8b1613708d6ccee62957f018f6b3b"}}, &(0x7f0000000640)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "11eb02c0aa6ea40295f082352c1df03e8442e431a159ed002b3863d2b21de0f0753ec950d1497bfcd6b2456c307a04bd179bd79fb8485bed8b1e991734c419e10940aec24e566a6935eea58f48111615fe620e7eba8547594485250cfee0a5400d04b08fe45770c0cb8776da306051929c61c17d0bb42961ec81997596a52f13fb0b9bf52db295bc6e1975f7c9f9bcb0e4462c3cdb43584773c4e74644d751954acd31d44763d30adf112d66c92a9136889bab159f9d524e84c4b69ce96ea4eb569ad0cf5ee8aecdfdae229e041ef9f3f8b8b4e4185986887cff1a81801f0e"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000180)={0x20, 0x30, 0x1f, "ee6892bb8c3e0379d2b1134e0fdec806b462e26ff7ca5f16e58e68114e0c24"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "bb71fc"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "a056"}, &(0x7f00000005c0)={0x20, 0x83, 0x1, 'W'}, &(0x7f0000000740)={0x20, 0x84, 0x1, "cd"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "aa651a"}}) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700f9ff0800010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d18001280140001900a0001006c696d69740000000400028008000340000001"], 0xa4}}, 0x20050800) 9m28.522301301s ago: executing program 33 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305fcffffff000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001756d6163767461700004000235a3000500333d14629cfa2ed86da1b0c7ce8014f0357ecac64a9a69654e9c44dbb84146fb4b89", @ANYRES32=0x0, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'fl512\x00', [0x10, 0x2166, 0x0, 0x100000, 0x88d7, 0x2, 0x1, 0x10, 0x1002, 0xffffffff, 0x600, 0x60e7b7b4, 0x1344, 0x1, 0x7, 0x1, 0x4, 0x3, 0x9, 0xb, 0x103, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x4, 0x8, 0x400007, 0x1]}) 9m28.502996196s ago: executing program 2 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='io_uring_req_failed\x00', r0, 0x0, 0x2}, 0x18) (async) r1 = socket$inet(0x2, 0x1, 0x200) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) (async) shutdown(r1, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) unshare(0x64000600) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mremap(&(0x7f0000260000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f000090b000/0x3000)=nil) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 9m25.821997176s ago: executing program 2 (id=338): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280140001800a00010071756f7461000000040002800c00018007000100637400000800034000000110140000001000010000000000000000000784000af4b8a425ebdc556bb7b419defdff80e766536736f9dbf754da541442572be6f1c94d0512b1a15c608e2f3d9eecd90e944d9975a78bb5366930716e08e988a230d3e866e3f761c958e1a23a7df3e5e3629c35f5d2413a3012c418edc2"], 0xb0}}, 0x20050800) clock_gettime(0x0, &(0x7f0000000240)) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={r2, 0x5, 0x5, 0xea5a}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000004c0)={0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x1, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 9m23.97756315s ago: executing program 2 (id=339): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000240)=""/251, 0xfb}], 0x4, 0x7fff, 0x9) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000480)=0x7, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x23}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000640)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000006c0)=0x7) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000700), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000740)={0x3, 0x36314d59, 0x2, @discrete={0x3, 0x8}}) (async) syz_io_uring_setup(0x3710, &(0x7f0000000780)={0x0, 0x91da, 0x800, 0x1, 0x1b8}, &(0x7f0000000800), &(0x7f0000000840)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x10402, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r8, r7, 0x5, 0x0, 0x3}, 0x50) (async, rerun: 64) r9 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000009c0)={0x1d, r10}, 0x10) (async) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000a40)=@arm64_sve={0x608000000015047b, &(0x7f0000000a00)=0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a80)={'syztnl1\x00', r8, 0x7, 0x1, 0x2, 0xfffffffe, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x68, 0x0, 0xfa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0xc, 0xa2, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x8}]}, @ssrr={0x89, 0xb, 0xc, [@local, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x46, 0x0, 0x7, [0x8, 0x2a75, 0xffffff80, 0x137, 0x80000000, 0x10001, 0xc]}, @timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0x9, [{@remote, 0x1}, {@private=0xa010101, 0x8}, {@loopback, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @timestamp_prespec={0x44, 0xc, 0x6c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xfffffb0f}]}, @timestamp={0x44, 0x8, 0x59, 0x0, 0x4, [0x318]}]}}}}}) (async) syz_open_dev$usbmon(&(0x7f0000000b80), 0x9, 0x100) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r11, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x800, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x202c050) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x400d81, 0x40}, 0x18) pwritev2(r2, &(0x7f0000001f40)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="84df0d8b69e38b854103fc34bcaab581376bc5108cd774eb61a7ed770205a96774634bf5813cc1c2cf7b4e6a525106f028b179ad203201d9f5507009ba0adbc02b2a01a8399c9140b0453b589f6d862171e01bdc", 0x54}, {&(0x7f0000001e00)="da35315c93a8edff0ce61502680d3710b8d0fd01f2d01cfa24c22ea012273feac1991cbbc886d3b48cad3866ce494f844dc05affe3e29f5b85deec51e465d727f594267e8e9bfda738d4fba6cb21b85ad21ae6a305fc56e10377777120152f8d31e6857ce7", 0x65}, {&(0x7f0000001e80)="fa01d3d9419e34086c6f029300d6e5aa7511b6a1d503ef83d27d3bd61e8947e77dd08de2aebe73355f36cb5ef7b61f78866f84765c53de56553b6cec76375372b4fc1d2083b14f86e4280082d71d5a381beaa1ea095541ee3d7d15eb37c9efc5e0ced36a8c946f590542cb7572622334c907e903fee0b2b095b7cc12b2a0ae62228f1a809e75f54fc5de644238", 0x8d}], 0x4, 0x5, 0x601, 0x3) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000001f80)) 9m23.243125772s ago: executing program 2 (id=340): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xffffff90, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 9m21.883210181s ago: executing program 2 (id=344): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) syz_emit_ethernet(0x7a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000352, 0x2404c008) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905", @ANYRES8=r0], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000280)={r3, 0x8, &(0x7f00000001c0)=[0xd56f, 0x114, 0x0, 0x1, 0xa2, 0x3ff, 0x8, 0x6], &(0x7f0000000200)=[0xd1f, 0xe], &(0x7f0000000240)=[0x2, 0x8, 0x6c00, 0x3]}) 9m5.903272041s ago: executing program 34 (id=344): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) syz_emit_ethernet(0x7a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000352, 0x2404c008) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905", @ANYRES8=r0], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000280)={r3, 0x8, &(0x7f00000001c0)=[0xd56f, 0x114, 0x0, 0x1, 0xa2, 0x3ff, 0x8, 0x6], &(0x7f0000000200)=[0xd1f, 0xe], &(0x7f0000000240)=[0x2, 0x8, 0x6c00, 0x3]}) 30.553278423s ago: executing program 7 (id=1642): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x3c00, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 28.967150599s ago: executing program 7 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x4, 0x41046110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x1, 0x20000000, 0x3, 0xfffffffd, 0x26, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x6000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x9, {0x2, 0x3, 0x2, 0x1, 0xaa1, 0x80000001, {0x0, 0x4, 0x7, 0x22, 0xad, 0x8, 0x0, 0x8, 0x5, 0x4000, 0x3993, r2, r3, 0x402055, 0xfffffff8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@huge_advise}], [{@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, ')['}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}, {@fowner_lt={'fowner<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '.{{\\$*\'!*/]^!#'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x36, 0x36, 0x31, 0x37, 0x33, 0x33, 0x38], 0x2d, [0x63, 0x37, 0x62, 0x64], 0x2d, [0x30, 0x32, 0x31, 0x36], 0x2d, [0x62, 0x64, 0x36, 0x38], 0x2d, [0x63, 0x31, 0x62, 0x61, 0x61, 0x66, 0x31, 0x34]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fuse\x00'}}, {@subj_user}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) 28.760250807s ago: executing program 7 (id=1649): mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x220c480, 0x0) 27.538629067s ago: executing program 7 (id=1651): rt_sigprocmask(0x2, &(0x7f0000000000)={[0x6]}, &(0x7f00000000c0), 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r6 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r6, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = dup3(r5, r4, 0x0) fchdir(r7) creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = dup3(r3, r2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c}, 0x94) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 27.212493887s ago: executing program 7 (id=1653): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$smack_xattr_label(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc7020000080000001826", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xb0, 0xa2, 0xb0, 0x20, 0x6b9, 0x4061, 0xb0c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xc4, 0x7b, 0xa8}}]}}]}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000003c0)='\x7f\xb7\xc3\x7fBa\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94yG\xab\xad\xa7\xdd\x11Qp\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\x93<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 26.543144862s ago: executing program 7 (id=1654): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000200)=[{r2, 0x8110}], 0x1, 0x7f) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e00010000000000000000000000000000fff90001000002000020"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e0001000000000000000000000000000000000000000002000010"], 0xb8}}, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0xac1}], 0x1, 0x8, 0x8000, 0x4) 25.164904384s ago: executing program 35 (id=1654): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000200)=[{r2, 0x8110}], 0x1, 0x7f) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e00010000000000000000000000000000fff90001000002000020"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e0001000000000000000000000000000000000000000002000010"], 0xb8}}, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aada2162a9eca7b6f983d446a7cba9ec5d3b9b701543e8e4e756fbf3adfd0aec3e1eb887a8a626a113c52522a8eaa0ffa9e52b89f52dd0963c3eb8179d196a71758d5c839d0da94c206e3372fcde92e5da04a7cb2632b4acf90cc9517c58b1b892714903333a99a4d5d34e12534233a1e93991f91394e2f7a620b36812011a0ba33dee67feb0f2dba7b2f41997b01217af726681910ead31441be2e582213db37e193f92a4d0b8471c5cb4507afa7716268a867ce97e28aa1023e81e9e565f0e6b10846ea5759213138959afb6daee352cc7a79ced9ae6be4ca7d1420c5e18c8089b05699b7da7cc87ac0785fc588adb2a3d7c3ba9befed645cf44d16cef38f5a79e7ea236af20502793a08d6ecd37ebf76ecf18c51da2bcafc58a2a5e8c6dcdfbdd8afe846efe396441fb8a4bc95862ee6a7517fbcf7128fa2e48056b286e34dc7a55adf63001d6e0afca1103216cbdd8a736ae06b69cbdbdc8116eca9b762ba728dfbf5c0eedb85f86b7686731e50471bad411bf81e4cfb8607482963ed71e090055f3fdbb467c770b066c1a124b2dcbfd2a88942bd8285387ba128854fb011d59b2200350aa5f687db368e8e8ebb948e6ff5964b5295a782c76f16188963eb4677b2d4c2fff5d969b8b6694e891ef21e50be439c26d913aa0ef4ea8351f615d81d036038ca7253d078bd2f1468aa3eb0ae10c805ef4726ba3d35a8d5b93c45901c3f1036212133960733c358ae0d17af8647d6f8bd1d86738a6801871ddf3f9fb467f51026f1ff0cab6a14486f8065a61d4131b6384aba05388b3376f6144acc453e31d24f40998c88423fbf8496880babb527c007a8a9af0297cd91ec81697fa0adf9bae6c9541920fb83a7387d3674298f40245f3d40e5b796566721e23232a427db8e522f794de831d6c363e8003358a4a21ce5283bb2f22a4858583c1bb2880c8953d77f89687fab6f01a39d506c525d853b7fda46b31cf30c199a07d2a91ea3393fd59fe2dc63eca3394297f7846608ec12f26a67d49039d68aef4342c104d0a942c9e14442eba86ffba4dced3c3036244b1bdec411fed0ef32ef908bd2b9d86dd39a610cf20f34e550472ba4fdf7dad702b0c2236227f119294994ce1ff670af3019fe462c0e75c5b07a70abba198341938c0bbc6c20dc2005c4e01a260cb7090c32f0b58a7d9840bc24a8c8128fffda21cfb39d8dc99f11333eef006fe5cf1019c51a21d3a7e9849110ac0856713cffd3e6a1c5bcbbc6d44a74183b1f2401d62007e57160ae5c52ebfd40d8e98413d4d290e1c26dde3ee45db6a1afa59e3807b22a43232864126c6f1425c68f1d7877e32fb35c1a7f5c4516746e0fee58481e741705d2a239a3662a69e1238ffa2a9b478cd125fa248d4080bb23380cd3a5e4a08ab9db184b51eafb4dcbf315799e1356d55f29cfe4143dbfabc6b2886e407b3ee102569f588d5f6dfe741efbc84013b06931e3c451254d6eb432722ca0ccadc6f89a3bec18813f92383bb32ede4a1cc6092d985520f90917b68048c8bd79bc0c15efdc35294fe098a003a0b836d4bcf85359bae2b0167e09f87a38e451a035fb52f35994c19ce7bf30568e96b7ccb7dd275b9dbc3bb960a260404bbcbe664d26c5d5be6126d00f43cae9be586055c81e7ac1eab9fbe1d34900381d1e27c5f624133a6e4ab01dfe68e43ebd4b5ab5f81f5ad3f235c021a458e08da5673d17235ebc73cc7d05f3038d93aae2297d987c6da167fb8a48800a981c9c13c7a7c5b8fd67062f0e2bfb50b468cb5690b185b2c9c8b67cdd3293ba3337597e7b21f2f1ead66ec7997b5325e15d0c2304d5f37bfb0927b573825496f975c12d3daef18ff9405c0e47b0f45e8006bbb6d8359cef9031506ecc25ff0c1ed58b0cb7ff779cd6b75d60840d90e4adf4a3cc88fee1b4c7dae9f1db061872d0293bd66a80a4a84759504bba279566c525ad7830cf28a2f6cd76557185dab63143fe76850756fcd1cb7d779c31f179eb131bfa65400009d9227241ef3d46d5d423e50fcb0f6961fb1f305c58423cae07e1c85aad1df1f7b5e7a0c837e9c1412d57f4ae931a7acfcd398ca7aa1f44b2b504e8e416a43ceb1a0072308843ea4d7795ceba063b43c8845322c8a9e69b7bf7d8e585a7eb8c9849df2963fd3d104907661870f4c8b937ed1cebeed0efaef2de58fde88bf3a9d611ae327936f5b0699a5f5cea7b5ce46782f0ebc9ff16f87f00daa95117684a390cca664622c5018519b34eb88a8e1a3d6a5a1c78ba2e00fa49ead8a0764602de6235d12d54a83b409074a72c2ac96a10a5ca31894a58658671544837aeaaa45501893d24acdf65042af797ca190d6cef9b80f9627df2c57cfe7cf72d44cf142d060f63c2a8953b19306b6bd4b7eefc0c2fb90ea77b2f2ddf75d7d4ad469fcc61b554ca230c7ec046a6722abcac4d53fd4aa9314589c4d1707183e68b566fd247f718c738d3538ff7230550a5a28ce153b0efcee35758532e186154171a5c036233563ddcb48bc9e48c3ff603ad6dd1a0bb844d64140b3b893d461353dbaac0d892b10f21af0283f7e36bfe6515a316f882956aaf8f39f94dfd3531865813c95218eafc76027f21808bacfe70f8ed11379002e974722e25b5fdd509df6a0030e3f620d6e9bb4de83421a35953d26947fdb4d0fd7a98a7ce2c9d9c97abf21e456529cd8fa51b9eff5efc327175d6903a9da55d8784e5a13df51ad6be7fffb5ed0d20fbffc5887d0ee4528979bf1ccc5bfae4537fe7c03989e90dd437f4c399a3c3d709aad9bd93a20e08b1be3f3deb3813bb15a0844aa1e5856c53ea6b7bc4e04abac10ea2db547b02c47ffa6b82bd5cb4036490636ad4dd6b0a3f0fb5e5a286ba862331ae20ae2e2751fd612f2683ce0e7173a2861ef139c1d6548a9321af5587885c4c754dd55c68d121f4b67e467a8e021f58a930f3b5490ccc400509528e310904c5e2e3698770e3cbff47c1abec5da53bb3965cadfb19697122965c85855b16c976e6b192673d2c06560ea823481df0e20fb7c95a40b69d2f9be5477c4f599be74a34605911587bfa871308e685c86605977ecc141df039a59398de10d947581ba3ba59e72657a8599f390e19e357673d64b9e3996758cf3b29f0052faace20b580d4900b8a1a5da4f062be3dba499e0892f532231a135250e95ce9d240499cf84a4d63afb6008d041e0368e8b48bdba4238ca590d1797fcbad3f3aa6da62b3672738f895ee0dd67603c7a4e1aeb67384dabcdd5e8da3ff269ab7bee2f583533b96bf04ef37d033f10126d0759ca030c9a1c63a1f55ddecb7ad5b16409e6196c9483c0cb0eae85e5d71e281faa63f10d7f82d4b46979fd237e319a3c50e2fa3e3087812168277496f74cff42e2630ef542d9af1ed1ba4733f6a21a9790bdadf0003beba5d5224128b84b1886e74d1ef0696d96e69970e9dbd80df36c248aea3528ba9fdeda4a99d28169c75ff58795a418025e87fad142cb23909493efde9783e171007dbcd990c188efc594d1d5f9f2e20197c5e2817b6f550f280f392d4171dbdae9421721655c3d6bfed146fe5a7248d2feea1a4c0e73b841db955e5e587db69bbf9b47533f2f97aba0b96a1bec6335ef762728eebd20e6ad76148a585b01e6e98408f5c9665ad65c892f6f6a09903cfd150ea64a4241e6c7cfbc0c047613f7c7d2ab5221a4dd723300872f4a1d6373cb300ea2bf5175e13678518b52c62527618cb796df98d4357099d61c37f93567927694bd858cbd3f2a66f59b5be8d2bc97b704e45fcc677f5d87813f70dea27a944b27fa65ef062909e04169f7de6b4f97a42e5da7ada8cf5428b132ffdda56e8d857f8f71e1abfbe6311fb5a6f32c13831b85facc92a72b0d", 0xac1}], 0x1, 0x8, 0x8000, 0x4) 12.289322804s ago: executing program 0 (id=1690): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070000008213928d4dd1c0"], 0x0}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3e, 0x4, @tid=r2}, &(0x7f0000000340)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x40094) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000100)={0x0, 0x4, 0xb6}) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0xd01c4813, &(0x7f0000000000)={0x40003, 0xffffffff, 0x10000000, 0x0, 0x7, 0x410}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a000100000000000000000081000800000000040000000060f0114633be204e1ded20fd74974a422300c19231676416c527548d9f3c1124812f63f78aee656d02724a2d46d58c2b24e9d63ab93bc745330edf2916dd1f29cecfdef291e1db295c04d6a6fd59db741aef333a6622a4eed4504288359829f0626573f0ec25782afc4668d975dae99cdfa34d85cf82237dfd417eb908abf7ee01f53ed883329acf4e857abf8fb79f025d6b37162294c6f783f734234f35604a2cbf0a74be87b15fd69f96b6b37eb4bb"], 0x1c}}, 0x0) 10.932517064s ago: executing program 5 (id=1692): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b00000000000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x20040140) (async) r2 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) listen(0xffffffffffffffff, 0x2c8) r4 = accept(r1, 0xfffffffffffffffd, &(0x7f0000000680)) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r8, r3, 0x206, 0x0, 0x0, 0x0, 0xc4, 0x2, 0x7, 0x4, 0xb01, 0x8, 'syz1\x00'}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000680)={&(0x7f00000006c0)=[{0xcab, 0x11, 0x0, 0x0}, {0x2, 0xf801, 0x0, 0x0}, {0x15, 0x2a10, 0xffffffffffffffd4, 0x0}], 0x3}) (async) r13 = syz_io_uring_setup(0x19d0, &(0x7f0000000400)={0x0, 0x3879, 0x10100, 0x8000000, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r14, r15, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x10}}) connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r6], 0x7c}}, 0x8050) (async) io_uring_enter(r13, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) 9.87872452s ago: executing program 5 (id=1694): syz_open_dev$amidi(&(0x7f00000023c0), 0x2, 0x8040) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}}, &(0x7f00000002c0)='GPL\x00', 0x9898, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xff71, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0], &(0x7f00000004c0)=[{0x1, 0x4, 0x5, 0x1}, {0x3, 0x5, 0x2, 0x3}], 0x10, 0x2f49}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f00000000c0)=0x28) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000140), 0x0, 0x448c4) (rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='afs_flock_op\x00', r6}, 0x18) syz_init_net_socket$ax25(0x3, 0x3, 0xca) (async) listen(r1, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) (async) syz_open_dev$I2C(0x0, 0x8000007f, 0x4b6300) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0xa, 0x5, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) unshare(0x22020600) 9.487956708s ago: executing program 5 (id=1697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.607268088s ago: executing program 0 (id=1698): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x6000, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 8.515159677s ago: executing program 3 (id=1699): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0x8, &(0x7f0000000240)={0x8, 0x8b}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xf) (async) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) (rerun: 64) r6 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x2, 0x5004) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0xc8) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) (async) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x2f7e, &(0x7f0000000180)=""/171) (rerun: 64) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 8.397043308s ago: executing program 5 (id=1701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05a00b0000000000010009f7ffff0003000000092100000001220700090581032000000000525d2fc04029fd72f91aed946e0000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.207372412s ago: executing program 3 (id=1702): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000bc24ac7f"], 0x48) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000f141a0001080000000000000000410001000000"], 0x20}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000005080)={0x0, 'vlan0\x00', {}, 0x7fff}) 7.913995187s ago: executing program 3 (id=1704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES8=r1, @ANYBLOB="05"], 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000340)=@req3={0x0, 0x2, 0x1, 0x0, 0xffff, 0xc98, 0xb3}, 0x1c) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0800020500"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.734170352s ago: executing program 6 (id=1705): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', '', [{}, {}, {}, {0x20, '#! '}, {0x20, '127.0.0.1\x00'}, {0x20, '[%!'