last executing test programs: 2m55.842225284s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x300002, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000540)) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e22000000000000000000000000000000000c0000000000000000000000000003000000", @ANYRES16, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0x20) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000100)=0xffffffffffff8000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) preadv(r4, &(0x7f00000005c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) 2m55.558835854s ago: executing program 1 (id=59): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$kcm(0xa, 0x922000000003, 0x11) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x440502, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) 2m54.577256588s ago: executing program 1 (id=63): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000005216a493adec5da02ebb1ceb9e3d53956a3f27222eff560aab542eab74052b18b3a5b9bbedfab5266", @ANYRES32=r1, @ANYBLOB="000000ff746486bb66693e2b9b64728cffffeb00b7080000000000005b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000050000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="01000000030000000000000000000000e0ffffff0000000000000000"], 0x48) r7 = socket(0x21, 0x80000, 0xc) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r9, 0x10e, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffd55) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCGNAME(r10, 0x80404506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_off}, {@volatile}]}) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r11, 0x330f, 0x4) r12 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r12, &(0x7f0000000000), 0xd4ba103) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2m53.923261153s ago: executing program 1 (id=66): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x77f, 0x10, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x101, 0x0, 0xfffffffd, 0xe1, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 2m51.050411195s ago: executing program 2 (id=73): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf0f2}], 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000008002907800000000e000030003079078e3000c1c00000065000e4e24000c00000000ac141444"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) 2m50.886829844s ago: executing program 2 (id=74): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x89cbab182e6cd593, 0x40, 0xf, 0x1, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x65, 0x0, 0x10, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8) write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 2m50.738599047s ago: executing program 2 (id=75): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xf2, 0x7, 0x6f}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) set_mempolicy_home_node(&(0x7f00006f8000/0x4000)=nil, 0x4000, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x18, &(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES64=r7, @ANYRES8=r6, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r9, 0x4802, 0x6) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x100, 0x0, r0}) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000340)={&(0x7f0000000380)={0x1d, r12}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "2e235857a534099b"}, 0x10}, 0x2, 0x0, 0x0, 0x20008804}, 0x1004c818) socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGRAWNAME(r10, 0x80404804, &(0x7f0000000140)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fe0f0000010000000c0002000200000000000000280007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c0000c75a000100", @ANYRES32=r1, @ANYBLOB="0c0005002801000000000000"], 0x54}}, 0x20000000) 2m50.568632822s ago: executing program 0 (id=77): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x96) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0), 0x10}, 0x94) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000021c0)={'veth1_to_bridge\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000009, 0x13, r4, 0x6b6c0000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77b50de0}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x2, 0x5004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) r12 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) fsmount(r12, 0x0, 0x2c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m50.549381328s ago: executing program 1 (id=78): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 2m50.44155722s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14c", 0x1d, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000380)={0x3, r0, 'id0\x00'}) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m50.42462028s ago: executing program 3 (id=80): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x4}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000700)='\x00'/28, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2m49.570560192s ago: executing program 3 (id=81): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mprotect(&(0x7f000026f000/0x3000)=nil, 0x3000, 0x200000c) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)="f34764e8048c5781000000000000027485d563813f9fcdbe00207017e08804000000000000", 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x3c, r7, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcf2) r11 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) 2m49.545087421s ago: executing program 0 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, r2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000380)={0x0, 0xed000000000000, 0x0, [0x9, 0xfffffffffffff4ab, 0x1, 0x8, 0x400], [0x3, 0x7, 0x3, 0x4f90, 0x0, 0x831, 0x5, 0x7, 0x1, 0x726, 0x2, 0x0, 0x5, 0xffffffff, 0x0, 0x691, 0x1, 0x0, 0xf2, 0x4, 0x9, 0xfffffffffffffff9, 0xa0, 0xd359, 0x4, 0x3, 0x8b, 0x5, 0x4, 0x3ff, 0x3, 0x6, 0x5a98, 0x7, 0xfffffffffffffffb, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0xe2, 0x9, 0x3, 0x8, 0xffffffffffffffff, 0x6, 0x7fff, 0x1, 0x1, 0x0, 0x3, 0x7fffffff, 0x8, 0xfffffffffffffffb, 0x8, 0x926b, 0x3, 0x9, 0x5, 0x3, 0x2f5dfe54, 0xe3, 0x6, 0x1, 0x7, 0x4, 0xed, 0x8001, 0xc9, 0x2f, 0xf4b, 0x0, 0x4, 0x8, 0x81, 0x5e4, 0x7, 0x80, 0x3, 0x84, 0x5, 0x7, 0x1, 0x7fffffff, 0x1, 0x8, 0xcee5, 0x1, 0x0, 0x7a74, 0x81, 0x4, 0x6, 0x3f, 0x83c2, 0x8, 0xd, 0x6, 0x6, 0x1, 0x0, 0x613c, 0x35, 0x41, 0x10, 0x3, 0x1, 0xd, 0x0, 0x2, 0x4, 0x9, 0xab, 0x5, 0x4, 0xe5b, 0x2, 0x0, 0x80000000, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000007c0)={0x4, 0x3, {0x8, @struct={0xffffff80, 0xfff}, 0x0, 0xfffffffffffffff8, 0x101, 0x2, 0x45, 0x1ff, 0x1d, @usage=0x8, 0xf0e5, 0x3ff, [0x401, 0x8, 0x9, 0x200, 0xce, 0x2]}, {0x100000000, @struct={0x3, 0x7}, 0x0, 0x80, 0x2, 0x6, 0xc, 0x0, 0x440, @usage=0x2, 0x101, 0x0, [0x1, 0x9e, 0x7, 0x7, 0x3, 0xffffffff00000001]}, {0x5636, @usage=0x1, 0x0, 0x8, 0x400, 0x800, 0x7, 0xffffffffffffffff, 0x2, @struct={0x7, 0x7}, 0x3, 0xfffffff7, [0x3ff, 0xd, 0x0, 0x100000001, 0x401, 0x8]}, {0x0, 0x3, 0x3}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000bc0)={0x15, 0x4, {0x2, @struct={0x8, 0x5}, 0x0, 0x40, 0x6, 0x2, 0x54971c9, 0x99, 0x48, @usage=0x8001, 0x5, 0xa, [0x8e, 0x100000000, 0x7, 0x5, 0xffffffffffff0000, 0x8bf4]}, {0x3, @usage=0x7ff, 0x0, 0x189e, 0x8, 0x81, 0x7, 0x8000000000000000, 0xa3, @struct={0x54, 0x101}, 0x0, 0x6a, [0x5, 0x3c0, 0x3, 0xffffffffffffffff, 0x1, 0x8]}, {0x3, @struct={0x3, 0x6}, 0x0, 0xffff, 0xc, 0x6, 0x9, 0x6aef, 0x4, @struct={0x0, 0x7}, 0x8377, 0x4, [0x1000, 0x8, 0xfffffffffffffff7, 0x2, 0x80000001, 0xfffffffffffffffd]}, {0xeaf3, 0x5, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000fc0)={0x1, 0x1, {0x6, @struct={0x1ff, 0x42}, r4, 0x65b, 0xb8, 0x0, 0x100, 0x8, 0x0, @usage=0x7, 0x800, 0xb, [0x3, 0xb2, 0x3ff, 0x2, 0x9847, 0x8001]}, {0x8, @usage=0x535, r5, 0x2, 0x0, 0x7, 0x1, 0x0, 0x79, @struct={0x7ff, 0x5}, 0x0, 0x4, [0x2489, 0xfffffffffffffff3, 0x7, 0x6db, 0xffffffffffffffff]}, {0x6, @struct={0x16, 0x6}, r6, 0x3ff, 0x4, 0x4, 0x9, 0x7, 0x8, @struct={0x5, 0x40}, 0x8, 0x7, [0x5, 0x200, 0x9, 0x1, 0x21, 0xf]}, {0x5, 0x9, 0x4}}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, 0x0}, 0x50) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) 2m49.392011148s ago: executing program 3 (id=83): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x2, 0x80000, 0xffffffffffffffff}) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x311, 0x3, 0x7, 0x81, 0xa8, @multicast}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001100), r3) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r4, @ANYBLOB="010004000000fddbdf251300000008000100", @ANYRES32, @ANYBLOB="040013"], 0x1e4}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000400000008000b0005000000080097004e214e22080001"], 0x5c}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x443c3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x800}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x401, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0xfff5, 0x500}, @generic={0x0, 0x12, "007533aae500ddc27a178e7e78ae496f"}]}}}}}}, 0x4c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 2m49.238374925s ago: executing program 3 (id=84): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2}) 2m49.048296021s ago: executing program 0 (id=85): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2}) 2m48.923895847s ago: executing program 2 (id=86): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2}) 2m48.356589421s ago: executing program 3 (id=87): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x8, 0xb, 0x7fff0000}]}) r0 = open(&(0x7f0000000240)='./trace/set_event\x00', 0x40200, 0xb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) sched_rr_get_interval(r1, &(0x7f0000000100)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x12) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000000)={0x140, 0x4, 0x8, 0xff7d, 0x5, "236b30542f2625a0"}) mkdirat(r0, &(0x7f00000000c0)='./trace/set_event\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace/set_event/file0\x00', &(0x7f0000000280)='autofs\x00', 0x301420, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_rx_ntuple={0x35, {0x12, @ether_spec={@multicast, @random="dd116c667573", 0x7}, @ether_spec={@empty, @multicast, 0x8}, 0x1, 0x52, 0x1, 0x5, 0xfffffffffffffffe}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) getrusage(0x1, &(0x7f0000000440)) 2m48.1508174s ago: executing program 0 (id=88): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000a80)=0x58, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x5}, 0x3}) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000380)) syz_io_uring_setup(0x56b9, &(0x7f0000000ac0)={0x0, 0x6bef, 0x105, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = memfd_secret(0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') 2m48.007658627s ago: executing program 2 (id=89): r0 = syz_open_dev$video(&(0x7f0000000280), 0xa, 0xc0302) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x43, 0x6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffffffffffff000000636476d2af2a8c2c9c4296b371d05b43e29ca9fabc9cbeb8bee2821fa42efd39b6c67659f34be5995846c94a444418a4beb994c324b49afb7d98b05c699642402e6a6844f995ddd35207b5e6f4dbaa1df9cffedcc364b7e73535678a7e905112444867f0656d1ab5652d1a5c5d27bc96062a891d2e13027ffa7c11a620afb69a3cc785d7cab4fef363015c88b7beb4b1d520554a7db77dfc4520d2fb749d00076bce424bf683b12dbb671f6313f99fc9f87054ac6c5a3c7eb2ec6c30eea70ce3cad034bdbfa4"], 0x50) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x8, 0x3, 0x0, {0x7, 0x2, 0x3, 0x9}}) write$cgroup_pid(r1, &(0x7f0000000340)=0xffffffffffffffff, 0x12) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x5034c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r3, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x0, 0x5004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5) 2m47.76696264s ago: executing program 2 (id=90): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 2m47.272555109s ago: executing program 0 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x6, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r5, 0x8905, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x3, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 2m47.082203941s ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x1, 0x10, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5b59, 0x892a}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_MTU={0x8, 0x4, 0x61}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='s2id', 0x4) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='mem', 0x3) 2m46.94081584s ago: executing program 1 (id=93): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x227, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) syz_clone3(&(0x7f00000005c0)={0x1a000200, &(0x7f0000000180), 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 2m26.000712302s ago: executing program 32 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x6, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r5, 0x8905, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x3, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 2m25.981810153s ago: executing program 33 (id=93): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x227, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) syz_clone3(&(0x7f00000005c0)={0x1a000200, &(0x7f0000000180), 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 2m25.944033092s ago: executing program 34 (id=90): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 2m25.921445812s ago: executing program 35 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x1, 0x10, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5b59, 0x892a}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_MTU={0x8, 0x4, 0x61}]}, 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='s2id', 0x4) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='mem', 0x3) 9.655787602s ago: executing program 6 (id=579): r0 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20042000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000dad9c7292776dddcbdc3d3509f96ec948153d2c188fdece9d3941a42247cbcdfad4477af6c896695e55c284ba7d6da91f9c8b3c29fdca923104a339508b6ab577898191df35a5c885c17d58f377a5304bf64c8bbf9c09f69b66ef45ee729a8"], 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.1060246s ago: executing program 7 (id=583): r0 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20042000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000dad9c7292776dddcbdc3d3509f96ec948153d2c188fdece9d3941a42247cbcdfad4477af6c896695e55c284ba7d6da91f9c8b3c29fdca923104a339508b6ab577898191df35a5c885c17d58f377a5304bf64c8bbf9c09f69b66ef45ee729a8"], 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7.854092499s ago: executing program 6 (id=584): ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000ff0921000000", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000580)="37ef", 0x2) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000140)=[0x9, 0x7]) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x80400) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, 0x0) 7.547570736s ago: executing program 5 (id=586): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x8, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x1, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000100001042abd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000340012800c0001006d6163766c616e00240002801000058003000400aaaaaaaaaaaa00000800030003000000080001001000000008000500", @ANYRES32=r6, @ANYBLOB="c56fce7017c0e0bcd72d50d944bd0530aa8563f2b01c937c1e89162f2e7bef57d9dee2a0f5649dc6a5dfda011c3229e9d4b7cbc8cadfffe6f159c665f15c5b4d11dbeed726a9ec8092661d26e09e116b44bc42e37aca62e55c54d2e1e157ab65b2465d05607d19f8df24e491551526f8dab64d630fc03c32352b8fd355cbd17b736affdcf48d510d"], 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 6.687884153s ago: executing program 7 (id=587): r0 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20042000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000dad9c7292776dddcbdc3d3509f96ec948153d2c188fdece9d3941a42247cbcdfad4477af6c896695e55c284ba7d6da91f9c8b3c29fdca923104a339508b6ab577898191df35a5c885c17d58f377a5304bf64c8bbf9c09f69b66ef45ee729a8"], 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 6.627473911s ago: executing program 4 (id=588): r0 = syz_open_dev$video(&(0x7f0000000280), 0xa, 0xc0302) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x43, 0x6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffffffffffff000000636476d2af2a8c2c9c4296b371d05b43e29ca9fabc9cbeb8bee2821fa42efd39b6c67659f34be5995846c94a444418a4beb994c324b49afb7d98b05c699642402e6a6844f995ddd35207b5e6f4dbaa1df9cffedcc364b7e73535678a7e905112444867f0656d1ab5652d1a5c5d27bc96062a891d2e13027ffa7c11a620afb69a3cc785d7cab4fef363015c88b7beb4b1d520554a7db77dfc4520d2fb749d00076bce424bf683b12dbb671f6313f99fc9f87054ac6c5a3c7eb2ec6c30eea70ce3cad034bdbfa4"], 0x50) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x8, 0x3, 0x0, {0x7, 0x2, 0x3, 0x9}}) write$cgroup_pid(r1, &(0x7f0000000340)=0xffffffffffffffff, 0x12) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x5034c0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) 6.567238129s ago: executing program 4 (id=589): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x8, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x1, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = dup(0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000100001042abd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000340012800c0001006d6163766c616e00240002801000058003000400aaaaaaaaaaaa00000800030003000000080001001000000008000500", @ANYRES32=r6, @ANYBLOB="c56fce7017c0e0bcd72d50d944bd0530aa8563f2b01c937c1e89162f2e7bef57d9dee2a0f5649dc6a5dfda011c3229e9d4b7cbc8cadfffe6f159c665f15c5b4d11dbeed726a9ec8092661d26e09e116b44bc42e37aca62e55c54d2e1e157ab65b2465d05607d19f8df24e491551526f8dab64d630fc03c32352b8fd355cbd17b736affdcf48d510d"], 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 5.557608931s ago: executing program 5 (id=590): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 5.462014215s ago: executing program 7 (id=591): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000032c0)=@newtaction={0xfc0, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0xfa8, 0x1, [@m_skbmod={0xfa4, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0xf75, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xfc0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40000033, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001340)={{r2}, r7, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c44"]}, @name="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"}) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2) socket$nl_generic(0x10, 0x3, 0x10) 5.459491225s ago: executing program 6 (id=600): ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000ff0921000000", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000580)="37ef", 0x2) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000140)=[0x9, 0x7]) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x80400) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, 0x0) 4.887787854s ago: executing program 4 (id=593): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x8, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x1, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 4.88737198s ago: executing program 7 (id=594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x8, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x1, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 3.370536624s ago: executing program 4 (id=595): modify_ldt$write2(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff0000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 3.351190626s ago: executing program 7 (id=596): r0 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20042000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000dad9c7292776dddcbdc3d3509f96ec948153d2c188fdece9d3941a42247cbcdfad4477af6c896695e55c284ba7d6da91f9c8b3c29fdca923104a339508b6ab577898191df35a5c885c17d58f377a5304bf64c8bbf9c09f69b66ef45ee729a8"], 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.127537806s ago: executing program 6 (id=597): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 2.487675084s ago: executing program 5 (id=598): syz_open_dev$video(&(0x7f0000000280), 0xa, 0xc0302) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e7ffffffffffffff000000636476d2af2a8c2c9c4296b371d05b43e29ca9fabc9cbeb8bee2821fa42efd39b6c67659f34be5995846c94a444418a4beb994c324b49afb7d98b05c699642402e6a6844f995ddd35207b5e6f4dbaa1df9cffedcc364b7e73535678a7e905112444867f0656d1ab5652d1a5c5d27bc96062a891d2e13027ffa7c11a620afb69a3cc785d7cab4fef363015c88b7beb4b1d520554a7db77dfc4520d2fb749d00076bce424bf683b12dbb671f6313f99fc9f87054ac6c5a3c7eb2ec6c30eea70ce3cad034bdbfa4"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000340)=0xffffffffffffffff, 0x12) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x5034c0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) 2.417367008s ago: executing program 5 (id=599): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0xf26c, 0x2) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r1, &(0x7f00000021c0)={&(0x7f0000000300)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000002180)}, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80083, 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) close(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) readv(r5, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)=0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = creat(0x0, 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x8, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x1, 0x3, 0x1, 0xcb70, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) r5 = socket$nl_route(0x10, 0x3, 0x0) dup(r5) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000796000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x1e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1.407849524s ago: executing program 6 (id=602): r0 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20042000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000dad9c7292776dddcbdc3d3509f96ec948153d2c188fdece9d3941a42247cbcdfad4477af6c896695e55c284ba7d6da91f9c8b3c29fdca923104a339508b6ab577898191df35a5c885c17d58f377a5304bf64c8bbf9c09f69b66ef45ee729a8"], 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 164.314438ms ago: executing program 4 (id=603): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000004564439a02443175ba2ffeebd6068765e9c9607d05fbfbdaf1b409dbcc5265235f0b0f293c64972a1abd6217a6c0abdf4f710dc0969b758a8c8653f2690191773ae9cbb22d90a91869690e952b49cace7e3e4e6499cc2a32e6de2a0d43e453ff4b0cbafb4f80a48d6b066a09ef73db097fd6d621f90a449dcd1c2318a9aeaa706e86444e0cbc2abe82818cc5abdf631a37aba402bcec0cb553ae4ef9110958eacaaa9097e248b8a5291a5a42db81db1013a266"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000340)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 126.198742ms ago: executing program 7 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 79.159525ms ago: executing program 6 (id=605): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0xf26c, 0x2) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r1, &(0x7f00000021c0)={&(0x7f0000000300)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000002180)}, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80083, 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) readv(r5, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)=0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0xa802180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x1f, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 0s ago: executing program 4 (id=607): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): ptor, ignoring hub [ 152.365644][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 152.496641][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.499765][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.955176][ T104] raw-gadget.1 gadget.5: failed to queue suspend event [ 153.024063][ T7295] raw-gadget.1 gadget.5: failed to queue resume event [ 153.054864][ T1157] raw-gadget.1 gadget.5: failed to queue suspend event [ 153.077577][ T851] usb 12-1: USB disconnect, device number 10 [ 153.077607][ C0] symbol ttyUSB0: symbol_int_callback - failed resubmitting read urb, error -19 [ 153.091268][ T851] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 153.095432][ T851] symbolserial 12-1:1.0: device disconnected [ 153.127663][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.134167][ T7291] raw-gadget.1 gadget.5: failed to queue resume event [ 153.135794][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.163227][ T7296] raw-gadget.1 gadget.5: failed to queue suspend event [ 153.166833][ T7296] raw-gadget.1 gadget.5: failed to queue disconnect event [ 153.814515][ T6440] usb 10-1: USB disconnect, device number 13 [ 153.904587][ T851] usb 9-1: USB disconnect, device number 8 [ 153.954142][ T6440] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 154.106071][ T6440] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.110955][ T6440] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 154.126166][ T6440] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.128777][ T6440] usb 10-1: Product: syz [ 154.130018][ T6440] usb 10-1: Manufacturer: syz [ 154.131387][ T6440] usb 10-1: SerialNumber: syz [ 154.136641][ T6440] usb 10-1: config 0 descriptor?? [ 154.138692][ T7296] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 154.141772][ T6440] hub 10-1:0.0: bad descriptor, ignoring hub [ 154.143645][ T6440] hub 10-1:0.0: probe with driver hub failed with error -5 [ 154.244195][ T851] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 154.317886][ T6440] usb 11-1: USB disconnect, device number 9 [ 154.324633][ T6440] symbol ttyUSB1: symbol converter now disconnected from ttyUSB1 [ 154.329803][ T6440] symbolserial 11-1:1.0: device disconnected [ 154.404694][ T851] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.410194][ T851] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.419788][ T851] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.423073][ T851] usb 9-1: Product: syz [ 154.424932][ T851] usb 9-1: Manufacturer: syz [ 154.426755][ T851] usb 9-1: SerialNumber: syz [ 154.432306][ T851] usb 9-1: config 0 descriptor?? [ 154.436309][ T851] hub 9-1:0.0: bad descriptor, ignoring hub [ 154.438806][ T851] hub 9-1:0.0: probe with driver hub failed with error -5 [ 154.454341][ T24] usb 10-1: USB disconnect, device number 14 [ 154.657302][ T7314] netlink: 128 bytes leftover after parsing attributes in process `syz.7.281'. [ 154.660138][ T7314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.744410][ T851] usb 9-1: USB disconnect, device number 9 [ 154.783974][ T6440] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 154.935015][ T6440] usb 11-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 154.938745][ T6440] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 154.943705][ T6440] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10008, setting to 1024 [ 154.950395][ T6440] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.955173][ T6440] usb 11-1: Product: syz [ 154.958867][ T6440] usb 11-1: Manufacturer: syz [ 154.960792][ T6440] usb 11-1: SerialNumber: syz [ 154.964567][ T7312] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 154.969075][ T6440] symbolserial 11-1:1.0: symbol converter detected [ 154.977209][ T6440] usb 11-1: symbol converter now attached to ttyUSB0 [ 155.424166][ T6440] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 155.578013][ T6440] usb 9-1: Using ep0 maxpacket: 32 [ 155.583497][ T6440] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.591826][ T6440] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.600316][ T6440] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.613383][ T6440] usb 9-1: Product: syz [ 155.615254][ T6440] usb 9-1: Manufacturer: syz [ 155.618162][ T6440] usb 9-1: SerialNumber: syz [ 155.624322][ T6440] usb 9-1: config 0 descriptor?? [ 155.630246][ T7320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.637438][ T6440] hub 9-1:0.0: bad descriptor, ignoring hub [ 155.641952][ T6440] hub 9-1:0.0: probe with driver hub failed with error -5 [ 156.244854][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.248687][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.487134][ T6440] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 156.636343][ T851] usb 11-1: USB disconnect, device number 10 [ 156.642859][ T851] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 156.645721][ T851] symbolserial 11-1:1.0: device disconnected [ 156.654422][ T6440] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 156.658254][ T6440] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.661801][ T6440] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.673015][ T6440] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.675790][ T6440] usb 10-1: Product: syz [ 156.677120][ T6440] usb 10-1: Manufacturer: syz [ 156.678627][ T6440] usb 10-1: SerialNumber: syz [ 156.684515][ T6440] symbolserial 10-1:1.0: symbol converter detected [ 156.688078][ T6440] usb 10-1: symbol converter now attached to ttyUSB0 [ 156.826435][ T7333] netlink: 128 bytes leftover after parsing attributes in process `syz.7.287'. [ 156.829187][ T7333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.886318][ T7326] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 157.017603][ T1157] raw-gadget.0 gadget.4: failed to queue suspend event [ 157.094153][ T7327] raw-gadget.0 gadget.4: failed to queue resume event [ 157.114893][ T1157] raw-gadget.0 gadget.4: failed to queue suspend event [ 157.184127][ T7320] raw-gadget.0 gadget.4: failed to queue resume event [ 157.217290][ T1157] raw-gadget.0 gadget.4: failed to queue suspend event [ 157.293995][ T7320] raw-gadget.0 gadget.4: failed to queue resume event [ 157.328266][ T1157] raw-gadget.0 gadget.4: failed to queue suspend event [ 157.395038][ T7320] raw-gadget.0 gadget.4: failed to queue resume event [ 157.416022][ T7328] raw-gadget.0 gadget.4: failed to queue suspend event [ 157.418545][ T6440] usb 9-1: USB disconnect, device number 10 [ 157.421064][ T7328] raw-gadget.0 gadget.4: failed to queue disconnect event [ 158.166213][ T24] usb 10-1: USB disconnect, device number 15 [ 158.170097][ T7345] rdma_rxe: rxe_newlink: failed to add lo [ 158.174688][ T24] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 158.179038][ T24] symbolserial 10-1:1.0: device disconnected [ 158.270722][ T7348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.291'. [ 158.273606][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.965630][ T7366] select_fallback_rq: 38 callbacks suppressed [ 159.965643][ T7366] process 7363 (syz.6.295) no longer affine to cpu1 [ 160.282850][ T7367] smpboot: CPU 1 is now offline [ 160.325813][ T7370] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 160.413747][ T7376] netlink: 128 bytes leftover after parsing attributes in process `syz.4.299'. [ 160.416681][ T7376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.482716][ T29] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 161.715834][ T29] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 161.720095][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.723597][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.730245][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.732880][ T29] usb 10-1: Product: syz [ 161.734437][ T29] usb 10-1: Manufacturer: syz [ 161.736015][ T29] usb 10-1: SerialNumber: syz [ 161.751313][ T29] symbolserial 10-1:1.0: symbol converter detected [ 161.764146][ T851] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 161.798410][ T29] usb 10-1: symbol converter now attached to ttyUSB0 [ 161.924087][ T851] usb 9-1: Using ep0 maxpacket: 8 [ 161.927452][ T851] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.932376][ T851] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.935716][ T851] usb 9-1: config 0 has no interface number 0 [ 161.938347][ T851] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.942792][ T851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.948087][ T851] usb 9-1: config 0 descriptor?? [ 161.949363][ T7384] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 161.957349][ T851] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 162.259847][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.264090][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.324003][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.326792][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.107644][ T24] usb 10-1: USB disconnect, device number 16 [ 163.113115][ T24] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 163.115953][ T24] symbolserial 10-1:1.0: device disconnected [ 163.169466][ C1] process 7400 (syz.6.306) no longer affine to cpu1 [ 163.179718][ T7410] smpboot: CPU 1 is now offline [ 163.189859][ T7410] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 163.238342][ T851] usb 9-1: USB disconnect, device number 11 [ 164.624141][ T6440] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 164.771358][ T7437] PM: suspend entry (deep) [ 164.784292][ T6440] usb 11-1: Using ep0 maxpacket: 32 [ 164.789133][ T6440] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 164.801775][ T6440] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 164.807990][ T6440] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 164.812920][ T6440] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 164.816721][ T6440] usb 11-1: Product: syz [ 164.818252][ T6440] usb 11-1: Manufacturer: syz [ 164.819913][ T6440] usb 11-1: SerialNumber: syz [ 164.821168][ T13] Filesystems sync: 0.047 seconds [ 164.823888][ T6440] usb 11-1: config 0 descriptor?? [ 164.851735][ T6440] hub 11-1:0.0: bad descriptor, ignoring hub [ 164.855387][ T6440] hub 11-1:0.0: probe with driver hub failed with error -5 [ 165.024048][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 165.173991][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 165.176988][ T29] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.182269][ T29] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.186086][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.190155][ T29] usb 9-1: config 0 has no interface number 0 [ 165.192721][ T29] usb 9-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.198433][ T29] usb 9-1: config 0 interface 1 has no altsetting 0 [ 165.201041][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.213537][ T29] usb 9-1: config 0 descriptor?? [ 165.218953][ T29] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 165.385922][ T7442] PM: suspend entry (deep) [ 165.387827][ T7442] PM: suspend exit [ 165.430392][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.434262][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.437545][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.445907][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.445914][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.453561][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.476689][ T7446] nvme nvme0: rdma connection establishment failed (-104) [ 165.540681][ T7449] netlink: 128 bytes leftover after parsing attributes in process `syz.7.323'. [ 165.544661][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.601088][ T7437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.604059][ T7437] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 165.606770][ T7437] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 165.609858][ T7437] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 165.629059][ T7437] Freezing user space processes [ 165.635224][ T7437] Freezing user space processes completed (elapsed 0.004 seconds) [ 165.638101][ T7437] OOM killer disabled. [ 165.639744][ T7437] Freezing remaining freezable tasks [ 165.645058][ T7437] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 165.649547][ T7437] printk: Suspending console(s) (use no_console_suspend to debug) [ 165.785364][ T7437] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 165.785463][ T7437] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 165.785533][ T7437] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 165.785594][ T7437] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 165.785653][ T7437] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 165.785716][ T7437] vhci_hcd vhci_hcd.7: We have 1 active connection. Do not