last executing test programs: 25m21.778762624s ago: executing program 32 (id=363): r0 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019080)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00002b8000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x13, r4, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009b2e40a89ac3075dc54f5f353afb9d006b3999c6078ae1be0d8b079ce5d42870f6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m41.614344105s ago: executing program 33 (id=453): prlimit64(0x0, 0xe, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 17m12.759134414s ago: executing program 34 (id=1489): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x7]}, 0x0, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r5, 0xffffffffffffffff}) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x33335f7, 0x0, &(0x7f00000001c0)=[{}]}) 17m9.068525519s ago: executing program 35 (id=1500): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 17m3.544289454s ago: executing program 36 (id=1511): socket$inet(0x2, 0x1, 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) 17m0.50708779s ago: executing program 37 (id=1518): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) io_uring_enter(r0, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) 16m55.431489858s ago: executing program 38 (id=1526): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x88, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 16m39.486018434s ago: executing program 39 (id=1537): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x0, 0xc, 0x0) mlock(&(0x7f0000119000/0x3000)=nil, 0x3000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 16m37.212210054s ago: executing program 3 (id=1547): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x8, 0x76, @private2, @private0, 0x81, 0x7, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsmount(r1, 0x1, 0x70) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 16m34.930486142s ago: executing program 40 (id=1550): r0 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019080)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() mmap(&(0x7f00002b8000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x13, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009b2e40a89ac3075dc54f5f353afb9d006b3999c6078ae1be0d8b079ce5d42870f6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m34.740661573s ago: executing program 3 (id=1554): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 16m31.194448327s ago: executing program 41 (id=1559): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/171, 0xab) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 16m31.17752614s ago: executing program 3 (id=1561): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 16m28.671237051s ago: executing program 3 (id=1564): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 16m28.506855318s ago: executing program 3 (id=1565): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) accept4(r0, 0x0, 0x0, 0x0) 16m28.026896634s ago: executing program 3 (id=1566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a31000000000400"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 16m27.706929524s ago: executing program 42 (id=1566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a31000000000400"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 16m25.567129582s ago: executing program 0 (id=1569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 16m23.235089922s ago: executing program 0 (id=1570): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x82000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 16m22.250960957s ago: executing program 0 (id=1571): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 16m22.142167777s ago: executing program 0 (id=1572): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 16m21.931141071s ago: executing program 0 (id=1573): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 16m21.451100054s ago: executing program 0 (id=1574): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 16m21.013630938s ago: executing program 43 (id=1574): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 14m19.028377455s ago: executing program 2 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket(0x15, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) dup(r0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x10, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) 14m15.093948979s ago: executing program 2 (id=1793): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000440)="bb", 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 14m11.810985662s ago: executing program 2 (id=1805): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) gettid() socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 14m10.361598376s ago: executing program 2 (id=1809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000000)=0x200b, 0x4) 14m8.841420085s ago: executing program 2 (id=1812): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 14m7.896889725s ago: executing program 2 (id=1816): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 13m52.435307121s ago: executing program 44 (id=1816): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1}) 13m44.096104494s ago: executing program 4 (id=1868): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 13m43.034188567s ago: executing program 4 (id=1870): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0x9, 0xd, {0x2, 0xdac}, {0x8000, 0x7}, @cond=[{0xeeb, 0x405, 0x5, 0x610b, 0x8, 0x2cf2}, {0x2, 0x2, 0x4, 0xfff9, 0x6, 0x5507}]}) 13m42.718946018s ago: executing program 4 (id=1871): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = gettid() socket(0x2, 0x80805, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 13m42.324210186s ago: executing program 4 (id=1873): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 13m41.848142296s ago: executing program 4 (id=1875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000000)=0x200b, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x10) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xde635000) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, 0x0) 13m36.703604265s ago: executing program 4 (id=1888): socket$inet(0x2, 0x1, 0x100) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) 13m35.656315411s ago: executing program 45 (id=1888): socket$inet(0x2, 0x1, 0x100) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) 9m11.658483953s ago: executing program 8 (id=2398): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001}) write$nbd(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) getrlimit(0x7, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fcntl$getown(r3, 0x9) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080)=0x3, 0x12) getgroups(0x3, &(0x7f0000001040)=[r8, r8, r8]) getresuid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000003600)) syz_fuse_handle_req(r0, &(0x7f0000001400)="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", 0x2000, &(0x7f0000003780)={&(0x7f00000003c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x3, 0x80024, 0xfffe, 0x7, 0xa2, 0xff, 0x0, 0x0, 0x2}}, &(0x7f0000000440)={0x18, 0xfffffffffffffffe}, &(0x7f0000000ac0)={0x18, 0x0, 0x3, {0x5e57}}, &(0x7f0000000b00)={0x18, 0xfffffffffffffff5, 0x10, {0xaf}}, &(0x7f0000000c80)={0x18, 0x0, 0x8}, &(0x7f0000000dc0)={0x28, 0x0, 0x10, {{0x7fffffffffffffff, 0x1, 0x2, r6}}}, &(0x7f0000000f00)={0x60, 0xffffffffffffffda, 0x8001, {{0x5, 0x995e, 0xe7, 0x5, 0xe56, 0x3, 0x9, 0x1000}}}, &(0x7f0000000f80)={0x18, 0x0, 0x33, {0x5}}, &(0x7f0000000fc0)={0x11, 0x0, 0x200000000, {'\x00'}}, &(0x7f0000001000)={0x20, 0x0, 0xffffffff}, &(0x7f0000001080)={0x78, 0x0, 0x9, {0x4, 0x6, 0x0, {0x6, 0x8, 0x517, 0x4, 0x7, 0x5, 0x8000, 0x9319, 0xd1, 0x2000, 0x80000000, r7, r10, 0x6, 0xef3e}}}, &(0x7f0000001100)={0x90, 0xfffffffffffffff5, 0xff, {0x0, 0x2, 0xffffffffffffffff, 0x5, 0xa, 0x8, {0x4, 0xaea5, 0x3, 0x6, 0x4, 0xfff, 0x5, 0x50f, 0x10001, 0xc000, 0x47800, r7, 0x0, 0x2, 0xd}}}, &(0x7f00000011c0)={0x30, 0x0, 0x641, [{0x2, 0x8, 0x3, 0x5, 'syz'}]}, 0x0, &(0x7f0000001200)={0xa0, 0x0, 0x1, {{0x3, 0x0, 0x2, 0x7fff, 0x5, 0x1, {0x3, 0x3, 0xffffffffbb775cbb, 0x8, 0x0, 0xfffffffffffff800, 0x3, 0x40, 0xfffffffa, 0x2000, 0x7, 0x0, 0x0, 0xffffff80, 0x4}}, {0x0, 0x8}}}, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040000}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000007c0)="da7ebdce0e81580711a94686e127dfd51eec52d4321b1859a8f9f18beefb5bc3a298ca73d3c5306e9507b79a3b9b69f58f6663ba4898f67788a339d2d4147173d6268da9fe0c3e1fc1186b8d376286504d369d008e8b682e0a7035d3af97949d24277aef07329039afac744ae0849c2c", 0x70}, {&(0x7f0000000880)="4012f8219f3dc17d54ab7cf53bb8ae25d06e4ce6be0f38b7f906f704e9e9302044c135b3118842539d4c30edc92cae203046dd13df0e05f1fd93511b9b699a7882766862d18de81d5e9fe21c87c145244a1f18b2fcffd72091eff895b1a0be5a0c25bd38981eaf68392c611195c8630346", 0x71}, {&(0x7f0000000a40)="f340e33f1e92bae9bce86d018c26c193fdc4ab1b", 0x14}, {0x0}, {&(0x7f0000000cc0)}], 0x5, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r3, r1, r0, r9]}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff]}}], 0x50, 0x4004000}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x40000}}], 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 9m10.849368798s ago: executing program 8 (id=2400): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x851, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r1, 0x0, 0x404c801) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000003c0)}) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r5 = geteuid() mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[], [{@uid_lt={'uid<', r4}}, {@permit_directio}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '/dev/fb0\x00'}}]}) 9m9.745896786s ago: executing program 8 (id=2404): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, 0x0, 0x4) 9m9.378987295s ago: executing program 8 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 9m7.382883821s ago: executing program 8 (id=2409): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x9a7d9000) write$P9_RGETLOCK(r5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000b00)={'team0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8, 0x0, 0x4, [0x0, 0x0, 0x2, 0x2, 0x2, 0x1]}}) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) 9m5.810766053s ago: executing program 8 (id=2415): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000000d40), 0x0}, 0x20) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00082dbd7000fddbdf25010000000800050000000000080004f0df00000205000d0027800000b41ce400da397802e1a44097be26cca7a8b9b077d7367adfe5143d1279a281544d0b65529d6f6ceb10599cc6d49c1d883b2043ebf6fb424e2abd75cebbf6d2c0fa7025f1609950406d9a7313f444c3f5a37dea4e7093fd8ec1e1031a9e2baea9789134b7a0b18e56f1b234986c1ed1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffa, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xf}, {0x14, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008090}, 0x40004) 9m2.908646095s ago: executing program 46 (id=2415): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000000d40), 0x0}, 0x20) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00082dbd7000fddbdf25010000000800050000000000080004f0df00000205000d0027800000b41ce400da397802e1a44097be26cca7a8b9b077d7367adfe5143d1279a281544d0b65529d6f6ceb10599cc6d49c1d883b2043ebf6fb424e2abd75cebbf6d2c0fa7025f1609950406d9a7313f444c3f5a37dea4e7093fd8ec1e1031a9e2baea9789134b7a0b18e56f1b234986c1ed1"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffa, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xf}, {0x14, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008090}, 0x40004) 28.001970301s ago: executing program 5 (id=3718): syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.55408793s ago: executing program 5 (id=3726): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 20.454359545s ago: executing program 5 (id=3731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xf67a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 13.188949513s ago: executing program 7 (id=3744): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e220000040012000800040000080000"], 0x54}}, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "017cac080f91a39588b9d334787f5bbede229bc710bfe84064342d50f819dcb3aacea8d5edf5ea5dc0fd5600a511a5e8ca030aca7a388754e1e02bcff7b497547fc8bb7df3f74cce86d58cf83087e2f8fe8b0f402f20c34766cfcad832505ebf89ffffc06ad94754c4d7617f5aaddfb0d59a2360fa73bae23d0c06e28d607c329f69f510e9c4fd76397fc031359c8e2489509fc1000efa30dd276ab58825ece31b8f1e8299b592f14a93bdff16d99c4238988216503e9f86324e6b98a616ff87413eabb3859aea66deab6b929dcf9b857cf78b32b6f4c4a1"}, 0xdc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$6lowpan_enable(r9, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f00000cd000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r4, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x44, 0x4}, 0x100, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) 12.201345956s ago: executing program 1 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 11.367747771s ago: executing program 5 (id=3747): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r2, &(0x7f0000005b80)={0x2020}, 0x2020) 10.624997766s ago: executing program 6 (id=3749): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa0, 0x140, 0x40, 0xbbba, 0x2, 0xf, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x2, 0x3f1, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x9}) 10.410106843s ago: executing program 1 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 10.24134061s ago: executing program 9 (id=3751): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @private=0xa010100}], 0x20) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000003c0)={0x78, 0x3000, 0x0, 0xffffffffffffffff, 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x2, 0x7e) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000d40)={0x2, 0x0, 0x200200, 0xffffffdc, 0x8001, 0x4061, "57c1169b6664e261326ac71ae7213059", 0x0, 0xa0, 0xfc, 0xfd, 0x8, 0x1, 0xff}) 10.139119988s ago: executing program 6 (id=3752): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000180)=""/213, 0xd5}], 0x4}, 0x100) sendmsg$inet(r0, 0x0, 0x20000000) 9.790402092s ago: executing program 1 (id=3753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, 0x0, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100003e0007010000000000000000017c000004008e000c00018006000600800a0000e8000280de0006"], 0x10c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.916399947s ago: executing program 9 (id=3754): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180220000000000000000000cf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 8.829580916s ago: executing program 7 (id=3755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000bc0)={0xfffffe00, "f1a1173fb9462d356ee67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfc75b000000000000566a0982f8938caa52dd8d39af1405000000d59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, r3, 0x1) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280), 0x0, r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20044000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffad, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 8.726928778s ago: executing program 6 (id=3756): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={0x218, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x31, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x22}, @broadcast, @device_a, @from_mac, {0x8, 0x2}}, 0x8500, 0x5, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x0, 0x1}, {0x2, 0x1}, {0x12, 0x1}, {0x60}, {0x1}, {0x12}, {0x5, 0x1}]}, @void}}, @NL80211_ATTR_FRAME={0x1be, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @random="478948d3df26", {0x3, 0x1}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x8, @default, 0x8200, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x52, {0x4, 0x14, 0x5, "e0939c7d26a2b238aa5538f23064fd4e0ab544c13bf49b404cfb84209e7b55a2221b293a16b9fcddacbadb2bde0a614b31b4d6dca2c83a031ebdadc1b1ce3759b2f460df2c0a01d72d5ebd6f001b9f"}}, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x64, 0x8}}, @void, @void, @void, @void, [{0xdd, 0x60, "37aed2bf2db4e963ab73efeb2500a7962794d2c8b8136826f9456c37b7b92118b585318073b4e90bd35f97c0be876c63b0e94278d6852626a46e53fd1793c177759696ffce7b93656cb429656d3f141d338c375d0c1ab1742a8770f094e8af44"}, {0xdd, 0xc7, "af4e227ea105f4445aa920f076e7f30efed55046a055a4d02a0b4c6fde50683a5ce07371548b9d7cef9918c92d14b0b76090150767a0908613a1a49e4406b46cce4f8e5b3240aea46ee1ff83b9aeee2ff1b5ecaa8b50b16ca739aad8bd03557ec0934e8ac5aeebef18d021b0b49b8507152998c0226097a63086906e4dd1dbe44da6fe9ac6fe7b04f464fea58d0b0f9f2d1588448287442634310d75130c0518a6246e6523e9b5cbdd5eb69a1dc2956b41bf485330908db73fd88e62fd7659aed57832dc568493"}]}}]}, 0x218}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20048844) 7.866679828s ago: executing program 7 (id=3757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xf67a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6.911628413s