}, {0x20, '127.0.0.1\x00'}, {0x20, '\'\x00\x00'}, {0x20, '[\''}], 0xa, "9799ffca66d73151faf8de69698981faca34b1c9afbfc2d3ab8c23e0fd5ed5952fe57f6e250d6d1163046bbe224154fb9951dde67a56bf5f5a310710d3b7728ad5826bff0007160b4130b7a6d88f4756d9fa025224076a36d7739818cb2f625c16eead3b03475242895a2adf731d60868f83f8ebca8779c8af6d0768e10afe1f69c070bc72b6e9613f48f65ed7d305799b8b02eac13c757ef0693c2f2b686dfcf87844f8300b2d6802a9313ead27bc33dc9980cd"}, 0xe0) r6 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r6, 0x4, 0x8000000000000000, r4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(0x0, 0x4, 0x10000) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)=ANY=[]) r7 = socket$kcm(0x2b, 0x1, 0x0) listen(r7, 0x6) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) socket$inet_mptcp(0x2, 0x1, 0x106) close(r7) 5.740780035s ago: executing program 6 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r6, r6, 0xc, 0xff68, 0x0, 0x9, 0x1, 0x457, 0x9, 0x4, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) io_uring_enter(r7, 0x2def, 0x0, 0x38, 0x0, 0xfffffffffffffe0d) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x52, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r8], 0x48}, 0x1, 0x0, 0x0, 0x14004093}, 0x95) 5.571372618s ago: executing program 0 (id=1707): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1200, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000000)) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000800)=""/120) r2 = userfaultfd(0x80001) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000000}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 4.651697406s ago: executing program 6 (id=1708): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) 4.49890474s ago: executing program 3 (id=1709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r1, &(0x7f0000000680), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200626f6e64300000000000000000000000493e5f25c7217caa83b64483e650d2d97d739146ed96c2675d5f4005df5d92954c94eba9cae9913d4f7bb3ac8b0223272d2a3290be052e28bcea06a82c9ee54bdc8ad3de4f7179eb9fb385c1da2c43d51f4f0254eedbd31a4a2e561bf5dfb69eeb6e5859969cb1c61168ff40e72e254638468e4c024b2e6b1fad015c6c25a910d0eaf0f4a973e00cdca5051b4e485a86369c4f1e407d799cdf1a3c4f12e845f622a2e7651543d0322fe5693bab35a788753ace124b5abb859b2bd00ee67e53cf4341ed069bf8d01759d1358343"], 0x34}}, 0xc800) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x4044080) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000480)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='nwfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) 4.457375743s ago: executing program 0 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800"], 0xdc}}, 0x0) 2.46436483s ago: executing program 0 (id=1711): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, '\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f0000000400)) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) 2.085433667s ago: executing program 6 (id=1712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000940)={{0x3, 0x4, 0x9, 0x7, 'syz1\x00', 0x81}, 0x0, 0x200, 0x7c5, r3, 0x5, 0x5, 'syz0\x00', &(0x7f0000000300)=['erspan0\x00', ']\xef\x00', '\'\x00', 'gre0\x00', '@\x12,[:\x00'], 0x18}) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616ce773746174696328006ef5cf0bfa92de24f2a210089076d00bd151f8c1699132bf810bee3f65cb9b0101c8ccc06529f20b467fd7419a698853ab289b52"]) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0xb, 0x1, 0x0, "f85a03f073e22f000000780000000000000000000000000000000000ffff00", 0x36314d59}) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x4, {0x9, 0x0, 0x3, 0x1097}}) syz_genetlink_get_family_id$ieee802154(0x0, r1) kexec_load(0xff0e, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000a80)="18c32e71b1c4abb9bfbf2542d0130d7cd564c77b97910698fba4f251b20e8a574d8e70f7d8880b57b2255ada1244beff5c258e790d14d2dcbef79f843b85e4019181ca298f", 0x45, 0x4, 0x1}, {&(0x7f0000000b00)="4560d13e122f6e3fb5e9d6290a0bb3663e1b996d4298b54fc7c12d7c1e7ad0c5321ca0b845df5fee0696deafa975d53803a52ac816d182f28cba2acf27412bfcc6b90c79ae8e0db9e81150a7d50bd8c07bc37ce1329000cfee1bd4a58cb1d8e7aef455448240a3218d46fa21832460e26370179cab438b47ded0faade67713ec18245417e4b19d542a4d9e2c1f601ba648bdc66a782f2df98d98b844f50c7cca6b2fa3a844f5a3fb587df5990a64376a8c4aac9b54890bb9cdf4d13942fe793ebd717eca2757cba9c55b180e4b", 0xcd, 0x4, 0x7fffffffffffffff}], 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004e101}, 0x0) close(r6) 2.084260093s ago: executing program 3 (id=1713): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000500000002000000040000060400fd0004000080020000000a0000000600000001000000000000c00c000000010000000c0000000000001008000000ff7f000000000009000000000b00000001000006040000000f00000076000000070000000000000900008d0b1d65fb34b155d9a446a604117ae9b6acf31720c94a841d4864a4e2e7e5c442ac426d8f1d2602cf86e9562447b516b62b016df657c15eefc2607227cd5c57e254f71a317399bc804ef3d28a2d4dbf8c1290d5c77dce93f0c46f323ff80aa7866e67d8fbf9084eb89256a31f31561dda9d2c77c8e10000000000000000"], &(0x7f0000000040)=""/16, 0x81, 0x10, 0x1, 0x2}, 0x28) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a80)=ANY=[@ANYBLOB="4001000010000180ff00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000040030000000300030000ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000004000000000000004000000000000400000000000000000000000000000000000000000000000500000000000000000000000a"], 0x140}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b25, &(0x7f0000000040)) (async) r4 = io_uring_setup(0x36b6, &(0x7f0000000140)={0x0, 0xa41f, 0x10000, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) memfd_create(0x0, 0x3) (async) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) syz_open_dev$MSR(0x0, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) (async) connect$l2tp6(r5, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x10) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4118, 0x1000}], 0x0, 0x34}, 0x20) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) preadv(r7, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x7308, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x4, 0x5]}) read(r1, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) fallocate(r8, 0x0, 0x0, 0x9) 2.082639537s ago: executing program 5 (id=1714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00008f6000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x100010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x731842, 0x0) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf1, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x240000ef) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000500)="43dd93573829", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.962704679s ago: executing program 0 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4090, 0xe9c}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0x26, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x5, [0x503d15de, 0x0, 0x5, 0x3, 0x7757, 0x78840467]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) 972.241389ms ago: executing program 5 (id=1716): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x6900, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 319.110463ms ago: executing program 3 (id=1717): socket(0x26, 0x6, 0x100) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd700002dcdf2501000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00020001000000010001000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x6, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) prlimit64(r4, 0x5, &(0x7f0000000180)={0x3, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) write$proc_mixer(0xffffffffffffffff, 0x0, 0xff0e) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0415f9f40700090400810000000d0000000000000008000000001991a18572eb801ece30ce7e481c683eb956c39203884a6f9c835af8d40391ec6763c1193d2afd4f75352fe037a98a59a8695b6e031d37915cc2ce9e19dd9db9d3607eb773ccc5b5113511806de909dfa086d65f9a45d3bcabb4870dab811d87c41ba91060abfabd13a43eb5a9909133bf0120f3d5a720b3ad6a22db11290bd79af27bcb82e04fafc98c216bb48c691df221829f0005ed0a08aa250000", 0xbe) 189.226068ms ago: executing program 6 (id=1718): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="25c914"], 0x20) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r0, &(0x7f0000000000)=@vsock, &(0x7f00000000c0)=0x80) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20044080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000000801080000000000000000010000000600024000110000140004800800014000000862080001400000000406000240809b000005000300880000000900010073797a30000000001c0004800800024000000007080002400000000808000240000002000c00168008000640000000001c000480080004400000a2cf08000740000000fc080004400000f5c1"], 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x84) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) (async) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xe24) 0s ago: executing program 6 (id=1719): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x6}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0xffffffffffffff5e}], 0x1, &(0x7f0000000300)=ANY=[], 0x11f0}, 0x10008014) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, 0x0, &(0x7f0000000180)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r2, 0x25, 0x0, @val=@tcx}, 0x40) (async) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0xffe0}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8, 0x7f, 0x7}}], 0x20, 0x4c060}], 0x1, 0x200000d0) kernel console output (not intermixed with test programs): failed with error -110 [ 532.302616][T10621] overlayfs: failed to resolve '/000000000004': -2 [ 533.501285][ T6993] usb 7-1: USB disconnect, device number 32 [ 533.871729][T10643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.887365][T10643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 534.445383][T10643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.492119][T10643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 534.561076][T10643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.571358][T10643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 534.792362][T10643] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.814667][T10643] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 535.641201][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 535.915666][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 535.947690][T10662] overlayfs: failed to resolve '/000000000004': -2 [ 536.228965][T10664] netlink: 'syz.6.1077': attribute type 10 has an invalid length. [ 536.239175][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.440222][T10667] overlayfs: failed to resolve '/000000000004': -2 [ 536.545688][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 536.624138][ T5840] Bluetooth: hci1: command 0x0401 tx timeout [ 536.726732][T10672] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1081'. [ 536.864314][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 536.945828][T10679] veth1_macvtap: left promiscuous mode [ 536.952793][T10679] macsec0: entered allmulticast mode [ 536.974926][T10677] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 4294967272. macoff=96 [ 536.986852][T10679] veth1_macvtap: entered promiscuous mode [ 537.003456][T10679] veth1_macvtap: entered allmulticast mode [ 537.013641][T10679] macsec0: left allmulticast mode [ 537.032483][T10679] veth1_macvtap: left allmulticast mode [ 537.254732][ T6993] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 537.472377][ T6993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.555291][ T6993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.710938][ T6993] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.811604][ T6993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.922113][ T6993] usb 6-1: SerialNumber: syz [ 538.005024][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 538.624415][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 538.704451][ T5840] Bluetooth: hci1: command 0x0401 tx timeout [ 538.875797][ T6993] usb 6-1: 0:2 : does not exist [ 538.945166][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 538.967008][ T6993] usb 6-1: USB disconnect, device number 29 [ 539.719861][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.981658][ T5948] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 540.189242][ T31] kauditd_printk_skb: 1203 callbacks suppressed [ 540.189262][ T31] audit: type=1326 audit(1755630919.075:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.221289][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 540.225630][ T31] audit: type=1326 audit(1755630919.105:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.229708][ T5948] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 540.269981][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.305041][ T5912] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 540.306671][ T31] audit: type=1326 audit(1755630919.155:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.330955][T10710] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 540.411231][ T31] audit: type=1326 audit(1755630919.155:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.439907][ T31] audit: type=1326 audit(1755630919.215:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.468191][ T5912] usb 4-1: device descriptor read/64, error -71 [ 540.484893][ T5948] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.498057][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.512287][ T5948] usb 8-1: Product: syz [ 540.588028][ T5948] usb 8-1: Manufacturer: syz [ 540.592992][ T5948] usb 8-1: SerialNumber: syz [ 540.613668][ T31] audit: type=1326 audit(1755630919.215:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 540.796714][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 540.900559][ T5948] usb 8-1: config 0 descriptor?? [ 540.992986][ T5948] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 541.012342][ T5948] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 541.100675][ T31] audit: type=1326 audit(1755630919.365:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 541.154739][ T5912] usb 4-1: device descriptor read/64, error -71 [ 541.203630][ T31] audit: type=1326 audit(1755630919.385:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 541.260135][ T31] audit: type=1326 audit(1755630919.405:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 541.408188][ T5912] usb usb4-port1: attempt power cycle [ 541.435361][ T31] audit: type=1326 audit(1755630919.405:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.5.