last executing test programs: 10m55.958356352s ago: executing program 2 (id=1352): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x17c2, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x1) 10m55.045599856s ago: executing program 2 (id=1356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) 10m51.270607211s ago: executing program 2 (id=1366): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) 10m49.695954104s ago: executing program 2 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r5, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 10m48.216151552s ago: executing program 2 (id=1375): openat$comedi(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 10m46.970666386s ago: executing program 2 (id=1377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xfffffffb}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, &(0x7f0000000700)=""/4096, 0x1000}, 0x1}], 0x2, 0x10043, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) removexattr(0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xfffff) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 10m31.831943075s ago: executing program 32 (id=1377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xfffffffb}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, &(0x7f0000000700)=""/4096, 0x1000}, 0x1}], 0x2, 0x10043, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) removexattr(0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xfffff) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 6m19.92424046s ago: executing program 0 (id=1959): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xf7e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001fc0)="dc", 0x1}], 0x1}}], 0x2, 0x4c040) 6m18.785744217s ago: executing program 0 (id=1971): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x3ff}, 0x94) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931bc6"], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe14) userfaultfd(0x80001) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640), 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 6m16.188232011s ago: executing program 0 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, '\a\x00'}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) sendmmsg$inet6(r5, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="147f59af734f0afe74a5b498fa7cd7410000e60000000029"], 0x18}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 6m3.457638552s ago: executing program 0 (id=1990): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0) 6m2.235653735s ago: executing program 0 (id=1996): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) 5m59.886434483s ago: executing program 0 (id=1998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) 5m44.473010423s ago: executing program 33 (id=1998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) 3m44.145793667s ago: executing program 3 (id=2292): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x4112, 0x0) 3m43.08595272s ago: executing program 3 (id=2296): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 3m42.680550353s ago: executing program 3 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) read(r2, 0x0, 0xff40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, r4) 3m39.385661988s ago: executing program 3 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) gettid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x21d, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3m32.201870482s ago: executing program 3 (id=2320): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) 3m30.343671042s ago: executing program 3 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r6, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) close(r6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) 3m14.864614135s ago: executing program 34 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r6, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) close(r6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) 1m5.641256664s ago: executing program 1 (id=2632): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m4.52407286s ago: executing program 1 (id=2638): r0 = syz_open_dev$vcsa(0x0, 0x2, 0x50b000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x7cfc97c254aa50fb) pread64(r2, 0x0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000e20020800800000000000002950000000d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000640)) 1m3.616618724s ago: executing program 1 (id=2639): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0) 1m2.188472108s ago: executing program 1 (id=2642): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x272) 57.851833664s ago: executing program 1 (id=2653): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 56.772109388s ago: executing program 1 (id=2656): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x17c2, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x1) 55.070330658s ago: executing program 35 (id=2656): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x17c2, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x1) 15.108091958s ago: executing program 5 (id=2758): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.382799761s ago: executing program 4 (id=2761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13.236027059s ago: executing program 4 (id=2763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000070000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000480)="0f7962030f20e035010000000f22e0c4e288f2460b0fc71e0fc72cbcc7442400fa5a76bac7442402617d0000c7442406000000000f011c240f01c8c4c14173f90067660f3841acee2c3e2d0000c0fe", 0x4f}], 0x1, 0x4c, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="b4000000020802030000000000000000050000000900010073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.256100176s ago: executing program 5 (id=2766): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$afs(0x0, &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x2018890, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000023, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40a100, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 12.251618906s ago: executing program 4 (id=2767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"/16], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(r2, &(0x7f0000000cc0)="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", 0x2000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 11.426261785s ago: executing program 4 (id=2771): eventfd(0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x5, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c0006000300000000000000"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) write$6lowpan_control(r1, 0x0, 0x0) 9.856698388s ago: executing program 5 (id=2775): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7a5, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 8.765539082s ago: executing program 4 (id=2776): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.876077304s ago: executing program 4 (id=2779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.105744389s ago: executing program 8 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.178584354s ago: executing program 8 (id=2786): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x3ff}, 0x94) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931b"], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe14) userfaultfd(0x80001) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640), 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 5.167900475s ago: executing program 7 (id=2787): socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa01, 0x4000, 0x303, 0x300}}) 5.064083531s ago: executing program 7 (id=2788): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.985851475s ago: executing program 5 (id=2789): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 4.017886943s ago: executing program 6 (id=2790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @empty, 0x7}, 0x1c) fcntl$setown(r0, 0x8, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="8246417c338c710767e46cbb79b067e730472ff780853652d4ab2056c537bdb1bc52ba78a5abace7579862a18257ce7732102532d7bbf238c64ec5637114edddcccf", 0x42}], 0x1}}], 0x1, 0x4044851) 3.904734569s ago: executing program 8 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0x5, 0x80000002, 0x2}, 0x0, 0x0) 3.796100326s ago: executing program 6 (id=2792): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 3.765203218s ago: executing program 7 (id=2793): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 3.72783148s ago: executing program 6 (id=2794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, '\a\x00'}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) sendmmsg$inet6(r6, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="147f59af734f0afe74a5b498fa7cd7410000e60000000029"], 0x18}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 3.665657373s ago: executing program 5 (id=2795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.596083017s ago: executing program 7 (id=2796): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2.836978252s ago: executing program 8 (id=2797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 2.729170828s ago: executing program 6 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) 2.677185642s ago: executing program 5 (id=2799): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0) 2.36728649s ago: executing program 6 (id=2800): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x7, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0xfffffffe, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 2.014875101s ago: executing program 7 (id=2801): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x3ff}, 0x94) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931b"], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe14) userfaultfd(0x80001) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640), 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.808118403s ago: executing program 8 (id=2802): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x4ef3, 0x4) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780004"], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x10001043, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x0, 0x0, @thr={0x0, 0x0}}) mq_notify(r6, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x10048095, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x1a, 0x1, 0x84000, 0x0, {0x2, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) 388.212037ms ago: executing program 8 (id=2803): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x190) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 375.838398ms ago: executing program 6 (id=2804): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 0s ago: executing program 7 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, 0x0, 0x138) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx2Dd', 0x0) syz_open_dev$vim2m(&(0x7f0000000480), 0x3, 0x2) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 117.938689][ T26] audit: type=1326 audit(1768946784.012:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 118.691538][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.812727][ T4801] device syzkaller0 entered promiscuous mode [ 118.904616][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.100563][ T7] usb 2-1: device descriptor read/64, error -71 [ 119.646396][ T21] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 119.655589][ T21] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 119.666106][ T21] usb 1-1: config 0 has no interface number 0 [ 119.730549][ T4291] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 119.968907][ T26] audit: type=1326 audit(1768946786.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7aeb9cb9 code=0x7ffc0000 [ 119.991550][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.001170][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 120.011283][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.045127][ T26] audit: type=1326 audit(1768946786.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7aeb9cb9 code=0x7ffc0000 [ 120.046567][ T21] usb 1-1: Product: syz [ 120.081473][ T26] audit: type=1326 audit(1768946786.312:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a7ae7a58e code=0x7ffc0000 [ 120.129637][ T26] audit: type=1326 audit(1768946786.312:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7aeb9cb9 code=0x7ffc0000 [ 120.159417][ T26] audit: type=1326 audit(1768946786.312:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7aeb9cb9 code=0x7ffc0000 [ 120.172191][ T21] usb 1-1: Manufacturer: syz [ 120.187448][ T7] usb 2-1: device descriptor read/64, error -71 [ 120.205746][ T21] usb 1-1: SerialNumber: syz [ 120.221901][ T21] usb 1-1: config 0 descriptor?? [ 120.313866][ T7] usb usb2-port1: attempt power cycle [ 120.460490][ T4269] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.560744][ T4291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.599075][ T4291] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 4096, setting to 64 [ 120.725507][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.798231][ T4291] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 120.863005][ T21] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 120.876373][ T21] usb 1-1: No valid video chain found. [ 120.920580][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.241056][ T4291] usb 3-1: config 0 descriptor?? [ 121.260679][ T2239] usb 1-1: USB disconnect, device number 7 [ 121.368951][ T4833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.459334][ T4835] siw: device registration error -23 [ 121.547203][ T4838] device syzkaller0 entered promiscuous mode [ 121.665878][ T4804] udc-core: couldn't find an available UDC or it's busy [ 121.721263][ T4269] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.744049][ T4804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 121.840943][ T4269] usb 4-1: config 4 has an invalid interface number: 254 but max is 0 [ 121.921989][ T4269] usb 4-1: config 4 has an invalid interface descriptor of length 2, skipping [ 122.033103][ T4269] usb 4-1: config 4 has no interface number 0 [ 122.122145][ T4269] usb 4-1: config 4 interface 254 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 122.214864][ T4269] usb 4-1: config 4 interface 254 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.246378][ T4269] usb 4-1: config 4 interface 254 has no altsetting 0 [ 122.410571][ T4269] usb 4-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=d1.01 [ 122.440650][ T4291] usbhid 3-1:0.0: can't add hid device: -71 [ 122.447664][ T4291] usbhid: probe of 3-1:0.0 failed with error -71 [ 122.460434][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.501217][ T4291] usb 3-1: USB disconnect, device number 5 [ 122.518315][ T4269] usb 4-1: Product: syz [ 122.537972][ T4269] usb 4-1: Manufacturer: syz [ 122.555416][ T4269] usb 4-1: SerialNumber: syz [ 123.486995][ T2239] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.791362][ T4291] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.802261][ T4865] siw: device registration error -23 [ 123.950420][ T2239] usb 1-1: Using ep0 maxpacket: 32 [ 124.071429][ T4269] cp210x 4-1:4.254: cp210x converter detected [ 124.090466][ T4269] cp210x 4-1:4.254: failed to get vendor val 0x370b size 1: -71 [ 124.098338][ T4269] cp210x 4-1:4.254: querying part number failed [ 124.184143][ T4269] usb 4-1: cp210x converter now attached to ttyUSB0 [ 124.197654][ T4291] usb 3-1: device descriptor read/64, error -71 [ 124.221808][ T4871] capability: warning: `syz.4.169' uses 32-bit capabilities (legacy support in use) [ 124.256093][ T4269] usb 4-1: USB disconnect, device number 3 [ 124.688217][ T4269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.873147][ T4269] cp210x 4-1:4.254: device disconnected [ 125.150493][ T4291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.158273][ T2239] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 125.177058][ T4880] ======================================================= [ 125.177058][ T4880] WARNING: The mand mount option has been deprecated and [ 125.177058][ T4880] and is ignored by this kernel. Remove the mand [ 125.177058][ T4880] option from the mount to silence this warning. [ 125.177058][ T4880] ======================================================= [ 125.893929][ T2239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.902343][ T2239] usb 1-1: Product: syz [ 125.906582][ T2239] usb 1-1: Manufacturer: syz [ 125.911344][ T2239] usb 1-1: SerialNumber: syz [ 125.980806][ T2239] usb 1-1: can't set config #1, error -71 [ 125.999268][ T2239] usb 1-1: USB disconnect, device number 8 [ 127.267923][ T4897] ODEBUG: Out of memory. ODEBUG disabled [ 128.742018][ T4882] sctp: failed to load transform for md5: -2 [ 128.852793][ T4908] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.374974][ T2239] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.640473][ T2239] usb 5-1: Using ep0 maxpacket: 16 [ 129.800567][ T2239] usb 5-1: config index 0 descriptor too short (expected 24929, got 27) [ 129.809108][ T2239] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 129.850469][ T2239] usb 5-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 129.850500][ T2239] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 130.030817][ T2239] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 130.039929][ T2239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.097049][ T2239] usb 5-1: Product: syz [ 130.109890][ T2239] usb 5-1: Manufacturer: syz [ 130.114706][ T2239] usb 5-1: SerialNumber: syz [ 130.171050][ T4937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.187'. [ 130.183116][ T4937] nbd: must specify a device to reconfigure [ 131.652147][ T2239] usb 5-1: USB disconnect, device number 5 [ 132.823154][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829559][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.994393][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 133.202979][ T4979] xt_hashlimit: max too large, truncated to 1048576 [ 136.420834][ T4248] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.110468][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.390514][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 137.511850][ T7] usb 2-1: config index 0 descriptor too short (expected 24929, got 27) [ 137.592246][ T7] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 137.823473][ T7] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 137.886340][ T7] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 138.076478][ T5013] [U] ^C [ 138.090799][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 138.104870][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.123261][ T7] usb 2-1: Product: syz [ 138.127502][ T7] usb 2-1: Manufacturer: syz [ 138.141907][ T7] usb 2-1: SerialNumber: syz [ 139.722699][ T7] usb 2-1: USB disconnect, device number 6 [ 139.872224][ T5031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.462790][ T5065] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 144.332493][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 148.533126][ T5100] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 148.539952][ T5100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.547961][ T5100] vhci_hcd vhci_hcd.0: Device attached [ 148.555918][ T5122] vhci_hcd: connection closed [ 148.557895][ T4754] vhci_hcd: stop threads [ 148.592456][ T4754] vhci_hcd: release socket [ 148.615605][ T4754] vhci_hcd: disconnect device [ 150.066102][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.320604][ T23] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 151.329399][ T23] usb 5-1: config 0 has no interface number 0 [ 151.359484][ T23] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 151.419125][ T23] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 151.636218][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.927049][ T23] usb 5-1: config 0 descriptor?? [ 152.080484][ T23] usb 5-1: can't set config #0, error -71 [ 152.120699][ T23] usb 5-1: USB disconnect, device number 6 [ 155.158261][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.540835][ T5206] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.656590][ T5342] netlink: 224 bytes leftover after parsing attributes in process `syz.1.315'. [ 176.194713][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 176.340477][ T5342] tipc: Started in network mode [ 176.347127][ T5342] tipc: Node identity 1e, cluster identity 64 [ 177.070384][ T5342] tipc: Node number set to 30 [ 177.320417][ T4269] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.560464][ T4269] usb 4-1: Using ep0 maxpacket: 32 [ 178.431167][ T4269] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 179.409184][ T4269] usb 4-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 179.508375][ T4269] usb 4-1: Manufacturer: syz [ 179.739253][ T4269] usb 4-1: config 0 descriptor?? [ 180.663860][ T4269] usb 4-1: can't set config #0, error -71 [ 180.867381][ T4269] usb 4-1: USB disconnect, device number 5 [ 185.543807][ T5417] siw: device registration error -23 [ 188.780434][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.020513][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 189.145750][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.160384][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.170397][ T7] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 189.180566][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.191194][ T7] usb 5-1: config 0 descriptor?? [ 190.085527][ T7] hid-multitouch 0003:1FD2:6007.0001: item fetching failed at offset 3/5 [ 190.128830][ T7] hid-multitouch: probe of 0003:1FD2:6007.0001 failed with error -22 [ 190.185790][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 190.234298][ T5459] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 190.306660][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.314694][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.538237][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.545398][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.552943][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.560045][ T5459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.625840][ T5459] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.719528][ T5464] siw: device registration error -23 [ 191.220703][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.457237][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 191.468452][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 191.482167][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 191.738799][ T7] usb 5-1: USB disconnect, device number 8 [ 192.711159][ T5459] syz.2.355 (5459) used greatest stack depth: 19984 bytes left [ 192.910420][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.589438][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.595847][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.920440][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 197.220942][ T7] usb 5-1: device descriptor read/all, error -71 [ 202.105011][ T4291] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.360424][ T5538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.379'. [ 202.470390][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 202.600635][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.860638][ T4291] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 202.889165][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.919885][ T4291] usb 5-1: Product: syz [ 202.930092][ T4291] usb 5-1: Manufacturer: syz [ 202.960999][ T4291] usb 5-1: SerialNumber: syz [ 203.001465][ T4291] usb 5-1: config 0 descriptor?? [ 203.863030][ T4291] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 203.876203][ T4291] usb 5-1: USB disconnect, device number 11 [ 203.906918][ T4513] usb 5-1: Failed to submit usb control message: -19 [ 203.948199][ T4513] usb 5-1: unable to send the bmi data to the device: -19 [ 203.975013][ T4513] usb 5-1: unable to get target info from device [ 203.997655][ T4513] usb 5-1: could not get target info (-19) [ 204.019459][ T4513] usb 5-1: could not probe fw (-19) [ 205.545703][ T5564] netlink: 'syz.4.386': attribute type 15 has an invalid length. [ 205.584214][ T5564] netlink: 646 bytes leftover after parsing attributes in process `syz.4.386'. [ 212.732509][ T4186] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 212.980451][ T4186] usb 4-1: Using ep0 maxpacket: 16 [ 213.900453][ T4186] usb 4-1: unable to read config index 0 descriptor/all [ 213.910099][ T4186] usb 4-1: can't read configurations, error -71 [ 220.868609][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 222.072404][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 230.325522][ T4297] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.680361][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 230.842690][ T4297] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.950419][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.965102][ T4297] usb 4-1: config 0 has no interface number 0 [ 230.980471][ T4297] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.170511][ T4297] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.257924][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.283564][ T4297] usb 4-1: Product: syz [ 231.288014][ T4297] usb 4-1: Manufacturer: syz [ 231.390485][ T4297] usb 4-1: SerialNumber: syz [ 231.422166][ T4297] usb 4-1: config 0 descriptor?? [ 231.491926][ T4297] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.511532][ T5761] nvme_fabrics: missing parameter 'transport=%s' [ 231.528950][ T5761] nvme_fabrics: missing parameter 'nqn=%s' [ 231.760578][ T4297] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 231.767546][ T4297] quatech2: probe of 4-1:0.51 failed with error -8 [ 234.221907][ T13] usb 4-1: USB disconnect, device number 8 [ 238.656850][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.465'. [ 238.780428][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 238.780447][ T26] audit: type=1326 audit(1768946905.032:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 238.953244][ T26] audit: type=1326 audit(1768946905.032:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 239.135696][ T26] audit: type=1326 audit(1768946905.032:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 239.360424][ T26] audit: type=1326 audit(1768946905.032:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 239.395355][ T26] audit: type=1326 audit(1768946905.032:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 239.908516][ T26] audit: type=1326 audit(1768946905.032:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 240.310473][ T26] audit: type=1326 audit(1768946905.032:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 240.416462][ T26] audit: type=1326 audit(1768946905.032:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 240.506528][ T26] audit: type=1326 audit(1768946905.032:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 240.714432][ T26] audit: type=1326 audit(1768946905.142:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f60a40c4cb9 code=0x7ffc0000 [ 248.017630][ T5914] siw: device registration error -23 [ 256.426853][ T5988] trusted_key: encrypted_key: insufficient parameters specified [ 259.898362][ T6006] trusted_key: encrypted_key: insufficient parameters specified [ 261.227015][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.239120][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.712793][ T6087] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 268.776664][ T6087] team0: Port device dummy0 added [ 268.952454][ T6088] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 269.559251][ T6088] team0: Port device dummy0 removed [ 269.589535][ T6088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 274.721211][ T4248] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 275.761838][ T4248] usb 3-1: device not accepting address 8, error -71 [ 279.395930][ T6141] syz.4.553 (6141): drop_caches: 2 [ 280.062026][ T6152] overlayfs: overlapping lowerdir path [ 280.887861][ T6155] tmpfs: Unknown parameter 'usrquota' [ 281.743107][ T6167] trusted_key: encrypted_key: insufficient parameters specified [ 285.440474][ T4252] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 285.830588][ T4252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.889257][ T4252] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 286.016715][ T4252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.920579][ T4252] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 286.995051][ T4252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 287.003613][ T4252] usb 4-1: Product: syz [ 287.007959][ T4252] usb 4-1: Manufacturer: syz [ 287.014602][ T4252] usb 4-1: SerialNumber: syz [ 287.026968][ T4252] usb 4-1: config 0 descriptor?? [ 287.446212][ T4252] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 287.454425][ T4252] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 287.461956][ T4252] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 288.898356][ T4291] usb 4-1: USB disconnect, device number 9 [ 317.911610][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 319.622210][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 319.622222][ T26] audit: type=1326 audit(1768946985.902:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.0.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b3594cb9 code=0x0 [ 320.753559][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 322.264358][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.272527][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.959887][ T6468] nvme_fabrics: missing parameter 'transport=%s' [ 323.041752][ T6468] nvme_fabrics: missing parameter 'nqn=%s' [ 330.790406][ T4252] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 331.027918][ T6522] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 331.040533][ T4252] usb 5-1: Using ep0 maxpacket: 32 [ 331.149361][ T6522] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 331.292613][ T4248] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 331.324088][ T4252] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 331.340049][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.363498][ T4252] usb 5-1: Product: syz [ 331.379676][ T4252] usb 5-1: Manufacturer: syz [ 331.390146][ T4252] usb 5-1: SerialNumber: syz [ 331.498736][ T4252] usb 5-1: config 0 descriptor?? [ 332.310397][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 332.352722][ T4252] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 332.376372][ T4252] dvb-usb: bulk message failed: -22 (2/0) [ 332.416167][ T4252] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.439208][ T4248] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 332.468401][ T4248] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.497656][ T4248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 332.510739][ T4252] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 332.546499][ T4252] usb 5-1: media controller created [ 332.552311][ T4248] usb 4-1: config 1 has no interface number 0 [ 332.558447][ T4248] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.592079][ T6514] cxusb: i2c wr: len=79 is too big! [ 332.592079][ T6514] [ 332.605667][ T4252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.614293][ T4248] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 333.295323][ T4248] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 333.433772][ T6534] Process accounting resumed [ 334.554634][ T4252] usb 5-1: selecting invalid altsetting 7 [ 334.568943][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.600337][ T4252] cxusb: set interface failed [ 334.606317][ T4252] dvb-usb: bulk message failed: -22 (1/0) [ 334.640443][ T4248] usb 4-1: can't set config #1, error -71 [ 334.665826][ T4248] usb 4-1: USB disconnect, device number 10 [ 335.739805][ T4252] DVB: Unable to find symbol lgdt330x_attach() [ 335.750344][ T4252] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 336.090306][ T4252] rc_core: IR keymap rc-dvico-portable not found [ 336.097575][ T4252] Registered