ago: executing program 9 (id=3758): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendto$packet(r5, &(0x7f0000000100)="0120336e1559dd7bcd21d29e4120a46b", 0x10, 0xd1, &(0x7f0000000140)={0x11, 0xe3, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.074812208s ago: executing program 6 (id=3759): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffff58, 0x424820) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x20042) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0xc, 0x430242) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0xffffff2e, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5319) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000000)={0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04021d02"], 0x20) 4.120285052s ago: executing program 5 (id=3760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 4.085210383s ago: executing program 9 (id=3761): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.587004875s ago: executing program 1 (id=3762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x700, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x6e8, 0x1, [@m_ipt={0x6e4, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x6b9, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x700}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 3.066110001s ago: executing program 5 (id=3763): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='vegas\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm], 0x4) sendto$inet(r0, &(0x7f00000003c0)="25c6f84c6b92407c6d29973a26a7e2d723b20a0000000045a116bc7c8a241406e42ee3f96ff994a804ea29a31dd49236bf4458ea8ec3fd334d125d9abe9c642100003a0a64d6", 0x46, 0x2400c0c1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r2, 0x0, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) 2.799578633s ago: executing program 7 (id=3764): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40010021, 0x0) 2.715584644s ago: executing program 9 (id=3765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x0, @val=0x80}}}}}}}}, 0x27) 2.067045096s ago: executing program 1 (id=3766): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000180)=""/213, 0xd5}], 0x4}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.066667266s ago: executing program 6 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.026083667s ago: executing program 7 (id=3768): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180220000000000000000000cf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 1.087916656s ago: executing program 6 (id=3769): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = timerfd_create(0x8, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20048020) r4 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0, 0x3b, &(0x7f00000001c0)=""/59, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x4f00000, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x5, 0xa, 0x4}, {0x1, 0x1}, {0x4, 0x4, 0x8, 0xa}], 0x10, 0x4}, 0x94) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r7) ioctl$NBD_DO_IT(r0, 0xab03) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) 858.957035ms ago: executing program 1 (id=3770): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r2, &(0x7f0000005b80)={0x2020}, 0x2020) 79.880567ms ago: executing program 7 (id=3771): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2(0x0, 0x4000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) pipe2(&(0x7f0000000040), 0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) dup3(r3, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=3772): r0 = getpid() creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): utes in process `syz.8.2184'. [ 1105.971882][T15795] comedi comedi2: reset error (fatal) [ 1112.210863][T15860] gfs2: not a GFS2 filesystem [ 1121.611747][T12224] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1121.913543][T12224] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.931871][T12224] usb 8-1: config 0 has no interface number 0 [ 1121.961663][T12224] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1121.998912][T12224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.677519][T12224] usb 8-1: Product: syz [ 1122.682658][T12224] usb 8-1: Manufacturer: syz [ 1122.687302][T12224] usb 8-1: SerialNumber: syz [ 1122.874145][T12224] usb 8-1: config 0 descriptor?? [ 1123.655314][T12224] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1123.668372][T12224] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.679422][T12224] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1123.691873][T12224] usb 8-1: media controller created [ 1123.726469][T12224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1125.538674][T12224] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1125.812706][T12224] usb 8-1: USB disconnect, device number 4 [ 1127.176115][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1127.825056][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1127.978643][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1131.772446][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 1131.867715][T15991] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.877492][T15991] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.887573][T15991] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.897308][T15991] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1132.988160][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 1133.168244][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2236'. [ 1133.265432][T15991] bridge_slave_0: left allmulticast mode [ 1133.271206][T15991] bridge_slave_0: left promiscuous mode [ 1133.277861][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.404770][T15991] bridge_slave_1: left allmulticast mode [ 1133.410583][T15991] bridge_slave_1: left promiscuous mode [ 1133.416724][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.483302][T15991] bond0: (slave bond_slave_0): Releasing backup interface [ 1133.556827][T15991] bond0: (slave bond_slave_1): Releasing backup interface [ 1133.627719][T15991] team0: Port device team_slave_0 removed [ 1133.665276][T15991] team0: Port device team_slave_1 removed [ 1133.675156][T15991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.682958][T15991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.734527][T15991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.742966][T15991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.770161][T16001] team0: Mode changed to "loadbalance" [ 1136.401992][ T5843] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1136.562200][ T5843] usb 6-1: device descriptor read/64, error -71 [ 1137.511743][ T5843] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1137.781897][ T5843] usb 6-1: device descriptor read/64, error -71 [ 1137.900111][ T5843] usb usb6-port1: attempt power cycle [ 1138.284152][ T5843] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1139.600361][ T5843] usb 6-1: device descriptor read/8, error -71 [ 1144.506792][T10481] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1144.506851][T10481] Bluetooth: hci3: adv larger than maximum supported [ 1144.514334][T10481] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1144.546390][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 1148.139848][T16138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1149.101922][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2264'. [ 1152.163454][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1152.804767][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 1152.812408][ T43] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1152.831730][ T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1152.841509][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1152.852052][ T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1152.862187][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1153.503665][T16183] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1153.615923][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1153.673512][ T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.891383][ T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.901455][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.933714][ T43] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 1156.206142][ T9150] usb 8-1: USB disconnect, device number 5 [ 1156.607921][T16210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.502407][T10481] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1157.502460][T10481] Bluetooth: hci2: adv larger than maximum supported [ 1157.509844][T10481] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1157.544160][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2277'. [ 1165.881721][ T5925] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1166.191771][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 1166.224627][T16266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.832637][ T5925] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1166.871723][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1166.899540][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1166.991713][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1167.033419][ T5925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.137454][ T5925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1167.171566][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.197100][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2291'. [ 1167.470914][ T5925] usb 2-1: usb_control_msg returned -32 [ 1167.481014][ T5925] usbtmc 2-1:16.0: can't read capabilities [ 1167.519254][ T5925] usb 2-1: USB disconnect, device number 34 [ 1170.721014][T16313] ceph: No mds server is up or the cluster is laggy [ 1170.733896][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 1170.861961][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1172.610045][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1176.068757][T16371] tipc: Started in network mode [ 1176.113487][T16371] tipc: Node identity e6e7d47efa47, cluster identity 4711 [ 1176.142407][T16371] tipc: Enabled bearer , priority 0 [ 1176.179591][T16377] syzkaller0: entered promiscuous mode [ 1176.264241][T16377] syzkaller0: entered allmulticast mode [ 1176.353104][T16371] tipc: Resetting bearer [ 1176.502730][T16370] tipc: Resetting bearer [ 1176.762553][T16370] tipc: Disabling bearer [ 1178.683107][T10481] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 1178.683303][T10481] Bluetooth: hci1: adv larger than maximum supported [ 1178.690978][T10481] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1184.134993][T16451] bond0: entered promiscuous mode [ 1184.140114][T16451] bond_slave_0: entered promiscuous mode [ 1184.162126][T16451] bond_slave_1: entered promiscuous mode [ 1184.275270][T16451] bond0: left promiscuous mode [ 1184.335512][T16451] bond_slave_0: left promiscuous mode [ 1184.341194][T16451] bond_slave_1: left promiscuous mode [ 1184.431956][T10481] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 1184.431993][T10481] Bluetooth: hci1: adv larger than maximum supported [ 1184.439078][T10481] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1186.214399][T10481] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1188.284004][T16493] dummy0: entered allmulticast mode [ 1190.442350][T16506] dummy0: entered allmulticast mode [ 1192.078051][T16523] veth0_to_bridge: entered promiscuous mode [ 1192.138162][T16518] veth0_to_bridge: left promiscuous mode [ 1193.254743][T16537] bond0: entered promiscuous mode [ 1194.022168][T16537] bond_slave_0: entered promiscuous mode [ 1196.096494][T16547] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1196.331771][T16537] bond_slave_1: entered promiscuous mode [ 1196.423931][T10481] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1196.423965][T10481] Bluetooth: hci4: adv larger than maximum supported [ 1196.431787][T10481] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1196.448893][T16537] bond0: left promiscuous mode [ 1196.492563][T16537] bond_slave_0: left promiscuous mode [ 1196.529495][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2355'. [ 1196.539015][T16537] bond_slave_1: left promiscuous mode [ 1201.434832][T16609] ceph: No mds server is up or the cluster is laggy [ 1201.453062][T12093] libceph: connect (1)[c::]:6789 error -101 [ 1201.664140][T12093] libceph: mon0 (1)[c::]:6789 connect error [ 1202.191857][T16621] Bluetooth: MGMT ver 1.23 [ 1202.481056][T16627] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2370'. [ 1208.110514][T16690] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2383'. [ 1208.579871][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2384'. [ 1208.602203][T16692] tipc: Enabling of bearer rejected, failed to enable media [ 1210.847772][ T30] audit: type=1326 audit(1755833761.529:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.7.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1211.449848][ T30] audit: type=1326 audit(1755833761.529:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.7.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1211.569013][ T30] audit: type=1326 audit(1755833761.529:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.7.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1211.728844][ T30] audit: type=1326 audit(1755833761.539:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16704 comm="syz.7.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1213.935308][T16746] hub 8-0:1.0: USB hub found [ 1213.941038][T16746] hub 8-0:1.0: 1 port detected [ 1214.840710][T12429] Bluetooth: hci0: command 0x0405 tx timeout [ 1216.688923][T16756] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1216.714970][T12263] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1217.705030][T12263] usb 6-1: Using ep0 maxpacket: 32 [ 1217.722123][T16770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2403'. [ 1218.608297][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1220.492637][T12263] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1220.517359][T12263] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1220.563250][T12263] usb 6-1: can't read configurations, error -71 [ 1222.293959][ T6018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.013523][ T6018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.287124][ T6018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.663934][ T6018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.961194][T12224] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1226.409922][T12224] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1227.515925][T16843] fido_id[16843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1229.272601][T12429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1229.287148][T12429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1229.297843][T12429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1229.315625][T12429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1229.324182][T12429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1229.534865][ T6018] bridge_slave_1: left allmulticast mode [ 1229.558618][ T6018] bridge_slave_1: left promiscuous mode [ 1229.569645][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.612100][ T6018] bridge_slave_0: left allmulticast mode [ 1229.892080][ T6018] bridge_slave_0: left promiscuous mode [ 1229.920233][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.555189][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 1230.564387][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'. [ 1231.411744][T12429] Bluetooth: hci2: command tx timeout [ 1232.519558][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1232.530476][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.545829][ T6018] bond0 (unregistering): Released all slaves [ 1232.568255][T16869] lo speed is unknown, defaulting to 1000 [ 1232.635287][T16901] tipc: Started in network mode [ 1232.674094][T16901] tipc: Node identity 8, cluster identity 117 [ 1232.692772][T16901] tipc: Node number set to 8 [ 1233.521930][T12429] Bluetooth: hci2: command tx timeout [ 1235.574379][T12429] Bluetooth: hci2: command tx timeout [ 1236.124420][T16869] chnl_net:caif_netlink_parms(): no params data found [ 1236.606347][ T6018] hsr_slave_0: left promiscuous mode [ 1236.635854][ T6018] hsr_slave_1: left promiscuous mode [ 1236.642342][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.661913][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.670326][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.677858][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.774565][ T6018] veth1_macvtap: left promiscuous mode [ 1236.774655][ T6018] veth0_macvtap: left promiscuous mode [ 1236.774859][ T6018] veth1_vlan: left promiscuous mode [ 1236.774991][ T6018] veth0_vlan: left promiscuous mode [ 1237.150733][ T6018] pim6reg (unregistering): left allmulticast mode [ 1237.692569][T12429] Bluetooth: hci2: command tx timeout [ 1238.683137][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2458'. [ 1238.692510][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2458'. [ 1239.866593][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 1239.930014][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 1241.625904][ T1154] smc: removing ib device sz1 [ 1241.826845][ T9150] lo speed is unknown, defaulting to 1000 [ 1241.833012][ T9150] sz1: Port: 1 Link DOWN [ 1243.290726][ T9150] IPVS: starting estimator thread 0... [ 1243.463532][T17032] IPVS: using max 32 ests per chain, 76800 per kthread [ 1243.680485][T17030] tipc: Started in network mode [ 1243.703201][T17030] tipc: Node identity ac1414aa, cluster identity 4711 [ 1243.713214][T17030] tipc: Enabled bearer , priority 10 [ 1244.787113][T16869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.808363][T16869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.840554][ T9150] tipc: Node number set to 2886997162 [ 1244.975211][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2475'. [ 1244.984416][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2475'. [ 1245.561805][T16869] bridge_slave_0: entered allmulticast mode [ 1246.009176][T16869] bridge_slave_0: entered promiscuous mode [ 1246.211884][T16869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.224026][T16869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.312948][T16869] bridge_slave_1: entered allmulticast mode [ 1247.208991][T16869] bridge_slave_1: entered promiscuous mode [ 1247.389647][T17077] Illegal XDP return value 4294967274 on prog (id 202) dev N/A, expect packet loss! [ 1249.452169][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2486'. [ 1249.461406][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2486'. [ 1250.090892][T16869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.285897][T16869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.143943][T17121] ceph: No mds server is up or the cluster is laggy [ 1252.989369][T16869] team0: Port device team_slave_0 added [ 1253.092980][T16869] team0: Port device team_slave_1 added [ 1254.716766][T16869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.763648][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.772492][T17159] input: syz1 as /devices/virtual/input/input25 [ 1254.933790][T17162] sd 0:0:1:0: device reset [ 1255.069571][T16869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.110690][T16869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.201638][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.453938][T16869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.575244][T16869] hsr_slave_0: entered promiscuous mode [ 1256.593814][T16869] hsr_slave_1: entered promiscuous mode [ 1257.877125][T17190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.754506][T12429] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 1264.045473][T17250] tipc: Enabled bearer , priority 0 [ 1264.082619][T17241] tipc: Disabling bearer [ 1264.898101][ T1225] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1264.928104][T16869] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1264.971734][T16869] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1265.037004][T16869] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1265.093073][ T1225] usb 2-1: Using ep0 maxpacket: 32 [ 1265.153173][T16869] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1266.171826][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1266.426389][T16869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.536308][T16869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.617276][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.624461][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.677935][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.685109][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.564258][ T1225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1267.612844][ T1225] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1267.620468][ T1225] usb 2-1: can't read configurations, error -71 [ 1268.064089][T17307] tipc: Enabled bearer , priority 10 [ 1268.281264][T16869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.301998][ T1225] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1268.581224][ T1225] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1268.601616][ T1225] usb 2-1: config 0 has no interface number 0 [ 1268.638549][ T1225] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1268.666550][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.702932][ T1225] usb 2-1: Product: syz [ 1268.731439][ T1225] usb 2-1: Manufacturer: syz [ 1268.756696][ T1225] usb 2-1: SerialNumber: syz [ 1268.797413][ T1225] usb 2-1: config 0 descriptor?? [ 1269.017772][ T1225] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1269.721745][ T1225] usb 2-1: USB disconnect, device number 36 [ 1270.025269][T17334] tipc: Enabled bearer , priority 0 [ 1270.054898][T17334] tipc: Resetting bearer [ 1270.089266][T17332] tipc: Disabling bearer [ 1270.564102][T16869] veth0_vlan: entered promiscuous mode [ 1270.645792][T16869] veth1_vlan: entered promiscuous mode [ 1270.674111][T16869] veth0_macvtap: entered promiscuous mode [ 1270.684227][T16869] veth1_macvtap: entered promiscuous mode [ 1271.127789][ T30] audit: type=1800 audit(1755833821.799:26): pid=17349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2534" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1271.450593][T16869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.582860][T16869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.620346][T16869] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.662052][T16869] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.670831][T16869] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.753859][T16869] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.001864][ T5843] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1272.084689][T12035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.156823][T12035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.187500][T12035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.206048][T12035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.251900][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1272.615088][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 1273.417989][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2417'. [ 1274.701880][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1274.725342][ T5843] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1274.740726][ T5843] usb 2-1: can't read configurations, error -71 [ 1275.295138][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 1275.541887][ T5843] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1276.545645][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1276.553927][ T5843] usb 2-1: config 0 has no interface number 0 [ 1276.605843][ T5843] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1276.621654][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.629694][ T5843] usb 2-1: Product: syz [ 1276.699762][ T5843] usb 2-1: Manufacturer: syz [ 1276.717955][ T5843] usb 2-1: SerialNumber: syz [ 1276.760469][ T5843] usb 2-1: config 0 descriptor?? [ 1277.016021][ T5843] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1277.076533][ T5843] usb 2-1: USB disconnect, device number 38 [ 1278.574769][T17411] syz.6.2546: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1278.699245][T17411] CPU: 1 UID: 0 PID: 17411 Comm: syz.6.2546 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1278.699275][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1278.699294][T17411] Call Trace: [ 1278.699305][T17411] [ 1278.699315][T17411] dump_stack_lvl+0x189/0x250 [ 1278.699347][T17411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1278.699370][T17411] ? __pfx__printk+0x10/0x10 [ 1278.699396][T17411] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1278.699422][T17411] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1278.699449][T17411] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1278.699485][T17411] warn_alloc+0x214/0x310 [ 1278.699518][T17411] ? __pfx_warn_alloc+0x10/0x10 [ 1278.699550][T17411] ? __get_vm_area_node+0x28f/0x300 [ 1278.699571][T17411] ? hash_ipport4_resize+0x1ec/0x1a50 [ 1278.699604][T17411] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1278.699650][T17411] ? hash_ipport4_add+0x1b75/0x21e0 [ 1278.699681][T17411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1278.699709][T17411] ? rcu_is_watching+0x15/0xb0 [ 1278.699731][T17411] ? hash_ipport4_resize+0x1ec/0x1a50 [ 1278.699758][T17411] ? hash_ipport4_resize+0x1ec/0x1a50 [ 1278.699784][T17411] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1278.699805][T17411] ? hash_ipport4_resize+0x1ec/0x1a50 [ 1278.699842][T17411] hash_ipport4_resize+0x1ec/0x1a50 [ 1278.699879][T17411] ? __pfx_hash_ipport4_add+0x10/0x10 [ 1278.699931][T17411] call_ad+0x44b/0xb00 [ 1278.699963][T17411] ? __pfx_call_ad+0x10/0x10 [ 1278.700002][T17411] ? __nla_parse+0x40/0x60 [ 1278.700030][T17411] ip_set_ad+0x791/0x930 [ 1278.700063][T17411] ? __pfx_ip_set_ad+0x10/0x10 [ 1278.700084][T17411] ? __mutex_lock+0x330/0xe80 [ 1278.700145][T17411] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1278.700169][T17411] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1278.700210][T17411] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1278.700229][T17411] ? kasan_save_free_info+0x46/0x50 [ 1278.700297][T17411] netlink_rcv_skb+0x205/0x470 [ 1278.700318][T17411] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1278.700334][T17411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1278.700361][T17411] ? bpf_lsm_capable+0x9/0x20 [ 1278.700396][T17411] ? security_capable+0x7e/0x2e0 [ 1278.700420][T17411] nfnetlink_rcv+0x26a/0x2520 [ 1278.700438][T17411] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1278.700457][T17411] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1278.700490][T17411] ? __dev_queue_xmit+0x27e/0x3a70 [ 1278.700504][T17411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.700524][T17411] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1278.700538][T17411] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1278.700561][T17411] ? ref_tracker_free+0x63a/0x7d0 [ 1278.700593][T17411] ? __copy_skb_header+0xa7/0x550 [ 1278.700610][T17411] ? __pfx_ref_tracker_free+0x10/0x10 [ 1278.700634][T17411] ? __skb_clone+0x63/0x7a0 [ 1278.700660][T17411] ? __skb_clone+0x483/0x7a0 [ 1278.700679][T17411] ? skb_clone+0x246/0x3a0 [ 1278.700695][T17411] ? __netlink_deliver_tap+0x807/0x850 [ 1278.700715][T17411] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.700740][T17411] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.700759][T17411] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.700783][T17411] netlink_unicast+0x75c/0x8e0 [ 1278.700809][T17411] netlink_sendmsg+0x805/0xb30 [ 1278.700837][T17411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.700863][T17411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1278.700877][T17411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.700898][T17411] __sock_sendmsg+0x21c/0x270 [ 1278.700918][T17411] ____sys_sendmsg+0x505/0x830 [ 1278.700944][T17411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1278.700973][T17411] ? import_iovec+0x74/0xa0 [ 1278.700996][T17411] ___sys_sendmsg+0x21f/0x2a0 [ 1278.701021][T17411] ? __pfx____sys_sendmsg+0x10/0x10 [ 1278.701068][T17411] ? __fget_files+0x2a/0x420 [ 1278.701085][T17411] ? __fget_files+0x3a0/0x420 [ 1278.701108][T17411] __x64_sys_sendmsg+0x19b/0x260 [ 1278.701133][T17411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1278.701164][T17411] ? rcu_is_watching+0x15/0xb0 [ 1278.701182][T17411] ? do_syscall_64+0xbe/0x3b0 [ 1278.701202][T17411] do_syscall_64+0xfa/0x3b0 [ 1278.701218][T17411] ? lockdep_hardirqs_on+0x9c/0x150 [ 1278.701234][T17411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.701247][T17411] ? clear_bhb_loop+0x60/0xb0 [ 1278.701265][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.701279][T17411] RIP: 0033:0x7f45db58ebe9 [ 1278.701299][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.701312][T17411] RSP: 002b:00007f45dc43a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.701328][T17411] RAX: ffffffffffffffda RBX: 00007f45db7b5fa0 RCX: 00007f45db58ebe9 [ 1278.701339][T17411] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1278.701348][T17411] RBP: 00007f45db611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1278.701357][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.701365][T17411] R13: 00007f45db7b6038 R14: 00007f45db7b5fa0 R15: 00007fff83543408 [ 1278.701387][T17411] [ 1279.193824][T17411] Mem-Info: [ 1279.197002][T17411] active_anon:291 inactive_anon:10840 isolated_anon:0 [ 1279.197002][T17411] active_file:9976 inactive_file:43815 isolated_file:0 [ 1279.197002][T17411] unevictable:768 dirty:94 writeback:0 [ 1279.197002][T17411] slab_reclaimable:11050 slab_unreclaimable:104586 [ 1279.197002][T17411] mapped:34864 shmem:6448 pagetables:1596 [ 1279.197002][T17411] sec_pagetables:0 bounce:0 [ 1279.197002][T17411] kernel_misc_reclaimable:0 [ 1279.197002][T17411] free:1300453 free_pcp:16106 free_cma:0 [ 1279.242712][T17411] Node 0 active_anon:1164kB inactive_anon:43360kB active_file:39700kB inactive_file:175260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139456kB dirty:376kB writeback:0kB shmem:24256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12220kB pagetables:6248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1279.277216][T17411] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1279.308674][T17411] Node 0 DMA free:15280kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 1279.337682][T17411] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1279.343546][T17411] Node 0 DMA32 free:1291724kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1160kB inactive_anon:43320kB active_file:37924kB inactive_file:175192kB unevictable:1536kB writepending:376kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:41404kB local_pcp:13168kB free_cma:0kB [ 1279.376404][T17411] lowmem_reserve[]: 0 0 1 1 1 [ 1279.381130][T17411] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1279.410111][T17411] lowmem_reserve[]: 0 0 0 0 0 [ 1279.414897][T17411] Node 1 Normal free:3894416kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23040kB local_pcp:11808kB free_cma:0kB [ 1279.446159][T17411] lowmem_reserve[]: 0 0 0 0 0 [ 1279.450876][T17411] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15280kB [ 1279.465255][T17411] Node 0 DMA32: 410*4kB (UME) 371*8kB (UME) 365*16kB (UME) 891*32kB (UME) 160*64kB (UME) 36*128kB (UME) 291*256kB (UM) 364*512kB (UM) 230*1024kB (UM) 4*2048kB (UME) 179*4096kB (M) = 1291568kB [ 1279.484614][T17411] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1279.496549][T17411] Node 1 Normal: 196*4kB (UE) 48*8kB (UME) 46*16kB (UME) 145*32kB (UME) 30*64kB (UME) 11*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3894416kB [ 1279.514805][T17411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.524387][T17411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1279.533685][T17411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.543275][T17411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1279.552582][T17411] 60235 total pagecache pages [ 1279.557661][T17411] 0 pages in swap cache [ 1279.561861][T17411] Free swap = 124996kB [ 1279.566035][T17411] Total swap = 124996kB [ 1279.570193][T17411] 2097051 pages RAM [ 1279.574044][T17411] 0 pages HighMem/MovableOnly [ 1279.578720][T17411] 424695 pages reserved [ 1279.582891][T17411] 0 pages cma reserved [ 1279.845536][T17438] bond0: entered promiscuous mode [ 1279.901832][T17438] bond_slave_0: entered promiscuous mode [ 1279.915229][T17438] bond_slave_1: entered promiscuous mode [ 1279.994667][T17438] bond0: left promiscuous mode [ 1279.999510][T17438] bond_slave_0: left promiscuous mode [ 1280.055348][T17438] bond_slave_1: left promiscuous mode [ 1282.488409][T17469] input: syz1 as /devices/virtual/input/input26 [ 1282.701736][ T5925] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1283.349159][ T5925] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1283.365732][ T5925] usb 6-1: config 0 has no interface number 0 [ 1283.421363][ T5925] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1283.447934][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.480217][ T5925] usb 6-1: Product: syz [ 1283.494647][ T5925] usb 6-1: Manufacturer: syz [ 1283.511640][ T5925] usb 6-1: SerialNumber: syz [ 1283.525617][ T5925] usb 6-1: config 0 descriptor?? [ 1283.687420][T12429] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1283.687489][T12429] Bluetooth: hci2: adv larger than maximum supported [ 1283.697036][T12429] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1283.792567][ T5925] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1285.308979][ T5925] usb 6-1: USB disconnect, device