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80538ebe9 code=0x7ffc0000 [ 541.645140][ T5948] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 541.662664][ T5948] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 541.682815][T10722] netlink: 'syz.5.1094': attribute type 1 has an invalid length. [ 541.694677][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1094'. [ 541.764272][ T5912] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 541.804836][ T5912] usb 4-1: device descriptor read/8, error -71 [ 541.995582][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1088'. [ 542.049431][ T5948] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 542.063645][ T5948] em28xx 8-1:0.0: No AC97 audio processor [ 542.067550][ T5912] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 542.094588][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.124623][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.138627][ T5912] usb 4-1: device descriptor read/8, error -71 [ 542.925760][ T5912] usb usb4-port1: unable to enumerate USB device [ 543.190540][T10739] overlayfs: failed to resolve '/000000000004': -2 [ 543.421806][T10742] overlayfs: failed to resolve '/000000000004': -2 [ 543.497972][ T977] usb 8-1: USB disconnect, device number 26 [ 543.546452][ T977] em28xx 8-1:0.0: Disconnecting em28xx [ 543.605556][ T977] em28xx 8-1:0.0: Freeing device [ 544.190186][T10747] 9pnet_virtio: no channels available for device 127.0.0.1 [ 545.460666][T10763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 545.468121][T10763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 545.477973][T10763] vhci_hcd vhci_hcd.0: Device attached [ 545.746722][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 545.844341][ T10] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 545.907619][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.624607][T10765] vhci_hcd: connection reset by peer [ 546.985640][ T7018] vhci_hcd: stop threads [ 546.996360][ T7018] vhci_hcd: release socket [ 547.003424][ T7018] vhci_hcd: disconnect device [ 547.195169][T10769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.432522][T10773] veth1_macvtap: left promiscuous mode [ 549.694809][T10800] 9pnet_fd: Insufficient options for proto=fd [ 551.958450][ T10] vhci_hcd: vhci_device speed not set [ 554.369938][T10814] overlayfs: failed to resolve '/000000000004': -2 [ 554.524188][ T5912] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 554.561389][T10818] overlayfs: failed to resolve '/000000000004': -2 [ 554.776685][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 554.888139][ T5912] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 555.079360][ T5912] usb 4-1: config 0 has no interface number 0 [ 555.147061][ T5912] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 555.161949][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.196714][ T5912] usb 4-1: config 0 descriptor?? [ 555.417900][ T5912] speedtch 4-1:0.168: speedtch_bind: wrong device class 176 [ 555.503367][ T5912] speedtch 4-1:0.168: usbatm_usb_probe: bind failed: -19! [ 555.749613][T10825] bridge: RTM_NEWNEIGH with invalid ether address [ 556.003135][T10829] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1123'. [ 556.908624][T10834] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1122'. [ 556.954217][ T5912] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 557.154221][ T5912] usb 8-1: Using ep0 maxpacket: 32 [ 557.156303][ T5912] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 557.156325][ T5912] usb 8-1: config 0 has no interface number 0 [ 557.168870][ T5912] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 557.168907][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.168940][ T5912] usb 8-1: Product: syz [ 557.168957][ T5912] usb 8-1: Manufacturer: syz [ 557.168974][ T5912] usb 8-1: SerialNumber: syz [ 557.173003][ T5912] usb 8-1: config 0 descriptor?? [ 557.672939][ T5912] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 557.673008][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 557.676147][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.677091][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 557.677148][ T5912] usb 8-1: media controller created [ 557.740592][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.474432][ T5912] cxusb: set interface failed [ 558.474454][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 558.856956][ T5912] DVB: Unable to find symbol lgdt330x_attach() [ 558.883520][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 559.009428][ T977] usb 4-1: USB disconnect, device number 37 [ 559.034089][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 559.084387][ T5912] rc_core: IR keymap rc-dvico-portable not found [ 559.173723][ T5912] Registered IR keymap rc-empty [ 559.336728][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.378793][ T5912] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 559.411769][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.570646][T10858] qnx4: no qnx4 filesystem (no root dir). [ 559.626840][ T10] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 559.657216][ T5912] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input27 [ 559.839142][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.895163][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 559.970270][ T10] usb 7-1: config 0 descriptor?? [ 560.041394][ T5912] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 560.061240][ T5912] usb 8-1: USB disconnect, device number 27 [ 560.085171][ T5830] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 560.147207][T10865] 9pnet_fd: Insufficient options for proto=fd [ 560.165056][ T5912] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 560.244845][ T5830] usb 6-1: device descriptor read/64, error -71 [ 560.390263][T10871] overlayfs: failed to resolve '/000000000004': -2 [ 560.509917][ T10] sony 0003:054C:024B.000B: unexpected long global item [ 560.532313][ T10] sony 0003:054C:024B.000B: parse failed [ 560.539536][ T10] sony 0003:054C:024B.000B: probe with driver sony failed with error -22 [ 560.624181][ T5830] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 560.745771][ T5912] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 561.205456][ T5830] usb 6-1: device descriptor read/64, error -71 [ 561.260224][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.274562][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.384307][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 561.398634][ T5830] usb usb6-port1: attempt power cycle [ 561.420270][ T5912] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 561.470172][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.499904][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.533013][T10883] overlayfs: failed to resolve '/000000000004': -2 [ 561.563477][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.607973][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.647313][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.649733][ T5939] usb 7-1: USB disconnect, device number 33 [ 561.696391][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.723689][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.763388][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.792391][ T5912] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 561.812148][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 561.821186][ T5912] usb 8-1: SerialNumber: syz [ 561.835301][ T5830] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 561.844672][ T5912] usb 8-1: config 0 descriptor?? [ 561.858629][ T5830] usb 6-1: device descriptor read/8, error -71 [ 561.871243][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input28 [ 562.117302][T10870] input: syz1 as /devices/virtual/input/input29 [ 562.147693][ T5192] bcm5974 8-1:0.0: could not read from device [ 562.232891][T10887] loop9: detected capacity change from 0 to 7 [ 562.243717][T10887] buffer_io_error: 4 callbacks suppressed [ 562.243762][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.259483][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.269070][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.278745][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.288433][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.298080][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.309448][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.318851][T10887] ldm_validate_partition_table(): Disk read failed. [ 562.326721][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.336367][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.345880][T10887] Buffer I/O error on dev loop9, logical block 0, async page read [ 562.355410][T10887] Dev loop9: unable to read RDB block 0 [ 562.364109][T10887] loop9: unable to read partition table [ 562.371806][T10887] loop9: partition table beyond EOD, truncated [ 562.378845][T10887] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 562.378845][T10887] ) failed (rc=-5) [ 562.824134][ T5830] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 563.131110][ T5912] usb 8-1: USB disconnect, device number 28 [ 563.237271][ T5830] usb 6-1: device not accepting address 33, error -71 [ 563.334983][ T5830] usb usb6-port1: unable to enumerate USB device [ 564.746922][T10909] netlink: 'syz.6.1145': attribute type 1 has an invalid length. [ 564.841799][T10909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.155390][ T5939] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 565.377354][ T5939] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 565.399265][T10920] overlayfs: failed to resolve '/000000000004': -2 [ 565.404171][ T5939] usb 8-1: config 0 has no interface number 0 [ 565.418084][ T5939] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 565.432544][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.450373][ T5939] usb 8-1: Product: syz [ 565.456081][ T5939] usb 8-1: Manufacturer: syz [ 565.461404][ T5939] usb 8-1: SerialNumber: syz [ 565.583707][T10923] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 565.594437][T10923] PKCS7: Only support pkcs7_signedData type [ 565.598867][ T5939] usb 8-1: config 0 descriptor?? [ 565.674528][T10923] input: syz0 as /devices/virtual/input/input30 [ 566.259099][ T5939] usb 8-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0) [ 567.124827][ T5939] usb 8-1: failed to fetch extended address, random address set [ 567.431674][ T5939] usb 8-1: USB disconnect, device number 29 [ 568.754753][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.761884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.052641][T10951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1154'. [ 570.062497][T10967] netlink: 772 bytes leftover after parsing attributes in process `syz.3.1160'. [ 571.469867][T10984] netlink: 'syz.7.1164': attribute type 21 has an invalid length. [ 571.598753][T10984] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1164'. [ 573.075515][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 573.704371][T11008] netlink: 'syz.5.1170': attribute type 1 has an invalid length. [ 573.712551][T11008] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1170'. [ 573.722581][T11008] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 573.835583][T11009] 9pnet_fd: Insufficient options for proto=fd [ 576.704680][ T5939] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 577.068641][ T5939] usb 4-1: device descriptor read/64, error -71 [ 577.502665][T11058] netlink: 'syz.7.1182': attribute type 1 has an invalid length. [ 577.511572][T11058] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1182'. [ 577.521654][T11058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 577.565749][T11058] 9pnet_fd: Insufficient options for proto=fd [ 577.864290][ T5939] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 578.174083][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 578.534937][T11077] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.328579][T11116] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1197'. [ 582.338814][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1197'. [ 582.383216][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 582.391035][T11115] ceph: No mds server is up or the cluster is laggy [ 582.399005][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 583.389761][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 583.503834][T11134] netlink: 'syz.6.1201': attribute type 1 has an invalid length. [ 583.549449][T11134] overlay: Unknown parameter 'appraise' [ 584.993908][T11142] netlink: 'syz.6.1204': attribute type 21 has an invalid length. [ 585.076052][T11142] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1204'. [ 586.370107][T11160] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1208'. [ 586.379916][T11160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1208'. [ 587.174959][ T5912] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 587.251705][T11174] kvm: pic: non byte read [ 587.258036][T11174] kvm: pic: non byte read [ 587.419773][ T5912] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 587.436710][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.455107][ T5912] usb 4-1: config 0 descriptor?? [ 587.471232][ T5912] cp210x 4-1:0.0: cp210x converter detected [ 587.474775][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 587.743962][ T5830] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 587.969803][ T5912] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 588.184610][ T5830] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 588.374110][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 588.386101][ T5830] usb 8-1: config 0 has no interface number 0 [ 588.393193][ T5830] usb 8-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 588.409997][ T5830] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.424953][ T5830] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.437336][ T5830] usb 8-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 588.462322][ T5830] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 588.495941][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.538436][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 588.539583][ T5830] usb 8-1: config 0 descriptor?? [ 588.564950][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.573857][ T43] usb 6-1: Product: syz [ 588.584525][ T43] usb 6-1: Manufacturer: syz [ 588.589657][ T43] usb 6-1: SerialNumber: syz [ 588.609121][ T43] usb 6-1: config 0 descriptor?? [ 588.861857][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1215'. [ 589.543184][ T5830] wacom 0003:056A:0084.000C: unknown main item tag 0x0 [ 589.550881][ T5912] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 589.560422][ T5912] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 589.568672][ T5830] wacom 0003:056A:0084.000C: unknown main item tag 0x0 [ 589.604733][ T5912] usb 4-1: cp210x converter now attached to ttyUSB0 [ 589.626961][ T5830] wacom 0003:056A:0084.000C: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.7-1/input2 [ 589.656896][ T5912] usb 4-1: USB disconnect, device number 40 [ 589.675928][T11188] loop2: detected capacity change from 0 to 7 [ 589.699241][T11188] Dev loop2: unable to read RDB block 7 [ 589.713683][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 589.715764][T11188] loop2: unable to read partition table [ 589.728612][ T43] usb read operation failed. (-71) [ 589.754694][ T5912] cp210x 4-1:0.0: device disconnected [ 589.774157][ T43] usb write operation failed. (-71) [ 589.781165][ T43] usb write operation failed. (-71) [ 589.788078][ T43] usb write operation failed. (-71) [ 589.793872][T11188] loop2: partition table beyond EOD, truncated [ 589.822156][ T43] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 589.947847][ T43] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 590.046922][ T43] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 590.077910][T11188] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 590.145954][ T5830] usb 8-1: USB disconnect, device number 30 [ 590.721148][T11199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.024559][T11211] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1221'. [ 591.033943][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1221'. [ 591.964938][T11215] fuse: Bad value for 'user_id' [ 591.974149][T11215] fuse: Bad value for 'user_id' [ 594.067287][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 594.067306][ T31] audit: type=1326 audit(1755630972.935:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 594.180820][ T31] audit: type=1326 audit(1755630972.935:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 594.217998][T11235] overlayfs: conflicting lowerdir path [ 594.252311][ T31] audit: type=1326 audit(1755630972.935:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 594.301223][ T31] audit: type=1326 audit(1755630972.935:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 594.333385][ T977] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 594.710410][ T31] audit: type=1326 audit(1755630972.935:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 594.864629][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.041130][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.073747][ T31] audit: type=1326 audit(1755630972.935:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 595.124636][ T977] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 595.187301][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.225926][ T31] audit: type=1326 audit(1755630972.935:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 595.251125][ T977] usb 8-1: config 0 descriptor?? [ 595.782362][ T31] audit: type=1326 audit(1755630972.935:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 595.848107][ T31] audit: type=1326 audit(1755630972.935:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 596.325247][ T31] audit: type=1326 audit(1755630972.935:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.7.