suspend. [ 165.785736][ T7437] vhci_hcd vhci_hcd.7: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 165.785852][ T7437] vhci_hcd vhci_hcd.7: PM: failed to suspend: error -16 [ 165.789961][ T7437] PM: Some devices failed to suspend, or early wake event detected [ 165.940189][ T7437] OOM killer enabled. [ 165.941466][ T7437] Restarting tasks: Starting [ 165.949228][ T7437] Restarting tasks: Done [ 165.950498][ T34] usb 9-1: USB disconnect, device number 12 [ 165.950655][ T7437] random: crng reseeded on system resumption [ 165.957558][ T7437] hwrng_fill thread creation failed [ 165.961497][ T7437] PM: suspend exit [ 166.454294][ T6440] usb 11-1: USB disconnect, device number 11 [ 166.514538][ T851] usb usb44-port1: attempt power cycle [ 166.544964][ T24] usb usb52-port1: attempt power cycle [ 166.547479][ T1034] usb usb50-port1: attempt power cycle [ 166.630258][ T1476] usb usb46-port1: attempt power cycle [ 166.630472][ T29] usb usb38-port1: attempt power cycle [ 166.824079][ T5908] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 166.915448][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 166.949114][ T7557] rdma_rxe: rxe_newlink: failed to add lo [ 166.973387][ T7484] IPVS: starting estimator thread 0... [ 166.995077][ T5908] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.000278][ T5908] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 167.024648][ T5908] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.029570][ T5908] usb 11-1: Product: syz [ 167.031415][ T5908] usb 11-1: Manufacturer: syz [ 167.034938][ T5908] usb 11-1: SerialNumber: syz [ 167.047824][ T7562] gre0: entered promiscuous mode [ 167.052128][ T5908] usb 11-1: config 0 descriptor?? [ 167.060688][ T5908] hub 11-1:0.0: bad descriptor, ignoring hub [ 167.064024][ T7559] IPVS: using max 44 ests per chain, 105600 per kthread [ 167.064227][ T5908] hub 11-1:0.0: probe with driver hub failed with error -5 [ 167.068674][ T7562] PM: suspend entry (deep) [ 167.077416][ T851] usb usb44-port1: unable to enumerate USB device [ 167.124600][ T1034] usb usb50-port1: unable to enumerate USB device [ 167.127031][ T24] usb usb52-port1: unable to enumerate USB device [ 167.214797][ T1476] usb usb46-port1: unable to enumerate USB device [ 167.225607][ T13] Filesystems sync: 0.155 seconds [ 167.267665][ T29] usb usb38-port1: unable to enumerate USB device [ 167.535226][ T24] usb 11-1: USB disconnect, device number 12 [ 167.634170][ T5741] Bluetooth: hci7: command 0x0419 tx timeout [ 167.634180][ T5732] Bluetooth: hci5: command 0x0419 tx timeout [ 167.644123][ T5741] Bluetooth: hci6: command 0x0419 tx timeout [ 167.715204][ T7572] netlink: 128 bytes leftover after parsing attributes in process `syz.4.332'. [ 167.718057][ T7572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.875450][ T7562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.878116][ T7562] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 167.880654][ T7562] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 167.883390][ T7562] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 167.886985][ T7562] Freezing user space processes [ 167.894263][ T7562] Freezing user space processes failed after 0.005 seconds (1 tasks refusing to freeze, wq_busy=0): [ 167.898956][ T7562] task:syz.4.334 state:D stack:27304 pid:7577 tgid:7576 ppid:6319 task_flags:0x400140 flags:0x08080002 [ 167.903049][ T7562] Call Trace: [ 167.904672][ T7562] [ 167.905909][ T7562] ? __schedule+0x126b/0x6920 [ 167.907827][ T7562] ? __pfx___schedule+0x10/0x10 [ 167.909876][ T7562] ? find_held_lock+0x2b/0x80 [ 167.911778][ T7562] ? schedule+0x225/0x2c0 [ 167.913635][ T7562] ? __lock_acquire+0x4c5/0x1ec0 [ 167.915784][ T7562] ? schedule+0xdd/0x2c0 [ 167.917591][ T7562] ? schedule_timeout+0x1b2/0x280 [ 167.919687][ T7562] ? __pfx_schedule_timeout+0x10/0x10 [ 167.921404][ T7562] ? __wait_for_common+0x2da/0x4c0 [ 167.923032][ T7562] ? rcu_is_watching+0x13/0xc0 [ 167.924594][ T7562] ? __wait_for_common+0x2e7/0x4c0 [ 167.926189][ T7562] ? __pfx_schedule_timeout+0x10/0x10 [ 167.927850][ T7562] ? __pfx___smp_call_single_queue+0x10/0x10 [ 167.930048][ T7562] ? __pfx___wait_for_common+0x10/0x10 [ 167.932331][ T7562] ? generic_exec_single+0xbb/0x400 [ 167.934660][ T7562] ? rdmsrq_safe_on_cpu+0x195/0x1b0 [ 167.936836][ T7562] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 167.939157][ T7562] ? _copy_to_user+0xaf/0xd0 [ 167.940787][ T7562] ? msr_read+0x18e/0x240 [ 167.942212][ T7562] ? __pfx_msr_read+0x10/0x10 [ 167.944004][ T7562] ? bpf_lsm_file_permission+0x9/0x10 [ 167.945960][ T7562] ? security_file_permission+0x76/0x210 [ 167.948009][ T7562] ? rw_verify_area+0xce/0x6d0 [ 167.949839][ T7562] ? __pfx_msr_read+0x10/0x10 [ 167.951824][ T7562] ? vfs_read+0x1e4/0xb40 [ 167.953582][ T7562] ? __pfx_vfs_read+0x10/0x10 [ 167.955728][ T7562] ? find_held_lock+0x2b/0x80 [ 167.957579][ T7562] ? __fget_files+0x215/0x3d0 [ 167.959426][ T7562] ? __fget_files+0x215/0x3d0 [ 167.961310][ T7562] ? __fget_files+0x21f/0x3d0 [ 167.963254][ T7562] ? ksys_read+0x12a/0x250 [ 167.965405][ T7562] ? __pfx_ksys_read+0x10/0x10 [ 167.967469][ T7562] ? __do_fast_syscall_32+0x13a/0x8b0 [ 167.969728][ T7562] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.971915][ T7562] ? do_fast_syscall_32+0x32/0x70 [ 167.973590][ T7562] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.975716][ T7562] [ 167.977284][ T7562] OOM killer enabled. [ 167.978565][ T7562] Restarting tasks: Starting [ 167.981324][ T7562] Restarting tasks: Done [ 167.982766][ T7562] random: crng reseeded on system resumption [ 167.985983][ T7562] hwrng_fill thread creation failed [ 167.987772][ T7562] PM: suspend exit [ 168.384006][ T851] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 168.468664][ T7585] nvme nvme0: rdma connection establishment failed (-104) [ 168.534025][ T851] usb 12-1: Using ep0 maxpacket: 8 [ 168.536271][ T851] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.540316][ T851] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.543065][ T851] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.547062][ T851] usb 12-1: config 0 has no interface number 0 [ 168.549026][ T851] usb 12-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.553192][ T851] usb 12-1: config 0 interface 1 has no altsetting 0 [ 168.555670][ T851] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.563039][ T851] usb 12-1: config 0 descriptor?? [ 168.573392][ T851] iowarrior 12-1:0.1: no interrupt-in endpoint found [ 168.775700][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.778602][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.785890][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.789555][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.850848][ T7591] rdma_rxe: rxe_newlink: failed to add lo [ 168.859707][ T7489] IPVS: starting estimator thread 0... [ 169.000588][ T851] usb 12-1: USB disconnect, device number 11 [ 169.014150][ T7592] IPVS: using max 45 ests per chain, 108000 per kthread [ 169.106962][ T7600] netlink: 128 bytes leftover after parsing attributes in process `syz.4.341'. [ 169.109803][ T7600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.484032][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 169.904111][ T24] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 169.954024][ T5741] Bluetooth: hci7: command 0x0419 tx timeout [ 169.964075][ T5741] Bluetooth: hci6: command 0x0419 tx timeout [ 169.966944][ T5732] Bluetooth: hci5: command 0x0419 tx timeout [ 170.064052][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 170.066155][ T24] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.070025][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 170.073234][ T24] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 170.078498][ T24] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.081227][ T24] usb 12-1: Product: syz [ 170.082623][ T24] usb 12-1: Manufacturer: syz [ 170.087950][ T24] usb 12-1: SerialNumber: syz [ 170.091615][ T24] usb 12-1: config 0 descriptor?? [ 170.096745][ T24] hub 12-1:0.0: bad descriptor, ignoring hub [ 170.098748][ T24] hub 12-1:0.0: probe with driver hub failed with error -5 [ 170.868675][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.871864][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.333314][ T7632] syz1: rxe_newlink: already configured on lo [ 171.351494][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.348'. [ 171.401281][ T7636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.350'. [ 171.405364][ T7636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.702037][ T24] usb 12-1: USB disconnect, device number 12 [ 171.835092][ T7651] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 171.837253][ T7651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.842221][ T7651] vhci_hcd vhci_hcd.0: Device attached [ 172.124101][ T5519] usb 50-1: SetAddress Request (10) to port 0 [ 172.126358][ T5519] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 172.154189][ T24] usb 12-1: new full-speed USB device number 13 using dummy_hcd [ 172.304466][ T24] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.308253][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 172.313156][ T24] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.315862][ T24] usb 12-1: Product: syz [ 172.317188][ T24] usb 12-1: Manufacturer: syz [ 172.318768][ T24] usb 12-1: SerialNumber: syz [ 172.321995][ T24] usb 12-1: config 0 descriptor?? [ 172.325998][ T24] hub 12-1:0.0: bad descriptor, ignoring hub [ 172.328540][ T24] hub 12-1:0.0: probe with driver hub failed with error -5 [ 172.572626][ T7652] vhci_hcd: connection reset by peer [ 172.575398][ T13] vhci_hcd vhci_hcd.6: stop threads [ 172.577616][ T13] vhci_hcd vhci_hcd.6: release socket [ 172.579924][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 172.634642][ T24] usb 12-1: USB disconnect, device number 13 [ 173.762079][ T7669] rdma_rxe: rxe_newlink: failed to add lo [ 174.308543][ T7678] netlink: 128 bytes leftover after parsing attributes in process `syz.4.362'. [ 174.311333][ T7678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.381931][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.365'. [ 174.942821][ T7705] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 174.944844][ T7705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.963151][ T7705] vhci_hcd vhci_hcd.0: Device attached [ 175.337636][ T5830] usb 46-1: SetAddress Request (10) to port 0 [ 175.348204][ T5830] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 175.826416][ T7718] Set syz1 is full, maxelem 1021 reached [ 175.873372][ T7720] syz1: rxe_newlink: already configured on lo [ 175.935382][ T7707] vhci_hcd: connection reset by peer [ 175.937402][ T13] vhci_hcd vhci_hcd.4: stop threads [ 175.940513][ T13] vhci_hcd vhci_hcd.4: release socket [ 175.945588][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 176.044983][ T7729] PM: suspend entry (deep) [ 176.066348][ T7725] netlink: 128 bytes leftover after parsing attributes in process `syz.7.376'. [ 176.072371][ T7725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.086899][ T13] Filesystems sync: 0.040 seconds [ 176.121414][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.378'. [ 176.516761][ T7746] rdma_rxe: rxe_newlink: failed to add lo [ 176.739976][ T7750] nvme nvme0: rdma connection establishment failed (-104) [ 176.876705][ T7729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.879588][ T7729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 176.882279][ T7729] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 176.885100][ T7729] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 176.894485][ T7729] Freezing user space processes [ 176.907380][ T7729] Freezing user space processes failed after 0.011 seconds (6 tasks refusing to freeze, wq_busy=0): [ 176.911780][ T7729] task:dbus-daemon state:R running task stack:27544 pid:5426 tgid:5426 ppid:1 task_flags:0x400140 flags:0x00080002 [ 176.917298][ T7729] Call Trace: [ 176.918689][ T7729] [ 176.919933][ T7729] __schedule+0x1259/0x6920 [ 176.921702][ T7729] ? __pfx___schedule+0x10/0x10 [ 176.923687][ T7729] ? find_held_lock+0x2b/0x80 [ 