number 23 [ 1285.935627][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2566'. [ 1286.336121][T17521] syzkaller0: entered promiscuous mode [ 1286.370070][T17521] syzkaller0: entered allmulticast mode [ 1288.438893][T17546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input27 [ 1289.012909][ T1225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1289.059615][ T1225] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1291.496760][T12429] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1291.496798][T12429] Bluetooth: hci4: adv larger than maximum supported [ 1291.504040][T12429] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1294.318061][T12224] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1294.991911][T12224] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1298.801187][T17640] syz.1.2594 (17640) used greatest stack depth: 18936 bytes left [ 1303.216280][ T43] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1303.692596][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1303.733920][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.828722][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1304.087902][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.385472][ T43] usb 2-1: usb_control_msg returned -32 [ 1304.508420][ T43] usbtmc 2-1:16.0: can't read capabilities [ 1305.901985][T12093] usb 2-1: USB disconnect, device number 39 [ 1313.845942][T17890] tipc: Enabled bearer , priority 0 [ 1313.953838][T17890] tipc: Resetting bearer [ 1314.232345][T17889] tipc: Disabling bearer [ 1315.798533][ T1225] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1315.901284][ T1225] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1316.052332][T17923] fuse: Bad value for 'fd' [ 1318.965987][T17995] sd 0:0:1:0: device reset [ 1320.598783][T12093] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1320.663208][T12093] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1323.767174][T18060] Lens A: ================= START STATUS ================= [ 1323.973312][T18060] Lens A: Focus, Absolute: 0 [ 1323.988133][T18060] Lens A: ================== END STATUS ================== [ 1325.344430][T18077] tipc: Started in network mode [ 1325.352993][T18077] tipc: Node identity ac1414aa, cluster identity 4711 [ 1325.404824][T18077] tipc: Enabled bearer , priority 10 [ 1326.229335][T12093] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1326.294523][T12093] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1326.445538][T12093] tipc: Node number set to 2886997162 [ 1326.977839][T18105] input: syz1 as /devices/virtual/input/input29 [ 1328.312490][T18124] bridge1: entered promiscuous mode [ 1328.329909][T18124] bridge1: entered allmulticast mode [ 1331.388417][T18165] tipc: Enabled bearer , priority 0 [ 1331.418091][T18165] tipc: Resetting bearer [ 1331.557698][T18164] tipc: Disabling bearer [ 1332.196513][T18183] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1332.217904][ T3621] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1332.261459][ T3621] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1332.500904][T18188] fido_id[18188]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1335.522563][T18228] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1335.531765][T18228] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1338.601680][T18015] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1338.871664][T18015] usb 10-1: Using ep0 maxpacket: 16 [ 1339.020485][T18015] usb 10-1: config 4 has an invalid interface number: 51 but max is 0 [ 1339.278956][T18015] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.369619][T18015] usb 10-1: config 4 has no interface number 0 [ 1339.380959][T18015] usb 10-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.424759][T18015] usb 10-1: config 4 interface 51 has no altsetting 0 [ 1339.588627][T18015] usb 10-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1339.597978][T18015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.622058][T18015] usb 10-1: Product: syz [ 1339.637667][T18015] usb 10-1: Manufacturer: syz [ 1339.650331][T18015] usb 10-1: SerialNumber: syz [ 1339.672785][T18015] cdc_eem 10-1:4.51: probe with driver cdc_eem failed with error -22 [ 1341.777816][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1341.802953][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.094920][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.122243][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.147400][ T43] usb 10-1: USB disconnect, device number 2 [ 1342.208867][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.363093][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.403395][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.452039][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.596774][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.795891][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1342.917442][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1343.007394][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1343.027592][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1343.108952][T12093] hid-generic 00A0:0006:0003.000B: unknown main item tag 0x0 [ 1343.186297][T12093] hid-generic 00A0:0006:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1343.622160][T18330] fido_id[18330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1345.547784][T18361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2754'. [ 1352.667700][T18466] tipc: Enabling of bearer rejected, failed to enable media [ 1355.544006][ T30] audit: type=1326 audit(1755833906.279:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18504 comm="syz.6.2788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x0 [ 1357.521987][T18015] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1358.105009][T18015] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1358.117572][T18015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.132837][T18015] usb 6-1: config 0 descriptor?? [ 1358.491162][T18015] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1359.222596][T18537] netlink: 'syz.5.2794': attribute type 10 has an invalid length. [ 1359.287830][T18565] netlink: 'syz.5.2794': attribute type 10 has an invalid length. [ 1359.368853][T18537] team0: Port device dummy0 added [ 1361.517033][T18565] team0 (unregistering): Port device dummy0 removed [ 1361.757652][T18015] usb 6-1: USB disconnect, device number 24 [ 1364.861105][T18652] input: syz1 as /devices/virtual/input/input30 [ 1365.673076][T18656] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2820'. [ 1365.946753][T18671] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1369.470454][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2834'. [ 1369.499938][T18709] bridge_slave_1: left allmulticast mode [ 1369.511911][T18709] bridge_slave_1: left promiscuous mode [ 1369.520288][T18709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.588722][T18709] bridge_slave_0: left allmulticast mode [ 1369.594681][T18709] bridge_slave_0: left promiscuous mode [ 1369.614288][T18709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.146809][T18751] ceph: No mds server is up or the cluster is laggy [ 1372.642499][T18015] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1372.879890][T18015] usb 10-1: Using ep0 maxpacket: 32 [ 1373.022604][T18015] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1373.049555][T18015] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1373.063249][T18015] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1373.119070][T18015] usb 10-1: Product: syz [ 1373.144210][T18015] usb 10-1: Manufacturer: syz [ 1373.273393][T18015] usb 10-1: SerialNumber: syz [ 1373.312844][T18015] usb 10-1: config 0 descriptor?? [ 1373.328686][T18763] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1376.406628][T18810] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1376.904390][T18015] usb 10-1: USB disconnect, device number 3 [ 1385.141590][T18951] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1385.780866][T18965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2893'. [ 1388.818470][T19001] tipc: Started in network mode [ 1388.863525][T19001] tipc: Node identity 8, cluster identity 117 [ 1388.900505][T19001] tipc: Node number set to 8 [ 1389.631622][T12224] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1389.944675][T12224] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1389.964037][T12224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.974021][T12224] usb 7-1: Product: syz [ 1389.981235][T12224] usb 7-1: Manufacturer: syz [ 1389.987096][T12224] usb 7-1: SerialNumber: syz [ 1390.633931][T12224] usb 7-1: config 0 descriptor?? [ 1390.643511][T12224] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1392.247222][T19047] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1392.866678][T12224] usb 7-1: USB disconnect, device number 18 [ 1395.582248][T19094] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1397.225304][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2925'. [ 1399.383863][T19124] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1399.421875][T19123] capability: warning: `syz.1.2929' uses deprecated v2 capabilities in a way that may be insecure [ 1401.132148][T19136] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1403.394770][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2938'. [ 1406.128109][T19182] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2943'. [ 1406.137364][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2943'. [ 1412.752036][T19241] pim6reg: entered allmulticast mode [ 1413.420270][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2955'. [ 1413.429457][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 1413.438590][T19254] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1414.433774][T19258] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2957'. [ 1414.512642][T19258] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2957'. [ 1415.163556][T19267] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2956'. [ 1417.167752][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1417.179723][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1417.199899][T19283] ceph: No mds server is up or the cluster is laggy [ 1417.597346][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1417.630780][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1417.919932][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2964'. [ 1418.547040][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1418.556265][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1418.565439][T19310] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1420.421701][T10481] Bluetooth: hci2: command 0x0406 tx timeout [ 1424.390105][T19360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1430.962235][T19433] ptrace attach of "./syz-executor exec"[12426] was attempted by "./syz-executor exec"[19433] [ 1431.891548][T19431] comedi comedi2: reset error (fatal) [ 1434.688380][T19443] sd 0:0:1:0: device reset [ 1437.643024][T19272] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1438.514256][T19272] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1438.998650][T19272] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.061591][T19495] comedi comedi2: reset error (fatal) [ 1441.246996][T19272] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1441.271604][T19272] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.293704][T19272] usb 10-1: can't set config #16, error -71 [ 1441.311839][T19272] usb 10-1: USB disconnect, device number 4 [ 1441.579665][T19509] netlink: 'syz.1.3005': attribute type 29 has an invalid length. [ 1441.612913][T19509] netlink: 'syz.1.3005': attribute type 29 has an invalid length. [ 1441.651971][T19509] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3005'. [ 1441.692547][T19513] netlink: 'syz.9.3004': attribute type 4 has an invalid length. [ 1445.841712][ T1225] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1445.890077][T19560] syzkaller0: entered promiscuous mode [ 1445.896611][T19560] syzkaller0: entered allmulticast mode [ 1445.991644][ T1225] usb 10-1: device descriptor read/64, error -71 [ 1446.010062][T19565] netlink: 'syz.1.3016': attribute type 29 has an invalid length. [ 1446.039293][T19565] netlink: 'syz.1.3016': attribute type 29 has an invalid length. [ 1446.072224][T19565] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3016'. [ 1446.271794][ T43] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1446.277259][ T1225] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1446.444262][ T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1446.461554][ T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.461621][ T1225] usb 10-1: device descriptor read/64, error -71 [ 1446.485586][ T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1446.495608][ T5843] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1446.519236][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.632347][ T1225] usb usb10-port1: attempt power cycle [ 1446.671676][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 1446.690718][ T5843] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1446.715463][ T5843] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1446.749851][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1446.777310][ T5843] usb 6-1: Product: syz [ 1446.777840][ T43] usb 8-1: usb_control_msg returned -32 [ 1446.787713][ T5843] usb 6-1: Manufacturer: syz [ 1446.798635][ T5843] usb 6-1: SerialNumber: syz [ 1446.802033][ T43] usbtmc 8-1:16.0: can't read capabilities [ 1446.821176][ T5843] usb 6-1: config 0 descriptor?? [ 1446.861607][T19572] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1447.165717][T19572] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1447.173604][ T1225] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1447.223753][ T1225] usb 10-1: device descriptor read/8, error -71 [ 1447.518957][ T1225] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1447.585729][ T1225] usb 10-1: device descriptor read/8, error -71 [ 1447.620600][T12429] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 1447.825244][ T1225] usb usb10-port1: unable to enumerate USB device [ 1448.825082][T12429] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1448.825119][T12429] Bluetooth: hci3: adv larger than maximum supported [ 1448.832790][T12429] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1448.931018][ T1225] usb 8-1: USB disconnect, device number 6 [ 1451.342224][T18015] usb 6-1: USB disconnect, device number 25 [ 1451.954153][T19620] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1452.043699][T19613] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1452.053647][T19613] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1452.107186][T19613] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1452.180688][T19613] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1452.256377][T19627] netlink: 'syz.7.3028': attribute type 29 has an invalid length. [ 1452.312494][T19627] netlink: 'syz.7.3028': attribute type 29 has an invalid length. [ 1452.361328][T19627] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3028'. [ 1455.740494][T12429] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1456.871669][ T43] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1457.094248][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1457.127379][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1457.141360][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1457.151274][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.211630][T19272] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1457.388678][ T43] usb 6-1: usb_control_msg returned -32 [ 1457.394746][T19272] usb 7-1: Using ep0 maxpacket: 32 [ 1457.408645][ T43] usbtmc 6-1:16.0: can't read capabilities [ 1457.453442][T19272] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1457.511146][T19272] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1457.548002][T19272] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1457.581581][T19272] usb 7-1: Product: syz [ 1457.590500][T19272] usb 7-1: Manufacturer: syz [ 1457.624672][T19272] usb 7-1: SerialNumber: syz [ 1457.970568][T19272] usb 7-1: config 0 descriptor?? [ 1458.005218][T19685] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1458.375729][T19685] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1458.604833][T12429] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1458.604944][T12429] Bluetooth: hci2: adv larger than maximum supported [ 1458.614261][T12429] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1459.522939][ T43] usb 6-1: USB disconnect, device number 26 [ 1461.102487][T19272] usb 7-1: USB disconnect, device number 19 [ 1463.697020][T12429] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 1463.724694][T19746] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1463.762823][T19747] syz_tun: entered