IR keymap rc-empty [ 336.111661][ T4252] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 336.162173][ T4252] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 336.220035][ T4252] dvb-usb: schedule remote query interval to 100 msecs. [ 336.246916][ T4252] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 336.320165][ T4252] usb 5-1: USB disconnect, device number 12 [ 336.549388][ T4252] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 339.980664][ T6592] fuse: Bad value for 'fd' [ 341.250328][ T4248] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 341.510407][ T4248] usb 1-1: Using ep0 maxpacket: 16 [ 341.651158][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.721678][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.811773][ T4248] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 341.859909][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.954926][ T4248] usb 1-1: config 0 descriptor?? [ 342.579266][ T4248] hid-multitouch 0003:1FD2:6007.0002: item fetching failed at offset 3/5 [ 342.589577][ T4248] hid-multitouch: probe of 0003:1FD2:6007.0002 failed with error -22 [ 342.765513][ T4248] usb 1-1: USB disconnect, device number 9 [ 347.080405][ T6632] nvme_fabrics: missing parameter 'transport=%s' [ 347.148512][ T6632] nvme_fabrics: missing parameter 'nqn=%s' [ 354.869572][ T6689] nvme_fabrics: missing parameter 'transport=%s' [ 354.922969][ T6689] nvme_fabrics: missing parameter 'nqn=%s' [ 360.132488][ T6737] trusted_key: encrypted_key: insufficient parameters specified [ 368.936760][ T6792] Process accounting resumed [ 368.977592][ T6798] siw: device registration error -23 [ 381.106297][ T6906] nvme_fabrics: missing parameter 'transport=%s' [ 381.141516][ T6906] nvme_fabrics: missing parameter 'nqn=%s' [ 382.637649][ T6933] sd 0:0:1:0: device reset [ 383.384011][ T6943] trusted_key: encrypted_key: insufficient parameters specified [ 383.713074][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.713180][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.602398][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 384.662344][ T6954] Process accounting resumed [ 385.180395][ T21] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 385.610000][ T6962] nvme_fabrics: missing parameter 'transport=%s' [ 385.612817][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.624943][ T21] usb 1-1: Product: syz [ 385.629243][ T21] usb 1-1: Manufacturer: syz [ 385.634351][ T21] usb 1-1: SerialNumber: syz [ 385.641952][ T21] usb 1-1: config 0 descriptor?? [ 385.657436][ T6962] nvme_fabrics: missing parameter 'nqn=%s' [ 386.230859][ T21] airspy 1-1:0.0: Board ID: 00 [ 386.236060][ T21] airspy 1-1:0.0: Firmware version: vµÚ [ 387.366465][ T21] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 387.384895][ T21] airspy 1-1:0.0: Registered as swradio24 [ 387.391045][ T21] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 387.403962][ T21] usb 1-1: USB disconnect, device number 10 [ 387.713495][ T6987] sd 0:0:1:0: device reset [ 389.671906][ T7005] trusted_key: encrypted_key: insufficient parameters specified [ 392.947678][ T7033] trusted_key: encrypted_key: insufficient parameters specified [ 393.350839][ T4248] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.620551][ T4248] usb 4-1: Using ep0 maxpacket: 16 [ 393.740567][ T4248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.761930][ T4248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.765234][ T4248] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.363358][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.372888][ T4248] usb 4-1: Product: syz [ 396.377339][ T4248] usb 4-1: Manufacturer: syz [ 396.554032][ T4248] usb 4-1: SerialNumber: syz [ 396.618240][ T7058] trusted_key: encrypted_key: insufficient parameters specified [ 396.630380][ T4248] usb 4-1: can't set config #1, error -71 [ 396.718966][ T4248] usb 4-1: USB disconnect, device number 11 [ 399.553060][ T7082] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 403.319298][ T7106] trusted_key: encrypted_key: insufficient parameters specified [ 407.365695][ T7137] nvme_fabrics: missing parameter 'transport=%s' [ 407.526292][ T7137] nvme_fabrics: missing parameter 'nqn=%s' [ 412.817380][ T4291] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 413.857406][ T4291] usb 2-1: Using ep0 maxpacket: 16 [ 414.560460][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.645957][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.083935][ T4291] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 416.122285][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.169303][ T4291] usb 2-1: config 0 descriptor?? [ 416.200813][ T4291] usb 2-1: can't set config #0, error -71 [ 416.216488][ T4291] usb 2-1: USB disconnect, device number 7 [ 418.646534][ T7224] siw: device registration error -23 [ 420.750309][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 423.050297][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 423.200572][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.220146][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.275883][ T13] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 423.329477][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.353092][ T13] usb 5-1: config 0 descriptor?? [ 423.550604][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 423.556686][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 423.736927][ T13] usb 5-1: USB disconnect, device number 13 [ 426.219021][ T7278] siw: device registration error -23 [ 427.133940][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'. [ 427.143294][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 427.460259][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 428.130300][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 428.740555][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.140704][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.199338][ T7] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 429.225281][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.267042][ T7321] siw: device registration error -23 [ 429.420471][ T7] usb 3-1: config 0 descriptor?? [ 430.322457][ T7] hid-multitouch 0003:1FD2:6007.0003: item fetching failed at offset 3/5 [ 430.350702][ T7] hid-multitouch: probe of 0003:1FD2:6007.0003 failed with error -22 [ 430.665428][ T4248] usb 3-1: USB disconnect, device number 10 [ 431.397641][ T7334] Process accounting resumed [ 434.940300][ T4236] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.520735][ T4236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 435.610589][ T4236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.648706][ T4236] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.851196][ T4236] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.869654][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.901998][ T4236] usb 4-1: Product: syz [ 435.924421][ T4236] usb 4-1: Manufacturer: syz [ 435.943702][ T4236] usb 4-1: SerialNumber: syz [ 436.381977][ T4236] usb 4-1: USB disconnect, device number 12 [ 436.475903][ T6564] udevd[6564]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.585236][ T7381] input: syz0 as /devices/virtual/input/input7 [ 436.620476][ T4297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 437.111854][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 437.230479][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.693056][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.738904][ T4297] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 437.794807][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.977078][ T4297] usb 2-1: config 0 descriptor?? [ 440.020470][ T4297] usbhid 2-1:0.0: can't add hid device: -71 [ 440.026959][ T4297] usbhid: probe of 2-1:0.0 failed with error -71 [ 440.066292][ T4297] usb 2-1: USB disconnect, device number 8 [ 442.057351][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 442.069097][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 442.085745][ T7424] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.095357][ T7424] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.104188][ T7424] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.113148][ T7424] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.207848][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.242072][ T7456] binder: 7452:7456 ioctl c0306201 0 returned -14 [ 445.301288][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.361985][ T7467] kvm: emulating exchange as write [ 452.354166][ T7505] binder: 7502:7505 ioctl c0306201 0 returned -14 [ 456.094449][ T7541] tmpfs: Unknown parameter 'grpquota' [ 461.009300][ T7568] binder: 7562:7568 ioctl c0306201 0 returned -14 [ 470.513564][ T4252] Bluetooth: hci1: command 0x0401 tx timeout [ 475.188006][ T7651] binder: 7648:7651 ioctl c0306201 0 returned -14 [ 478.940305][ T4291] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 479.190500][ T4291] usb 5-1: Using ep0 maxpacket: 8 [ 479.320957][ T4291] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 479.358793][ T4291] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.730552][ T4291] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 479.750116][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.758825][ T4291] usb 5-1: Product: syz [ 479.812377][ T4291] usb 5-1: Manufacturer: syz [ 479.858644][ T4291] usb 5-1: SerialNumber: syz [ 479.901859][ T4291] usb 5-1: config 0 descriptor?? [ 480.161484][ T7664] udc-core: couldn't find an available UDC or it's busy [ 480.179130][ T7664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 481.610499][ T21] usb 5-1: USB disconnect, device number 14 [ 482.056138][ T7699] binder: 7696:7699 ioctl c0306201 0 returned -14 [ 482.588688][ T7700] vivid-008: disconnect [ 482.703536][ T7689] vivid-008: reconnect [ 487.268497][ T7745] binder: 7742:7745 ioctl c0306201 0 returned -14 [ 489.144787][ T7754] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.315813][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 502.190220][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 502.310423][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.348440][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.906516][ T7851] ptrace attach of "./syz-executor exec"[7852] was attempted by "./syz-executor exec"[7851] [ 503.820260][ T4236] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 503.829377][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.902064][ T4236] usb 2-1: config 0 descriptor?? [ 503.942869][ T4236] usb 2-1: can't set config #0, error -71 [ 503.955714][ T4236] usb 2-1: USB disconnect, device number 9 [ 506.659718][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.928680][ T4297] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 506.944035][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.180372][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 507.340474][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.361826][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.397660][ T4297] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 507.420224][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.466907][ T4297] usb 3-1: config 0 descriptor?? [ 509.278873][ T4297] usbhid 3-1:0.0: can't add hid device: -71 [ 509.288774][ T4297] usbhid: probe of 3-1:0.0 failed with error -71 [ 509.333868][ T4297] usb 3-1: USB disconnect, device number 11 [ 511.550157][ C0] hrtimer: interrupt took 43041 ns [ 515.412064][ T7963] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 525.944608][ T26] audit: type=1326 audit(1768947192.222:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.3.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f671f20ecb9 code=0x0 [ 529.950473][ T4269] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 530.190339][ T4269] usb 5-1: Using ep0 maxpacket: 16 [ 530.310633][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.349072][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.410277][ T4269] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 530.500303][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.543410][ T4269] usb 5-1: config 0 descriptor?? [ 531.032918][ T4269] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 3/5 [ 531.041876][ T4269] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22 [ 531.233422][ T4269] usb 5-1: USB disconnect, device number 15 [ 536.301033][ T8167] trusted_key: encrypted_key: insufficient parameters specified [ 538.102039][ T4251] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 538.470455][ T4251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.500449][ T4251] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 538.552550][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.583386][ T4251] usb 3-1: config 0 descriptor?? [ 538.622385][ T4251] pwc: Askey VC010 type 2 USB webcam detected. [ 539.060384][ T4251] pwc: recv_control_msg error -32 req 02 val 2b00 [ 539.120363][ T4251] pwc: recv_control_msg error -32 req 02 val 2700 [ 539.180345][ T4251] pwc: recv_control_msg error -32 req 02 val 2c00 [ 539.501332][ T4251] pwc: recv_control_msg error -32 req 04 val 1300 [ 539.536212][ T8191] Process accounting resumed [ 539.590322][ T4251] pwc: recv_control_msg error -32 req 04 val 1400 [ 539.650436][ T4251] pwc: recv_control_msg error -32 req 02 val 2000 [ 539.707189][ T4251] pwc: recv_control_msg error -32 req 02 val 2100 [ 539.770569][ T4251] pwc: recv_control_msg error -32 req 04 val 1500 [ 539.830326][ T4251] pwc: recv_control_msg error -32 req 02 val 2500 [ 539.890347][ T4251] pwc: recv_control_msg error -32 req 02 val 2400 [ 539.930292][ T4251] pwc: recv_control_msg error -32 req 02 val 2600 [ 539.981143][ T4251] pwc: recv_control_msg error -32 req 02 val 2900 [ 540.182606][ T8201] sd 0:0:1:0: device reset [ 540.192852][ T4251] pwc: recv_control_msg error -32 req 02 val 2800 [ 540.734859][ T4251] pwc: recv_control_msg error -32 req 04 val 1100 [ 541.030769][ T4251] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.143016][ T4251] pwc: Registered as video103. [ 541.250612][ T4251] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 541.274252][ T4251] usb 3-1: USB disconnect, device number 12 [ 543.789347][ T8231] fuse: Bad value for 'fd' [ 545.414697][ T4252] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 545.790458][ T4252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.811790][ T4252] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 545.839818][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.876538][ T4252] usb 2-1: config 0 descriptor?? [ 545.932663][ T4252] pwc: Askey VC010 type 2 USB webcam detected. [ 546.298051][ T8260] sd 0:0:1:0: device reset [ 546.371043][ T4252] pwc: recv_control_msg error -32 req 02 val 2b00 [ 546.533517][ T4252] pwc: recv_control_msg error -32 req 02 val 2700 [ 547.100352][ T4252] pwc: recv_control_msg error -32 req 02 val 2c00 [ 547.244977][ T8264] Process accounting resumed [ 547.390329][ T4252] pwc: recv_control_msg error -32 req 04 val 1300 [ 547.440418][ T4252] pwc: recv_control_msg error -32 req 04 val 1400 [ 547.490987][ T4252] pwc: recv_control_msg error -32 req 02 val 2000 [ 547.531059][ T4252] pwc: recv_control_msg error -32 req 02 val 2100 [ 547.570228][ T4269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 547.580348][ T4252] pwc: recv_control_msg error -32 req 04 val 1500 [ 547.620511][ T4252] pwc: recv_control_msg error -32 req 02 val 2500 [ 547.660349][ T4252] pwc: recv_control_msg error -32 req 02 val 2400 [ 547.700280][ T4252] pwc: recv_control_msg error -32 req 02 val 2600 [ 547.740933][ T4252] pwc: recv_control_msg error -32 req 02 val 2900 [ 547.780312][ T4252] pwc: recv_control_msg error -32 req 02 val 2800 [ 547.820503][ T4252] pwc: recv_control_msg error -32 req 04 val 1100 [ 547.827124][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 547.869244][ T8274] fuse: Bad value for 'fd' [ 547.874346][ T4252] pwc: recv_control_msg error -71 req 04 val 1200 [ 547.887504][ T4252] pwc: Registered as video103. [ 547.915004][ T4252] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 