176.925687][ T7729] ? schedule+0x225/0x2c0 [ 176.927134][ T7729] schedule+0xdd/0x2c0 [ 176.928873][ T7729] schedule_hrtimeout_range_clock+0x2d0/0x310 [ 176.931364][ T7729] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 176.934217][ T7729] ? do_epoll_wait+0xf2a/0x1730 [ 176.936217][ T7729] ? rcu_is_watching+0x13/0xc0 [ 176.938196][ T7729] do_epoll_wait+0xfab/0x1730 [ 176.940148][ T7729] ? __pfx_do_epoll_wait+0x10/0x10 [ 176.942281][ T7729] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 176.944936][ T7729] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 176.947367][ T7729] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.949914][ T7729] __x64_sys_epoll_wait+0x194/0x290 [ 176.952061][ T7729] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 176.954545][ T7729] ? xfd_validate_state+0x129/0x190 [ 176.956717][ T7729] do_syscall_64+0x121/0x770 [ 176.958581][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.960398][ T7729] RIP: 0033:0x7f0579ce0407 [ 176.961805][ T7729] RSP: 002b:00007ffc16520490 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8 [ 176.964428][ T7729] RAX: ffffffffffffffda RBX: 00007f0579bf2840 RCX: 00007f0579ce0407 [ 176.967083][ T7729] RDX: 0000000000000040 RSI: 00007ffc165204e0 RDI: 0000000000000003 [ 176.969891][ T7729] RBP: 0000561973d5ff28 R08: 0000000000000000 R09: 0000000000000000 [ 176.972233][ T7729] R10: ffffffffffffffff R11: 0000000000000202 R12: ffffffffffffffff [ 176.974982][ T7729] R13: 0000561973d5f8e0 R14: 0000000000000001 R15: 0000000000000000 [ 176.977477][ T7729] [ 176.978460][ T7729] task:dhcpcd state:R running task stack:25720 pid:5616 tgid:5616 ppid:5442 task_flags:0x400140 flags:0x00080002 [ 176.982467][ T7729] Call Trace: [ 176.983517][ T7729] [ 176.984511][ T7729] __schedule+0x1259/0x6920 [ 176.985958][ T7729] ? __pfx___schedule+0x10/0x10 [ 176.987493][ T7729] ? find_held_lock+0x2b/0x80 [ 176.988948][ T7729] ? schedule+0x225/0x2c0 [ 176.990320][ T7729] schedule+0xdd/0x2c0 [ 176.991589][ T7729] schedule_hrtimeout_range_clock+0x2d0/0x310 [ 176.993519][ T7729] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 176.995623][ T7729] ? __pfx___pollwait+0x10/0x10 [ 176.997176][ T7729] ? unix_dgram_poll+0x3ff/0x780 [ 176.998737][ T7729] poll_schedule_timeout.constprop.0+0xbe/0x1b0 [ 177.000667][ T7729] do_sys_poll+0x9a9/0xe90 [ 177.002127][ T7729] ? __pfx_do_sys_poll+0x10/0x10 [ 177.003791][ T7729] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 177.005851][ T7729] ? trace_sched_exit_tp+0x120/0x160 [ 177.007635][ T7729] ? __pfx_pollwake+0x10/0x10 [ 177.009073][ T7729] ? __pfx_pollwake+0x10/0x10 [ 177.010537][ T7729] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.012068][ T7729] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.013735][ T7729] ? _raw_spin_unlock_irq+0x2e/0x50 [ 177.015398][ T7729] ? set_user_sigmask+0x1e1/0x270 [ 177.017059][ T7729] ? __pfx_set_user_sigmask+0x10/0x10 [ 177.019001][ T7729] ? __seccomp_filter+0x896/0x1130 [ 177.020617][ T7729] __x64_sys_ppoll+0x2b5/0x350 [ 177.022179][ T7729] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 177.023858][ T7729] do_syscall_64+0x121/0x770 [ 177.025368][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.027360][ T7729] RIP: 0033:0x7fb5a2c4a407 [ 177.028748][ T7729] RSP: 002b:00007ffda9752ff0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 177.031291][ T7729] RAX: ffffffffffffffda RBX: 00007fb5a2bc0780 RCX: 00007fb5a2c4a407 [ 177.033704][ T7729] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055ada6b572e0 [ 177.036189][ T7729] RBP: 00007ffda9753330 R08: 0000000000000008 R09: 0000000000000000 [ 177.038662][ T7729] R10: 00007ffda9753330 R11: 0000000000000202 R12: 000055ad764f25e0 [ 177.041120][ T7729] R13: 000055ada6b49d40 R14: 0000000000000000 R15: 00007ffda97530e0 [ 177.043614][ T7729] [ 177.044700][ T7729] task:dhcpcd state:R running task stack:27064 pid:6656 tgid:6656 ppid:5442 task_flags:0x400140 flags:0x00080002 [ 177.048806][ T7729] Call Trace: [ 177.049873][ T7729] [ 177.051441][ T7729] __schedule+0x1259/0x6920 [ 177.052866][ T7729] ? __pfx___schedule+0x10/0x10 [ 177.054472][ T7729] ? find_held_lock+0x2b/0x80 [ 177.055931][ T7729] ? schedule+0x225/0x2c0 [ 177.057329][ T7729] schedule+0xdd/0x2c0 [ 177.058617][ T7729] schedule_hrtimeout_range_clock+0x2d0/0x310 [ 177.060493][ T7729] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 177.062546][ T7729] ? __pfx___pollwait+0x10/0x10 [ 177.064107][ T7729] ? unix_dgram_poll+0x3ff/0x780 [ 177.065669][ T7729] poll_schedule_timeout.constprop.0+0xbe/0x1b0 [ 177.067592][ T7729] do_sys_poll+0x9a9/0xe90 [ 177.068940][ T7729] ? __pfx_do_sys_poll+0x10/0x10 [ 177.070480][ T7729] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 177.072427][ T7729] ? trace_sched_exit_tp+0x120/0x160 [ 177.074216][ T7729] ? __pfx_pollwake+0x10/0x10 [ 177.075684][ T7729] ? __pfx_pollwake+0x10/0x10 [ 177.077205][ T7729] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.078841][ T7729] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.080826][ T7729] ? _raw_spin_unlock_irq+0x2e/0x50 [ 177.082978][ T7729] ? set_user_sigmask+0x1e1/0x270 [ 177.085115][ T7729] ? __pfx_set_user_sigmask+0x10/0x10 [ 177.087263][ T7729] ? __seccomp_filter+0x896/0x1130 [ 177.089311][ T7729] __x64_sys_ppoll+0x2b5/0x350 [ 177.091291][ T7729] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 177.093512][ T7729] do_syscall_64+0x121/0x770 [ 177.095982][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.098559][ T7729] RIP: 0033:0x7fb5a2c4a407 [ 177.100412][ T7729] RSP: 002b:00007ffda9752ff0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 177.103788][ T7729] RAX: ffffffffffffffda RBX: 00007fb5a2bc0780 RCX: 00007fb5a2c4a407 [ 177.107056][ T7729] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055ada6b57410 [ 177.109957][ T7729] RBP: 00007ffda9753330 R08: 0000000000000008 R09: 0000000000000000 [ 177.113139][ T7729] R10: 00007ffda9753330 R11: 0000000000000202 R12: 000055ad764f25e0 [ 177.116542][ T7729] R13: 000055ada6b49d40 R14: 0000000000000000 R15: 00007ffda97530e0 [ 177.119806][ T7729] [ 177.121134][ T7729] task:dhcpcd state:R running task stack:27064 pid:6669 tgid:6669 ppid:5442 task_flags:0x400140 flags:0x00080002 [ 177.125534][ T7729] Call Trace: [ 177.126583][ T7729] [ 177.127549][ T7729] __schedule+0x1259/0x6920 [ 177.129071][ T7729] ? __seccomp_filter+0x896/0x1130 [ 177.130679][ T7729] ? __pfx___schedule+0x10/0x10 [ 177.132188][ T7729] ? __x64_sys_ppoll+0x225/0x350 [ 177.133771][ T7729] schedule+0xdd/0x2c0 [ 177.135092][ T7729] exit_to_user_mode_loop+0x7e/0x700 [ 177.136726][ T7729] ? rcu_is_watching+0x13/0xc0 [ 177.138271][ T7729] do_syscall_64+0x603/0x770 [ 177.139712][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.141562][ T7729] RIP: 0033:0x7fb5a2c4a407 [ 177.142949][ T7729] RSP: 002b:00007ffda9752ff0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 177.145580][ T7729] RAX: fffffffffffffdfe RBX: 00007fb5a2bc0780 RCX: 00007fb5a2c4a407 [ 177.148032][ T7729] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055ada6b57410 [ 177.150467][ T7729] RBP: 00007ffda9753330 R08: 0000000000000008 R09: 0000000000000000 [ 177.152929][ T7729] R10: 00007ffda9753330 R11: 0000000000000202 R12: 000055ad764f25e0 [ 177.155491][ T7729] R13: 000055ada6b49d40 R14: 0000000000000000 R15: 00007ffda97530e0 [ 177.158027][ T7729] [ 177.159045][ T7729] task:syz.4.367 state:R running task stack:24904 pid:7686 tgid:7686 ppid:6319 task_flags:0x40004c flags:0x08080003 [ 177.163156][ T7729] Call Trace: [ 177.164263][ T7729] [ 177.165194][ T7729] __schedule+0x1259/0x6920 [ 177.166643][ T7729] ? unwind_next_frame+0x3c8/0x2090 [ 177.168278][ T7729] ? __pfx___schedule+0x10/0x10 [ 177.169807][ T7729] ? rcu_is_watching+0x13/0xc0 [ 177.171292][ T7729] preempt_schedule_irq+0x4e/0x90 [ 177.172843][ T7729] irqentry_exit+0x205/0xa10 [ 177.174370][ T7729] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 177.176039][ T7729] RIP: 0010:lock_release+0x19e/0x310 [ 177.177907][ T7729] Code: ff 65 0f c1 05 3b 4b a4 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 3d 04 a4 12 0f 85 4d 01 00 00 48 83 c4 [ 177.183810][ T7729] RSP: 0000:ffffc9000eb9f380 EFLAGS: 00000206 [ 177.185760][ T7729] RAX: 0000000000000046 RBX: ffffffff8ede9be0 RCX: ffffc9000eb9f38c [ 177.188198][ T7729] RDX: 0000000000000000 RSI: ffffffff8e3c0b74 RDI: ffffffff8c61bb80 [ 177.190636][ T7729] RBP: ffffffff8288c7df R08: 0000000000000001 R09: 0000000000000000 [ 177.193053][ T7729] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888024f6a580 [ 177.195551][ T7729] R13: 0000000000000001 R14: 0000000000000202 R15: 0000000000000001 [ 177.198237][ T7729] ? __page_table_check_zero+0x27f/0x410 [ 177.199942][ T7729] __page_table_check_zero+0x284/0x410 [ 177.201666][ T7729] free_unref_folios+0xa3b/0x1790 [ 177.203260][ T7729] folios_put_refs+0x585/0xaa0 [ 177.204797][ T7729] ? __pfx_folios_put_refs+0x10/0x10 [ 177.206462][ T7729] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 177.208545][ T7729] shmem_undo_range+0x5e5/0x1570 [ 177.210103][ T7729] ? __pfx_shmem_undo_range+0x10/0x10 [ 177.211745][ T7729] ? trace_sched_exit_tp+0x120/0x160 [ 177.213393][ T7729] ? __schedule+0x126b/0x6920 [ 177.214965][ T7729] ? __lock_acquire+0x4c5/0x1ec0 [ 177.216511][ T7729] ? find_held_lock+0x2b/0x80 [ 177.217991][ T7729] ? is_bpf_text_address+0x8a/0x1a0 [ 177.219594][ T7729] ? percpu_counter_add_batch+0xb9/0x230 [ 177.221336][ T7729] shmem_evict_inode+0x3b1/0xca0 [ 177.222898][ T7729] ? __pfx_shmem_evict_inode+0x10/0x10 [ 177.224688][ T7729] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 177.226567][ T7729] ? find_held_lock+0x2b/0x80 [ 177.227981][ T7729] ? evict+0x37e/0xad0 [ 177.229180][ T7729] ? evict+0x37e/0xad0 [ 177.230399][ T7729] ? __pfx_shmem_evict_inode+0x10/0x10 [ 177.232066][ T7729] evict+0x3c2/0xad0 [ 177.233247][ T7729] ? __pfx_evict+0x10/0x10 [ 177.234664][ T7729] ? iput.part.0+0x981/0x1050 [ 177.236114][ T7729] iput.part.0+0x989/0x1050 [ 177.237626][ T7729] iput+0x35/0x40 [ 177.238767][ T7729] dentry_unlink_inode+0x284/0x470 [ 177.240312][ T7729] dentry_kill+0x25d/0xc20 [ 177.241683][ T7729] dput.part.0+0xd7/0x240 [ 177.243009][ T7729] dput+0x1f/0x30 [ 177.244152][ T7729] __fput+0x519/0xb50 [ 177.245360][ T7729] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.246989][ T7729] task_work_run+0x150/0x240 [ 177.248543][ T7729] ? __pfx_task_work_run+0x10/0x10 [ 177.250051][ T7729] ? do_raw_spin_unlock+0x145/0x1e0 [ 177.251811][ T7729] do_exit+0x951/0x2ae0 [ 177.252046][ T5519] usb 50-1: device descriptor read/8, error -110 [ 177.253059][ T7729] ? preempt_schedule_thunk+0x16/0x40 [ 177.256758][ T7729] ? __pfx_do_exit+0x10/0x10 [ 177.258180][ T7729] ? preempt_schedule_thunk+0x16/0x40 [ 177.259751][ T7729] do_group_exit+0xd5/0x2a0 [ 177.261174][ T7729] __ia32_sys_exit_group+0x3e/0x50 [ 177.262794][ T7729] ia32_sys_call+0x1a39/0x1a40 [ 177.264371][ T7729] __do_fast_syscall_32+0x13a/0x8b0 [ 177.266016][ T7729] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.267621][ T7729] do_fast_syscall_32+0x32/0x70 [ 177.269067][ T7729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.270925][ T7729] RIP: 0023:0xf702efec [ 177.272190][ T7729] RSP: 002b:00000000ffe36cbc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 177.274826][ T7729] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 177.277351][ T7729] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71985d9 [ 177.279835][ T7729] RBP: 00000000f73f7ff4 R08: 0000000000000000 R09: 0000000000000000 [ 177.282283][ T7729] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 177.284781][ T7729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.287249][ T7729] [ 177.288847][ T7729] OOM killer enabled. [ 177.290056][ T7729] Restarting tasks: Starting [ 177.303088][ T7729] Restarting tasks: Done [ 177.304712][ T7729] random: crng reseeded on system resumption [ 177.311557][ T7729] hwrng_fill thread creation failed [ 177.314327][ T7729] PM: suspend exit [ 177.586635][ T7765] netlink: 128 bytes leftover after parsing attributes in process `syz.6.387'. [ 177.589605][ T7765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.629338][ T7755] nvme nvme0: rdma connection establishment