allmulticast mode [ 1463.795419][T19746] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1465.191646][ T43] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1465.201641][T19272] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1465.393643][ T43] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1465.411618][T19272] usb 7-1: Using ep0 maxpacket: 32 [ 1465.433837][ T43] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.458950][T19272] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1465.514185][T19272] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1465.531720][ T43] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1465.551672][T19272] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1465.561448][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.581980][T19272] usb 7-1: Product: syz [ 1465.586194][T19272] usb 7-1: Manufacturer: syz [ 1465.590811][T19272] usb 7-1: SerialNumber: syz [ 1465.658489][T19272] usb 7-1: config 0 descriptor?? [ 1465.665345][T19765] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1465.817978][ T43] usb 10-1: usb_control_msg returned -32 [ 1465.825606][ T43] usbtmc 10-1:16.0: can't read capabilities [ 1467.492878][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3058'. [ 1467.671565][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1467.887266][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1467.941045][ T3621] usb 10-1: USB disconnect, device number 9 [ 1467.975892][ T43] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1468.018315][ T43] usb 8-1: config 0 has no interface number 0 [ 1468.069264][ T43] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1468.140261][ T43] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1468.178811][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.203791][ T43] usb 8-1: Product: syz [ 1468.273383][T12429] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1468.273499][T12429] Bluetooth: hci2: adv larger than maximum supported [ 1468.280749][T12429] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1469.210624][ T43] usb 8-1: Manufacturer: syz [ 1470.195432][ T43] usb 8-1: SerialNumber: syz [ 1470.202360][ T43] usb 8-1: config 0 descriptor?? [ 1470.209741][ T43] smsc75xx v1.0.0 [ 1470.213474][ T43] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1470.224251][ T43] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 1470.489558][ T43] usb 7-1: USB disconnect, device number 20 [ 1471.579395][ T1225] usb 8-1: USB disconnect, device number 7 [ 1473.076969][T19840] netlink: 'syz.5.3068': attribute type 29 has an invalid length. [ 1473.107079][T19840] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1474.481860][ T30] audit: type=1804 audit(1755834024.999:28): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="iou-wrk-19853" name="file0" dev="ramfs" ino=67546 res=1 errno=0 [ 1474.611690][T19272] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1474.763465][T19272] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1474.778168][T19272] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1474.856178][T19272] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1474.887992][T19272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.212207][T19272] usb 6-1: usb_control_msg returned -32 [ 1475.217877][T19272] usbtmc 6-1:16.0: can't read capabilities [ 1475.671555][ T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1475.851745][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1475.870447][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1475.934634][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1475.981949][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1476.005954][ T43] usb 2-1: Product: syz [ 1476.024770][ T43] usb 2-1: Manufacturer: syz [ 1476.043637][ T43] usb 2-1: SerialNumber: syz [ 1476.068083][ T43] usb 2-1: config 0 descriptor?? [ 1476.089596][T19857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1476.323136][T19857] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1476.391594][ T30] audit: type=1326 audit(1755834027.099:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1476.470654][ T30] audit: type=1326 audit(1755834027.099:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1476.579264][T19875] pim6reg: entered allmulticast mode [ 1476.591868][ T30] audit: type=1326 audit(1755834027.099:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1476.644949][ T30] audit: type=1326 audit(1755834027.099:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1476.749611][T19272] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1476.819252][ T30] audit: type=1326 audit(1755834027.099:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1476.881659][T19272] usb 10-1: device descriptor read/64, error -71 [ 1477.003616][ T30] audit: type=1326 audit(1755834027.099:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1477.132005][T19272] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1477.173075][ T30] audit: type=1326 audit(1755834027.099:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1477.201252][ T43] usb 6-1: USB disconnect, device number 27 [ 1477.321736][ T30] audit: type=1326 audit(1755834027.099:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1477.411644][T19272] usb 10-1: device descriptor read/64, error -71 [ 1477.431310][ T30] audit: type=1326 audit(1755834027.099:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19871 comm="syz.9.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9674d8ebe9 code=0x7ffc0000 [ 1477.522503][T19272] usb usb10-port1: attempt power cycle [ 1477.532149][ T5843] usb 2-1: USB disconnect, device number 40 [ 1478.602899][T19272] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1478.661555][T19272] usb 10-1: device descriptor read/8, error -71 [ 1479.056402][T19272] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1479.129077][T19272] usb 10-1: device descriptor read/8, error -71 [ 1479.261844][T19272] usb usb10-port1: unable to enumerate USB device [ 1480.588486][T19920] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1480.678788][T19920] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1481.654892][ T5843] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1481.845884][ T5843] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1481.903003][ T5843] usb 10-1: config 0 has no interface number 0 [ 1481.941706][ T5843] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1481.985735][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.371730][ T5843] usb 10-1: Product: syz [ 1482.376047][ T5843] usb 10-1: Manufacturer: syz [ 1482.382059][T12429] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1482.382090][T12429] Bluetooth: hci3: adv larger than maximum supported [ 1482.389160][T12429] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1482.451835][ T5843] usb 10-1: SerialNumber: syz [ 1482.504770][ T5843] usb 10-1: config 0 descriptor?? [ 1482.948841][ T5843] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1484.525498][ T5843] usb 10-1: USB disconnect, device number 14 [ 1485.671010][T19977] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 1485.681042][T19977] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 1485.701856][ T1225] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1485.709517][T18015] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1485.891623][ T1225] usb 7-1: Using ep0 maxpacket: 32 [ 1485.964633][T18015] usb 6-1: Using ep0 maxpacket: 32 [ 1486.272229][ T1225] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1486.354279][ T1225] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1486.620789][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1487.321013][ T1225] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1487.383547][ T1225] usb 7-1: Product: syz [ 1487.558347][ T1225] usb 7-1: Manufacturer: syz [ 1487.563164][ T1225] usb 7-1: SerialNumber: syz [ 1487.586044][ T1225] usb 7-1: config 0 descriptor?? [ 1487.593076][T19964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1487.793974][ T1225] usb 7-1: USB disconnect, device number 21 [ 1488.377760][T18015] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1488.482764][T18015] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1488.490514][T18015] usb 6-1: can't read configurations, error -71 [ 1488.728722][T20010] syzkaller0: entered promiscuous mode [ 1488.764078][T20010] syzkaller0: entered allmulticast mode [ 1491.480021][T12429] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1491.480059][T12429] Bluetooth: hci4: adv larger than maximum supported [ 1491.487518][T12429] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1493.288716][T20039] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1493.373072][T20039] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1494.906326][T19272] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1495.123753][T19272] usb 7-1: Using ep0 maxpacket: 32 [ 1495.394532][T19272] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1495.475592][T19272] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1495.511609][T19272] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1495.538326][T19272] usb 7-1: Product: syz [ 1495.555069][T19272] usb 7-1: Manufacturer: syz [ 1495.560872][T19272] usb 7-1: SerialNumber: syz [ 1495.620210][T19272] usb 7-1: config 0 descriptor?? [ 1495.647080][T20047] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1497.802161][ T3621] usb 7-1: USB disconnect, device number 22 [ 1499.277135][T12429] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1499.277172][T12429] Bluetooth: hci2: adv larger than maximum supported [ 1499.284332][T12429] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1500.122661][T20114] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1500.122717][T20114] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1504.015810][T18015] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1504.371814][T18015] usb 2-1: Using ep0 maxpacket: 32 [ 1504.389213][T18015] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1504.429535][T18015] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1504.442984][T18015] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1504.465993][T18015] usb 2-1: Product: syz [ 1504.498425][T18015] usb 2-1: Manufacturer: syz [ 1504.519646][T18015] usb 2-1: SerialNumber: syz [ 1504.551722][T18015] usb 2-1: config 0 descriptor?? [ 1504.582308][T20148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1504.930021][T20166] syzkaller0: entered promiscuous mode [ 1504.968364][T20166] syzkaller0: entered allmulticast mode [ 1505.711958][T12429] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1505.711995][T12429] Bluetooth: hci2: adv larger than maximum supported [ 1505.719178][T12429] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1507.767554][T20206] netlink: 4400 bytes leftover after parsing attributes in process `syz.7.3145'. [ 1507.778701][T20206] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 1507.925234][ T3621] usb 2-1: USB disconnect, device number 41 [ 1508.211834][T19034] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1508.381595][T19034] usb 6-1: Using ep0 maxpacket: 32 [ 1508.711017][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3147'. [ 1511.031033][T19034] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1511.041762][T19034] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1511.061161][T19034] usb 6-1: can't read configurations, error -71 [ 1511.525037][T19034] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1511.731986][T19034] usb 6-1: Using ep0 maxpacket: 32 [ 1511.746030][T19034] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1511.769074][T19034] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1511.794916][T19034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.828787][T19034] usb 6-1: Product: syz [ 1511.843402][T19034] usb 6-1: Manufacturer: syz [ 1511.848064][T19034] usb 6-1: SerialNumber: syz [ 1511.975001][T19034] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36 [ 1512.145404][ T5192] bcm5974 6-1:1.0: could not read from device [ 1512.407831][T12429] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 1512.407867][T12429] Bluetooth: hci1: adv larger than maximum supported [ 1512.437399][ T5192] bcm5974 6-1:1.0: could not read from device [ 1512.455535][T12429] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1512.541819][ T3621] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1512.774035][ T3621] usb 8-1: Using ep0 maxpacket: 32 [ 1513.056282][ T3621] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1513.165288][ T3621] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1513.251563][ T3621] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1513.259805][ T3621] usb 8-1: Product: syz [ 1513.281801][ T5192] bcm5974 6-1:1.0: could not read from device [ 1513.366025][ T3621] usb 8-1: Manufacturer: syz [ 1513.370695][ T3621] usb 8-1: SerialNumber: syz [ 1513.460918][ T5192] bcm5974 6-1:1.0: could not read from device [ 1513.497241][ T3621] usb 8-1: config 0 descriptor?? [ 1513.570196][T20269] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1513.645110][T20288] netlink: 'syz.1.3164': attribute type 15 has an invalid length. [ 1513.666947][T20287] pim6reg: left allmulticast mode [ 1513.714726][T20288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1514.064567][T16213] bcm5974 6-1:1.0: could not read from device [ 1514.131349][T19034] usb 6-1: USB disconnect, device number 31 [ 1514.160282][ T5192] bcm5974 6-1:1.0: could not read from device [ 1514.299001][ T5192] bcm5974 6-1:1.0: could not read from device [ 1514.384837][ T5192] bcm5974 6-1:1.0: could not read from device [ 1515.147468][ T1225] usb 8-1: USB disconnect, device number 8 [ 1516.522520][T20324] program syz.7.3168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.423416][T19034] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1519.591685][T19034] usb 8-1: Using ep0 maxpacket: 32 [ 1519.599894][T19034] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1519.641699][T19034] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1519.673879][T19034] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1519.704221][T19034] usb 8-1: Product: syz [ 1519.715358][T19034] usb 8-1: Manufacturer: syz [ 1519.724658][T19034] usb 8-1: SerialNumber: syz [ 1519.738231][T19034] usb 8-1: config 0 descriptor?? [ 1519.762362][T20353] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1521.531584][T19034] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1521.539650][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 1521.673314][T19034] usb 2-1: device descriptor read/64, error -32 [ 1521.913051][T19034] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1522.071682][T19034] usb 2-1: Using ep0 maxpacket: 32 [ 1522.091428][T19034] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1522.120157][T19034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1522.150461][T19034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1522.403061][T19048] usb 8-1: USB disconnect, device number 9 [ 1522.548465][T20409] netlink: 'syz.5.3188': attribute type 20 has an invalid length. [ 1522.591527][T19034] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1522.619021][T20379] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.670051][T19034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1522.681102][T19034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1522.797541][T19034] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1522.924303][T20417] dummy0: entered allmulticast mode [ 1523.093409][T19034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.114661][T19034] usb 2-1: Product: syz [ 1523.118916][T19034] usb 2-1: Manufacturer: syz [ 1523.141521][T19034] usb 2-1: SerialNumber: syz [ 1523.148511][T19034] usb 2-1: config 0 descriptor?? [ 1525.360878][ T3621] usb 2-1: USB disconnect, device number 43 [ 1526.667794][T20472] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1529.424923][T20503] dummy0: entered allmulticast mode [ 1533.469939][ T1225] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1534.181583][ T1225] usb 8-1: device descriptor read/64, error -71 [ 1534.612485][ T1225] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1534.881761][ T1225] usb 8-1: device descriptor read/64, error -71 [ 1535.697714][ T1225] usb usb8-port1: attempt power cycle [ 1536.091668][ T1225] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1536.318464][ T1225] usb 8-1: device descriptor read/8, error -71 [ 1538.892888][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1542.259481][T20639] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3236'. [ 1543.731732][T20379] Bluetooth: hci2: command 0x0406 tx timeout [ 1544.237793][T20639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.299700][T20639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.368611][T20639] bond0 (unregistering): Released all slaves [ 