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7218ebe9 code=0x7ffc0000 [ 598.384487][ T6993] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 598.584146][ T6993] usb 7-1: Using ep0 maxpacket: 16 [ 598.593600][ T6993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.654190][ T6993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 598.661151][ T6993] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 598.704205][ T6993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.722346][ T977] usb 8-1: can't set config #0, error -71 [ 599.328030][ T6993] usb 7-1: config 0 descriptor?? [ 599.334522][ T977] usb 8-1: USB disconnect, device number 31 [ 599.383905][ T6993] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 599.836211][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 600.932706][T11186] usb 7-1: USB disconnect, device number 34 [ 602.532691][T11333] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 602.590129][T11333] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1253'. [ 602.609396][T11333] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 602.987646][ T5912] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 603.484416][ T5912] usb 8-1: Using ep0 maxpacket: 32 [ 603.500665][ T5912] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 603.526038][ T5912] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 603.558931][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.619868][ T5912] usb 8-1: Product: syz [ 603.659799][ T5912] usb 8-1: Manufacturer: syz [ 603.706412][ T5912] usb 8-1: SerialNumber: syz [ 603.755459][ T5912] usb 8-1: config 0 descriptor?? [ 603.783351][T11335] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 603.799907][ T5912] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input34 [ 604.455839][ T5912] usb 8-1: USB disconnect, device number 32 [ 604.455957][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 605.844522][ T5912] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 606.005317][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 606.042866][ T5912] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 606.094580][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.094615][ T5912] usb 4-1: config 0 has no interface number 0 [ 606.169836][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 606.169870][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.169895][ T5912] usb 4-1: Product: syz [ 606.169914][ T5912] usb 4-1: Manufacturer: syz [ 606.169932][ T5912] usb 4-1: SerialNumber: syz [ 606.173182][ T5912] usb 4-1: config 0 descriptor?? [ 606.276963][ T5912] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 606.277004][ T5912] usb 4-1: No valid video chain found. [ 607.628010][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1271'. [ 607.910909][ T5946] usb 4-1: USB disconnect, device number 41 [ 609.057907][T11419] fuse: Bad value for 'user_id' [ 609.067732][T11419] fuse: Bad value for 'user_id' [ 609.224871][T11414] binder: Unknown parameter 's' [ 609.421162][T11423] i2c i2c-0: Invalid block write size 33 [ 610.114360][ T5926] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 610.546691][ T5926] usb 8-1: Using ep0 maxpacket: 16 [ 610.757223][ T5926] usb 8-1: config 0 has too many interfaces: 249, using maximum allowed: 32 [ 610.785807][ T5926] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 249 [ 610.812996][ T5926] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 610.848311][ T5926] usb 8-1: config 0 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 610.860481][ T5926] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 610.873877][ T5926] usb 8-1: config 0 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 610.884665][ T5926] usb 8-1: config 0 interface 0 has no altsetting 0 [ 610.892558][ T5926] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 610.903107][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.228910][ T5926] usb 8-1: config 0 descriptor?? [ 611.247836][ T5926] ums-sddr09 8-1:0.0: USB Mass Storage device detected [ 611.335998][ T5926] ums-sddr09 8-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 611.480320][T11186] usb 8-1: USB disconnect, device number 33 [ 615.935488][T11186] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 616.624159][T11186] usb 7-1: Using ep0 maxpacket: 16 [ 616.627673][T11186] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 616.627702][T11186] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.627721][T11186] usb 7-1: config 0 has no interface number 0 [ 616.630988][T11186] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 616.631022][T11186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.631046][T11186] usb 7-1: Product: syz [ 616.631063][T11186] usb 7-1: Manufacturer: syz [ 616.631080][T11186] usb 7-1: SerialNumber: syz [ 616.650168][T11186] usb 7-1: config 0 descriptor?? [ 616.658991][T11186] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 616.659018][T11186] usb 7-1: No valid video chain found. [ 617.584193][ T6993] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 617.754580][ T6993] usb 4-1: Using ep0 maxpacket: 32 [ 617.756334][ T6993] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 617.758449][ T6993] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 617.758477][ T6993] usb 4-1: can't read configurations, error -61 [ 617.892210][ T6993] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 617.924474][T11485] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1294'. [ 617.924519][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1294'. [ 617.939560][T11482] sp0: Synchronizing with TNC [ 618.064317][ T6993] usb 4-1: Using ep0 maxpacket: 32 [ 618.066579][ T6993] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 618.075422][ T6993] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 618.075466][ T6993] usb 4-1: can't read configurations, error -61 [ 618.075742][ T6993] usb usb4-port1: attempt power cycle [ 619.792162][ T6993] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 619.854683][ T6993] usb 4-1: Using ep0 maxpacket: 32 [ 619.855595][ T6993] usb 4-1: too many configurations: 251, using maximum allowed: 8 [ 619.999600][ T977] usb 7-1: USB disconnect, device number 35 [ 620.566117][ T6993] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 620.577756][ T6993] usb 4-1: can't read configurations, error -71 [ 620.747255][T11506] random: crng reseeded on system resumption [ 621.639492][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 621.639512][ T31] audit: type=1326 audit(1755630999.995:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.6.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff33cd8ebe9 code=0x0 [ 621.720563][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1301'. [ 621.733931][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1301'. [ 621.876947][T11512] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 621.995866][ T31] audit: type=1326 audit(1755631000.885:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11515 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cd8ebe9 code=0x7ffc0000 [ 622.174336][ T6993] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 622.280270][ T6993] usb 4-1: Using ep0 maxpacket: 32 [ 622.434893][ T6993] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 622.690055][ T31] audit: type=1326 audit(1755631000.885:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11515 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cd8ebe9 code=0x7ffc0000 [ 622.723108][ T6993] usb 4-1: config 0 has no interface number 0 [ 623.132328][ T31] audit: type=1326 audit(1755631000.885:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11515 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff33cd8ebe9 code=0x7ffc0000 [ 623.144150][ T6993] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 623.164852][ T5912] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 623.186684][ T31] audit: type=1326 audit(1755631000.885:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11515 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cd8ebe9 code=0x7ffc0000 [ 623.264884][ T31] audit: type=1326 audit(1755631000.885:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11515 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cd8ebe9 code=0x7ffc0000 [ 623.398751][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 623.431804][T11537] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1306'. [ 623.443380][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 623.459209][ T6993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.508890][ T6993] usb 4-1: config 0 descriptor?? [ 623.512626][ T5912] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 623.560633][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.567897][ T6993] speedtch 4-1:0.168: speedtch_bind: wrong device class 176 [ 623.611258][ T6993] speedtch 4-1:0.168: usbatm_usb_probe: bind failed: -19! [ 623.631264][ T5912] usb 7-1: Product: syz [ 623.684858][ T5912] usb 7-1: Manufacturer: syz [ 623.764122][ T5912] usb 7-1: SerialNumber: syz [ 623.880412][ T5912] usb 7-1: config 0 descriptor?? [ 623.979395][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 624.990010][T11548] binder: 11547:11548 ioctl c018620b 0 returned -14 [ 625.007116][T11550] binder: 11547:11550 ioctl c018620b 0 returned -14 [ 625.314216][T11186] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 625.350910][ T6993] usb 4-1: USB disconnect, device number 45 [ 625.534488][T11186] usb 8-1: Using ep0 maxpacket: 16 [ 625.561713][T11186] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 625.561736][T11186] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.561752][T11186] usb 8-1: config 0 has no interface number 0 [ 625.644753][T11186] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 625.644779][T11186] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.644795][T11186] usb 8-1: Product: syz [ 625.644807][T11186] usb 8-1: Manufacturer: syz [ 625.644819][T11186] usb 8-1: SerialNumber: syz [ 625.655002][T11186] usb 8-1: config 0 descriptor?? [ 625.665319][T11186] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 625.665348][T11186] usb 8-1: No valid video chain found. [ 626.370684][ T5912] gspca_se401: read req failed req 0x06 error -19 [ 626.615731][ T5912] usb 7-1: USB disconnect, device number 36 [ 626.671899][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.926982][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1313'. [ 627.450407][T11577] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1313'. [ 627.854826][T11574] 9pnet_fd: Insufficient options for proto=fd [ 628.124712][ T10] usb 8-1: USB disconnect, device number 34 [ 629.913653][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1318'. [ 630.161529][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.175607][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.714535][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 631.266885][T11595] bridge0: entered allmulticast mode [ 631.334121][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 631.357095][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 631.377990][ T10] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 631.472418][ T10] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 631.524244][ T10] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 631.582578][ T10] usb 4-1: config 128 has no interface number 0 [ 631.622364][ T10] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 631.642959][ T10] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.654329][ T10] usb 4-1: config 128 interface 127 has no altsetting 0 [ 632.321196][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 632.337384][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.349724][ T10] usb 4-1: Product: syz [ 632.357826][ T10] usb 4-1: Manufacturer: syz [ 634.644743][ T10] usb 4-1: SerialNumber: syz [ 635.055252][ T10] usb 4-1: can't set config #128, error -71 [ 635.082598][ T10] usb 4-1: USB disconnect, device number 46 [ 635.629595][T11625] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.1329'. [ 635.904261][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 635.971050][T11624] tc_dump_action: action bad kind [ 636.054132][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 636.059763][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 636.059801][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.059824][ T10] usb 4-1: Product: syz [ 636.059842][ T10] usb 4-1: Manufacturer: syz [ 636.059859][ T10] usb 4-1: SerialNumber: syz [ 636.062714][ T10] usb 4-1: config 0 descriptor?? [ 636.075791][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1327'. [ 636.284121][ T5912] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 636.451080][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 636.463456][ T5912] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 636.463541][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.463593][ T5912] usb 8-1: config 0 has no interface number 0 [ 636.473143][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 636.476438][ T5912] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 636.476473][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.476489][ T5912] usb 8-1: Product: syz [ 636.476503][ T5912] usb 8-1: Manufacturer: syz [ 636.476515][ T5912] usb 8-1: SerialNumber: syz [ 636.477922][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.502344][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 636.502410][ T10] usb 4-1: media controller created [ 636.514981][ T5912] usb 8-1: config 0 descriptor?? [ 636.544447][ T5912] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 636.544485][ T5912] usb 8-1: No valid video chain found. [ 636.603214][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.656529][T11632] sctp: [Deprecated]: syz.0.1331 (pid 11632) Use of int in maxseg socket option. [ 636.656529][T11632] Use struct sctp_assoc_value instead [ 636.669181][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 636.687671][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 636.996938][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 637.024646][ T10] usb 4-1: USB disconnect, device number 47 [ 638.106790][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 638.694353][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 639.023837][ T5926] usb 8-1: USB disconnect, device number 35 [ 639.106620][ T10] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 639.614132][ T10] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 639.633407][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 639.649687][ T10] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 639.674873][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 639.759134][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.279613][T11674] C: renamed from team_slave_0 (while UP) [ 640.370990][T11675] 9pnet_fd: Insufficient options for proto=fd [ 640.894436][ T10] ath6kl: Failed to submit usb control message: -71 [ 640.902304][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 640.981242][T11674] netlink: 'syz.6.1340': attribute type 1 has an invalid length. [ 640.990541][ T10] ath6kl: Unable to send get target info: -71 [ 640.990559][T11674] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1340'. [ 641.009649][T11674] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 641.168430][ T10] ath6kl: Failed to init ath6kl core: -71 [ 641.205658][ T10] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 641.295421][ T10] usb 4-1: USB disconnect, device number 48 [ 642.535273][T11703] bio_check_eod: 2 callbacks suppressed [ 642.535294][T11703] syz.3.1347: attempt to access beyond end of device [ 642.535294][T11703] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 643.548499][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'. [ 644.310099][ T6993] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 644.804087][ T6993] usb 4-1: Using ep0 maxpacket: 16 [ 644.826969][ T6993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.864827][ T6993] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 644.925981][ T6993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.655351][ T6993] usb 4-1: config 0 descriptor?? [ 646.117172][ T6993] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 646.166088][ T6993] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 646.218659][ T6993] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 646.254248][ T6993] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 646.281978][ T6993] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 646.285348][ T31] audit: type=1326 audit(1755631025.165:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 646.302423][ T6993] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 646.430925][ T31] audit: type=1326 audit(1755631025.165:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 646.516578][ T31] audit: type=1326 audit(1755631025.165:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 646.634088][ T31] audit: type=1326 audit(1755631025.165:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 646.659675][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 646.756797][ T31] audit: type=1326 audit(1755631025.185:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 646.796778][T11723] bond_slave_0: entered promiscuous mode [ 646.803510][T11723] bond_slave_1: entered promiscuous mode [ 646.811447][T11723] C: entered promiscuous mode [ 646.816992][T11723] team_slave_1: entered promiscuous mode [ 646.823536][T11723] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 646.832420][T11723] bridge0: entered promiscuous mode [ 646.838604][T11723] batadv0: entered promiscuous mode [ 647.177309][T11723] macvlan2: entered promiscuous mode [ 647.183456][T11723] bond0: entered promiscuous mode [ 648.014131][ T31] audit: type=1326 audit(1755631025.185:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 648.038723][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.053352][ T31] audit: type=1326 audit(1755631025.185:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4170b8ebe9 code=0x7ffc0000 [ 648.104674][T11723] team0: entered promiscuous mode [ 648.932419][ T10] usb 4-1: USB disconnect, device number 49 [ 650.680795][ T43] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 650.746671][ T43] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 650.805308][ T43] usb 6-1: USB disconnect, device number 34 [ 650.828283][T11765] loop7: detected capacity change from 0 to 16384 [ 651.721552][T11774] xt_TCPMSS: Only works on TCP SYN packets [ 651.769272][T11775] afs: Unknown parameter 'dyn@ p.