failed (-104) [ 177.767179][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.388'. [ 177.805095][ T7774] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 177.806979][ T7774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.809816][ T7774] vhci_hcd vhci_hcd.0: Device attached [ 177.835409][ T5519] usb usb50-port1: attempt power cycle [ 178.095358][ T29] usb 52-1: SetAddress Request (10) to port 0 [ 178.213735][ T29] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 178.274128][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 178.349596][ T7784] rdma_rxe: rxe_newlink: failed to add lo [ 178.444967][ T7786] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 178.447439][ T7786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.491758][ T7793] PM: suspend entry (deep) [ 178.508280][ T13] Filesystems sync: 0.014 seconds [ 178.544137][ T7786] vhci_hcd vhci_hcd.0: Device attached [ 178.614141][ T5519] usb 50-1: SetAddress Request (13) to port 0 [ 178.811229][ T5519] usb 50-1: new SuperSpeed USB device number 13 using vhci_hcd [ 178.924065][ T5741] Bluetooth: hci7: command 0x0419 tx timeout [ 178.925961][ T5741] Bluetooth: hci6: command 0x0419 tx timeout [ 178.927888][ T5741] Bluetooth: hci5: command 0x0419 tx timeout [ 179.162099][ T7775] vhci_hcd: connection reset by peer [ 179.165001][ T13] vhci_hcd vhci_hcd.7: stop threads [ 179.167394][ T13] vhci_hcd vhci_hcd.7: release socket [ 179.169647][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 179.309762][ T7787] vhci_hcd: connection reset by peer [ 179.312242][ T13] vhci_hcd vhci_hcd.6: stop threads [ 179.314057][ T13] vhci_hcd vhci_hcd.6: release socket [ 179.315912][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 179.322161][ T7793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 179.326812][ T7793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 179.329519][ T7793] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 179.332150][ T7793] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 179.335740][ T7793] Freezing user space processes [ 179.340700][ T7793] Freezing user space processes completed (elapsed 0.002 seconds) [ 179.343723][ T7793] OOM killer disabled. [ 179.345395][ T7793] Freezing remaining freezable tasks [ 179.356716][ T7793] Freezing remaining freezable tasks failed after 0.009 seconds (0 tasks refusing to freeze, wq_busy=1): [ 179.360949][ T7793] Showing freezable workqueues that are still busy: [ 179.363606][ T7793] workqueue usb_hub_wq: flags=0x104 [ 179.365750][ T7793] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 179.365789][ T7793] in-flight: 5830:hub_event for 4s hub_event ,5519:hub_event for 7s hub_event ,29:hub_event for 1s hub_event [ 179.366170][ T7793] Restarting kernel threads ... [ 179.376969][ T7793] Done restarting kernel threads. [ 179.379853][ T7793] OOM killer enabled. [ 179.381474][ T7793] Restarting tasks: Starting [ 179.385602][ T7793] Restarting tasks: Done [ 179.387422][ T7793] random: crng reseeded on system resumption [ 179.390190][ T7793] hwrng_fill thread creation failed [ 179.392564][ T7793] PM: suspend exit [ 180.056906][ T7808] netlink: 128 bytes leftover after parsing attributes in process `syz.6.398'. [ 180.059787][ T7808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.140371][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.399'. [ 180.204068][ T1476] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 180.224055][ T5825] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 180.296575][ T7814] rdma_rxe: rxe_newlink: failed to add lo [ 180.364237][ T5825] usb 10-1: device descriptor read/64, error -71 [ 180.368462][ T1476] usb 12-1: Using ep0 maxpacket: 32 [ 180.370585][ T1476] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.375803][ T1476] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 180.378836][ T1476] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 180.381336][ T7821] PM: suspend entry (deep) [ 180.383378][ T1476] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.386338][ T1476] usb 12-1: Product: syz [ 180.387864][ T1476] usb 12-1: Manufacturer: syz [ 180.389455][ T1476] usb 12-1: SerialNumber: syz [ 180.392281][ T1476] usb 12-1: config 0 descriptor?? [ 180.395557][ T1476] hub 12-1:0.0: bad descriptor, ignoring hub [ 180.397646][ T1476] hub 12-1:0.0: probe with driver hub failed with error -5 [ 180.400412][ T13] Filesystems sync: 0.016 seconds [ 180.497866][ T5830] usb 46-1: device descriptor read/8, error -110 [ 180.644163][ T5825] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 180.784013][ T5825] usb 10-1: device descriptor read/64, error -71 [ 180.896034][ T5825] usb usb10-port1: attempt power cycle [ 180.914416][ T5830] usb usb46-port1: attempt power cycle [ 181.011300][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.015745][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.213298][ T7821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.215781][ T7821] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 181.217968][ T7821] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 181.220440][ T7821] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 181.223798][ T7821] Freezing user space processes [ 181.230013][ T7821] Freezing user space processes completed (elapsed 0.003 seconds) [ 181.233188][ T7821] OOM killer disabled. [ 181.235058][ T7821] Freezing remaining freezable tasks [ 181.247175][ T7821] Freezing remaining freezable tasks failed after 0.009 seconds (0 tasks refusing to freeze, wq_busy=1): [ 181.251667][ T7821] Showing freezable workqueues that are still busy: [ 181.254066][ T5825] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 181.254433][ T7821] workqueue usb_hub_wq: flags=0x104 [ 181.259433][ T7821] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 181.259474][ T7821] in-flight: 5825:hub_event for 1s hub_event [ 181.259535][ T7821] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 181.259563][ T7821] in-flight: 5830:hub_event for 6s hub_event ,5519:hub_event for 9s hub_event ,29:hub_event for 3s hub_event [ 181.259999][ T7821] Restarting kernel threads ... [ 181.275522][ T7821] Done restarting kernel threads. [ 181.277932][ T7821] OOM killer enabled. [ 181.279175][ T7821] Restarting tasks: Starting [ 181.282810][ T7821] Restarting tasks: Done [ 181.284350][ T7821] random: crng reseeded on system resumption [ 181.286297][ T7821] hwrng_fill thread creation failed [ 181.288036][ T7821] PM: suspend exit [ 181.561000][ T5830] usb usb46-port1: unable to enumerate USB device [ 181.681972][ T7834] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 181.684050][ T7834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 181.687400][ T7834] vhci_hcd vhci_hcd.0: Device attached [ 181.735123][ T5830] usb 12-1: USB disconnect, device number 14 [ 182.083976][ T5830] usb 12-1: new full-speed USB device number 15 using dummy_hcd [ 182.254468][ T5830] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.263156][ T5830] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 182.269514][ T5830] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.272937][ T5830] usb 12-1: Product: syz [ 182.278059][ T5830] usb 12-1: Manufacturer: syz [ 182.279815][ T7838] netlink: 128 bytes leftover after parsing attributes in process `syz.4.407'. [ 182.280068][ T5830] usb 12-1: SerialNumber: syz [ 182.283682][ T7838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.294493][ T5830] usb 12-1: config 0 descriptor?? [ 182.298927][ T5830] hub 12-1:0.0: bad descriptor, ignoring hub [ 182.301630][ T5830] hub 12-1:0.0: probe with driver hub failed with error -5 [ 182.324786][ T7835] vhci_hcd: connection closed [ 182.325173][ T13] vhci_hcd vhci_hcd.6: stop threads [ 182.329455][ T13] vhci_hcd vhci_hcd.6: release socket [ 182.331804][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 182.496684][ T5825] usb 10-1: device descriptor read/8, error -71 [ 182.524042][ T5732] Bluetooth: hci4: command 0x0419 tx timeout [ 182.604231][ T5830] usb 12-1: USB disconnect, device number 15 [ 183.234079][ T5732] Bluetooth: hci7: command 0x0419 tx timeout [ 183.236516][ T5741] Bluetooth: hci6: command 0x0419 tx timeout [ 183.236576][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 183.286678][ T7848] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 183.288877][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.311470][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 183.324103][ T29] usb 52-1: device descriptor read/8, error -110 [ 183.334775][ T7853] rdma_rxe: rxe_newlink: failed to add lo [ 183.479250][ T7863] PM: suspend entry (deep) [ 183.498534][ T7858] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 183.500572][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.509646][ T13] Filesystems sync: 0.028 seconds [ 183.539579][ T7858] vhci_hcd vhci_hcd.0: Device attached [ 183.866393][ T29] usb usb52-port1: attempt power cycle [ 184.043607][ T41] usb 48-1: SetAddress Request (2) to port 0 [ 184.051471][ T41] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 184.171375][ T7850] vhci_hcd: connection reset by peer [ 184.173408][ T13] vhci_hcd vhci_hcd.6: stop threads [ 184.175734][ T13] vhci_hcd vhci_hcd.6: release socket [ 184.178089][ T5519] usb 50-1: device descriptor read/8, error -110 [ 184.178145][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 184.217293][ T7860] vhci_hcd: connection reset by peer [ 184.220210][ T13] vhci_hcd vhci_hcd.5: stop threads [ 184.222687][ T13] vhci_hcd vhci_hcd.5: release socket [ 184.225272][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 184.284218][ T5519] usb usb50-port1: unable to enumerate USB device [ 184.307124][ T7863] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.309798][ T7863] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 184.312438][ T7863] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 184.315299][ T7863] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 184.318928][ T7863] Freezing user space processes [ 184.325235][ T7863] Freezing user space processes failed after 0.004 seconds (1 tasks refusing to freeze, wq_busy=0): [ 184.329925][ T7863] task:syz.7.410 state:R running task stack:24824 pid:7845 tgid:7845 ppid:6318 task_flags:0x40004c flags:0x08080002 [ 184.335575][ T7863] Call Trace: [ 184.336992][ T7863] [ 184.338302][ T7863] ? mlock_drain_local+0x283/0x4e0 [ 184.340449][ T7863] ? shmem_undo_range+0x5e5/0x1570 [ 184.342640][ T7863] ? __pfx_shmem_undo_range+0x10/0x10 [ 184.345007][ T7863] ? __lock_acquire+0x4c5/0x1ec0 [ 184.347170][ T7863] ? find_held_lock+0x2b/0x80 [ 184.349134][ T7863] ? is_bpf_text_address+0x8a/0x1a0 [ 184.351311][ T7863] ? percpu_counter_add_batch+0xb9/0x230 [ 184.353723][ T7863] ? shmem_evict_inode+0x3b1/0xca0 [ 184.355380][ T7863] ? __pfx_shmem_evict_inode+0x10/0x10 [ 184.357059][ T7863] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 184.359220][ T7863] ? find_held_lock+0x2b/0x80 [ 184.361127][ T7863] ? evict+0x37e/0xad0 [ 184.362734][ T7863] ? evict+0x37e/0xad0 [ 184.364190][ T7863] ? __pfx_shmem_evict_inode+0x10/0x10 [ 184.365917][ T7863] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 184.367858][ T7863] ? rcu_is_watching+0x13/0xc0 [ 184.369761][ T7863] ? trace_contention_begin+0x149/0x1a0 [ 184.371773][ T7863] ? queued_write_lock_slowpath+0x1a7/0x2c0 [ 184.373594][ T7863] ? __lock_acquire+0x4c5/0x1ec0 [ 184.375158][ T7863] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 184.377062][ T7863] ? do_raw_spin_lock+0x128/0x260 [ 184.378651][ T7863] ? do_raw_write_lock+0x1d4/0x260 [ 184.380218][ T7863] ? __pfx_do_raw_write_lock+0x10/0x10 [ 184.381915][ T7863] ? _raw_write_lock_irq+0x45/0x50 [ 184.383519][ T7863] ? do_exit+0x98e/0x2ae0 [ 184.384977][ T7863] ? __pfx_do_exit+0x10/0x10 [ 184.386413][ T7863] ? do_group_exit+0xd5/0x2a0 [ 184.387864][ T7863] ? __ia32_sys_exit_group+0x3e/0x50 [ 184.389520][ T7863] ? ia32_sys_call+0x1a39/0x1a40 [ 184.391001][ T7863] ? __do_fast_syscall_32+0x13a/0x8b0 [ 184.392628][ T7863] ? do_fast_syscall_32+0x32/0x70 [ 184.394207][ T7863] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.396155][ T7863] [ 184.397733][ T7863] OOM killer enabled. [ 184.398985][ T7863] Restarting