1556.995620][T20839] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1562.908270][T20379] Bluetooth: hci2: command 0x0406 tx timeout [ 1562.955214][T20903] comedi comedi2: reset error (fatal) [ 1568.226492][T20951] comedi comedi2: reset error (fatal) [ 1568.507426][T20963] netlink: 'syz.9.3311': attribute type 1 has an invalid length. [ 1568.756844][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3311'. [ 1570.107095][T20984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1570.815199][ T1225] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1571.891601][ T1225] usb 10-1: Using ep0 maxpacket: 8 [ 1571.900050][ T1225] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.910410][ T1225] usb 10-1: config 0 has no interfaces? [ 1571.921685][T20999] comedi comedi2: reset error (fatal) [ 1572.052339][ T1225] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1572.078257][ T1225] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.110518][ T1225] usb 10-1: Product: syz [ 1572.171348][ T1225] usb 10-1: Manufacturer: syz [ 1572.179267][ T1225] usb 10-1: SerialNumber: syz [ 1572.206176][ T1225] usb 10-1: config 0 descriptor?? [ 1572.460894][ T1225] usb 10-1: USB disconnect, device number 15 [ 1574.401710][T12093] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1574.591738][T19048] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1574.614224][T12093] usb 10-1: config 0 has no interfaces? [ 1574.638777][T12093] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1574.649311][T12093] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.685569][T12093] usb 10-1: Product: syz [ 1574.698565][T12093] usb 10-1: Manufacturer: syz [ 1574.708990][T12093] usb 10-1: SerialNumber: syz [ 1574.748979][T12093] usb 10-1: config 0 descriptor?? [ 1574.792112][T19048] usb 7-1: Using ep0 maxpacket: 8 [ 1574.804649][T19048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.848518][T19048] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1574.890901][T19048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.940628][T19048] usb 7-1: config 0 descriptor?? [ 1576.157641][T21045] comedi comedi2: reset error (fatal) [ 1576.210277][T19048] usbhid 7-1:0.0: can't add hid device: -71 [ 1576.217181][T19048] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1576.264439][T19048] usb 7-1: USB disconnect, device number 23 [ 1578.441660][T19048] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1578.636221][T19048] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1578.645627][T19048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.673407][T19048] usb 7-1: Product: syz [ 1578.682405][T19048] usb 7-1: Manufacturer: syz [ 1578.748695][T19048] usb 7-1: SerialNumber: syz [ 1578.938988][T18015] usb 10-1: USB disconnect, device number 16 [ 1579.091093][T21079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.101705][T19048] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1579.128370][T21079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.136354][T19048] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1579.157485][T19048] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1579.187102][T19048] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1579.230194][T19048] usb 7-1: USB disconnect, device number 24 [ 1581.171538][T21095] comedi comedi2: reset error (fatal) [ 1584.444451][T21142] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3357'. [ 1585.465587][T21146] comedi comedi2: reset error (fatal) [ 1590.577458][T21210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1592.004633][T21216] comedi comedi2: reset error (fatal) [ 1592.400403][T21227] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3373'. [ 1596.305933][T21266] comedi comedi2: reset error (fatal) [ 1598.135016][T21293] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3388'. [ 1602.518650][T21352] vlan2: entered promiscuous mode [ 1602.525011][T21352] vlan2: entered allmulticast mode [ 1602.530174][T21352] hsr_slave_1: entered allmulticast mode [ 1602.588994][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1603.082078][T12429] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1603.082171][T12429] Bluetooth: hci4: adv larger than maximum supported [ 1603.089603][T12429] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1606.910379][T21393] loop6: detected capacity change from 0 to 2098 [ 1611.380668][T19048] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1611.584910][T19048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.644351][T19048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.684655][T19048] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1611.741634][T19048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.774236][T19048] usb 2-1: config 0 descriptor?? [ 1613.062226][T19048] usbhid 2-1:0.0: can't add hid device: -71 [ 1613.089008][T19048] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1613.234460][T19048] usb 2-1: USB disconnect, device number 44 [ 1614.350907][T21488] netlink: 'syz.7.3435': attribute type 1 has an invalid length. [ 1614.465436][T21488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.615048][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1615.777080][T19048] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1615.992126][T19048] usb 2-1: Using ep0 maxpacket: 32 [ 1616.202203][T18015] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1616.238936][T19048] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1616.302840][T19048] usb 2-1: config 0 has no interface number 0 [ 1616.332872][T19048] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1616.363704][T19048] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1616.374062][T19048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.412568][T18015] usb 6-1: Using ep0 maxpacket: 8 [ 1616.430006][T19048] usb 2-1: Product: syz [ 1616.450388][T19048] usb 2-1: Manufacturer: syz [ 1616.456909][T18015] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1616.469526][T18015] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1616.499460][T18015] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1616.571334][T18015] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.613906][T19048] usb 2-1: SerialNumber: syz [ 1616.640015][T18015] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1616.688014][T18015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.721088][T19048] usb 2-1: config 0 descriptor?? [ 1616.799275][T19048] smsc75xx v1.0.0 [ 1617.021270][T18015] usb 6-1: GET_CAPABILITIES returned 0 [ 1617.029463][T19048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1617.052603][T18015] usbtmc 6-1:16.0: can't read capabilities [ 1617.117243][T19048] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1617.230362][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.278976][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.288144][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.297271][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.306381][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.432876][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.442007][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.451093][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.460269][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.486384][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.495513][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.504610][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.513710][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.616894][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.626005][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.635063][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1617.786808][T18015] usb 6-1: USB disconnect, device number 32 [ 1619.018402][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1619.018419][ T30] audit: type=1326 audit(1755834169.749:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1619.118505][ T30] audit: type=1326 audit(1755834169.749:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1619.229205][ T30] audit: type=1326 audit(1755834169.749:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1619.250768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.412222][T19048] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1619.491736][ T30] audit: type=1326 audit(1755834169.749:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1619.662714][T19048] usb 7-1: Using ep0 maxpacket: 32 [ 1619.724672][T21569] tipc: Enabled bearer , priority 10 [ 1620.026568][T19048] usb 7-1: config 0 has an invalid interface number: 79 but max is 0 [ 1620.081080][T18015] usb 2-1: USB disconnect, device number 45 [ 1620.084323][T19048] usb 7-1: config 0 has no interface number 0 [ 1620.097764][ T30] audit: type=1326 audit(1755834169.749:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1620.119250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.159681][T19048] usb 7-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1620.181469][T19048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.211717][T19048] usb 7-1: Product: syz [ 1620.236096][T19048] usb 7-1: Manufacturer: syz [ 1620.240719][T19048] usb 7-1: SerialNumber: syz [ 1620.309640][T19048] usb 7-1: config 0 descriptor?? [ 1620.321639][ T30] audit: type=1326 audit(1755834169.749:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1620.548039][ T30] audit: type=1326 audit(1755834169.749:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1620.569556][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.698374][ T30] audit: type=1326 audit(1755834169.749:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1620.719895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.736035][T21581] input: syz0 as /devices/virtual/input/input37 [ 1620.867713][T18015] tipc: Node number set to 480302206 [ 1621.085624][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3451'. [ 1621.127320][ T30] audit: type=1326 audit(1755834169.749:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1621.309270][T21589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1621.667230][ T30] audit: type=1326 audit(1755834169.749:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21551 comm="syz.6.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45db58ebe9 code=0x7ffc0000 [ 1621.691597][ T5925] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1622.061720][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 1622.822652][ T5925] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1622.856789][ T5925] usb 2-1: config 0 has no interface number 0 [ 1623.669514][ T5925] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1623.691939][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1623.701062][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.709606][ T5925] usb 2-1: Product: syz [ 1623.715139][ T5925] usb 2-1: Manufacturer: syz [ 1623.719943][ T5925] usb 2-1: SerialNumber: syz [ 1623.738291][ T5925] usb 2-1: config 0 descriptor?? [ 1623.752250][ T5925] smsc75xx v1.0.0 [ 1623.756116][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1623.774076][ T5925] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1624.313907][T21611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.321672][T21611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.330075][T21611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.337980][T21611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.431828][T18015] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1624.723482][T18015] usb 8-1: Using ep0 maxpacket: 8 [ 1624.750886][T18015] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1624.780673][T18015] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1624.909474][T18015] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1625.036107][T19048] cp210x 7-1:0.79: cp210x converter detected [ 1625.056493][T18015] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.096352][T19048] cp210x 7-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1625.128053][T18015] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1625.131523][T19048] cp210x 7-1:0.79: querying part number failed [ 1625.205353][T19048] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1625.241440][T19048] usb 7-1: USB disconnect, device number 25 [ 1625.252045][T18015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.298886][T19048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1625.356008][T19048] cp210x 7-1:0.79: device disconnected [ 1625.421569][ T5925] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1625.592838][T18015] usb 8-1: GET_CAPABILITIES returned 0 [ 1625.600338][T18015] usbtmc 8-1:16.0: can't read capabilities [ 1625.606514][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 1625.848521][ T5925] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1625.875946][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1625.885058][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1625.894129][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1625.903183][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1625.954930][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.987962][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1625.997127][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.006215][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.039139][ T5925] usb 6-1: Product: syz [ 1626.042804][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.052419][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.061486][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.073101][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.082178][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.091232][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.100270][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.109325][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.119918][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1626.131155][ T5843] usb 8-1: USB disconnect, device number 14 [ 1626.174005][ T5925] usb 6-1: Manufacturer: syz [ 1626.178654][ T5925] usb 6-1: SerialNumber: syz [ 1626.206054][ T5925] usb 6-1: config 0 descriptor?? [ 1626.369908][ T5925] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1627.025319][ T5925] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1627.035223][ T5925] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1627.044923][ T5925] usb 6-1: USB disconnect, device number 33 [ 1627.242147][T21620] serio: Serial port ptm0 [ 1627.513419][ T5843] usb 2-1: USB disconnect, device number 46 [ 1628.368564][T21631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1632.247753][T21670] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1633.039293][T21676] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3481'. [ 1633.089496][T21675] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3481'. [ 1633.381877][T21679] syz_tun: entered allmulticast mode [ 1633.419813][T21677] syz_tun: left allmulticast mode [ 1633.965933][T12429] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 1634.790555][ T5843] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1635.667736][ T5843] usb 6-1: config 0 has no interfaces? [ 1635.970693][ T5843] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1636.068096][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.168180][ T5843] usb 6-1: Product: syz [ 1636.215627][ T5843] usb 6-1: Manufacturer: syz [ 1636.283003][ T5843] usb 6-1: SerialNumber: syz [ 1636.365763][ T5843] usb 6-1: config 0 descriptor?? [ 1637.062832][T21739] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3493'. [ 1637.116460][T21735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3493'. [ 1639.223356][T21757] loop6: detected capacity change from 0 to 2098 [ 1640.830713][ T5925] usb 6-1: USB disconnect, device number 34 [ 1641.302862][ T5925] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1641.364597][T21790] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1641.440127][T21788] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1641.641924][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 1642.051000][ T5925] usb 6-1: config 2 has an invalid interface number: 196 but max is 1 [ 1642.170169][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3508'. [ 1642.194706][ T5925] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1642.247122][ T5925] usb 6-1: config 2 has no interface number 0 [ 1642.255829][ T5925] usb 6-1: config 2 interface 196 has no altsetting 0 [ 1642.276381][ T5925] usb 6-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 1642.286028][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.325789][ T5925] usb 6-1: Product: syz [ 1642.330016][ T5925] usb 6-1: Manufacturer: syz [ 1642.346067][ T5925] usb 6-1: SerialNumber: syz [ 1643.892143][ T5925] ums-cypress 6-1:2.196: USB Mass Storage device detected [ 1644.000906][ T5925] usb 6-1: USB disconnect, device number 35 [ 1646.261515][T21827] comedi comedi2: reset error (fatal) [ 