[vc5Gת~_;oݑA1 x*XJtioOHJN-' [ 652.114265][ T8129] Bluetooth: Error in BCSP hdr checksum [ 652.500011][ T3024] Bluetooth: Error in BCSP hdr checksum [ 652.640048][ C0] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 652.669073][ C0] I/O error, dev loop7, sector 11008 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 652.687753][ C0] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.687962][T11770] loop7: detected capacity change from 16384 to 0 [ 652.700997][ C0] buffer_io_error: 4 callbacks suppressed [ 652.701019][ C0] Buffer I/O error on dev loop7, logical block 1344, async page read [ 652.701135][ C0] I/O error, dev loop7, sector 10760 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.701164][ C0] Buffer I/O error on dev loop7, logical block 1345, async page read [ 652.701253][ C0] I/O error, dev loop7, sector 10768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.701283][ C0] Buffer I/O error on dev loop7, logical block 1346, async page read [ 652.767987][ C0] I/O error, dev loop7, sector 10776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.779260][ C0] Buffer I/O error on dev loop7, logical block 1347, async page read [ 652.790216][ C0] I/O error, dev loop7, sector 10784 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.801729][ C0] Buffer I/O error on dev loop7, logical block 1348, async page read [ 652.811470][ C0] I/O error, dev loop7, sector 10792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.822323][ C0] Buffer I/O error on dev loop7, logical block 1349, async page read [ 652.831557][ C0] I/O error, dev loop7, sector 10800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.845089][ C0] Buffer I/O error on dev loop7, logical block 1350, async page read [ 652.855769][ C0] I/O error, dev loop7, sector 10808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 652.867071][ C0] Buffer I/O error on dev loop7, logical block 1351, async page read [ 652.877168][ C0] Buffer I/O error on dev loop7, logical block 1352, async page read [ 652.887843][ C0] Buffer I/O error on dev loop7, logical block 1353, async page read [ 653.693790][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1369'. [ 653.861991][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1369'. [ 653.874767][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1369'. [ 653.904322][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 658.033343][ T31] audit: type=1326 audit(1755631036.905:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 658.058751][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.175523][T11823] overlayfs: missing 'lowerdir' [ 658.271047][ T31] audit: type=1326 audit(1755631036.905:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.643612][ T31] audit: type=1326 audit(1755631036.915:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.672997][ T31] audit: type=1326 audit(1755631036.915:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.701402][ T31] audit: type=1326 audit(1755631036.915:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.768860][ T31] audit: type=1326 audit(1755631036.915:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.904172][ T31] audit: type=1326 audit(1755631036.915:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.928217][ T31] audit: type=1326 audit(1755631036.915:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.952272][ T31] audit: type=1326 audit(1755631036.915:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 662.976017][ T31] audit: type=1326 audit(1755631036.915:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11820 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 664.824940][T11186] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 665.342594][T11186] usb 4-1: device descriptor read/64, error -71 [ 665.614097][T11186] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 665.833357][T11856] overlayfs: failed to resolve '/000000000004': -2 [ 665.844117][ T5912] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 665.944318][T11186] usb 4-1: device descriptor read/64, error -71 [ 666.176871][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1388'. [ 666.207081][T11186] usb usb4-port1: attempt power cycle [ 666.884024][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 667.054527][ T5912] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.116940][ T5912] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.923330][ T5912] usb 8-1: string descriptor 0 read error: -71 [ 667.941698][ T5912] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.012998][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.074584][ T5912] usb 8-1: can't set config #1, error -71 [ 668.287002][T11882] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 668.296156][T11882] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1391'. [ 668.306118][T11882] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 668.373157][T11882] 9pnet_fd: Insufficient options for proto=fd [ 670.739365][ T5912] usb 8-1: USB disconnect, device number 36 [ 673.625984][T11903] xt_hashlimit: size too large, truncated to 1048576 [ 674.479996][T11908] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 674.493339][T11908] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 674.792339][T11914] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1400'. [ 674.811744][T11914] netlink: 'syz.5.1400': attribute type 1 has an invalid length. [ 674.821575][T11914] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1400'. [ 674.832380][T11914] netlink: 'syz.5.1400': attribute type 2 has an invalid length. [ 674.841577][T11914] netlink: 'syz.5.1400': attribute type 1 has an invalid length. [ 674.862627][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.747379][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 676.044289][ T43] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 676.144310][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 676.984296][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 677.114259][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 677.194263][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 677.225147][ T43] usb 4-1: config 0 has no interface number 0 [ 677.230941][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'. [ 677.233166][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 677.456901][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 677.497870][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.522715][ T43] usb 4-1: Product: syz [ 677.534203][ T43] usb 4-1: Manufacturer: syz [ 677.554456][ T43] usb 4-1: SerialNumber: syz [ 677.590971][ T43] usb 4-1: config 0 descriptor?? [ 677.608634][ T43] smsc75xx v1.0.0 [ 678.329413][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 678.385696][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 678.434519][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 678.513412][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 679.194230][T11936] netlink: 'syz.7.1405': attribute type 1 has an invalid length. [ 679.209071][T11936] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1405'. [ 679.226681][T11936] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 679.284346][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.369059][T11937] 9pnet_fd: Insufficient options for proto=fd [ 679.930616][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1407'. [ 679.964556][ T5946] usb 4-1: USB disconnect, device number 53 [ 680.188230][T11957] overlayfs: failed to resolve '/000000000004': -2 [ 681.208469][T11967] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1412'. [ 681.227816][T11967] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1412'. [ 682.149171][T11970] syz.0.1414: attempt to access beyond end of device [ 682.149171][T11970] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 682.234499][T11970] SQUASHFS error: Failed to read block 0x0: -5 [ 682.354615][ T5912] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 682.424796][ T43] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 682.602042][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 682.670002][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 682.682229][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.715545][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 682.800646][T11980] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 682.809192][T11980] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1417'. [ 682.819903][T11980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 682.943137][T11981] 9pnet_fd: Insufficient options for proto=fd [ 682.976809][ T43] usb 7-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 682.993017][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.310745][ T43] usb 7-1: config 0 descriptor?? [ 683.465378][ T5912] usb 8-1: Using ep0 maxpacket: 32 [ 683.490042][ T5912] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.515436][ T5912] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 683.535591][ T5912] usb 8-1: config 0 interface 0 has no altsetting 0 [ 683.545403][ T5912] usb 8-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 683.557452][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.571182][ T5912] usb 8-1: config 0 descriptor?? [ 683.668399][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.697944][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.801880][ T5912] betop 0003:20BC:5500.000E: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.7-1/input0 [ 683.834693][ T5912] betop 0003:20BC:5500.000E: no inputs found [ 683.994568][ T5926] usb 8-1: USB disconnect, device number 37 [ 684.727152][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 684.756290][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 684.788322][ T43] usb 7-1: USB disconnect, device number 37 [ 685.231877][T12004] netlink: 'syz.5.1424': attribute type 4 has an invalid length. [ 685.242958][T12004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1424'. [ 685.508965][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1424'. [ 685.548425][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1424'. [ 686.584836][T12012] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 686.745960][T12020] overlayfs: failed to resolve '/000000000004': -2 [ 687.396436][T11782] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 687.406755][T11782] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 688.704186][ T5926] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 688.877295][ T5926] usb 8-1: device descriptor read/64, error -71 [ 689.215088][ T5926] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 690.249559][ T5926] usb 8-1: device descriptor read/64, error -71 [ 690.372561][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1437'. [ 690.386093][T12051] netlink: 'syz.5.1437': attribute type 30 has an invalid length. [ 690.489473][ T5926] usb usb8-port1: attempt power cycle [ 690.546362][T12051] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.557374][T12051] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.566857][T12051] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.577895][T12051] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.164274][ T5926] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 691.225127][ T5926] usb 8-1: device descriptor read/8, error -71 [ 691.259277][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1442'. [ 691.425808][T11782] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 691.438304][T11782] Bluetooth: hci4: Injecting HCI hardware error event [ 691.453749][T11782] Bluetooth: hci4: hardware error 0x00 [ 691.508383][ T5926] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 691.591107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.600250][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.041735][T12067] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 692.164285][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 692.164309][ T31] audit: type=1326 audit(1755631071.015:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12069 comm="syz.6.1443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff33cd8ebe9 code=0x0 [ 692.249410][T12071] bond1: (slave gretap1): making interface the new active one [ 692.265795][ T5926] usb 8-1: device descriptor read/8, error -71 [ 692.282735][T12071] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 692.841228][ T5926] usb usb8-port1: unable to enumerate USB device [ 693.098320][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1444'. [ 693.505017][T11782] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 694.017320][T12090] netlink: 'syz.6.1446': attribute type 1 has an invalid length. [ 694.025907][T12090] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1446'. [ 694.036573][T12090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 694.135062][T12091] 9pnet_fd: Insufficient options for proto=fd [ 694.927515][T12101] hub 8-0:1.0: USB hub found [ 694.936865][T12101] hub 8-0:1.0: 1 port detected [ 696.464890][T12093] binder: 12089:12093 ioctl c0306201 200000000080 returned -14 [ 696.585439][T12093] binder: 12089:12093 ioctl 40045010 200000000140 returned -22 [ 696.641314][T12110] overlayfs: failed to resolve './file1': -2 [ 696.673242][ T5946] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 696.904567][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 697.327541][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.390064][ T5946] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 697.459353][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.535951][ T5946] usb 6-1: config 0 descriptor?? [ 697.627823][ T5946] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 697.718879][T12119] tmpfs: Bad value for 'mpol' [ 697.795421][T12119] xt_hashlimit: max too large, truncated to 1048576 [ 698.081663][T12122] xt_connbytes: Forcing CT accounting to be enabled [ 698.090325][T12122] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 698.234471][ T5946] gspca_vc032x: reg_r err -110 [ 698.239754][ T5946] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 698.404830][ T5946] usb 6-1: USB disconnect, device number 35 [ 698.864936][ T5946] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 699.066183][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.079164][T12137] tipc: Started in network mode [ 699.092597][T12137] tipc: Node identity ac1414aa, cluster identity 4711 [ 699.106316][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.126342][T12137] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.137381][ T5946] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 699.157281][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.178589][T12137] tipc: Enabled bearer , priority 10 [ 699.217858][ T5946] usb 6-1: config 0 descriptor?? [ 699.227330][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 699.261291][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 699.274323][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.292862][T12138] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 699.404120][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.428959][T12139] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 699.470930][T12138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.544126][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.629182][T12139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.684222][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.718846][ T5946] hid (null): usage index exceeded [ 699.748953][ T5946] wacom 0003:056A:00F4.000F: ignoring exceeding usage max [ 699.821121][T12149] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1462'. [ 699.828800][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.845227][T12149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1462'. [ 700.621429][ T5926] tipc: Node number set to 2886997162 [ 700.640221][ T5946] wacom 0003:056A:00F4.000F: ignoring exceeding usage max [ 700.652570][ T5946] wacom 0003:056A:00F4.000F: usage index exceeded [ 700.659887][ T5946] wacom 0003:056A:00F4.000F: item 0 1 2 2 parsing failed [ 700.674396][ T5946] wacom 0003:056A:00F4.000F: parse failed [ 700.687155][ T5946] wacom 0003:056A:00F4.000F: probe with driver wacom failed with error -22 [ 701.608690][ T5926] usb 6-1: USB disconnect, device number 36 [ 704.624098][ C1] net_ratelimit: 7 callbacks suppressed [ 704.624125][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 704.659629][T12192] 9pnet_virtio: no channels available for device 127.0.0.1 [ 705.664136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 705.684828][T12202] 9pnet_virtio: no channels available for device 127.0.0.1 [ 706.704027][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 707.744043][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 708.784136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 708.791402][T12225] program syz.0.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.846825][T12227] netlink: 'syz.7.1482': attribute type 10 has an invalid length. [ 709.206008][T12227] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 709.824256][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 710.864206][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 711.174964][T12247] 9pnet_virtio: no channels available for device 127.0.0.1 [ 711.744871][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.790686][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.904054][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 711.976934][ T5926] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 712.172598][ T5926] usb 7-1: device descriptor read/64, error -71 [ 712.484533][ T5926] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 712.944202][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 713.002485][ T5926] usb 7-1: device descriptor read/64, error -71 [ 713.188216][T12256] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 713.837418][ T5926] usb usb7-port1: attempt power cycle [ 713.994489][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 714.184812][ T5926] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 714.900116][ T5926] usb 7-1: device descriptor read/8, error -71 [ 715.024052][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 715.198931][T12252] FAULT_INJECTION: forcing a failure. [ 715.198931][T12252] name failslab, interval 1, probability 0, space 0, times 0 [ 715.254583][T12252] CPU: 1 UID: 0 PID: 12252 Comm: syz.3.1488 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 715.254617][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.254632][T12252] Call Trace: [ 715.254641][T12252] [ 715.254651][T12252] dump_stack_lvl+0x189/0x250 [ 715.254684][T12252] ? __pfx____ratelimit+0x10/0x10 [ 715.254709][T12252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.254734][T12252] ? __pfx__printk+0x10/0x10 [ 715.254769][T12252] ? __pfx___might_resched+0x10/0x10 [ 715.254805][T12252] ? fs_reclaim_acquire+0x7d/0x100 [ 715.254838][T12252] should_fail_ex+0x414/0x560 [ 715.254868][T12252] should_failslab+0xa8/0x100 [ 715.254894][T12252] __kmalloc_noprof+0xcb/0x4f0 [ 715.254914][T12252] ? kfree+0x4d/0x440 [ 715.254944][T12252] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 715.254982][T12252] tomoyo_realpath_from_path+0xe3/0x5d0 [ 715.255013][T12252] ? tomoyo_domain+0xda/0x130 [ 715.255049][T12252] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 715.255074][T12252] tomoyo_path_number_perm+0x1e8/0x5a0 [ 715.255101][T12252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 715.255145][T12252] ? __lock_acquire+0xab9/0xd20 [ 715.255189][T12252] ? __fget_files+0x2a/0x420 [ 715.255219][T12252] ? __fget_files+0x2a/0x420 [ 715.255242][T12252] ? __fget_files+0x3a0/0x420 [ 715.255266][T12252] ? __fget_files+0x2a/0x420 [ 715.255302][T12252] security_file_ioctl+0xcb/0x2d0 [ 715.255332][T12252] __se_sys_ioctl+0x47/0x170 [ 715.255368][T12252] do_syscall_64+0xfa/0x3b0 [ 715.255392][T12252] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.255415][T12252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.255438][T12252] ? clear_bhb_loop+0x60/0xb0 [ 715.255492][T12252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.255514][T12252] RIP: 0033:0x7fc55af8ebe9 [ 715.255534][T12252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.255554][T12252] RSP: 002b:00007fc55be01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.255578][T12252] RAX: ffffffffffffffda RBX: 00007fc55b1b5fa0 RCX: 00007fc55af8ebe9 [ 715.255599][T12252] RDX: 0000000000000000 RSI: 00000000400448de RDI: 0000000000000004 [ 715.255613][T12252] RBP: 00007fc55be01090 R08: 0000000000000000 