547.956538][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.007336][ T4252] usb 2-1: USB disconnect, device number 10 [ 548.021781][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.046081][ T4269] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 548.059449][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.086830][ T4269] usb 1-1: config 0 descriptor?? [ 549.258965][ T4269] hid-multitouch 0003:1FD2:6007.0005: item fetching failed at offset 3/5 [ 549.313073][ T4269] hid-multitouch: probe of 0003:1FD2:6007.0005 failed with error -22 [ 549.472768][ T4269] usb 1-1: USB disconnect, device number 11 [ 554.467179][ T8333] fuse: Bad value for 'fd' [ 554.899286][ T8340] Process accounting resumed [ 557.979318][ T8366] device bridge0 entered promiscuous mode [ 558.019398][ T8366] device macsec1 entered promiscuous mode [ 558.046235][ T8366] bridge0: port 3(macsec1) entered blocking state [ 558.075431][ T8366] bridge0: port 3(macsec1) entered disabled state [ 558.185183][ T8366] device bridge0 left promiscuous mode [ 558.419529][ T8371] sd 0:0:1:0: device reset [ 558.584182][ T8377] Process accounting resumed [ 561.913797][ T8392] syz.2.1168 (8392): drop_caches: 2 [ 567.078253][ T8450] sd 0:0:1:0: device reset [ 568.035803][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.042211][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.210325][ T4252] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 568.430311][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 568.570331][ T4252] usb 5-1: config 0 has no interfaces? [ 568.575878][ T4252] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 568.625845][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.761247][ T4252] usb 5-1: config 0 descriptor?? [ 569.497588][ T4248] usb 5-1: USB disconnect, device number 16 [ 573.360446][ T8489] ptrace attach of "./syz-executor exec"[8495] was attempted by "./syz-executor exec"[8489] [ 575.856915][ T8505] Process accounting resumed [ 578.565609][ T8519] Process accounting resumed [ 578.862908][ T8534] trusted_key: encrypted_key: insufficient parameters specified [ 580.589446][ T8538] ptrace attach of "./syz-executor exec"[8543] was attempted by "./syz-executor exec"[8538] [ 583.642365][ T8572] trusted_key: encrypted_key: insufficient parameters specified [ 588.616957][ T8607] trusted_key: encrypted_key: insufficient parameters specified [ 596.631748][ T8659] trusted_key: encrypted_key: insufficient parameters specified [ 601.541909][ T8696] trusted_key: encrypted_key: insufficient parameters specified [ 604.595159][ T8713] nvme_fabrics: missing parameter 'transport=%s' [ 604.603803][ T8713] nvme_fabrics: missing parameter 'nqn=%s' [ 608.304022][ T8742] trusted_key: encrypted_key: insufficient parameters specified [ 613.562596][ T8771] trusted_key: encrypted_key: insufficient parameters specified [ 614.544185][ T8778] trusted_key: encrypted_key: insufficient parameters specified [ 618.926280][ T8819] vivid-008: disconnect [ 619.684196][ T8815] vivid-008: reconnect [ 620.052239][ T8807] nvme_fabrics: missing parameter 'transport=%s' [ 620.059699][ T8807] nvme_fabrics: missing parameter 'nqn=%s' [ 621.638952][ T8837] trusted_key: encrypted_key: insufficient parameters specified [ 627.882784][ T8893] trusted_key: encrypted_key: insufficient parameters specified [ 627.996908][ T8879] nvme_fabrics: missing parameter 'transport=%s' [ 628.012276][ T8879] nvme_fabrics: missing parameter 'nqn=%s' [ 629.913665][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.920007][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.443784][ T8918] trusted_key: encrypted_key: insufficient parameters specified [ 633.203661][ T8931] nvme_fabrics: missing parameter 'transport=%s' [ 633.210825][ T8931] nvme_fabrics: missing parameter 'nqn=%s' [ 637.958211][ T8969] trusted_key: encrypted_key: insufficient parameters specified [ 642.042556][ T8999] siw: device registration error -23 [ 647.735320][ T9042] siw: device registration error -23 [ 651.156969][ T9063] nvme_fabrics: missing parameter 'transport=%s' [ 651.200219][ T9063] nvme_fabrics: missing parameter 'nqn=%s' [ 651.235779][ T9076] siw: device registration error -23 [ 651.991358][ T9092] trusted_key: encrypted_key: insufficient parameters specified [ 660.577113][ T9147] nvme_fabrics: missing parameter 'transport=%s' [ 660.595714][ T9147] nvme_fabrics: missing parameter 'nqn=%s' [ 663.455647][ T9170] siw: device registration error -23 [ 669.551400][ T9200] nvme_fabrics: missing parameter 'transport=%s' [ 669.558096][ T9200] nvme_fabrics: missing parameter 'nqn=%s' [ 671.319188][ T9219] siw: device registration error -23 [ 674.921971][ T9242] lo speed is unknown, defaulting to 1000 [ 676.719320][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.820907][ T4248] Bluetooth: hci4: command 0x0409 tx timeout [ 676.902550][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.037933][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.106755][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 677.188257][ T154] bond0: (slave netdevsim0): Releasing backup interface [ 677.204006][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.354557][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.409608][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.473686][ T9242] device bridge_slave_0 entered promiscuous mode [ 677.511710][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.536009][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.561205][ T9242] device bridge_slave_1 entered promiscuous mode [ 677.609963][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.674125][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.377151][ T9262] nvme_fabrics: missing parameter 'transport=%s' [ 678.504955][ T9262] nvme_fabrics: missing parameter 'nqn=%s' [ 678.655466][ T9242] team0: Port device team_slave_0 added [ 679.433388][ T8136] Bluetooth: hci4: command 0x041b tx timeout [ 679.521792][ T9242] team0: Port device team_slave_1 added [ 679.645979][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.655788][ T9275] siw: device registration error -23 [ 679.715173][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.821640][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.246262][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.232075][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.383460][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 682.484233][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.420392][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 684.442221][ T9242] device hsr_slave_0 entered promiscuous mode [ 684.497842][ T9242] device hsr_slave_1 entered promiscuous mode [ 684.545037][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.575444][ T9242] Cannot create hsr debugfs directory [ 685.071305][ T9242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 685.213571][ T9242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 685.233001][ T9242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.269035][ T9242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.585653][ T154] device hsr_slave_0 left promiscuous mode [ 685.616258][ T154] device hsr_slave_1 left promiscuous mode [ 685.649291][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.805795][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.885316][ T9343] binder: 9341:9343 ioctl c0306201 0 returned -14 [ 686.748276][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.766760][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.801171][ T154] device bridge_slave_1 left promiscuous mode [ 686.809067][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.883332][ T154] device bridge_slave_0 left promiscuous mode [ 686.889699][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.174999][ T154] device veth1_macvtap left promiscuous mode [ 687.978776][ T154] device veth0_macvtap left promiscuous mode [ 688.003102][ T154] device veth1_vlan left promiscuous mode [ 688.063692][ T154] device veth0_vlan left promiscuous mode [ 688.094674][ T9359] siw: device registration error -23 [ 689.889111][ T154] team0 (unregistering): Port device team_slave_1 removed [ 689.929461][ T154] team0 (unregistering): Port device team_slave_0 removed [ 690.917859][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.062810][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.374044][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.380541][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.382983][ T154] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 691.644701][ T154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 691.683279][ T154] bond0 (unregistering): Released all slaves [ 693.117304][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.300261][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.308713][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.358871][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.400215][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.455306][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.477167][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.484336][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.630616][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.664229][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.701998][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.732952][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.740175][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.814243][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.876669][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.916560][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.955293][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.982726][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.021001][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.085800][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.114331][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.136853][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.171886][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.228017][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.256075][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.777240][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.816987][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.884237][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.243644][ T9429] siw: device registration error -23 [ 697.491201][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 697.518562][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.626434][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 697.772315][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.936016][ T9242] device veth0_vlan entered promiscuous mode [ 698.042424][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 698.114466][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 698.396290][ T9242] device veth1_vlan entered promiscuous mode [ 698.501257][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 698.509476][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 698.576620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 698.616795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 698.795532][ T9242] device veth0_macvtap entered promiscuous mode [ 698.808068][ T9242] device veth1_macvtap entered promiscuous mode [ 698.826615][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.838460][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.878389][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.020099][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.029966][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.195889][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.266787][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.355632][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.394544][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.404089][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 700.433427][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 700.480990][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 700.530945][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.939311][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.950126][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.961118][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.972053][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.982665][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.993309][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.003252][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.013811][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.025141][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.101455][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 702.121014][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.168031][ T9242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.205733][ T9242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.230486][ T9242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.239252][ T9242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.650861][ T458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.659231][ T458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.769627][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 702.822197][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.895409][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.957156][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.303363][ T9495] siw: device registration error -23 [ 704.866452][ T9501] trusted_key: encrypted_key: insufficient parameters specified [ 714.149950][ T9565] siw: device registration error -23 [ 721.222684][ T9627] sd 0:0:1:0: device reset [ 724.654421][ T9655] fuse: Bad value for 'fd' [ 741.553316][ T9799] Process accounting resumed [ 752.105723][ T9931] Process accounting resumed [ 753.628174][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.634570][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.910298][ T2239] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 777.230151][ T2239] usb 5-1: Using ep0 maxpacket: 32 [ 777.360419][ T2239] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 777.381516][ T2239] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 777.413099][ T2239] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 777.640415][ T2239] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 777.661949][ T2239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.685368][ T2239] usb 5-1: Product: syz [ 777.689647][ T2239] usb 5-1: Manufacturer: syz [ 777.704952][ T2239] usb 5-1: SerialNumber: syz [ 777.770563][ T2239] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 777.795872][ T2239] imon 5-1:155.0: unable to initialize intf0, err -19 [ 777.810186][ T2239] imon:imon_probe: failed to initialize context! [ 777.820321][ T2239] imon 5-1:155.0: unable to register, err -19 [ 779.014885][ T4235] usb 5-1: USB disconnect, device number 17 [ 779.287403][T10225] siw: device registration error -23 [ 782.643853][T10263] siw: device registration error -23 [ 790.480114][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 790.730150][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 790.851162][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.477228][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.681608][ T13] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 792.449006][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.309359][ T13] usb 2-1: config 0 descriptor?? [ 793.384753][ T13] usb 2-1: can't set config #0, error -71 [ 793.392509][ T13] usb 2-1: USB disconnect, device number 11 [ 793.483289][T10342] ptrace attach of "./syz-executor exec"[10343] was attempted by "./syz-executor exec"[10342] [ 798.200149][ T4186] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 798.320367][T10393] ptrace attach of "./syz-executor exec"[10392] was attempted by "./syz-executor exec"[10393] [ 798.450116][ T4186] usb 6-1: Using ep0 maxpacket: 16 [ 798.591270][ T4186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.911295][ T4186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.200080][ T4186] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 799.210994][ T4186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.320117][ T4186] usb 6-1: config 0 descriptor?? [ 800.296060][ T4186] usbhid 6-1:0.0: can't add hid device: -71 [ 800.320668][ T4186] usbhid: probe of 6-1:0.0 failed with error -71 [ 800.375118][ T4186] usb 6-1: USB disconnect, device number 2 [ 800.500364][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 804.774373][T10448] ptrace attach of "./syz-executor exec"[10446] was attempted by "./syz-executor exec"[10448] [ 813.084375][T10526] trusted_key: encrypted_key: insufficient parameters specified [ 813.815636][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.822353][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.136053][T10562] trusted_key: encrypted_key: insufficient parameters specified [ 824.355703][T10622] trusted_key: encrypted_key: insufficient parameters specified [ 828.251877][T10647] binder: 10646:10647 ioctl c0306201 0 returned -14 [ 833.520707][T10695] binder: 10694:10695 ioctl c0306201 0 returned -14 [ 835.718649][T10719] trusted_key: encrypted_key: insufficient parameters specified [ 840.541494][T10768] binder: 10752:10768 ioctl c0306201 0 returned -14 [ 845.200263][ T4297] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 846.640103][ T4297] usb 6-1: Using ep0 maxpacket: 16 [ 847.530196][ T4297] usb 6-1: device descriptor read/all, error -71 [ 848.547121][T10845] trusted_key: encrypted_key: insufficient parameters specified [ 850.327972][T10863] siw: device registration error -23 [ 852.102704][ T4235] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 852.409164][T10877] nvme_fabrics: missing parameter 'transport=%s' [ 852.415687][T10877] nvme_fabrics: missing parameter 'nqn=%s' [ 853.223046][T10879] binder: 10874:10879 ioctl c0306201 0 returned -14 [ 853.300427][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 853.695818][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.796753][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.532260][ T4235] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 854.580128][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.614586][ T4235] usb 1-1: config 0 descriptor?? [ 854.870202][ T4235] usb 1-1: can't set config #0, error -71 [ 855.620673][ T4235] usb 1-1: USB disconnect, device number 12 [ 855.652412][T10909] siw: device registration error -23 [ 860.180293][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 861.967610][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 862.520114][ T7] usb 5-1: unable to read config index 0 descriptor/all [ 862.527151][ T7] usb 5-1: can't read configurations, error -71 [ 864.699177][T10965] nvme_fabrics: missing parameter 'transport=%s' [ 864.706210][T10965] nvme_fabrics: missing parameter 'nqn=%s' [ 866.085048][T10978] binder: 10977:10978 ioctl c0306201 0 returned -14 [ 870.535638][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 870.564033][T11013] nvme_fabrics: missing parameter 'transport=%s' [ 870.570491][T11013] nvme_fabrics: missing parameter 'nqn=%s' [ 871.937884][ T7] usb 6-1: device not accepting address 5, error -71 [ 873.599897][T11047] binder: 11036:11047 ioctl c0306201 0 returned -14 [ 875.320271][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.327652][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.938361][T11071] siw: device registration error -23 [ 885.005024][T11175] siw: device registration error -23 [ 886.750248][ T4297] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 887.040340][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 887.161032][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.731716][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.897871][ T4297] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 887.907323][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.950937][ T4297] usb 5-1: config 0 descriptor?? [ 888.360184][ T4297] usbhid 5-1:0.0: can't add hid device: -71 [ 888.367448][ T4297] usbhid: probe of 5-1:0.0 failed with error -71 [ 888.430094][ T4297] usb 5-1: USB disconnect, device number 20 [ 889.798346][T11218] siw: device registration error -23 [ 890.346075][T11224] nvme_fabrics: missing parameter 'transport=%s' [ 890.352724][T11224] nvme_fabrics: missing parameter 'nqn=%s' [ 894.461176][ T9763] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 894.742649][ T9763] usb 5-1: Using ep0 maxpacket: 16 [ 894.870827][ T9763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.917033][ T9763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.052814][ T9763] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 895.198137][ T9763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.393600][T11258] nvme_fabrics: missing parameter 'transport=%s' [ 895.400072][T11258] nvme_fabrics: missing parameter 'nqn=%s' [ 895.433337][ T9763] usb 5-1: config 0 descriptor?? [ 896.450211][ T9763] usbhid 5-1:0.0: can't add hid device: -71 [ 896.456782][ T9763] usbhid: probe of 5-1:0.0 failed with error -71 [ 896.613356][ T9763] usb 5-1: USB disconnect, device number 21 [ 899.905855][T11301] siw: device registration error -23 [ 900.554884][T11306] nvme_fabrics: missing parameter 'transport=%s' [ 900.561411][T11306] nvme_fabrics: missing parameter 'nqn=%s' [ 904.728828][T11335] siw: device registration error -23 [ 905.558834][ T2239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 906.450057][ T2239] usb 2-1: Using ep0 maxpacket: 16 [ 906.926689][ T2239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.268802][ T2239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.279350][ T2239] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 907.288984][ T2239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.306925][ T2239] usb 2-1: config 0 descriptor?? [ 908.070151][ T2239] usbhid 2-1:0.0: can't add hid device: -71 [ 908.076903][ T2239] usbhid: probe of 2-1:0.0 failed with error -71 [ 908.096599][ T2239] usb 2-1: USB disconnect, device number 12 [ 912.054541][ T9763] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 912.440104][ T9763] usb 5-1: Using ep0 maxpacket: 16 [ 912.560382][ T9763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.591947][ T9763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.619188][ T9763] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 912.639293][ T9763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.691459][ T9763] usb 5-1: config 0 descriptor?? [ 913.670209][ T9763] usbhid 5-1:0.0: can't add hid device: -71 [ 913.676365][ T9763] usbhid: probe of 5-1:0.0 failed with error -71 [ 914.177926][ T9763] usb 5-1: USB disconnect, device number 22 [ 917.602961][T11462] siw: device registration error -23 [ 922.450184][ T9763] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 922.607242][T11510] siw: device registration error -23 [ 922.700054][ T9763] usb 6-1: Using ep0 maxpacket: 16 [ 922.820301][ T9763] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 922.843635][ T9763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.892250][ T9763] usb 6-1: config 0 descriptor?? [ 922.943014][ T9763] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 923.521686][ T9763] gspca_sonixj: reg_w1 err -110 [ 923.526673][ T9763] sonixj: probe of 6-1:0.0 failed with error -110 [ 928.751838][T11559] siw: device registration error -23 [ 929.321748][ T9763] usb 6-1: USB disconnect, device number 7 [ 935.790331][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 935.882560][T11607] siw: device registration error -23 [ 936.154135][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 936.663537][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.671045][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.000289][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.034707][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.056022][ T23] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 937.191045][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.980825][ T23] usb 6-1: config 0 descriptor?? [ 938.100490][ T23] usb 6-1: can't set config #0, error -71 [ 938.125913][ T23] usb 6-1: USB disconnect, device number 8 [ 941.618751][T11647] siw: device registration error -23 [ 943.014943][T11664] binder: 11658:11664 ioctl c0306201 0 returned -14 [ 943.060303][ T4297] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 943.360426][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 943.500720][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.520223][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.530944][ T4297] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 943.540294][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.562550][ T4297] usb 5-1: config 0 descriptor?? [ 946.083052][ T4297] hid-multitouch 0003:1FD2:6007.0006: ignoring exceeding usage max [ 946.162638][ T4297] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 946.305830][ T2239] usb 5-1: USB disconnect, device number 23 [ 947.364610][T11679] fido_id[11679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 947.765557][T11696] siw: device registration error -23 [ 953.763781][T11727] binder: 11722:11727 ioctl c0306201 0 returned -14 [ 955.567039][T11744] siw: device registration error -23 [ 959.656216][T11779] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 960.627551][T11789] siw: device registration error -23 [ 961.279305][T11797] lo speed is unknown, defaulting to 1000 [ 963.040034][T11813] nvme_fabrics: missing parameter 'transport=%s' [ 963.102116][T11813] nvme_fabrics: missing parameter 'nqn=%s' [ 963.149870][T11797] chnl_net:caif_netlink_parms(): no params data found [ 963.230100][ T9763] Bluetooth: hci5: command 0x0409 tx timeout [ 963.552216][T11797] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.579567][T11827] siw: device registration error -23 [ 963.596468][T11797] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.605754][T11797] device bridge_slave_0 entered promiscuous mode [ 963.622757][T11797] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.630474][T11797] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.639174][T11797] device bridge_slave_1 entered promiscuous mode [ 963.667233][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.678987][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.841162][T11797] team0: Port device team_slave_0 added [ 963.851514][T11797] team0: Port device team_slave_1 added [ 964.043954][T11833] Invalid ELF header type: 3 != 1 [ 964.866149][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.880081][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.950124][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.973041][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.990139][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.069024][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.302089][T11797] device hsr_slave_0 entered promiscuous mode [ 965.309435][T11797] device hsr_slave_1 entered promiscuous mode [ 965.318853][ T4252] Bluetooth: hci5: command 0x041b tx timeout [ 965.723127][T11797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.748000][T11797] Cannot create hsr debugfs directory [ 966.655962][T11852] nvme_fabrics: missing parameter 'transport=%s' [ 966.731725][T11852] nvme_fabrics: missing parameter 'nqn=%s' [ 966.749375][ T6108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.731283][T11859] syz.4.2050 (11859): drop_caches: 2 [ 967.884595][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 968.629027][ T6108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.950074][ T4269] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 969.270893][ T4269] usb 5-1: Using ep0 maxpacket: 32 [ 969.495795][ T6108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.550206][ T4269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.578029][ T6108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.756979][ T4269] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 969.813146][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.102440][ T4269] usb 5-1: Product: syz [ 970.110293][ T4269] usb 5-1: Manufacturer: syz [ 970.115132][ T4269] usb 5-1: SerialNumber: syz [ 970.123840][ T4269] usb 5-1: config 0 descriptor?? [ 970.185126][ T4269] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 970.351296][T11797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 970.510164][ T9763] Bluetooth: hci5: command 0x0419 tx timeout [ 970.657344][T11797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 970.729725][T11797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 970.799081][T11797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 971.202626][ T4269] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 971.741702][ T4269] usb 5-1: USB disconnect, device number 24 [ 972.191792][T11797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.229066][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2064'. [ 972.311647][T11917] device erspan0 entered promiscuous mode [ 972.376787][T11917] device macvtap1 entered promiscuous mode [ 972.430378][T11921] device erspan0 left promiscuous mode [ 972.992103][T11930] ptrace attach of "./syz-executor exec"[11931] was attempted by "./syz-executor exec"[11930] [ 973.885204][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.842789][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.856271][T11797] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.384890][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 975.428345][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 975.471501][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.478624][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.534023][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 975.545211][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 975.583005][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.590176][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.813432][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 975.852702][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 975.888293][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 975.911403][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 975.932017][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 975.960984][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 975.985196][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 975.996029][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 976.042303][T11797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 976.109372][T11797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.155000][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.169103][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.199280][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 976.238526][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 976.257946][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 977.875047][ T6108] device hsr_slave_0 left promiscuous mode [ 977.893683][ T6108] device hsr_slave_1 left promiscuous mode [ 978.087568][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.106823][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.191287][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.260120][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.280364][ T6108] device bridge_slave_1 left promiscuous mode [ 979.286858][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.274684][ T6108] device bridge_slave_0 left promiscuous mode [ 981.120318][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.205523][ T6108] device veth1_macvtap left promiscuous mode [ 981.230352][ T6108] device veth0_macvtap left promiscuous mode [ 981.256866][ T6108] device veth1_vlan left promiscuous mode [ 981.277096][ T6108] device veth0_vlan left promiscuous mode [ 983.386059][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 983.421497][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 