1646.915924][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3519'. [ 1647.694038][T21849] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1650.874016][T21899] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1654.009506][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3536'. [ 1654.437015][T21935] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1654.443639][T21935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1654.471883][T21935] vhci_hcd vhci_hcd.0: Device attached [ 1654.651698][T19048] vhci_hcd: vhci_device speed not set [ 1654.736857][T19048] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1654.762753][ T3621] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1654.952985][ T3621] usb 10-1: config 0 has no interfaces? [ 1654.958590][ T3621] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1655.074636][ T3621] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.142886][ T3621] usb 10-1: config 0 descriptor?? [ 1655.379306][T21936] vhci_hcd: unknown pdu 1 [ 1655.399430][ T3621] usb 10-1: USB disconnect, device number 17 [ 1655.408723][ T334] vhci_hcd: stop threads [ 1655.430455][ T334] vhci_hcd: release socket [ 1655.454734][ T334] vhci_hcd: disconnect device [ 1655.481539][T19048] vhci_hcd: vhci_device speed not set [ 1655.501523][ T1225] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1655.675266][ T1225] usb 7-1: config 0 has no interfaces? [ 1655.711806][ T1225] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1655.852230][ T1225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.984091][ T1225] usb 7-1: Product: syz [ 1656.005868][ T1225] usb 7-1: Manufacturer: syz [ 1656.023461][ T1225] usb 7-1: SerialNumber: syz [ 1656.092429][ T1225] usb 7-1: config 0 descriptor?? [ 1656.361486][ T5843] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1656.571650][ T5843] usb 10-1: Using ep0 maxpacket: 8 [ 1656.599913][ T5843] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1656.663214][ T5843] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1656.724995][ T5843] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1656.795006][ T5843] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1656.838168][ T5843] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1656.898801][ T5843] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.255591][ T5843] usb 10-1: usb_control_msg returned -71 [ 1657.309186][ T5843] usbtmc 10-1:16.0: can't read capabilities [ 1657.373713][ T5843] usb 10-1: USB disconnect, device number 18 [ 1661.332774][T22002] lo speed is unknown, defaulting to 1000 [ 1661.339101][T22002] lo speed is unknown, defaulting to 1000 [ 1661.350748][T22002] lo speed is unknown, defaulting to 1000 [ 1661.522185][T22002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1661.834810][T22002] lo speed is unknown, defaulting to 1000 [ 1661.853984][T22002] lo speed is unknown, defaulting to 1000 [ 1661.861237][T22002] lo speed is unknown, defaulting to 1000 [ 1661.868795][T22002] lo speed is unknown, defaulting to 1000 [ 1661.876061][T22002] lo speed is unknown, defaulting to 1000 [ 1662.041727][T19048] usb 7-1: USB disconnect, device number 26 [ 1663.073479][ T5843] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1663.315562][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3556'. [ 1663.488751][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1663.641670][ T5843] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1663.671604][ T5843] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1663.977157][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1664.035807][ T5843] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1664.352203][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.375790][ T5843] usb 2-1: config 0 descriptor?? [ 1664.535178][ T5843] usb 2-1: can't set config #0, error -71 [ 1664.586277][ T5843] usb 2-1: USB disconnect, device number 47 [ 1665.866154][T22041] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1665.904050][T22041] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1666.874640][T22068] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1668.951847][T22083] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1669.571197][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1669.571216][ T30] audit: type=1326 audit(1755834220.219:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1669.911606][T19034] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1670.541542][ T30] audit: type=1326 audit(1755834220.219:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1670.659828][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1670.702527][T19034] usb 8-1: Using ep0 maxpacket: 32 [ 1670.745838][ T30] audit: type=1326 audit(1755834220.219:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1670.792629][T19034] usb 8-1: config 0 has an invalid interface number: 79 but max is 0 [ 1670.850440][T19034] usb 8-1: config 0 has no interface number 0 [ 1671.030549][ T30] audit: type=1326 audit(1755834220.219:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1671.139829][T22112] loop8: detected capacity change from 0 to 7 [ 1671.712083][T19034] usb 8-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1671.721169][T19034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.731040][T22112] Dev loop8: unable to read RDB block 7 [ 1671.736925][T22112] loop8: AHDI p1 p2 p3 [ 1671.741097][T22112] loop8: partition table partially beyond EOD, truncated [ 1671.748396][T22112] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1671.755239][T22112] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1671.897906][ T30] audit: type=1326 audit(1755834220.219:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1671.921895][T19034] usb 8-1: Product: syz [ 1671.926098][T19034] usb 8-1: Manufacturer: syz [ 1671.930716][T19034] usb 8-1: SerialNumber: syz [ 1672.048870][T19034] usb 8-1: config 0 descriptor?? [ 1672.139826][ T30] audit: type=1326 audit(1755834220.219:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1672.248850][ T30] audit: type=1326 audit(1755834220.219:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1672.521602][ T30] audit: type=1326 audit(1755834220.219:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1672.543191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.650793][ T30] audit: type=1326 audit(1755834220.219:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1672.763751][ T30] audit: type=1326 audit(1755834220.219:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22086 comm="syz.7.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f869df8ebe9 code=0x7ffc0000 [ 1673.904812][T19034] usb 8-1: can't set config #0, error -71 [ 1673.983097][T19034] usb 8-1: USB disconnect, device number 15 [ 1673.990452][T22128] syzkaller0: entered promiscuous mode [ 1674.035947][T22128] syzkaller0: entered allmulticast mode [ 1674.480749][T22135] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1675.708051][T22144] lo speed is unknown, defaulting to 1000 [ 1679.521512][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1679.521527][ T30] audit: type=1800 audit(1755834229.689:163): pid=22186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3594" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1680.117135][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1681.166769][T22206] syzkaller0: entered promiscuous mode [ 1681.178390][T22206] syzkaller0: entered allmulticast mode [ 1681.366312][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3599'. [ 1681.651732][T12429] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.771340][T22221] lo speed is unknown, defaulting to 1000 [ 1682.817971][T22221] lo speed is unknown, defaulting to 1000 [ 1682.844407][T22221] lo speed is unknown, defaulting to 1000 [ 1683.000514][T22221] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1683.950441][T22221] lo speed is unknown, defaulting to 1000 [ 1684.611754][T22221] lo speed is unknown, defaulting to 1000 [ 1684.630966][T22221] lo speed is unknown, defaulting to 1000 [ 1684.672359][T22221] lo speed is unknown, defaulting to 1000 [ 1684.708589][T22221] lo speed is unknown, defaulting to 1000 [ 1684.715656][T22237] lo speed is unknown, defaulting to 1000 [ 1684.830197][T22237] lo speed is unknown, defaulting to 1000 [ 1684.955146][T22259] option changes via remount are deprecated (pid=22252 comm=syz.6.3607) [ 1686.825302][T22274] tipc: Enabled bearer , priority 0 [ 1686.847269][T22274] tipc: Resetting bearer [ 1686.949867][T22273] tipc: Disabling bearer [ 1688.964452][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3616'. [ 1689.004251][ T1225] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1689.263301][ T1225] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1689.296796][ T1225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.463361][ T1225] usb 8-1: config 0 descriptor?? [ 1689.535602][ T1225] cp210x 8-1:0.0: cp210x converter detected [ 1690.601581][ T1225] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1690.785033][ T1225] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1690.968977][T19048] usb 8-1: USB disconnect, device number 16 [ 1691.101578][T19272] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1691.831188][T19048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1691.911889][T19048] cp210x 8-1:0.0: device disconnected [ 1692.001504][T19272] usb 6-1: Using ep0 maxpacket: 32 [ 1692.017778][T19272] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1692.067749][T19272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1692.161530][T19272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1692.381500][T19272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1692.562903][T19272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1692.628837][T19272] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1692.712819][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.723215][T19272] usb 6-1: Product: syz [ 1692.728657][T19272] usb 6-1: Manufacturer: syz [ 1692.734592][T19272] usb 6-1: SerialNumber: syz [ 1692.773760][T19272] usb 6-1: config 0 descriptor?? [ 1692.816980][T22349] netlink: 'syz.1.3626': attribute type 10 has an invalid length. [ 1692.849638][T22349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.866125][T22349] team0: entered promiscuous mode [ 1692.873241][T22349] team_slave_0: entered promiscuous mode [ 1692.879160][T22349] team_slave_1: entered promiscuous mode [ 1692.922523][T22351] netlink: 'syz.1.3626': attribute type 10 has an invalid length. [ 1693.006116][T22352] siw: device registration error -23 [ 1693.022913][T22349] team0: entered allmulticast mode [ 1693.028098][T22349] team_slave_0: entered allmulticast mode [ 1693.044190][T22349] team_slave_1: entered allmulticast mode [ 1693.064253][T22349] bond0: (slave team0): Enslaving as an active interface with an up link [ 1693.277475][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.297841][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.318727][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.326818][T22351] syz_tun: entered promiscuous mode [ 1693.358776][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.365073][T22351] syz_tun: entered allmulticast mode [ 1693.372565][T22351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1693.392273][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.441891][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.484851][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.529610][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.560591][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.599396][T22364] lo speed is unknown, defaulting to 1000 [ 1693.609815][T22364] lo speed is unknown, defaulting to 1000 [ 1693.693457][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.724364][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.761591][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.768933][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.791530][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.891355][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.961575][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1693.991931][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1694.045799][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1694.252071][T19272] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1694.258189][T19272] input input38: Timeout waiting for response from device. [ 1694.271546][ T30] audit: type=1326 audit(1755834244.899:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.331842][T19272] usb 6-1: USB disconnect, device number 36 [ 1694.496488][ T30] audit: type=1326 audit(1755834244.899:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.518530][T19048] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1694.532002][ T30] audit: type=1326 audit(1755834244.899:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.554291][ T30] audit: type=1326 audit(1755834244.899:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.575849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.582767][T22380] ptrace attach of "./syz-executor exec"[12383] was attempted by "./syz-executor exec"[22380] [ 1694.599701][T22380] xt_cgroup: invalid path, errno=-2 [ 1694.616432][ T30] audit: type=1326 audit(1755834244.899:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.638630][ T30] audit: type=1326 audit(1755834244.899:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.721675][T19048] usb 2-1: Using ep0 maxpacket: 32 [ 1694.754265][T19048] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 1694.762780][T19048] usb 2-1: config 0 has no interface number 0 [ 1694.793534][T19048] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1694.811680][T19048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.836280][ T30] audit: type=1326 audit(1755834244.909:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1694.857870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.897117][T19048] usb 2-1: Product: syz [ 1694.901367][T19048] usb 2-1: Manufacturer: syz [ 1694.994654][T19048] usb 2-1: SerialNumber: syz [ 1695.055391][T19048] usb 2-1: config 0 descriptor?? [ 1695.091497][ T30] audit: type=1326 audit(1755834244.909:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1695.388690][ T30] audit: type=1326 audit(1755834244.909:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1695.451717][ T30] audit: type=1326 audit(1755834244.909:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22368 comm="syz.1.