R09: 0000000000000000 [ 715.255626][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.255639][T12252] R13: 00007fc55b1b6038 R14: 00007fc55b1b5fa0 R15: 00007ffeb2893d58 [ 715.255675][T12252] [ 715.281912][T12252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 716.051535][T12279] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1494'. [ 716.051578][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1494'. [ 716.064052][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.104028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.422447][T12285] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1495'. [ 717.422608][T12285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1495'. [ 718.134959][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.144030][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 718.234359][ T5926] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 719.184030][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 720.120016][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 720.224090][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 720.377856][T12312] overlayfs: failed to resolve './file0': -2 [ 721.052265][T12320] xt_l2tp: unknown flags: 17 [ 721.179833][T12328] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1506'. [ 721.189958][T12328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1506'. [ 721.264016][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 722.016408][ T5926] usb 7-1: device descriptor read/64, error -71 [ 722.304852][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 722.344121][ T5926] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 722.419298][T12335] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 722.428168][T12335] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1509'. [ 722.438497][T12335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 722.544615][T12336] 9pnet_fd: Insufficient options for proto=fd [ 723.297551][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 723.344055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 724.384035][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 724.446582][T12350] SET target dimension over the limit! [ 724.889856][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1516'. [ 725.424021][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 726.464114][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 726.980507][T12370] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1518'. [ 726.992397][T12370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1518'. [ 727.504064][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 727.784481][ T5912] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 727.785327][ T5926] usb 7-1: device descriptor read/all, error -71 [ 727.839875][ T5926] usb usb7-port1: attempt power cycle [ 727.870227][ T31] audit: type=1326 audit(1755631106.755:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 727.940864][ T31] audit: type=1326 audit(1755631106.785:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 728.009830][ T31] audit: type=1326 audit(1755631106.785:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 728.044213][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 728.100628][ T5912] usb 8-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 728.124314][ T31] audit: type=1326 audit(1755631106.785:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 728.151449][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.216393][T12374] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 728.252422][ T5912] usb 8-1: Product: syz [ 728.270708][ T31] audit: type=1326 audit(1755631106.785:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 728.301940][ T31] audit: type=1326 audit(1755631106.785:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 728.344783][ T5912] usb 8-1: Manufacturer: syz [ 728.351089][ T5912] usb 8-1: SerialNumber: syz [ 728.397686][T12382] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 728.407993][T12382] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1521'. [ 728.420376][T12382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 728.530162][T12383] 9pnet_fd: Insufficient options for proto=fd [ 728.544032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.886621][ T5912] usb 8-1: config 0 descriptor?? [ 729.019045][ T31] audit: type=1326 audit(1755631106.785:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 729.043963][ T31] audit: type=1326 audit(1755631106.785:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 729.098407][ T31] audit: type=1326 audit(1755631106.785:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 729.183726][ T31] audit: type=1326 audit(1755631106.785:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc55af8ebe9 code=0x7ffc0000 [ 729.185216][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1519'. [ 729.584096][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 730.025768][ T5912] snd-usb-hiface 8-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 730.624076][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 731.664978][T12410] netlink: 'syz.5.1530': attribute type 1 has an invalid length. [ 731.673686][T12410] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1530'. [ 731.684350][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 731.692292][T12410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 731.750191][T12410] 9pnet_fd: Insufficient options for proto=fd [ 731.934877][ T977] libceph: connect (1)[c::]:6789 error -13 [ 731.941840][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 731.978164][ T5926] usb 8-1: USB disconnect, device number 42 [ 732.285157][T12432] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1532'. [ 732.295990][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'. [ 732.704032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 733.094796][ T977] libceph: connect (1)[c::]:6789 error -13 [ 733.101230][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 733.108510][T12415] ceph: No mds server is up or the cluster is laggy [ 733.181284][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1534'. [ 733.259691][T12433] syz.7.1535: attempt to access beyond end of device [ 733.259691][T12433] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 733.754010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 734.104114][T12441] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 734.113569][T12441] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1536'. [ 734.125671][T12441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 734.228947][T12442] 9pnet_fd: Insufficient options for proto=fd [ 734.794100][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 735.784158][ T5926] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 735.824026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 736.177777][ T5926] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 736.628061][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.652752][ T5926] usb 4-1: config 0 descriptor?? [ 736.665186][ T5926] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 736.830732][T12478] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1546'. [ 736.841879][T12478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1546'. [ 736.864001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 736.984415][T11186] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 737.904186][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 738.062625][T11186] usb 6-1: Using ep0 maxpacket: 8 [ 738.299358][T12482] 9p: Unknown uid 00000000004294967295 [ 738.392115][T11186] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 738.399417][ T5926] pwc: Failed to set LED on/off time (-71) [ 738.422104][T11186] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 738.438554][T11186] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 738.438828][ T5926] pwc: send_video_command error -71 [ 738.470033][ T5926] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 738.522393][ T5926] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 738.535200][T11186] usb 6-1: Product: syz [ 738.548255][T11186] usb 6-1: Manufacturer: syz [ 738.573685][T11186] usb 6-1: SerialNumber: syz [ 738.621551][ T5926] usb 4-1: USB disconnect, device number 54 [ 738.805032][T11186] usb 6-1: Invalid connection information received from device [ 738.828902][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1550'. [ 738.944238][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 739.483109][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.554413][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.645282][ T5926] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 739.677278][ T5946] usb 6-1: USB disconnect, device number 37 [ 739.819905][T12510] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 739.895321][T12515] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 739.984084][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 740.551236][T12525] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1558'. [ 740.565590][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1558'. [ 741.024117][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 741.822705][T12536] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 742.064021][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 742.224676][T11186] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 742.455519][T11186] usb 4-1: Using ep0 maxpacket: 16 [ 742.487419][T11186] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.104067][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 743.162508][T11186] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 743.334020][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1564'. [ 743.358934][T11186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.450562][T11186] usb 4-1: Product: syz [ 743.456875][T11186] usb 4-1: Manufacturer: syz [ 743.467829][T11186] usb 4-1: SerialNumber: syz [ 743.497743][T11186] usb 4-1: config 0 descriptor?? [ 743.801306][T11186] usb 4-1: USB disconnect, device number 55 [ 744.144061][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 745.170352][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1570'. [ 745.184055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 745.282910][T12565] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1569'. [ 745.293252][T12565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'. [ 745.837702][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1570'. [ 746.224094][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 746.634729][ T5948] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 746.712800][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.946668][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 746.977881][ T5948] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.036457][ T5948] usb 8-1: config 0 has no interface number 0 [ 747.069173][ T5948] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.121321][ T5948] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.161922][ T5948] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 747.190672][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.228549][ T5948] usb 8-1: config 0 descriptor?? [ 747.264764][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 747.954293][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.019550][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.304311][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 748.695310][T12612] netlink: del zone limit has 4 unknown bytes [ 748.729799][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 748.748004][ T5948] uclogic 0003:28BD:0071.0010: pen parameters not found [ 748.758197][ T5948] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 748.839204][T12624] netlink: 'syz.5.1582': attribute type 1 has an invalid length. [ 748.850084][T12624] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1582'. [ 748.865616][T12624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 749.022489][T12625] 9pnet_fd: Insufficient options for proto=fd [ 749.344315][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 749.417314][ T5948] usb 8-1: USB disconnect, device number 43 [ 749.626441][T12635] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 749.637410][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1588'. [ 749.756999][T12639] 9pnet_virtio: no channels available for device 127.0.0.1 [ 749.876631][ T5946] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 750.364243][ T5946] usb 6-1: Using ep0 maxpacket: 16 [ 750.378362][ T5946] usb 6-1: config 1 interface 0 has no altsetting 0 [ 750.386011][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 750.705719][ T5946] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 750.770936][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.782803][ T5946] usb 6-1: Product: syz [ 750.789091][ T5946] usb 6-1: Manufacturer: syz [ 750.797126][ T5946] usb 6-1: SerialNumber: syz [ 751.424074][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 751.980456][ T5946] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36 [ 752.015200][ T5192] bcm5974 6-1:1.0: could not read from device [ 752.055535][ T5192] bcm5974 6-1:1.0: could not read from device [ 752.083380][ T5946] usb 6-1: USB disconnect, device number 38 [ 752.099200][ T5192] bcm5974 6-1:1.0: could not read from device [ 752.353549][T12664] netlink: 'syz.6.1596': attribute type 1 has an invalid length. [ 752.362347][T12664] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1596'. [ 752.372920][T12664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 752.464032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 752.489380][T12665] 9pnet_fd: Insufficient options for proto=fd [ 752.964489][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 753.032611][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.041605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.366927][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 753.419898][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 753.444802][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.514015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 753.567460][ T10] usb 4-1: config 0 descriptor?? [ 753.591547][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 753.610560][ T10] usb 4-1: Detected FT4232H [ 753.815463][ T5946] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 754.044412][ T5946] usb 7-1: Using ep0 maxpacket: 16 [ 754.493777][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.544225][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 754.603095][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.629991][ T5946] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 754.642662][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.673055][ T5946] usb 7-1: config 0 descriptor?? [ 754.795038][T12680] overlayfs: failed to resolve './file1': -2 [ 754.826671][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 754.841961][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 755.066050][T12684] overlayfs: failed to resolve '/000000000004': -2 [ 755.113467][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 755.515041][ T10] usb 4-1: USB disconnect, device number 56 [ 755.542868][ T5946] usbhid 7-1:0.0: can't add hid device: -71 [ 755.569870][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 755.571598][ T5946] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 755.589454][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 755.604793][ T10] ftdi_sio 4-1:0.0: device disconnected [ 755.647400][ T5946] usb 7-1: USB disconnect, device number 46 [ 755.955790][T12692] 9pnet_virtio: no channels available for device 127.0.0.1 [ 756.624184][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 757.664223][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.704109][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.819748][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1609'. [ 758.840826][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1609'. [ 758.870225][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1609'. [ 759.744373][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 760.520734][T12741] netlink: 'syz.6.1617': attribute type 32 has an invalid length. [ 760.566714][ T5912] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 760.694052][ T5946] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 760.751797][ T5912] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 760.762690][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.780968][ T5912] usb 6-1: config 0 has no interface number 0 [ 760.787939][ T5912] usb 6-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 760.794141][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 760.798799][ T5912] usb 6-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 760.823398][ T5912] usb 6-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 760.833254][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.834109][ T5946] usb 4-1: device descriptor read/64, error -71 [ 760.855886][ T5912] usb 6-1: config 0 descriptor?? [ 760.864162][ T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 760.876884][ T5912] HFC-S_USB 6-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 761.054189][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 761.062524][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 761.077443][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 761.089452][ T5946] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 761.096270][T12737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.109029][ T24] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 761.126610][ T24] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 761.136713][ T24] usb 7-1: Product: syz [ 761.141347][ T24] usb 7-1: Manufacturer: syz [ 761.146126][ T24] usb 7-1: SerialNumber: syz [ 761.163804][ T24] usb 7-1: config 0 descriptor?? [ 761.215690][ T24] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 761.225745][ T5946] usb 4-1: device descriptor read/64, error -71 [ 761.262197][ T5912] usb 6-1: USB disconnect, device number 39 [ 761.334650][ T5946] usb usb4-port1: attempt power cycle [ 761.386151][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.396483][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.409855][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.420129][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.694184][ T5946] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 