tasks: Starting [ 184.404105][ T7863] Restarting tasks: Done [ 184.405902][ T7863] random: crng reseeded on system resumption [ 184.408715][ T7863] hwrng_fill thread creation failed [ 184.410911][ T7863] PM: suspend exit [ 184.616389][ T29] usb usb52-port1: unable to enumerate USB device [ 184.747269][ T7877] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 184.749152][ T7877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.751596][ T7877] vhci_hcd vhci_hcd.0: Device attached [ 185.064128][ T29] usb 52-1: SetAddress Request (14) to port 0 [ 185.076310][ T29] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 185.381805][ T7878] vhci_hcd: connection reset by peer [ 185.384920][ T13] vhci_hcd vhci_hcd.7: stop threads [ 185.387630][ T13] vhci_hcd vhci_hcd.7: release socket [ 185.390367][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 185.714279][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 185.854020][ T851] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 185.994011][ T851] usb 11-1: device descriptor read/64, error -71 [ 186.234054][ T851] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 186.354086][ T5734] Bluetooth: hci7: command 0x0419 tx timeout [ 186.356399][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 186.364106][ T5732] Bluetooth: hci6: command 0x0419 tx timeout [ 186.364124][ T851] usb 11-1: device descriptor read/64, error -71 [ 186.386135][ T7892] syz1: rxe_newlink: already configured on lo [ 186.474893][ T851] usb usb11-port1: attempt power cycle [ 186.814047][ T851] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 186.842253][ T851] usb 11-1: device descriptor read/8, error -71 [ 187.104042][ T851] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 187.124415][ T851] usb 11-1: device descriptor read/8, error -71 [ 187.234362][ T851] usb usb11-port1: unable to enumerate USB device [ 188.242742][ T7926] rdma_rxe: rxe_newlink: failed to add lo [ 188.401682][ T7922] nvme nvme0: rdma connection establishment failed (-104) [ 188.427537][ T7931] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 188.429598][ T7931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.432391][ T7931] vhci_hcd vhci_hcd.0: Device attached [ 188.720301][ T7919] nvme nvme0: rdma connection establishment failed (-104) [ 189.362970][ T41] usb 48-1: device descriptor read/8, error -110 [ 189.410848][ T7930] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 189.413566][ T7930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.429481][ T7930] vhci_hcd vhci_hcd.0: Device attached [ 189.607064][ T7932] vhci_hcd: connection closed [ 189.607396][ T5780] vhci_hcd vhci_hcd.7: stop threads [ 189.613126][ T5780] vhci_hcd vhci_hcd.7: release socket [ 189.618327][ T5780] vhci_hcd vhci_hcd.7: disconnect device [ 189.714035][ T851] usb 50-1: SetAddress Request (14) to port 0 [ 189.859617][ T41] usb usb48-port1: attempt power cycle [ 189.916040][ T7938] vhci_hcd: connection closed [ 189.916508][ T5780] vhci_hcd vhci_hcd.6: stop threads [ 189.919782][ T5780] vhci_hcd vhci_hcd.6: release socket [ 189.921477][ T5780] vhci_hcd vhci_hcd.6: disconnect device [ 189.926851][ T851] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 189.964047][ T851] usb 50-1: enqueue for inactive port 0 [ 190.026704][ T7947] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 190.028722][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.031592][ T7947] vhci_hcd vhci_hcd.0: Device attached [ 190.194157][ T29] usb 52-1: device descriptor read/8, error -110 [ 190.310550][ T41] usb 48-1: SetAddress Request (4) to port 0 [ 190.312466][ T41] usb 48-1: new SuperSpeed USB device number 4 using vhci_hcd [ 190.374683][ T7948] vhci_hcd: connection reset by peer [ 190.379262][ T5780] vhci_hcd vhci_hcd.5: stop threads [ 190.380499][ T851] usb usb50-port1: attempt power cycle [ 190.380976][ T5780] vhci_hcd vhci_hcd.5: release socket [ 190.381045][ T5780] vhci_hcd vhci_hcd.5: disconnect device [ 190.584624][ T29] usb usb52-port1: attempt power cycle [ 190.677056][ T7959] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 190.679104][ T7959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.682122][ T7959] vhci_hcd vhci_hcd.0: Device attached [ 190.934072][ T29] usb 52-1: SetAddress Request (16) to port 0 [ 190.936318][ T29] usb 52-1: new SuperSpeed USB device number 16 using vhci_hcd [ 190.944142][ T34] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 190.977880][ T851] usb usb50-port1: unable to enumerate USB device [ 191.074206][ T34] usb 11-1: device descriptor read/64, error -71 [ 191.314075][ T34] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 191.418413][ T7960] vhci_hcd: connection reset by peer [ 191.422897][ T5780] vhci_hcd vhci_hcd.7: stop threads [ 191.424812][ T5780] vhci_hcd vhci_hcd.7: release socket [ 191.429361][ T5780] vhci_hcd vhci_hcd.7: disconnect device [ 191.444006][ T34] usb 11-1: device descriptor read/64, error -71 [ 191.554238][ T34] usb usb11-port1: attempt power cycle [ 191.684006][ T851] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 191.834210][ T851] usb 10-1: Using ep0 maxpacket: 32 [ 191.836284][ T851] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.839980][ T851] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 191.844759][ T851] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.847346][ T851] usb 10-1: Product: syz [ 191.848592][ T851] usb 10-1: Manufacturer: syz [ 191.850104][ T851] usb 10-1: SerialNumber: syz [ 191.853147][ T851] usb 10-1: config 0 descriptor?? [ 191.855331][ T7971] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 191.858252][ T851] hub 10-1:0.0: bad descriptor, ignoring hub [ 191.860392][ T851] hub 10-1:0.0: probe with driver hub failed with error -5 [ 191.894008][ T34] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 191.914548][ T34] usb 11-1: device descriptor read/8, error -71 [ 192.039151][ T7977] PM: suspend entry (deep) [ 192.063279][ T5780] Filesystems sync: 0.022 seconds [ 192.154088][ T34] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 192.174382][ T34] usb 11-1: device descriptor read/8, error -71 [ 192.284244][ T34] usb usb11-port1: unable to enumerate USB device [ 192.516211][ T7983] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 192.518311][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.534240][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 192.568060][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.571937][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.823987][ T5519] usb 46-1: SetAddress Request (14) to port 0 [ 192.825940][ T5519] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 192.867980][ T7977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.870081][ T7977] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 192.873376][ T7977] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 192.875447][ T7977] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 192.878313][ T7977] Freezing user space processes [ 192.884308][ T7977] Freezing user space processes failed after 0.004 seconds (2 tasks refusing to freeze, wq_busy=0): [ 192.887861][ T7977] task:syz.5.443 state:D stack:26952 pid:7971 tgid:7970 ppid:6312 task_flags:0x400040 flags:0x08080002 [ 192.891650][ T7977] Call Trace: [ 192.892716][ T7977] [ 192.893682][ T7977] __schedule+0x1259/0x6920 [ 192.895169][ T7977] ? usb_generic_driver_resume+0x41/0xa0 [ 192.896915][ T7977] ? __pfx_usb_generic_driver_resume+0x10/0x10 [ 192.898890][ T7977] ? usb_resume_both+0x3e0/0x7f0 [ 192.900421][ T7977] ? rpm_resume+0x7eb/0x1320 [ 192.901881][ T7977] ? __pfx_usb_resume_both+0x10/0x10 [ 192.903565][ T7977] ? mark_held_locks+0x40/0x70 [ 192.905111][ T7977] ? __pfx_usb_runtime_resume+0x10/0x10 [ 192.906817][ T7977] ? __rpm_callback+0xc8/0x620 [ 192.908357][ T7977] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 192.910117][ T7977] ? __pfx_usb_runtime_resume+0x10/0x10 [ 192.911830][ T7977] ? rpm_callback+0x11f/0x150 [ 192.913326][ T7977] __pfx_usb_runtime_resume+0x10/0x10 [ 192.915093][ T7977] ? rpm_resume+0xd13/0x1320 [ 192.916532][ T7977] ? __pfx_rpm_resume+0x10/0x10 [ 192.918182][ T7977] ? __pfx_autoremove_wake_function+0x10/0x10 [ 192.920069][ T7977] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 192.921750][ T7977] ? rpm_resume+0x721/0x1320 [ 192.923246][ T7977] ? __pfx_rpm_resume+0x10/0x10 [ 192.924822][ T7977] ? do_raw_spin_lock+0x128/0x260 [ 192.926386][ T7977] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 192.928059][ T7977] ? _raw_spin_lock_irqsave+0x52/0x60 [ 192.929749][ T7977] ? __pm_runtime_resume+0xb6/0x170 [ 192.931351][ T7977] ? usb_autopm_get_interface+0x20/0xe0 [ 192.933069][ T7977] ? _chaoskey_fill+0x208/0x9a0 [ 192.934692][ T7977] ? __pfx__chaoskey_fill+0x10/0x10 [ 192.936291][ T7977] ? __pfx_autoremove_wake_function+0x10/0x10 [ 192.938327][ T7977] ? chaoskey_read+0x3f0/0x6d0 [ 192.939895][ T7977] ? __pfx_chaoskey_read+0x10/0x10 [ 192.941519][ T7977] ? vfs_read+0x1e4/0xb40 [ 192.942893][ T7977] ? __pfx_vfs_read+0x10/0x10 [ 192.944428][ T7977] ? find_held_lock+0x2b/0x80 [ 192.945903][ T7977] ? __fget_files+0x215/0x3d0 [ 192.947395][ T7977] ? __fget_files+0x215/0x3d0 [ 192.949114][ T7977] ? __fget_files+0x21f/0x3d0 [ 192.950735][ T7977] ? ksys_read+0x12a/0x250 [ 192.952114][ T7977] ? __pfx_ksys_read+0x10/0x10 [ 192.953628][ T7977] ? __do_fast_syscall_32+0x13a/0x8b0 [ 192.955492][ T7977] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.957121][ T7977] ? do_fast_syscall_32+0x32/0x70 [ 192.958821][ T7977] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.960801][ T7977] [ 192.961924][ T7977] task:syz.5.443 state:D stack:28728 pid:7982 tgid:7970 ppid:6312 task_flags:0x400040 flags:0x08080002 [ 192.965635][ T7977] Call Trace: [ 192.966683][ T7977] [ 192.967588][ T7977] __schedule+0x1259/0x6920 [ 192.968954][ T7977] ? __pfx___schedule+0x10/0x10 [ 192.970469][ T7977] ? find_held_lock+0x2b/0x80 [ 192.971925][ T7977] ? schedule+0x225/0x2c0 [ 192.973271][ T7977] schedule+0xdd/0x2c0 [ 192.974622][ T7977] schedule_preempt_disabled+0x13/0x30 [ 192.976266][ T7977] __mutex_lock+0xcbf/0x1bc0 [ 192.977671][ T7977] ? chaoskey_open+0xeb/0x260 [ 192.979145][ T7977] ? __pfx___mutex_lock+0x10/0x10 [ 192.980708][ T7977] ? __pfx_bus_find_device+0x10/0x10 [ 192.982291][ T7977] ? usb_find_interface+0xb0/0xf0 [ 192.983870][ T7977] ? __pfx_usb_find_interface+0x10/0x10 [ 192.985258][ T7489] raw-gadget.1 gadget.5: failed to queue suspend event [ 192.985653][ T7977] ? __lock_acquire+0x4c5/0x1ec0 [ 192.989859][ T7977] ? __lock_acquire+0x4c5/0x1ec0 [ 192.991379][ T7977] ? __lock_acquire+0x4c5/0x1ec0 [ 192.992947][ T7977] ? psi_group_change+0x457/0xa20 [ 192.994580][ T7977] ? find_held_lock+0x2b/0x80 [ 192.996034][ T7977] ? __schedule+0x2e0c/0x6920 [ 192.997493][ T7977] ? __schedule+0x2e0c/0x6920 [ 192.998949][ T7977] ? find_held_lock+0x2b/0x80 [ 193.000399][ T7977] ? __schedule+0x11d4/0x6920 [ 193.001884][ T7977] ? __schedule+0x11d4/0x6920 [ 193.003379][ T7977] ? __schedule+0x1259/0x6920 [ 193.004902][ T7977] ? __pfx___schedule+0x10/0x10 [ 193.006417][ T7977] ? find_held_lock+0x2b/0x80 [ 193.007875][ T7977] ? schedule+0x225/0x2c0 [ 193.009215][ T7977] ? schedule+0xdd/0x2c0 [ 193.010497][ T7977] ? __refrigerator+0x225/0x340 [ 193.012008][ T7977] ? get_signal+0x1022/0x21e0 [ 193.013499][ T7977] ? putname+0xb1/0x110 [ 193.014857][ T7977] ? kmem_cache_free+0x127/0x6b0 [ 193.016390][ T7977] ? __pfx_get_signal+0x10/0x10 [ 193.017902][ T7977] ? putname+0xb6/0x110 [ 193.019188][ T7977] ? arch_do_signal_or_restart+0x91/0x7a0 [ 193.020945][ T7977] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 193.022847][ T7977] ? __ia32_compat_sys_openat+0x12d/0x210 [ 193.024655][ T7977] ? exit_to_user_mode_loop+0x139/0x700 [ 193.026361][ T7977] ? rcu_is_watching+0x13/0xc0 [ 193.027806][ T7977] ? do_int80_emulation+0x555/0x650 [ 193.029348][ T7977] ? asm_int80_emulation+0x1a/0x20 [ 193.030931][ T7977] [ 193.032664][ T7977] OOM killer enabled. [ 193.034121][ T7977] Restarting tasks: Starting [ 193.044031][ T7977] Restarting tasks: Done [ 193.045667][ T7977] random: crng reseeded on system resumption [ 193.047483][ T7977] hwrng_fill thread creation