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42d98ebe9 code=0x7ffc0000 [ 1695.473379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.419426][T22390] input: syz0 as /devices/virtual/input/input39 [ 1699.452781][T19048] cp210x 2-1:0.79: cp210x converter detected [ 1699.488078][T19048] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1699.568109][T19048] cp210x 2-1:0.79: querying part number failed [ 1699.595805][T19048] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1699.634320][T19048] usb 2-1: USB disconnect, device number 48 [ 1699.678152][T19048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1699.710970][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1699.783276][T19048] cp210x 2-1:0.79: device disconnected [ 1700.304377][T22424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.795126][T22424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.740346][T22473] lo speed is unknown, defaulting to 1000 [ 1704.754602][T22473] lo speed is unknown, defaulting to 1000 [ 1706.135018][T22424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.398768][T22485] netlink: 'syz.5.3651': attribute type 29 has an invalid length. [ 1706.497312][T22485] netlink: 'syz.5.3651': attribute type 29 has an invalid length. [ 1706.528033][T22485] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1706.602773][T22424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.011971][ T5925] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1707.451459][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 1707.497479][ T5925] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1707.510346][ T5925] usb 6-1: config 179 has no interface number 0 [ 1707.523820][ T5925] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1707.561709][ T5925] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1707.592013][ T5925] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1707.604665][ T5925] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1707.616623][ T5925] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1707.637220][T22424] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.667057][ T5925] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1707.706922][T22424] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.715312][T19048] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1707.728793][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.777815][T22424] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.796949][T22493] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1707.876418][T22424] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.932294][T19048] usb 2-1: Using ep0 maxpacket: 32 [ 1707.953855][T19048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.971589][T19048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.983142][T19048] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1708.022297][T19048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.061188][ T5925] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input40 [ 1708.106129][T19048] usb 2-1: config 0 descriptor?? [ 1708.178225][T19048] hub 2-1:0.0: USB hub found [ 1708.364004][ T1225] usb 6-1: USB disconnect, device number 37 [ 1708.364038][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1708.378380][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1708.415786][T19048] hub 2-1:0.0: 1 port detected [ 1708.432112][T20216] udevd[20216]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1709.467530][T19048] hub 2-1:0.0: activate --> -90 [ 1709.860543][T18015] usb 2-1: USB disconnect, device number 49 [ 1710.241758][ T5925] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1710.542776][ T5925] usb 8-1: Using ep0 maxpacket: 32 [ 1710.562419][ T5925] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.731572][T18015] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1710.739916][ T5925] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1710.773775][ T5925] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1710.788223][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1710.803498][ T5925] usb 8-1: Product: syz [ 1710.820015][ T5925] usb 8-1: Manufacturer: syz [ 1710.877235][ T5925] usb 8-1: SerialNumber: syz [ 1710.893300][T18015] usb 7-1: Using ep0 maxpacket: 32 [ 1710.904822][ T5925] usb 8-1: config 0 descriptor?? [ 1711.059755][T18015] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1711.068142][T18015] usb 7-1: config 0 has no interface number 0 [ 1711.079166][T18015] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1711.112363][T18015] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1711.122753][T18015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.130920][T18015] usb 7-1: Product: syz [ 1711.135279][T18015] usb 7-1: Manufacturer: syz [ 1711.140550][T18015] usb 7-1: SerialNumber: syz [ 1711.187882][T18015] usb 7-1: config 0 descriptor?? [ 1711.206761][T18015] smsc75xx v1.0.0 [ 1711.216184][T18015] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1711.253890][T22559] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3669'. [ 1711.483937][T18015] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1712.725065][ T3621] usb 8-1: USB disconnect, device number 17 [ 1714.682545][T18015] usb 7-1: USB disconnect, device number 27 [ 1715.218552][T22593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1715.227719][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1715.237093][T22593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1715.246345][T22593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1718.135804][T22611] lo speed is unknown, defaulting to 1000 [ 1718.152095][T22611] lo speed is unknown, defaulting to 1000 [ 1719.050351][T22616] tipc: Enabled bearer , priority 0 [ 1719.064209][T22619] syzkaller0: entered promiscuous mode [ 1719.077767][T22619] syzkaller0: entered allmulticast mode [ 1720.585707][T22626] tipc: Resetting bearer [ 1720.765876][T22605] tipc: Resetting bearer [ 1720.896726][T22632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1720.923115][T22605] tipc: Disabling bearer [ 1721.087022][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1721.212604][T19272] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1721.451488][T19272] usb 8-1: Using ep0 maxpacket: 32 [ 1721.458612][T19272] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.671638][T22649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1722.194886][T19272] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.248162][T19272] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1722.539630][T19272] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1722.624598][T19272] usb 8-1: Product: syz [ 1722.628877][T19272] usb 8-1: Manufacturer: syz [ 1722.660631][T19272] usb 8-1: SerialNumber: syz [ 1722.709547][T19272] usb 8-1: config 0 descriptor?? [ 1722.778150][T22653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1723.512578][T22653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1723.841571][T12429] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1723.841608][T12429] Bluetooth: hci3: adv larger than maximum supported [ 1723.848736][T12429] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1726.157140][ T3621] usb 8-1: USB disconnect, device number 18 [ 1727.073838][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1727.073859][ T30] audit: type=1326 audit(1755834277.809:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22672 comm="syz.9.3695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9674d8ebe9 code=0x0 [ 1733.001510][T18015] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1733.378220][T18015] usb 7-1: Using ep0 maxpacket: 32 [ 1733.485833][T18015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.588578][T18015] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1733.658496][T18015] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1733.668608][T18015] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1733.684358][T18015] usb 7-1: Product: syz [ 1733.735886][T18015] usb 7-1: Manufacturer: syz [ 1733.750812][T18015] usb 7-1: SerialNumber: syz [ 1733.791630][T18015] usb 7-1: config 0 descriptor?? [ 1734.463037][T12429] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1734.463091][T12429] Bluetooth: hci0: adv larger than maximum supported [ 1734.494021][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3710'. [ 1734.613761][T12429] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1736.708342][T19272] usb 7-1: USB disconnect, device number 28 [ 1739.036558][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1739.522269][T22796] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1743.275803][T12429] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1743.275833][T12429] Bluetooth: hci0: adv larger than maximum supported [ 1743.283326][T12429] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1743.310287][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3723'. [ 1747.230162][T22858] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 1751.235337][T22886] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1751.244538][T22886] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1751.253707][T22886] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1751.263180][T22886] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1756.801744][T19272] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1756.961725][T19272] usb 6-1: Using ep0 maxpacket: 32 [ 1756.981870][T19272] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1757.000998][T19272] usb 6-1: config 0 has no interface number 0 [ 1757.029164][T19272] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1757.093837][T19272] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1757.103188][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.111202][T19272] usb 6-1: Product: syz [ 1757.263152][T19272] usb 6-1: Manufacturer: syz [ 1757.267827][T19272] usb 6-1: SerialNumber: syz [ 1757.330999][T19272] usb 6-1: config 0 descriptor?? [ 1757.983620][T19272] smsc75xx v1.0.0 [ 1757.987299][T19272] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1758.110383][T19272] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1759.427028][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.054474][T22952] lo speed is unknown, defaulting to 1000 [ 1761.066623][T22952] lo speed is unknown, defaulting to 1000 [ 1762.383781][T22976] bond0: (slave bond_slave_0): Releasing backup interface [ 1762.427953][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1762.450964][T22976] bond0: (slave bond_slave_1): Releasing backup interface [ 1762.574076][T22981] Bluetooth: hci5: Frame reassembly failed (-84) [ 1762.628966][T22976] team0: Port device team_slave_0 removed [ 1762.754074][T22976] team0: Port device team_slave_1 removed [ 1762.774322][T22976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1762.803971][T22976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.864058][T22976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.925907][T22976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.938781][T19048] usb 6-1: USB disconnect, device number 38 [ 1764.457114][T12429] Bluetooth: hci5: command 0xfc11 tx timeout [ 1764.461440][T20379] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1767.194984][T23030] [ 1767.197381][T23030] ====================================================== [ 1767.204516][T23030] WARNING: possible circular locking dependency detected [ 1767.211654][T23030] 6.16.0-syzkaller #0 Not tainted [ 1767.216689][T23030] ------------------------------------------------------ [ 1767.223714][T23030] syz.6.3769/23030 is trying to acquire lock: [ 1767.230048][T23030] ffff888025930188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.241043][T23030] [ 1767.241043][T23030] but task is already holding lock: [ 1767.248410][T23030] ffff888025930230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1767.257328][T23030] [ 1767.257328][T23030] which lock already depends on the new lock. [ 1767.257328][T23030] [ 1767.267752][T23030] [ 1767.267752][T23030] the existing dependency chain (in reverse order) is: [ 1767.276782][T23030] [ 1767.276782][T23030] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1767.284653][T23030] lock_acquire+0x120/0x360 [ 1767.289702][T23030] __mutex_lock+0x182/0xe80 [ 1767.294740][T23030] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1767.300915][T23030] nbd_config_put+0x2c/0x790 [ 1767.306044][T23030] nbd_release+0xfe/0x140 [ 1767.310901][T23030] bdev_release+0x533/0x650 [ 1767.315931][T23030] blkdev_release+0x15/0x20 [ 1767.320962][T23030] __fput+0x449/0xa70 [ 1767.325473][T23030] fput_close_sync+0x119/0x200 [ 1767.330782][T23030] __x64_sys_close+0x7f/0x110 [ 1767.335989][T23030] do_syscall_64+0xfa/0x3b0 [ 1767.341020][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.347440][T23030] [ 1767.347440][T23030] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1767.355287][T23030] lock_acquire+0x120/0x360 [ 1767.360321][T23030] __mutex_lock+0x182/0xe80 [ 1767.365354][T23030] __del_gendisk+0x129/0x9e0 [ 1767.370665][T23030] del_gendisk+0xe8/0x160 [ 1767.375535][T23030] loop_remove+0x42/0xc0 [ 1767.380311][T23030] loop_control_ioctl+0x4ac/0x5a0 [ 1767.385868][T23030] __se_sys_ioctl+0xfc/0x170 [ 1767.391000][T23030] do_syscall_64+0xfa/0x3b0 [ 1767.396046][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.402477][T23030] [ 1767.402477][T23030] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1767.410951][T23030] validate_chain+0xb9b/0x2140 [ 1767.416243][T23030] __lock_acquire+0xab9/0xd20 [ 1767.421448][T23030] lock_acquire+0x120/0x360 [ 1767.426479][T23030] down_write+0x96/0x1f0 [ 1767.431249][T23030] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.437500][T23030] nbd_start_device+0x16c/0xac0 [ 1767.442906][T23030] nbd_ioctl+0x636/0xeb0 [ 1767.447684][T23030] blkdev_ioctl+0x5a8/0x6d0 [ 1767.452723][T23030] __se_sys_ioctl+0xfc/0x170 [ 1767.457853][T23030] do_syscall_64+0xfa/0x3b0 [ 1767.462890][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.469308][T23030] [ 1767.469308][T23030] other info that might help us debug this: [ 1767.469308][T23030] [ 1767.479534][T23030] Chain exists of: [ 1767.479534][T23030] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1767.479534][T23030] [ 1767.493718][T23030] Possible unsafe locking scenario: [ 1767.493718][T23030] [ 1767.501187][T23030] CPU0 CPU1 [ 1767.506556][T23030] ---- ---- [ 1767.511919][T23030] lock(&nbd->config_lock); [ 1767.516511][T23030] lock(&disk->open_mutex); [ 1767.523637][T23030] lock(&nbd->config_lock); [ 1767.530763][T23030] lock(&set->update_nr_hwq_lock); [ 1767.535983][T23030] [ 1767.535983][T23030] *** DEADLOCK *** [ 1767.535983][T23030] [ 1767.544143][T23030] 1 lock held by syz.6.3769/23030: [ 1767.549269][T23030] #0: ffff888025930230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1767.558612][T23030] [ 1767.558612][T23030] stack backtrace: [ 1767.564515][T23030] CPU: 0 UID: 0 PID: 23030 Comm: syz.6.3769 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1767.564535][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1767.564547][T23030] Call Trace: [ 1767.564557][T23030] [ 1767.564566][T23030] dump_stack_lvl+0x189/0x250 [ 1767.564591][T23030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1767.564610][T23030] ? __pfx__printk+0x10/0x10 [ 1767.564633][T23030] ? print_lock_name+0xde/0x100 [ 1767.564655][T23030] print_circular_bug+0x2ee/0x310 [ 1767.564679][T23030] check_noncircular+0x134/0x160 [ 1767.564703][T23030] validate_chain+0xb9b/0x2140 [ 1767.564722][T23030] ? trace_sched_exit_tp+0x38/0x120 [ 1767.564749][T23030] ? __schedule+0x16c8/0x4c90 [ 1767.564772][T23030] __lock_acquire+0xab9/0xd20 [ 1767.564790][T23030] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.564814][T23030] lock_acquire+0x120/0x360 [ 1767.564829][T23030] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.564854][T23030] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1767.564885][T23030] down_write+0x96/0x1f0 [ 1767.564905][T23030] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.564929][T23030] ? __pfx_down_write+0x10/0x10 [ 1767.564949][T23030] ? rcu_is_watching+0x15/0xb0 [ 1767.564968][T23030] ? __mutex_lock+0xa6d/0xe80 [ 1767.564994][T23030] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1767.565019][T23030] ? nbd_ioctl+0x131/0xeb0 [ 1767.565042][T23030] ? __pfx___mutex_lock+0x10/0x10 [ 1767.565063][T23030] nbd_start_device+0x16c/0xac0 [ 1767.565086][T23030] ? security_capable+0x7e/0x2e0 [ 1767.565110][T23030] nbd_ioctl+0x636/0xeb0 [ 1767.565134][T23030] ? __pfx_nbd_ioctl+0x10/0x10 [ 1767.565155][T23030] ? __asan_memset+0x22/0x50 [ 1767.565179][T23030] ? smack_file_ioctl+0x24a/0x340 [ 1767.565195][T23030] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1767.565212][T23030] ? __pfx_nbd_ioctl+0x10/0x10 [ 1767.565234][T23030] blkdev_ioctl+0x5a8/0x6d0 [ 1767.565255][T23030] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1767.565274][T23030] ? __fget_files+0x2a/0x420 [ 1767.565294][T23030] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1767.565314][T23030] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1767.565333][T23030] __se_sys_ioctl+0xfc/0x170 [ 1767.565359][T23030] do_syscall_64+0xfa/0x3b0 [ 1767.565378][T23030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1767.565395][T23030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.565413][T23030] ? clear_bhb_loop+0x60/0xb0 [ 1767.565432][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.565448][T23030] RIP: 0033:0x7f45db58ebe9 [ 1767.565465][T23030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1767.565480][T23030] RSP: 002b:00007f45dc419038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.565499][T23030] RAX: ffffffffffffffda RBX: 00007f45db7b6090 RCX: 00007f45db58ebe9 [ 1767.565512][T23030] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1767.565524][T23030] RBP: 00007f45db611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1767.565535][T23030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1767.565546][T23030] R13: 00007f45db7b6128 R14: 00007f45db7b6090 R15: 00007fff83543408 [ 1767.565565][T23030] [ 1767.565590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.876572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1767.934785][T23031] binder: 23029:23031 ioctl 4018620d 0 returned -22 [ 1767.943101][T23026] block nbd6: shutting down sockets [ 1767.975978][T23031] binder: 23029:23031 unknown command 0 [ 1768.054708][T23031] binder: 23029:23031 ioctl c0306201 200000000080 returned -22 [ 1768.302862][T19048] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1768.461568][T19048] usb 2-1: Using ep0 maxpacket: 32 [ 1768.473215][T19048] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1768.484554][T19048] usb 2-1: config 0 has no interface number 0 [ 1768.490654][T19048] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1768.508306][T19048] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1768.518830][T19048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.528186][T19048] usb 2-1: Product: syz [ 1768.552970][T19048] usb 2-1: Manufacturer: syz [ 1768.557615][T19048] usb 2-1: SerialNumber: syz [ 1768.589052][T19048] usb 2-1: config 0 descriptor?? [ 1768.618389][T19048] smsc75xx v1.0.0 [ 1768.629755][T19048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1768.662146][T19048] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1770.817672][T19048] usb 2-1: USB disconnect, device number 50