761.726142][ T5946] usb 4-1: device descriptor read/8, error -71 [ 761.824078][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 761.858598][T12752] overlayfs: failed to resolve '/000000000004': -2 [ 761.973518][ T5912] usb 7-1: USB disconnect, device number 47 [ 761.974133][ T5946] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 761.989152][ T8129] usb 7-1: Failed to submit usb control message: -71 [ 762.014188][ T8129] usb 7-1: unable to send the bmi data to the device: -71 [ 762.037985][ T8129] usb 7-1: unable to get target info from device [ 762.050328][ T8129] usb 7-1: could not get target info (-71) [ 762.064776][ T5946] usb 4-1: device descriptor read/8, error -71 [ 762.071909][ T8129] usb 7-1: could not probe fw (-71) [ 762.183756][T12759] netlink: 'syz.5.1622': attribute type 21 has an invalid length. [ 762.202510][ T5946] usb usb4-port1: unable to enumerate USB device [ 762.218138][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 762.644242][ T24] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 762.874165][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 762.875019][T12765] overlayfs: failed to resolve '/00000': -2 [ 762.953723][ T24] usb 6-1: No LPM exit latency info found, disabling LPM. [ 762.978795][ T24] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 763.003424][ T24] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 763.027933][ T24] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 is Bulk; changing to Interrupt [ 763.048739][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 763.904134][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 764.147242][T12772] lo speed is unknown, defaulting to 1000 [ 764.944025][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 765.834519][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 765.903746][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.926178][ T5948] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 765.984101][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 766.027124][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.440958][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 766.652631][ T10] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 767.024011][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 767.074230][ T24] usb 6-1: can't set config #1, error -71 [ 767.125079][ T24] usb 6-1: USB disconnect, device number 40 [ 767.135776][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 767.168014][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.225205][ T10] usb 7-1: Product: syz [ 767.298336][ T10] usb 7-1: Manufacturer: syz [ 767.330275][ T10] usb 7-1: SerialNumber: syz [ 767.463976][ T10] r8152-cfgselector 7-1: Unknown version 0x0000 [ 767.470812][ T10] r8152-cfgselector 7-1: config 0 descriptor?? [ 767.735804][T11186] r8152-cfgselector 7-1: USB disconnect, device number 48 [ 767.824474][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 768.064120][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 768.111831][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 768.156058][ T10] usb 6-1: can't read configurations, error -22 [ 768.284079][ T5948] usb 8-1: device descriptor read/64, error -71 [ 768.348540][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 768.531773][T12820] pim6reg: entered allmulticast mode [ 768.554127][ T5948] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 768.603741][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 768.764361][ T5948] usb 8-1: Using ep0 maxpacket: 32 [ 768.787770][ T5948] usb 8-1: config 0 has an invalid interface number: 168 but max is 0 [ 768.933678][T12823] pim6reg: left allmulticast mode [ 768.944979][ T5948] usb 8-1: config 0 has no interface number 0 [ 768.955992][ T5948] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 768.975219][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.096925][ T5948] usb 8-1: config 0 descriptor?? [ 769.103999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 769.119697][ T5948] speedtch 8-1:0.168: speedtch_bind: wrong device class 176 [ 769.122190][ T10] usb 6-1: can't read configurations, error -22 [ 769.129045][ T5948] speedtch 8-1:0.168: usbatm_usb_probe: bind failed: -19! [ 769.304052][ T10] usb usb6-port1: attempt power cycle [ 769.511265][ T977] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 769.684213][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 769.704714][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 769.713674][ T977] usb 7-1: unable to get BOS descriptor or descriptor too short [ 769.731105][ T977] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.748051][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 769.774060][ T10] usb 6-1: can't read configurations, error -22 [ 769.783192][ T977] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 769.807514][ T977] usb 7-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 769.837188][ T977] usb 7-1: config 1 interface 0 has no altsetting 0 [ 769.858478][ T977] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.873108][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.899882][ T977] usb 7-1: Product: syz [ 769.910821][ T977] usb 7-1: Manufacturer: syz [ 769.923534][ T977] usb 7-1: SerialNumber: syz [ 769.934137][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 769.972191][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 769.983775][T12824] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 769.992832][T12824] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 770.030542][ T10] usb 6-1: can't read configurations, error -22 [ 770.060554][ T10] usb usb6-port1: unable to enumerate USB device [ 770.143999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 770.239733][ T977] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 770.288679][ T977] usb 7-1: USB disconnect, device number 49 [ 770.585980][T12831] fuse: Bad value for 'fd' [ 770.702368][ T5946] usb 8-1: USB disconnect, device number 45 [ 770.787748][T12833] overlayfs: failed to resolve '/00000': -2 [ 771.174198][ T5946] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 771.183993][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 771.356515][ T5946] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.387419][ T5946] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.40 [ 771.403307][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.413051][ T5946] usb 4-1: Product: 뻱謄騵ဩ铘뮁ℰ臸汹ॹ䀴普鸃ꫳㄩ榦㢗霫蕹嬖楘掐ҏ叞蠏࿿핍뻂ꬕ沽炼帀㷖Ṇគ㟬 [ 771.437947][ T5946] usb 4-1: Manufacturer: ᰑ [ 771.444112][ T5946] usb 4-1: SerialNumber: 萚ᓶ琺羸㘠偈Ჱ䛷ꏗ鯃ﺦ鎫ꂝᎭἛ옲녒㱊叿ᣊ옭낕載豸糾Ỳꑪ㩎⌺彟◺嶏쳢决歷뷽䆲㚭ﵯ뾕衳槆汈揁د孛禪ퟳ諺雡᭱ꊤ鰬곉쪖ﲣ萶븮⻶륑ꗝ뵥婒 [ 772.088077][ T5948] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 772.224016][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 772.254171][ T5946] usbhid 4-1:1.0: can't add hid device: -71 [ 772.277362][ T5946] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 772.301453][ T5946] usb 4-1: USB disconnect, device number 61 [ 772.394011][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 772.416002][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.454059][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.482247][ T5948] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 772.493128][T12851] tmpfs: Unknown parameter 'measure' [ 772.513281][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.543550][ T5948] usb 6-1: config 0 descriptor?? [ 772.789995][T12856] gfs2: gfs2 mount does not exist [ 773.264055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 773.585590][ T977] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 773.803543][ T5948] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0x1 [ 773.816819][ T977] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 773.833659][ T5948] hid-multitouch 0003:1FD2:6007.0011: item fetching failed at offset 1/5 [ 773.834030][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.870717][ T5948] hid-multitouch 0003:1FD2:6007.0011: probe with driver hid-multitouch failed with error -22 [ 773.911171][ T977] usb 7-1: config 0 has no interface number 0 [ 773.946724][T12862] binder: 12860:12862 ioctl c0306201 200000000040 returned -14 [ 773.964607][ T977] usb 7-1: config 0 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 774.111124][ T977] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 774.121825][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.142064][ T977] usb 7-1: Product: syz [ 774.154481][ T977] usb 7-1: Manufacturer: syz [ 774.161061][T12869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.179826][ T977] usb 7-1: SerialNumber: syz [ 774.225532][ T977] usb 7-1: config 0 descriptor?? [ 774.245602][T12869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.304018][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 774.354245][ T6993] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 774.504350][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.513401][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.525790][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.535326][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.559692][ T6993] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 774.572398][ T6993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.608530][ T6993] usb 4-1: Product: syz [ 774.634116][ T6993] usb 4-1: Manufacturer: syz [ 774.642718][ T6993] usb 4-1: SerialNumber: syz [ 774.707441][ T6993] usb 4-1: config 0 descriptor?? [ 775.344140][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 775.497077][ T8130] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.539974][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 775.549927][ T8130] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 775.682481][T11186] usb 4-1: USB disconnect, device number 62 [ 775.705799][ T977] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 775.717136][ T59] usb 7-1: Failed to submit usb control message: -71 [ 775.725417][ T977] usb 7-1: USB disconnect, device number 50 [ 775.744628][ T59] usb 7-1: unable to send the bmi data to the device: -71 [ 775.784950][ T59] usb 7-1: unable to get target info from device [ 775.802815][ T59] usb 7-1: could not get target info (-71) [ 775.821389][ T59] usb 7-1: could not probe fw (-71) [ 775.887018][ T8130] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.900954][ T8130] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 776.066436][ T8130] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.099242][ T8130] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 776.302364][ T8130] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.384000][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 776.395126][ T8130] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 777.145801][T12881] overlayfs: failed to resolve '/00000': -2 [ 777.212970][ T6993] usb 6-1: USB disconnect, device number 45 [ 777.423996][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 778.196776][ T8130] bridge_slave_1: left allmulticast mode [ 778.294319][ T8130] bridge_slave_1: left promiscuous mode [ 778.315667][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.395456][ T8130] bridge_slave_0: left allmulticast mode [ 778.434162][ T8130] bridge_slave_0: left promiscuous mode [ 778.440873][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.464012][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 778.713877][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.729338][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.742803][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.755673][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.773101][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 778.898094][T12908] [U]  [ 779.504018][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 779.874231][ T5830] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 780.010124][T12917] Falling back ldisc for ttyS3. [ 780.084135][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 780.123053][ T5830] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 780.140024][ T5830] usb 7-1: config 0 has no interface number 0 [ 780.162938][ T5830] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 780.219118][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.228114][T12925] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1668'. [ 780.269247][ T5830] usb 7-1: config 0 descriptor?? [ 780.343456][ T5830] speedtch 7-1:0.168: speedtch_bind: wrong device class 176 [ 780.390106][ T5830] speedtch 7-1:0.168: usbatm_usb_probe: bind failed: -19! [ 780.484228][ T6993] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 780.544151][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 780.861231][T12939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1671'. [ 780.873549][ T5840] Bluetooth: hci5: command tx timeout [ 781.006185][ T8130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.039919][ T8130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.070639][ T8130] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 781.099289][ T8130] bond0 (unregistering): Released all slaves [ 781.107301][T12944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1672'. [ 781.160569][ T8130] bond1 (unregistering): Released all slaves [ 781.584029][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 781.685497][ T8130] bond2 (unregistering): Released all slaves [ 782.020461][T12902] lo speed is unknown, defaulting to 1000 [ 782.203083][T12952] overlayfs: failed to resolve '/000000000004': -2 [ 782.299649][ T8130] hsr_slave_0: left promiscuous mode [ 782.318270][ T8130] hsr_slave_1: left promiscuous mode [ 782.326799][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.346454][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.355071][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.413763][ T8130] veth0_macvtap: left promiscuous mode [ 782.420103][ T8130] veth1_vlan: left promiscuous mode [ 782.426289][ T8130] veth0_vlan: left promiscuous mode [ 782.455080][ T6993] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 782.624131][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 782.723216][ T6993] usb 4-1: device descriptor read/64, error -71 [ 782.971612][ T5840] Bluetooth: hci5: command tx timeout [ 782.978662][ T6993] usb usb4-port1: attempt power cycle [ 783.033587][ T5830] usb 7-1: USB disconnect, device number 51 [ 783.479248][ T6993] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 783.664027][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 783.731574][ T6993] usb 4-1: device descriptor read/8, error -71 [ 783.984892][ T6993] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 784.029480][ T6993] usb 4-1: device descriptor read/8, error -71 [ 784.144641][ T6993] usb usb4-port1: unable to enumerate USB device [ 784.333044][T12977] tmpfs: Bad value for 'mpol' [ 784.703991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.034814][ T5840] Bluetooth: hci5: command tx timeout [ 785.245304][T12976] xt_hashlimit: max too large, truncated to 1048576 [ 785.366417][T12992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.647083][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 785.743990][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 786.792327][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 787.213259][T13012] 9pnet_fd: Insufficient options for proto=fd [ 787.220499][ T5840] Bluetooth: hci5: command tx timeout [ 787.354212][ T5946] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 787.756861][ T5946] usb 7-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 787.770902][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.780253][ T5946] usb 7-1: Product: syz [ 787.791685][ T5946] usb 7-1: Manufacturer: syz [ 787.796657][ T5946] usb 7-1: SerialNumber: syz [ 787.808681][ T5946] usb 7-1: config 0 descriptor?? [ 787.823998][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 787.858112][ T5946] cp210x 7-1:0.0: cp210x converter detected [ 787.964452][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.130375][ T5946] usb 7-1: cp210x converter now attached to ttyUSB0 [ 788.273712][T12992] kthread_run failed with err -4 [ 788.279805][T13011] netlink: 'syz.5.1686': attribute type 1 has an invalid length. [ 788.288712][T13011] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1686'. [ 788.298684][T13011] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 788.443244][T13007] lo speed is unknown, defaulting to 1000 [ 788.784416][T13024] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 788.820822][ T5946] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 788.865277][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 789.007748][ T5946] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 789.073787][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 789.099177][T12902] chnl_net:caif_netlink_parms(): no params data found [ 789.128073][ T5946] usb 6-1: Product: syz [ 789.169555][ T5946] usb 6-1: config 0 descriptor?? [ 789.213681][ T8130] IPVS: stop unused estimator thread 0... [ 789.226082][ T5946] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 789.263090][ T5946] ftdi_sio ttyUSB1: unknown device type: 0xc698 [ 789.521017][T12902] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.529372][T12902] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.537621][T12902] bridge_slave_0: entered allmulticast mode [ 789.547836][T12902] bridge_slave_0: entered promiscuous mode [ 789.557974][T12902] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.581321][T12902] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.600320][T12902] bridge_slave_1: entered allmulticast mode [ 789.627104][T12902] bridge_slave_1: entered promiscuous mode [ 789.663107][ T5946] usb 6-1: USB disconnect, device number 46 [ 789.689000][ T5946] ftdi_sio 6-1:0.0: device disconnected [ 789.801503][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.826905][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.840725][T13024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.854932][T13024] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 789.904022][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 790.006545][T12902] team0: Port device team_slave_0 added [ 790.040361][T12902] team0: Port device team_slave_1 added [ 790.142966][T12902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.173694][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.201646][ T5946] usb 7-1: USB disconnect, device number 52 [ 790.224571][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 790.243464][ T5946] cp210x 7-1:0.0: device