983.459858][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.495807][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.735044][ T6108] bond0 (unregistering): Released all slaves [ 983.874513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 983.957255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 983.979151][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.498897][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 986.521176][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.591277][T11797] device veth0_vlan entered promiscuous mode [ 986.686586][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 986.701013][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.741094][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 987.708776][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 987.861893][T11797] device veth1_vlan entered promiscuous mode [ 987.880235][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 990.242392][T11797] device veth0_macvtap entered promiscuous mode [ 990.289115][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 990.298689][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.443142][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.556351][T11797] device veth1_macvtap entered promiscuous mode [ 991.377547][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.799976][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.860064][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.940291][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.060046][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.100015][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.109909][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.160668][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.192147][T11797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.199780][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 993.256607][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 993.322398][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.355554][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.375401][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.388309][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.398476][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.409219][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.419190][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.429943][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.451070][T11797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.459808][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 993.480345][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.525089][T11797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.550579][T11797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.722744][T11797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.772783][T11797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.767656][ T9286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.815205][ T9286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.890540][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 995.899324][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.928531][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.959371][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.061801][T12123] Process accounting resumed [ 998.104489][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.112942][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.704700][T12190] Process accounting resumed [ 1003.935861][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2122'. [ 1004.740605][ T8178] libceph: connect (1)[c::]:6789 error -101 [ 1004.747535][ T8178] libceph: mon0 (1)[c::]:6789 connect error [ 1004.833492][T12198] ceph: No mds server is up or the cluster is laggy [ 1005.209512][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1006.360391][ T13] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.380927][ T13] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1008.973810][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1009.060068][ T13] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1009.069186][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.211966][ T13] usb 7-1: config 0 descriptor?? [ 1009.295768][ T13] usb 7-1: can't set config #0, error -71 [ 1009.357654][ T13] usb 7-1: USB disconnect, device number 2 [ 1017.735833][T12346] Process accounting resumed [ 1019.418420][T12363] binder: 12361:12363 ioctl c0306201 0 returned -14 [ 1030.500082][ T4186] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1030.910276][ T4186] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1030.963330][ T4186] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.983907][ T4186] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1031.886666][ T4186] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1031.896636][ T4186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.980016][ T4186] usb 6-1: config 0 descriptor?? [ 1032.470376][ T4186] hid-generic 0003:07B5:0312.0007: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0 [ 1032.665668][ T9763] usb 6-1: USB disconnect, device number 9 [ 1032.717752][T12490] fido_id[12490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1048.304640][T12614] binder: 12611:12614 ioctl c0306201 0 returned -14 [ 1048.521561][T12631] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1050.750132][ T4251] Bluetooth: hci2: command 0x1003 tx timeout [ 1050.760183][ T4191] Bluetooth: hci2: sending frame failed (-49) [ 1052.620731][T12682] fuse: Bad value for 'fd' [ 1052.830185][ T4186] Bluetooth: hci2: command 0x1001 tx timeout [ 1052.842017][ T4191] Bluetooth: hci2: sending frame failed (-49) [ 1055.013877][ T4186] Bluetooth: hci2: command 0x1009 tx timeout [ 1055.054894][T12709] UBIFS error (pid: 12709): cannot open "./file0", error -22 [ 1055.832031][T12698] binder: 12696:12698 ioctl c0306201 0 returned -14 [ 1056.194868][T12734] fuse: Bad value for 'fd' [ 1057.155416][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 1059.628664][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.635103][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.810058][ T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1060.190419][ T13] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1060.228363][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.300133][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.346901][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1060.414657][ T13] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1060.459462][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.518385][ T13] usb 6-1: config 0 descriptor?? [ 1061.111880][ T13] greenasia 0003:0E8F:0012.0008: item fetching failed at offset 6/7 [ 1061.148335][ T13] greenasia 0003:0E8F:0012.0008: parse failed [ 1061.175339][ T13] greenasia: probe of 0003:0E8F:0012.0008 failed with error -22 [ 1061.322003][ T13] usb 6-1: USB disconnect, device number 10 [ 1061.772187][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2246'. [ 1065.172078][T12805] binder: 12804:12805 ioctl c0306201 0 returned -14 [ 1067.191628][T12823] Process accounting resumed [ 1070.888655][T12874] 9pnet: Insufficient options for proto=fd [ 1074.153138][T12877] binder: 12876:12877 ioctl c0306201 0 returned -14 [ 1075.116507][T12915] Process accounting resumed [ 1075.670057][ T21] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1076.422846][T12931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1077.390158][ T21] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 1077.455776][ T21] usb 6-1: config 5 has no interface number 0 [ 1077.491029][ T21] usb 6-1: config 5 interface 123 has no altsetting 0 [ 1077.819040][ T21] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1077.828882][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.837407][ T21] usb 6-1: Product: syz [ 1077.841918][ T21] usb 6-1: Manufacturer: syz [ 1077.846549][ T21] usb 6-1: SerialNumber: syz [ 1078.271627][ T26] audit: type=1326 audit(1768947744.552:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f20ecb9 code=0x7ffc0000 [ 1078.296868][ T21] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1078.387420][ T21] usb 6-1: USB disconnect, device number 11 [ 1078.424094][ T26] audit: type=1326 audit(1768947744.572:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f671f1cf58e code=0x7ffc0000 [ 1080.030535][T12960] ptrace attach of ""[12959] was attempted by "./syz-executor exec"[12960] [ 1080.300066][ T26] audit: type=1326 audit(1768947744.602:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f671f1cf58e code=0x7ffc0000 [ 1080.490251][ T26] audit: type=1326 audit(1768947744.602:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f20ecb9 code=0x7ffc0000 [ 1080.786925][ T26] audit: type=1326 audit(1768947744.602:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f671f1cb1ac code=0x7ffc0000 [ 1081.186292][ T26] audit: type=1326 audit(1768947744.602:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f671f1cb20e code=0x7ffc0000 [ 1081.242331][ T26] audit: type=1326 audit(1768947744.602:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f671f20e94b code=0x7ffc0000 [ 1081.519333][ T26] audit: type=1326 audit(1768947744.602:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f671f20ecb9 code=0x7ffc0000 [ 1081.566662][T12978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1081.620008][ T26] audit: type=1326 audit(1768947744.602:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f671f1cf58e code=0x7ffc0000 [ 1081.687740][ T26] audit: type=1326 audit(1768947744.602:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12940 comm="syz.3.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f20ecb9 code=0x7ffc0000 [ 1081.734425][T12966] Process accounting resumed [ 1082.081665][T12988] input: syz1 as /devices/virtual/input/input11 [ 1085.400557][T13005] ptrace attach of "./syz-executor exec"[13006] was attempted by "./syz-executor exec"[13005] [ 1091.412114][T13051] ptrace attach of "./syz-executor exec"[13049] was attempted by "./syz-executor exec"[13051] [ 1093.111938][T13064] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 1094.730065][ T9763] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1095.120135][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1095.945878][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.080063][ T9763] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1096.109760][ T9763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.164134][ T9763] usb 6-1: config 0 descriptor?? [ 1096.646416][ T9763] ryos 0003:1E7D:3138.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 1096.846784][ T9763] usb 6-1: USB disconnect, device number 12 [ 1096.936685][T13090] ptrace attach of "./syz-executor exec"[13088] was attempted by "./syz-executor exec"[13090] [ 1096.966735][T13089] fido_id[13089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1108.567148][T13145] Process accounting resumed [ 1110.915870][T13156] lo speed is unknown, defaulting to 1000 [ 1111.584601][T13156] chnl_net:caif_netlink_parms(): no params data found [ 1111.711527][T13174] ptrace attach of "./syz-executor exec"[13172] was attempted by "./syz-executor exec"[13174] [ 1112.910060][ T4297] Bluetooth: hci2: command 0x0409 tx timeout [ 1114.902657][ T4754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.960685][ T4754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.980159][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 1115.123661][T13156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.570878][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.640042][T13156] device bridge_slave_0 entered promiscuous mode [ 1116.761594][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.777871][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.855110][T13156] device bridge_slave_1 entered promiscuous mode [ 1116.922130][T13156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.071831][ T2239] Bluetooth: hci2: command 0x040f tx timeout [ 1117.073626][ T4754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.940247][ T4754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.992443][T13156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.133395][ T4754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.209976][ T4754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.321406][T13156] team0: Port device team_slave_0 added [ 1118.329642][T13156] team0: Port device team_slave_1 added [ 1118.482646][ T4754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.507891][ T4754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.577883][T13156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.609096][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.139487][T13156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.151043][T13205] Bluetooth: hci2: command 0x0419 tx timeout [ 1119.212902][T13156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.460036][T13156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.687504][T13156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.510333][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.530469][T13156] device hsr_slave_0 entered promiscuous mode [ 1121.569943][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.670526][T13156] device hsr_slave_1 entered promiscuous mode [ 1121.699797][T13156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1121.825477][T13156] Cannot create hsr debugfs directory [ 1122.920259][T13253] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 1124.265209][T13156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1124.316576][T13156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1124.354360][T13156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1124.392696][T13156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1125.727393][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.813043][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1125.853584][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1125.879577][T13156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.859909][ T4754] device hsr_slave_0 left promiscuous mode [ 1129.768087][ T4754] device hsr_slave_1 left promiscuous mode [ 1129.786658][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.965161][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.975985][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.010448][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.454600][ T4754] device bridge_slave_1 left promiscuous mode [ 1130.488950][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.547656][ T4754] device bridge_slave_0 left promiscuous mode [ 1130.572163][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.618015][ T4754] device veth1_macvtap left promiscuous mode [ 1130.660252][ T4754] device veth0_macvtap left promiscuous mode [ 1130.837809][ T4754] device veth1_vlan left promiscuous mode [ 1130.864933][ T4754] device veth0_vlan left promiscuous mode [ 1133.146931][T13322] Process accounting resumed [ 1135.822525][ T4754] team0 (unregistering): Port device team_slave_1 removed [ 1135.891758][ T4754] team0 (unregistering): Port device team_slave_0 removed [ 1135.986844][ T4754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.080491][ T4754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.277099][ T4754] bond0 (unregistering): Released all slaves [ 1137.528089][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1137.800820][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1137.855050][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.862242][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.040104][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1138.192288][ T8136] lo speed is unknown, defaulting to 1000 [ 1138.204761][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.238321][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.470599][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.477725][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.438327][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1139.460153][ T9763] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1140.365226][T13375] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2393'. [ 1140.510253][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1140.529716][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1140.620460][ T9763] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1140.640241][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1140.648601][ T9763] usb 7-1: config 0 has no interface number 0 [ 1141.552696][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1141.622828][ T9763] usb 7-1: string descriptor 0 read error: -71 [ 1141.629234][ T9763] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1141.658857][ T9763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.669392][ T9763] usb 7-1: config 0 descriptor?? [ 1141.672914][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1141.720099][ T9763] usb 7-1: can't set config #0, error -71 [ 1141.737453][ T9763] usb 7-1: USB disconnect, device number 3 [ 1141.758368][T13156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1141.799964][T13156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1141.848048][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1141.863015][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1141.902853][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1142.136140][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1143.020459][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1143.565551][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1145.618507][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1145.635431][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1145.643114][ T4269] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1145.698306][T13156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.773247][T13433] kAFS: No cell specified [ 1147.000206][ T4269] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1147.020037][ T4269] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1147.090057][ T4269] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.153971][ T4269] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1147.194473][ T4269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.236251][ T4269] usb 7-1: config 0 descriptor?? [ 1147.302945][ T4269] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1147.506456][ T4269] usb 7-1: USB disconnect, device number 4 [ 1147.642419][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1147.669589][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1147.770904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1147.784662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1147.833894][T13156] device veth0_vlan entered promiscuous mode [ 1147.860146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1147.888740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1147.948470][T13156] device veth1_vlan entered promiscuous mode [ 1148.151708][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1148.177943][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1148.217857][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1148.236191][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1148.266107][T13156] device veth0_macvtap entered promiscuous mode [ 1149.743487][T13156] device veth1_macvtap entered promiscuous mode [ 1149.858150][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.879225][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.986639][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.997904][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.008478][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.019305][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.066031][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.100769][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.291654][T13156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.006545][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1153.335766][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1154.044127][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1154.131509][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1154.658995][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.768118][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.842395][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.878663][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.933610][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.965993][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.155593][T13156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.199410][T13156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.212060][T13156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.225324][T13156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.258150][T13156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.375895][T13156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.513102][T13156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.851403][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.890940][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1156.235159][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.291518][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.348497][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1156.388827][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.441161][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.478722][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1158.699758][T13520] Process accounting resumed [ 1160.762635][T13574] kAFS: No cell specified [ 1163.742044][T13605] Process accounting resumed [ 1166.878283][T13641] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1166.913363][T13624] kvm [13622]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 1166.981324][T13624] kvm [13622]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 1178.965481][T13769] ptrace attach of "./syz-executor exec"[13770] was attempted by "./syz-executor exec"[13769] [ 1180.523996][T13783] kAFS: No cell specified [ 1182.424697][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.424778][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.379796][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 1209.444315][T14080] syz.7.2551 (14080): drop_caches: 2 [ 1211.849534][T14126] kAFS: No cell specified [ 1219.470047][T14197] kAFS: No cell specified [ 1228.344976][T14279] block nbd4: shutting down sockets [ 1244.840461][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.846793][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.096532][T14498] kAFS: No cell specified [ 1248.151442][ T5112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.991672][ T5112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.687403][ T5112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.303107][T14558] kAFS: No cell specified [ 1250.465390][ T5112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.318780][ T5112] tipc: Left network mode [ 1253.068398][T14580] chnl_net:caif_netlink_parms(): no params data found [ 1253.709891][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 1254.400013][T14631] kAFS: No cell specified [ 1255.455716][T14580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.471527][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.490332][T14580] device bridge_slave_0 entered promiscuous mode [ 1255.610171][T14580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.627557][T14580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.661194][T14580] device bridge_slave_1 entered promiscuous mode [ 1255.819033][ T2239] Bluetooth: hci1: command 0x041b tx timeout [ 1256.742612][T14580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.841004][T14580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.051834][T14580] team0: Port device team_slave_0 added [ 1257.091750][T14580] team0: Port device team_slave_1 added [ 1257.279394][ T5112] device hsr_slave_0 left promiscuous mode [ 1257.430934][ T5112] device hsr_slave_1 left promiscuous mode [ 1257.604017][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.789702][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.900770][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.979381][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.034364][ T2239] Bluetooth: hci1: command 0x040f tx timeout [ 1258.050725][ T5112] device bridge_slave_1 left promiscuous mode [ 1258.093848][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.190834][T14679] kAFS: No cell specified [ 1258.690374][ T5112] device bridge_slave_0 left promiscuous mode [ 1258.986734][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.499365][ T5112] device veth1_macvtap left promiscuous mode [ 1259.517011][ T5112] device veth0_macvtap left promiscuous mode [ 1259.593993][ T5112] device veth1_vlan left promiscuous mode [ 1259.700231][ T5112] device veth0_vlan left promiscuous mode [ 1260.100265][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 1263.945133][ T5112] team0 (unregistering): Port device team_slave_1 removed [ 1264.025790][ T5112] team0 (unregistering): Port device team_slave_0 removed [ 1264.148837][ T5112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.210341][ T5112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.545528][ T5112] bond0 (unregistering): Released all slaves [ 1264.659977][T13205] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1265.760122][T13205] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1265.779417][T13205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.800294][T14580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.807463][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.850907][T13205] usb 8-1: config 0 descriptor?? [ 1265.912875][T13205] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1266.020191][T14580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.524857][T14757] kAFS: No cell specified [ 1266.526092][T14580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.557595][T14580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.075195][T13205] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 1267.084890][T14580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.690374][T13205] gspca_cpia1: usb_control_msg 01, error -71 [ 1267.696534][T13205] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1268.407731][T13205] usb 8-1: USB disconnect, device number 2 [ 1268.769753][T14580] device hsr_slave_0 entered promiscuous mode [ 1268.997929][T14773] vivid-008: disconnect [ 1269.443300][T14580] device hsr_slave_1 entered promiscuous mode [ 1269.592702][T14768] vivid-008: reconnect [ 1272.021055][T14580] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1272.191755][T14580] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1273.439196][T14580] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1273.485571][T14580] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1274.480250][ T9598] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1274.930359][ T9598] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.666712][ T9598] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1275.724391][T14580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.944780][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1275.953717][ T9598] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1275.966921][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1275.977078][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1275.986843][ T9598] usb 8-1: SerialNumber: syz [ 1276.757287][T14580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.780062][ T9598] usb 8-1: can't set config #1, error -71 [ 1276.839684][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1276.878603][ T9598] usb 8-1: USB disconnect, device number 3 [ 1276.908341][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1276.975050][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.982435][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.126645][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1277.135870][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1277.190466][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.197624][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.206827][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1278.250742][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1278.517221][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1278.554075][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1278.742563][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1278.798975][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1278.883770][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1278.923778][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1280.037904][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1280.263629][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1280.381949][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1280.569729][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.829079][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1282.860928][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1282.881602][T14580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.992840][T14912] kAFS: No cell specified [ 1285.970384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1286.057555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1287.389224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1287.418704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1288.711464][T14580] device veth0_vlan entered promiscuous mode [ 1288.950242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1289.353697][T14986] kAFS: No cell specified [ 1289.360309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1289.540785][T14580] device veth1_vlan entered promiscuous mode [ 1289.725898][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1289.806564][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1289.893621][T14580] device veth0_macvtap entered promiscuous mode [ 1289.922634][T14580] device veth1_macvtap entered promiscuous mode [ 1290.526606][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1290.552740][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1290.735474][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.747328][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.759116][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.780083][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.790228][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.839984][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.857114][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.899876][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.691876][T14580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.718238][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1291.830744][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1291.939348][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.985873][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.085881][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.182532][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.635578][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.726078][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.089907][T14580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.257779][T14580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.295063][T14580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.323993][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1293.440573][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1293.684071][T14580] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.839523][T14580] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.449309][T15052] kAFS: No cell specified [ 1294.456260][T14580] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.480111][T14580] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.998572][T15056] nvme_fabrics: missing parameter 'transport=%s' [ 1295.032730][T15056] nvme_fabrics: missing parameter 'nqn=%s' [ 1296.023188][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.043167][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.172028][ T21] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1296.278755][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1296.460121][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 1296.635744][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.709250][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.735707][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1296.830988][ T21] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1296.849929][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.858796][ T21] usb 6-1: Product: syz [ 1296.867711][ T21] usb 6-1: Manufacturer: syz [ 1296.880904][ T21] usb 6-1: SerialNumber: syz [ 1296.922104][ T21] usb 6-1: config 0 descriptor?? [ 1297.959963][ T21] dvb_usb_dtv5100: probe of 6-1:0.0 failed with error -110 [ 1299.600210][T12210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.691286][T12210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.871559][T12210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.977499][ T4235] usb 6-1: USB disconnect, device number 13 [ 1300.361306][T12210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.099051][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 1302.284342][T15122] chnl_net:caif_netlink_parms(): no params data found [ 1303.053136][T15185] input: syz0 as /devices/virtual/input/input12 [ 1304.595251][T13205] Bluetooth: hci0: command 0x041b tx timeout [ 1305.021595][ T2239] [ 1305.023989][ T2239] ====================================================== [ 1305.031013][ T2239] WARNING: possible circular locking dependency detected [ 1305.038061][ T2239] syzkaller #0 Not tainted [ 1305.042499][ T2239] ------------------------------------------------------ [ 1305.049529][ T2239] kworker/1:2/2239 is trying to acquire lock: [ 1305.055609][ T2239] ffff8880251bcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1305.066794][ T2239] [ 1305.066794][ T2239] but task is already holding lock: [ 1305.074276][ T2239] ffffffff8d6bd748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 1305.083447][ T2239] [ 1305.083447][ T2239] which lock already depends on the new lock. [ 1305.083447][ T2239] [ 1305.093878][ T2239] [ 1305.093878][ T2239] the existing dependency chain (in reverse order) is: [ 1305.102940][ T2239] [ 1305.102940][ T2239] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1305.110966][ T2239] __mutex_lock_common+0x1e3/0x2400 [ 1305.116819][ T2239] mutex_lock_nested+0x17/0x20 [ 1305.122217][ T2239] rfkill_register+0x33/0x8a0 [ 1305.127441][ T2239] hci_register_dev+0x452/0x970 [ 1305.132906][ T2239] vhci_create_device+0x32c/0x5c0 [ 1305.138542][ T2239] vhci_write+0x391/0x450 [ 1305.143420][ T2239] vfs_write+0x745/0xd60 [ 1305.148291][ T2239] ksys_write+0x152/0x260 [ 1305.153257][ T2239] do_syscall_64+0x4c/0xa0 [ 1305.158340][ T2239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1305.164781][ T2239] [ 1305.164781][ T2239] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1305.172631][ T2239] __mutex_lock_common+0x1e3/0x2400 [ 1305.178471][ T2239] mutex_lock_nested+0x17/0x20 [ 1305.183798][ T2239] vhci_send_frame+0x88/0x100 [ 1305.189018][ T2239] hci_send_frame+0x1a9/0x2e0 [ 1305.194285][ T2239] hci_tx_work+0x9f9/0x1710 [ 1305.199467][ T2239] process_one_work+0x85f/0x1010 [ 1305.205045][ T2239] worker_thread+0xaa6/0x1290 [ 1305.210266][ T2239] kthread+0x436/0x520 [ 1305.214995][ T2239] ret_from_fork+0x1f/0x30 [ 1305.219997][ T2239] [ 1305.219997][ T2239] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1305.229239][ T2239] __flush_work+0x116/0x210 [ 1305.234478][ T2239] hci_dev_do_close+0x1e7/0x1030 [ 1305.240089][ T2239] hci_unregister_dev+0x2d7/0x580 [ 1305.245666][ T2239] vhci_release+0x73/0xc0 [ 1305.250545][ T2239] __fput+0x234/0x930 [ 1305.255086][ T2239] task_work_run+0x125/0x1a0 [ 1305.260206][ T2239] do_exit+0x626/0x20c0 [ 1305.265004][ T2239] do_group_exit+0x12e/0x300 [ 1305.270133][ T2239] get_signal+0x6ca/0x12c0 [ 1305.275166][ T2239] arch_do_signal_or_restart+0xe7/0x12c0 [ 1305.281415][ T2239] exit_to_user_mode_loop+0x9e/0x130 [ 1305.287296][ T2239] exit_to_user_mode_prepare+0xee/0x180 [ 1305.293373][ T2239] syscall_exit_to_user_mode+0x16/0x40 [ 1305.299440][ T2239] do_syscall_64+0x58/0xa0 [ 1305.304409][ T2239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1305.310844][ T2239] [ 1305.310844][ T2239] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1305.318660][ T2239] __mutex_lock_common+0x1e3/0x2400 [ 1305.324391][ T2239] mutex_lock_nested+0x17/0x20 [ 1305.329696][ T2239] bg_scan_update+0x44/0x3b0 [ 1305.334934][ T2239] process_one_work+0x85f/0x1010 [ 1305.340415][ T2239] worker_thread+0xaa6/0x1290 [ 1305.345621][ T2239] kthread+0x436/0x520 [ 1305.350217][ T2239] ret_from_fork+0x1f/0x30 [ 1305.355181][ T2239] [ 1305.355181][ T2239] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1305.365011][ T2239] __lock_acquire+0x2c42/0x7d10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1305.370501][ T2239] lock_acquire+0x19e/0x400 [ 1305.375563][ T2239] __flush_work+0x116/0x210 [ 1305.380695][ T2239] __cancel_work_timer+0x3f4/0x560 [ 1305.383729][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.386363][ T2239] hci_request_cancel_all+0xcc/0x300 [ 1305.392793][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.398440][ T2239] hci_dev_do_close+0x4e/0x1030 [ 1305.398465][ T2239] hci_rfkill_set_block+0x10a/0x190 [ 1305.415911][ T2239] rfkill_set_block+0x1c6/0x420 [ 1305.421322][ T2239] rfkill_epo+0x75/0x170 [ 1305.426118][ T2239] rfkill_op_handler+0x76/0x220 [ 1305.431518][ T2239] process_one_work+0x85f/0x1010 [ 1305.437013][ T2239] worker_thread+0xaa6/0x1290 [ 1305.442246][ T2239] kthread+0x436/0x520 [ 1305.446870][ T2239] ret_from_fork+0x1f/0x30 [ 1305.451846][ T2239] [ 1305.451846][ T2239] other info that might help us debug this: [ 1305.451846][ T2239] [ 1305.462084][ T2239] Chain exists of: [ 1305.462084][ T2239] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1305.462084][ T2239] [ 1305.477827][ T2239] Possible unsafe locking scenario: [ 1305.477827][ T2239] [ 1305.485383][ T2239] CPU0 CPU1 [ 1305.490762][ T2239] ---- ---- [ 1305.496141][ T2239] lock(rfkill_global_mutex); [ 1305.500908][ T2239] lock(&data->open_mutex); [ 1305.508065][ T2239] lock(rfkill_global_mutex); [ 1305.515462][ T2239] lock((work_completion)(&hdev->bg_scan_update)); [ 1305.522135][ T2239] [ 1305.522135][ T2239] *** DEADLOCK *** [ 1305.522135][ T2239] [ 1305.530280][ T2239] 3 locks held by kworker/1:2/2239: [ 1305.535487][ T2239] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 1305.545845][ T2239] #1: ffffc900064cfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 1305.556402][ T2239] #2: ffffffff8d6bd748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 1305.565900][ T2239] [ 1305.565900][ T2239] stack backtrace: [ 1305.571853][ T2239] CPU: 1 PID: 2239 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1305.579322][ T2239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1305.589394][ T2239] Workqueue: events rfkill_op_handler [ 1305.594878][ T2239] Call Trace: [ 1305.598165][ T2239] [ 1305.601101][ T2239] dump_stack_lvl+0x188/0x250 [ 1305.605905][ T2239] ? load_image+0x400/0x400 [ 1305.610618][ T2239] ? show_regs_print_info+0x20/0x20 [ 1305.615917][ T2239] ? print_circular_bug+0x12b/0x1a0 [ 1305.621135][ T2239] check_noncircular+0x296/0x330 [ 1305.626072][ T2239] ? look_up_lock_class+0x71/0x110 [ 1305.631202][ T2239] ? add_chain_block+0x940/0x940 [ 1305.636161][ T2239] ? lockdep_lock+0xf1/0x1f0 [ 1305.640756][ T2239] ? __lock_acquire+0x12e8/0x7d10 [ 1305.645793][ T2239] ? mark_lock+0x94/0x320 [ 1305.650123][ T2239] __lock_acquire+0x2c42/0x7d10 [ 1305.655009][ T2239] ? verify_lock_unused+0x140/0x140 [ 1305.660239][ T2239] lock_acquire+0x19e/0x400 [ 1305.664839][ T2239] ? __flush_work+0xfa/0x210 [ 1305.669437][ T2239] ? __lock_acquire+0x7d10/0x7d10 [ 1305.674499][ T2239] ? read_lock_is_recursive+0x10/0x10 [ 1305.679982][ T2239] ? start_flush_work+0x776/0x820 [ 1305.685027][ T2239] __flush_work+0x116/0x210 [ 1305.689527][ T2239] ? __flush_work+0xfa/0x210 [ 1305.694142][ T2239] ? flush_work+0x20/0x20 [ 1305.698466][ T2239] ? try_to_grab_pending+0xfa/0x7f0 [ 1305.703660][ T2239] ? mark_lock+0x94/0x320 [ 1305.707997][ T2239] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1305.713994][ T2239] ? lock_chain_count+0x20/0x20 [ 1305.718864][ T2239] ? mark_lock+0x94/0x320 [ 1305.723197][ T2239] ? __cancel_work_timer+0x36a/0x560 [ 1305.728480][ T2239] __cancel_work_timer+0x3f4/0x560 [ 1305.733596][ T2239] ? cancel_work_sync+0x20/0x20 [ 1305.738444][ T2239] ? __cancel_work+0x1f9/0x2e0 [ 1305.743206][ T2239] ? lockdep_hardirqs_on+0x94/0x140 [ 1305.748403][ T2239] ? __cancel_work+0x27b/0x2e0 [ 1305.753172][ T2239] ? cancel_work+0x20/0x20 [ 1305.757587][ T2239] hci_request_cancel_all+0xcc/0x300 [ 1305.762880][ T2239] hci_dev_do_close+0x4e/0x1030 [ 1305.767757][ T2239] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1305.773651][ T2239] ? _raw_spin_unlock+0x40/0x40 [ 1305.778497][ T2239] ? kobject_uevent_env+0x371/0x890 [ 1305.783865][ T2239] hci_rfkill_set_block+0x10a/0x190 [ 1305.789086][ T2239] ? rcu_lock_release+0x20/0x20 [ 1305.793933][ T2239] rfkill_set_block+0x1c6/0x420 [ 1305.798786][ T2239] rfkill_epo+0x75/0x170 [ 1305.803025][ T2239] rfkill_op_handler+0x76/0x220 [ 1305.807893][ T2239] process_one_work+0x85f/0x1010 [ 1305.812855][ T2239] ? worker_detach_from_pool+0x240/0x240 [ 1305.818487][ T2239] ? lockdep_hardirqs_off+0x70/0x100 [ 1305.823777][ T2239] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1305.828801][ T2239] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1305.834368][ T2239] ? wq_worker_running+0x97/0x170 [ 1305.839392][ T2239] worker_thread+0xaa6/0x1290 [ 1305.844076][ T2239] kthread+0x436/0x520 [ 1305.848142][ T2239] ? rcu_lock_release+0x20/0x20 [ 1305.852991][ T2239] ? kthread_blkcg+0xd0/0xd0 [ 1305.857615][ T2239] ret_from_fork+0x1f/0x30 [ 1305.862130][ T2239] [ 1307.452085][T12210] device hsr_slave_0 left promiscuous mode [ 1307.460888][T12210] device hsr_slave_1 left promiscuous mode [ 1307.480328][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.487827][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.510498][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.517992][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.540502][T12210] device bridge_slave_1 left promiscuous mode [ 1307.546783][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.570812][T12210] device bridge_slave_0 left promiscuous mode [ 1307.577080][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.603691][T12210] device veth1_macvtap left promiscuous mode [ 1307.615848][T12210] device veth0_macvtap left promiscuous mode [ 1307.622481][T12210] device veth1_vlan left promiscuous mode [ 1307.628308][T12210] device veth0_vlan left promiscuous mode [ 1307.763477][T12210] team0 (unregistering): Port device team_slave_1 removed [ 1307.775258][T12210] team0 (unregistering): Port device team_slave_0 removed [ 1307.786552][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.799428][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.847588][T12210] bond0 (unregistering): Released all slaves [ 1308.696745][T12210] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.747687][T12210] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.793822][T12210] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.845855][T12210] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.947279][T12210] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.994281][T12210] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.053814][T12210] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.115905][T12210] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.201018][T12210] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.274881][T12210] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.333866][T12210] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.385680][T12210] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.552470][T12210] device hsr_slave_0 left promiscuous mode [ 1310.558824][T12210] device hsr_slave_1 left promiscuous mode [ 1310.566710][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.574632][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.582797][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.591095][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.598789][T12210] device bridge_slave_1 left promiscuous mode [ 1310.605447][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.615651][T12210] device bridge_slave_0 left promiscuous mode [ 1310.622074][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.634594][T12210] device hsr_slave_0 left promiscuous mode [ 1310.641108][T12210] device hsr_slave_1 left promiscuous mode [ 1310.647540][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.655472][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.664590][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.672400][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.680306][T12210] device bridge_slave_1 left promiscuous mode [ 1310.686531][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.695297][T12210] device bridge_slave_0 left promiscuous mode [ 1310.702133][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.713296][T12210] device hsr_slave_0 left promiscuous mode [ 1310.720142][T12210] device hsr_slave_1 left promiscuous mode [ 1310.726537][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.734381][T12210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.742400][T12210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.750132][T12210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.757949][T12210] device bridge_slave_1 left promiscuous mode [ 1310.764689][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.773946][T12210] device bridge_slave_0 left promiscuous mode [ 1310.780350][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.794885][T12210] device veth1_macvtap left promiscuous mode [ 1310.801003][T12210] device veth0_macvtap left promiscuous mode [ 1310.807071][T12210] device veth1_vlan left promiscuous mode [ 1310.814409][T12210] device veth0_vlan left promiscuous mode [ 1310.820841][T12210] device veth1_macvtap left promiscuous mode [ 1310.826849][T12210] device veth0_macvtap left promiscuous mode [ 1310.835730][T12210] device veth1_vlan left promiscuous mode [ 1310.841815][T12210] device veth0_vlan left promiscuous mode [ 1310.848084][T12210] device veth1_macvtap left promiscuous mode [ 1310.855905][T12210] device veth0_macvtap left promiscuous mode [ 1310.862264][T12210] device veth1_vlan left promiscuous mode [ 1310.868108][T12210] device veth0_vlan left promiscuous mode [ 1311.073329][T12210] team0 (unregistering): Port device team_slave_1 removed [ 1311.085215][T12210] team0 (unregistering): Port device team_slave_0 removed [ 1311.095909][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.108658][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.158513][T12210] bond0 (unregistering): Released all slaves [ 1311.258350][T12210] team0 (unregistering): Port device team_slave_1 removed [ 1311.269524][T12210] team0 (unregistering): Port device team_slave_0 removed [ 1311.284831][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.298280][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.346375][T12210] bond0 (unregistering): Released all slaves [ 1311.445193][T12210] team0 (unregistering): Port device team_slave_1 removed [ 1311.456425][T12210] team0 (unregistering): Port device team_slave_0 removed [ 1311.470219][T12210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.485679][T12210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.532653][T12210] bond0 (unregistering): Released all slaves [ 1311.585972][T12210] bond0 (unregistering): Released all slaves