disconnected [ 790.264496][T12902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.337477][T12902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.360769][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.494105][T12902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.654620][T13024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 790.661408][T13024] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 790.754783][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 790.926384][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 790.944099][ T10] usb 6-1: config 0 has no interface number 0 [ 790.944104][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 791.049033][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 791.063284][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.075922][ T10] usb 6-1: Product: syz [ 791.080599][ T10] usb 6-1: Manufacturer: syz [ 791.089303][ T10] usb 6-1: SerialNumber: syz [ 791.101734][T12902] hsr_slave_0: entered promiscuous mode [ 791.119472][T12902] hsr_slave_1: entered promiscuous mode [ 791.119698][ T10] usb 6-1: config 0 descriptor?? [ 791.135573][T12902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.150126][T13081] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 791.159470][T12902] Cannot create hsr debugfs directory [ 791.303992][T13024] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.312852][T13024] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 791.364198][ T10] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 791.416447][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 791.445365][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 791.453742][ T10] usb 6-1: media controller created [ 791.486283][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.538756][ T10] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 791.780348][ T10] usb 6-1: USB disconnect, device number 47 [ 791.859924][T13098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 791.983984][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 792.654696][T13107] 9pnet_fd: Insufficient options for proto=fd [ 792.690533][T13104] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 792.703871][T13104] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1696'. [ 792.714677][T13104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 793.024002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 793.295813][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 793.427269][T12902] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 793.510233][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 793.522201][T12902] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 793.918257][T12902] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 794.021557][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.064018][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 794.201039][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.235791][T12902] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 794.242681][ T5946] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 794.447414][ T10] usb 6-1: can't read configurations, error -61 [ 794.594099][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 794.594129][ T5946] usb 4-1: device descriptor read/64, error -71 [ 794.843379][T13156] 9pnet_virtio: no channels available for device 127.0.0.1 [ 795.104002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 795.280060][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 795.301109][ T10] usb 6-1: can't read configurations, error -61 [ 795.342431][ T10] usb usb6-port1: attempt power cycle [ 795.394948][ T5946] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 795.406668][T12902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.462630][T12902] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.554121][ T5946] usb 4-1: device descriptor read/64, error -71 [ 795.561079][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.568964][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.623073][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.630565][ T8130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.665279][ T5946] usb usb4-port1: attempt power cycle [ 795.869012][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 795.902049][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 795.911717][ T10] usb 6-1: can't read configurations, error -61 [ 796.144016][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 796.218470][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 796.714096][ T5946] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 796.729041][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 796.758903][ T10] usb 6-1: can't read configurations, error -61 [ 796.794811][ T10] usb usb6-port1: unable to enumerate USB device [ 796.797619][ T5946] usb 4-1: device descriptor read/8, error -71 [ 797.184053][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.224027][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.895398][T13186] 9pnet_fd: Insufficient options for proto=fd [ 798.909100][T13182] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 798.919633][T13182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1709'. [ 798.931165][T13182] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 799.264043][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 800.304029][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 800.364274][T13204] tmpfs: Bad value for 'mpol' [ 801.066723][T12902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.218476][T13215] [ 801.218491][T13215] ====================================================== [ 801.218502][T13215] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 801.218520][T13215] 6.16.0-syzkaller #0 Not tainted [ 801.218535][T13215] ------------------------------------------------------ [ 801.218545][T13215] syz.3.1717/13215 is trying to acquire lock: [ 801.218560][T13215] ffff8880258b4988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.218641][T13215] [ 801.218641][T13215] but task is already holding lock: [ 801.218649][T13215] ffff8880258b4a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 801.218707][T13215] [ 801.218707][T13215] which lock already depends on the new lock. [ 801.218707][T13215] [ 801.218717][T13215] [ 801.218717][T13215] the existing dependency chain (in reverse order) is: [ 801.218726][T13215] [ 801.218726][T13215] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 801.218761][T13215] lock_acquire+0x120/0x360 [ 801.218780][T13215] __mutex_lock+0x182/0xe80 [ 801.218805][T13215] refcount_dec_and_mutex_lock+0x30/0xa0 [ 801.218837][T13215] nbd_config_put+0x2c/0x790 [ 801.218863][T13215] nbd_release+0xfe/0x140 [ 801.218889][T13215] bdev_release+0x533/0x650 [ 801.218916][T13215] blkdev_release+0x15/0x20 [ 801.218946][T13215] __fput+0x449/0xa70 [ 801.218973][T13215] fput_close_sync+0x119/0x200 [ 801.219001][T13215] __x64_sys_close+0x7f/0x110 [ 801.219031][T13215] do_syscall_64+0xfa/0x3b0 [ 801.219056][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.219078][T13215] [ 801.219078][T13215] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 801.219210][T13215] lock_acquire+0x120/0x360 [ 801.219255][T13215] __mutex_lock+0x182/0xe80 [ 801.219287][T13215] __del_gendisk+0x129/0x9e0 [ 801.219324][T13215] del_gendisk+0xe8/0x160 [ 801.219357][T13215] loop_remove+0x42/0xc0 [ 801.219395][T13215] loop_control_ioctl+0x4ac/0x5a0 [ 801.219415][T13215] __se_sys_ioctl+0xfc/0x170 [ 801.219453][T13215] do_syscall_64+0xfa/0x3b0 [ 801.219482][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.219510][T13215] [ 801.219510][T13215] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 801.219555][T13215] validate_chain+0xb9b/0x2140 [ 801.219586][T13215] __lock_acquire+0xab9/0xd20 [ 801.219616][T13215] lock_acquire+0x120/0x360 [ 801.219636][T13215] down_write+0x96/0x1f0 [ 801.219667][T13215] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.219719][T13215] nbd_start_device+0x16c/0xac0 [ 801.219753][T13215] nbd_genl_connect+0x135b/0x18f0 [ 801.219782][T13215] genl_family_rcv_msg_doit+0x215/0x300 [ 801.219811][T13215] genl_rcv_msg+0x60e/0x790 [ 801.219837][T13215] netlink_rcv_skb+0x205/0x470 [ 801.219877][T13215] genl_rcv+0x28/0x40 [ 801.219923][T13215] netlink_unicast+0x75c/0x8e0 [ 801.219955][T13215] netlink_sendmsg+0x805/0xb30 [ 801.219990][T13215] __sock_sendmsg+0x21c/0x270 [ 801.220019][T13215] ____sys_sendmsg+0x505/0x830 [ 801.220058][T13215] ___sys_sendmsg+0x21f/0x2a0 [ 801.220096][T13215] __x64_sys_sendmsg+0x19b/0x260 [ 801.220135][T13215] do_syscall_64+0xfa/0x3b0 [ 801.220162][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.220186][T13215] [ 801.220186][T13215] other info that might help us debug this: [ 801.220186][T13215] [ 801.220197][T13215] Chain exists of: [ 801.220197][T13215] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 801.220197][T13215] [ 801.220250][T13215] Possible unsafe locking scenario: [ 801.220250][T13215] [ 801.220259][T13215] CPU0 CPU1 [ 801.220268][T13215] ---- ---- [ 801.220277][T13215] lock(&nbd->config_lock); [ 801.220298][T13215] lock(&disk->open_mutex); [ 801.220319][T13215] lock(&nbd->config_lock); [ 801.220355][T13215] lock(&set->update_nr_hwq_lock); [ 801.220376][T13215] [ 801.220376][T13215] *** DEADLOCK *** [ 801.220376][T13215] [ 801.220384][T13215] 3 locks held by syz.3.1717/13215: [ 801.220401][T13215] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.220466][T13215] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.220531][T13215] #2: ffff8880258b4a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 801.220602][T13215] [ 801.220602][T13215] stack backtrace: [ 801.220617][T13215] CPU: 1 UID: 0 PID: 13215 Comm: syz.3.1717 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 801.220648][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.220663][T13215] Call Trace: [ 801.220672][T13215] [ 801.220684][T13215] dump_stack_lvl+0x189/0x250 [ 801.220718][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.220748][T13215] ? __pfx__printk+0x10/0x10 [ 801.220782][T13215] ? print_lock_name+0xde/0x100 [ 801.220817][T13215] print_circular_bug+0x2ee/0x310 [ 801.220850][T13215] check_noncircular+0x134/0x160 [ 801.220903][T13215] validate_chain+0xb9b/0x2140 [ 801.220949][T13215] __lock_acquire+0xab9/0xd20 [ 801.220978][T13215] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.221012][T13215] lock_acquire+0x120/0x360 [ 801.221034][T13215] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.221083][T13215] ? kernfs_add_one+0xf0/0x520 [ 801.221118][T13215] down_write+0x96/0x1f0 [ 801.221147][T13215] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.221181][T13215] ? __pfx_down_write+0x10/0x10 [ 801.221212][T13215] ? kernfs_add_one+0xf0/0x520 [ 801.221245][T13215] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 801.221282][T13215] ? sysfs_add_file_mode_ns+0x238/0x300 [ 801.221307][T13215] ? sysfs_add_file_mode_ns+0x259/0x300 [ 801.221338][T13215] nbd_start_device+0x16c/0xac0 [ 801.221373][T13215] ? __nla_parse+0x40/0x60 [ 801.221403][T13215] ? device_create_file+0xf4/0x1c0 [ 801.221441][T13215] nbd_genl_connect+0x135b/0x18f0 [ 801.221487][T13215] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.221532][T13215] ? __nla_parse+0x40/0x60 [ 801.221564][T13215] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 801.221599][T13215] genl_family_rcv_msg_doit+0x215/0x300 [ 801.221631][T13215] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.221680][T13215] genl_rcv_msg+0x60e/0x790 [ 801.221711][T13215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.221736][T13215] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.221775][T13215] netlink_rcv_skb+0x205/0x470 [ 801.221817][T13215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.221844][T13215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.221905][T13215] ? down_read+0x1ad/0x2e0 [ 801.221938][T13215] genl_rcv+0x28/0x40 [ 801.221962][T13215] netlink_unicast+0x75c/0x8e0 [ 801.222000][T13215] netlink_sendmsg+0x805/0xb30 [ 801.222043][T13215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.222085][T13215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 801.222111][T13215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.222148][T13215] __sock_sendmsg+0x21c/0x270 [ 801.222179][T13215] ____sys_sendmsg+0x505/0x830 [ 801.222221][T13215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.222266][T13215] ? import_iovec+0x74/0xa0 [ 801.222302][T13215] ___sys_sendmsg+0x21f/0x2a0 [ 801.222351][T13215] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.222395][T13215] ? futex_wait+0x285/0x360 [ 801.222466][T13215] __x64_sys_sendmsg+0x19b/0x260 [ 801.222507][T13215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.222554][T13215] ? __sys_socketpair+0x4a9/0x560 [ 801.222589][T13215] ? do_syscall_64+0xbe/0x3b0 [ 801.222620][T13215] do_syscall_64+0xfa/0x3b0 [ 801.222648][T13215] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.222680][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.222705][T13215] ? clear_bhb_loop+0x60/0xb0 [ 801.222734][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.222760][T13215] RIP: 0033:0x7fc55af8ebe9 [ 801.222784][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.222808][T13215] RSP: 002b:00007fc55be01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.222848][T13215] RAX: ffffffffffffffda RBX: 00007fc55b1b5fa0 RCX: 00007fc55af8ebe9 [ 801.222869][T13215] RDX: 0000000000000000 RSI: 0000200000002800 RDI: 0000000000000004 [ 801.222892][T13215] RBP: 00007fc55b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 801.222917][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.222933][T13215] R13: 00007fc55b1b6038 R14: 00007fc55b1b5fa0 R15: 00007ffeb2893d58 [ 801.222963][T13215] [ 801.344028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 801.546488][T13231] dvmrp8: entered allmulticast mode [ 801.674616][T13215] nbd0: detected capacity change from 0 to 549764202496 [ 802.083545][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.386015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 802.478088][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.594776][T13231] netlink: 'syz.6.1720': attribute type 23 has an invalid length. [ 802.740494][T13231] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 803.236079][ T5840] block nbd0: Receive control failed (result -32) [ 803.387945][ T59] bridge_slave_1: left allmulticast mode [ 803.393993][ T59] bridge_slave_1: left promiscuous mode [ 803.399984][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.408991][ T59] bridge_slave_0: left allmulticast mode [ 803.415467][ T59] bridge_slave_0: left promiscuous mode [ 803.421637][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.424165][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 803.523020][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.535455][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.547294][ T59] bond0 (unregistering): Released all slaves [ 803.638407][ T59] hsr_slave_0: left promiscuous mode [ 803.645795][ T59] hsr_slave_1: left promiscuous mode [ 803.652241][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.661355][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.829290][ T59] team0 (unregistering): Port device team_slave_1 removed [ 803.867735][ T59] team0 (unregistering): Port device team_slave_0 removed [ 804.311460][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.370532][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.428796][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.474049][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 804.484486][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.568644][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.629491][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.689116][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.787108][ T59] bridge_slave_0: left allmulticast mode [ 804.794013][ T59] bridge_slave_0: left promiscuous mode [ 804.800041][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.882203][ T59] dvmrp8 (unregistering): left allmulticast mode [ 804.911788][ T59] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 804.959412][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.971573][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.982286][ T59] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 804.992958][ T59] bond0 (unregistering): Released all slaves [ 805.159099][ T59] bond1 (unregistering): Released all slaves [ 805.203067][ T59] bond1 (unregistering): (slave gretap1): Releasing active interface [ 805.239751][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.256195][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.267640][ T59] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 805.279754][ T59] bond0 (unregistering): Released all slaves [ 805.290441][ T59] bond1 (unregistering): Released all slaves [ 805.365762][ T59] tipc: Disabling bearer [ 805.371819][ T59] tipc: Left network mode [ 805.761719][ T59] hsr_slave_0: left promiscuous mode [ 805.769264][ T59] hsr_slave_1: left promiscuous mode [ 805.777934][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.787132][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.798039][ T59] hsr_slave_0: left promiscuous mode [ 805.804971][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.812946][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.821448][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.830008][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.844769][ T59] veth1_macvtap: left promiscuous mode [ 805.850772][ T59] veth0_macvtap: left promiscuous mode [ 805.857888][ T59] veth1_vlan: left promiscuous mode [ 805.863766][ T59] veth0_vlan: left promiscuous mode [ 805.870684][ T59] veth1_macvtap: left promiscuous mode [ 805.877453][ T59] veth0_macvtap: left promiscuous mode [ 805.883417][ T59] veth1_vlan: left promiscuous mode [ 805.889230][ T59] veth0_vlan: left promiscuous mode [ 806.103863][ T59] team0 (unregistering): Port device team_slave_1 removed [ 806.140112][ T59] team0 (unregistering): Port device C removed [ 806.370135][ T59] team0 (unregistering): Port device team_slave_1 removed [ 806.407447][ T59] team0 (unregistering): Port device C removed [ 806.540734][ T10] lo speed is unknown, defaulting to 1000 [ 806.547265][ T10] infiniband syz0: ib_query_port failed (-19) [ 806.945723][ T59] IPVS: stop unused estimator thread 0... [ 806.953338][ T59] IPVS: stop unused estimator thread 0...