failed [ 193.054199][ T7977] PM: suspend exit [ 193.075707][ T7984] vhci_hcd: connection reset by peer [ 193.081361][ T5780] vhci_hcd vhci_hcd.4: stop threads [ 193.083201][ T5780] vhci_hcd vhci_hcd.4: release socket [ 193.091341][ T5780] vhci_hcd vhci_hcd.4: disconnect device [ 193.094617][ T7971] raw-gadget.1 gadget.5: failed to queue resume event [ 193.114830][ T7489] raw-gadget.1 gadget.5: failed to queue suspend event [ 193.163595][ T7992] rdma_rxe: rxe_newlink: failed to add lo [ 193.184114][ T7971] raw-gadget.1 gadget.5: failed to queue resume event [ 193.233375][ T7489] raw-gadget.1 gadget.5: failed to queue suspend event [ 193.238393][ T7980] raw-gadget.1 gadget.5: failed to queue disconnect event [ 193.454203][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.460302][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.517616][ T7996] nvme nvme0: rdma connection establishment failed (-104) [ 193.626060][ T24] usb 10-1: USB disconnect, device number 21 [ 193.717204][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.719993][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.764139][ T24] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 193.924448][ T24] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 193.929423][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 193.934905][ T24] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 193.937703][ T24] usb 10-1: Product: syz [ 193.939104][ T24] usb 10-1: Manufacturer: syz [ 193.940666][ T24] usb 10-1: SerialNumber: syz [ 193.944024][ T24] usb 10-1: config 0 descriptor?? [ 193.948216][ T7980] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 193.952366][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 193.954610][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 194.194014][ T5732] Bluetooth: hci4: command 0x0419 tx timeout [ 194.344148][ T34] usb 10-1: USB disconnect, device number 22 [ 194.614145][ T5825] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 194.706409][ T8014] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 194.709043][ T8014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.712205][ T8014] vhci_hcd vhci_hcd.0: Device attached [ 194.764086][ T5825] usb 9-1: device descriptor read/64, error -71 [ 194.845548][ T8020] PM: suspend entry (deep) [ 194.869045][ T13] Filesystems sync: 0.021 seconds [ 194.914263][ T5732] Bluetooth: hci7: command 0x0419 tx timeout [ 194.914418][ T5734] Bluetooth: hci6: command 0x0419 tx timeout [ 194.914446][ T5741] Bluetooth: hci5: command 0x0419 tx timeout [ 195.008212][ T5825] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 195.154156][ T5825] usb 9-1: device descriptor read/64, error -71 [ 195.265228][ T5825] usb usb9-port1: attempt power cycle [ 195.313574][ T8015] vhci_hcd: connection closed [ 195.313824][ T13] vhci_hcd vhci_hcd.7: stop threads [ 195.317108][ T13] vhci_hcd vhci_hcd.7: release socket [ 195.318924][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 195.394062][ T41] usb 48-1: device descriptor read/8, error -110 [ 195.624010][ T5825] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 195.646077][ T5825] usb 9-1: device descriptor read/8, error -71 [ 195.675839][ T8020] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.677841][ T8020] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 195.679742][ T8020] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 195.681730][ T8020] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 195.684313][ T8020] Freezing user space processes [ 195.688664][ T8020] Freezing user space processes completed (elapsed 0.002 seconds) [ 195.690978][ T8020] OOM killer disabled. [ 195.692179][ T8020] Freezing remaining freezable tasks [ 195.694051][ T34] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 195.694602][ T8020] Freezing remaining freezable tasks failed after 0.000 seconds (9 tasks refusing to freeze, wq_busy=1): [ 195.699905][ T8020] Showing freezable workqueues that are still busy: [ 195.701965][ T8020] workqueue usb_hub_wq: flags=0x104 [ 195.703618][ T8020] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 195.703656][ T8020] in-flight: 5825:hub_event for 1s hub_event [ 195.703708][ T8020] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 195.703729][ T8020] in-flight: 41:hub_event for 11s hub_event ,5519:hub_event for 3s hub_event ,29:hub_event for 10s hub_event [ 195.703845][ T8020] pwq 14: cpus=3 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 195.703866][ T8020] in-flight: 34:hub_event for 0s hub_event [ 195.718926][ T8020] Restarting kernel threads ... [ 195.721386][ T8020] Done restarting kernel threads. [ 195.723569][ T8020] OOM killer enabled. [ 195.724949][ T8020] Restarting tasks: Starting [ 195.727585][ T8020] Restarting tasks: Done [ 195.728999][ T8020] random: crng reseeded on system resumption [ 195.730987][ T8020] hwrng_fill thread creation failed [ 195.732799][ T8020] PM: suspend exit [ 195.732868][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.740245][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.748108][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.752986][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.788613][ T8027] syz1: rxe_newlink: already configured on lo [ 195.815444][ T41] usb usb48-port1: unable to enumerate USB device [ 195.904041][ T5825] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 196.034064][ T29] usb 52-1: device descriptor read/8, error -110 [ 196.431816][ T29] usb usb52-port1: unable to enumerate USB device [ 196.994074][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 197.424741][ T8036] nvme nvme0: rdma connection establishment failed (-104) [ 197.565829][ T5825] usb 9-1: device descriptor read/8, error -71 [ 197.707136][ T5825] usb usb9-port1: unable to enumerate USB device [ 197.714008][ T5734] Bluetooth: hci6: command 0x0419 tx timeout [ 197.714125][ T5732] Bluetooth: hci5: command 0x0419 tx timeout [ 197.714664][ T5741] Bluetooth: hci7: command 0x0419 tx timeout [ 197.903971][ T5519] usb 46-1: device descriptor read/8, error -110 [ 198.235672][ T8054] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 198.237722][ T8054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.240441][ T8054] vhci_hcd vhci_hcd.0: Device attached [ 198.314271][ T5519] usb 46-1: SetAddress Request (15) to port 0 [ 198.316699][ T5519] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 198.474063][ T851] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 198.604128][ T851] usb 12-1: device descriptor read/64, error -71 [ 198.697485][ T8056] vhci_hcd: connection reset by peer [ 198.701339][ T13] vhci_hcd vhci_hcd.4: stop threads [ 198.703366][ T13] vhci_hcd vhci_hcd.4: release socket [ 198.705736][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 198.844031][ T851] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 198.984109][ T851] usb 12-1: device descriptor read/64, error -71 [ 199.022726][ T8065] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 199.024760][ T8065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.024781][ T8069] nvme nvme0: rdma connection establishment failed (-104) [ 199.027368][ T8065] vhci_hcd vhci_hcd.0: Device attached [ 199.094192][ T851] usb usb12-port1: attempt power cycle [ 199.407769][ T29] usb 50-1: SetAddress Request (18) to port 0 [ 199.409722][ T29] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 199.444007][ T851] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 199.466183][ T851] usb 12-1: device descriptor read/8, error -71 [ 199.512813][ T8066] vhci_hcd: connection reset by peer [ 199.526239][ T13] vhci_hcd vhci_hcd.6: stop threads [ 199.528380][ T13] vhci_hcd vhci_hcd.6: release socket [ 199.530284][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 199.589168][ T8075] netlink: 128 bytes leftover after parsing attributes in process `syz.5.469'. [ 199.592336][ T8075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.714077][ T851] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 199.734582][ T851] usb 12-1: device descriptor read/8, error -71 [ 199.784014][ T41] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 199.854752][ T851] usb usb12-port1: unable to enumerate USB device [ 199.944044][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 199.947031][ T41] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.950809][ T41] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.953494][ T41] usb 9-1: config 0 has no interface number 0 [ 199.955504][ T41] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.958840][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.962919][ T41] usb 9-1: config 0 descriptor?? [ 199.967788][ T41] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 200.174624][ T8078] netlink: 128 bytes leftover after parsing attributes in process `syz.6.470'. [ 200.177508][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.275704][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.279194][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.336166][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.339052][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.669751][ T8086] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 200.671739][ T8086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.675125][ T8086] vhci_hcd vhci_hcd.0: Device attached [ 200.944055][ T41] usb 48-1: SetAddress Request (6) to port 0 [ 200.947136][ T41] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 201.257910][ T34] usb 9-1: USB disconnect, device number 17 [ 201.389481][ T8087] vhci_hcd: connection reset by peer [ 201.393020][ T13] vhci_hcd vhci_hcd.5: stop threads [ 201.394874][ T13] vhci_hcd vhci_hcd.5: release socket [ 201.397042][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 201.494039][ T24] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 201.624482][ T24] usb 11-1: device descriptor read/64, error -71 [ 201.864005][ T24] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 201.994017][ T24] usb 11-1: device descriptor read/64, error -71 [ 202.164589][ T24] usb usb11-port1: attempt power cycle [ 202.171914][ T8103] loop8: detected capacity change from 0 to 7 [ 202.174842][ T8103] Dev loop8: unable to read RDB block 7 [ 202.176743][ T8103] loop8: unable to read partition table [ 202.179194][ T8103] loop8: partition table beyond EOD, truncated [ 202.181070][ T8103] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.534598][ T24] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 202.564432][ T24] usb 11-1: device descriptor read/8, error -71 [ 202.814024][ T24] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 202.834433][ T24] usb 11-1: device descriptor read/8, error -71 [ 202.954204][ T24] usb usb11-port1: unable to enumerate USB device [ 203.002484][ T8113] netlink: 128 bytes leftover after parsing attributes in process `syz.4.479'. [ 203.016548][ T8113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.027003][ T8119] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 203.029009][ T8119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 203.035849][ T8119] vhci_hcd vhci_hcd.0: Device attached [ 203.394017][ T5519] usb 46-1: device descriptor read/8, error -110 [ 203.504263][ T5519] usb usb46-port1: attempt power cycle [ 203.564013][ T5825] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 203.623304][ T8120] vhci_hcd: connection closed [ 203.624275][ T13] vhci_hcd vhci_hcd.5: stop threads [ 203.628448][ T13] vhci_hcd vhci_hcd.5: release socket [ 203.631103][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 203.661558][ T8128] netlink: 128 bytes leftover after parsing attributes in process `syz.4.483'. [ 203.665235][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.714058][ T5825] usb 12-1: Using ep0 maxpacket: 8 [ 203.716998][ T5825] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.721822][ T5825] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.725481][ T5825] usb 12-1: config 0 has no interface number 0 [ 203.728204][ T5825] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.732739][ T5825] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.738425][ T5825] usb 12-1: config 0 descriptor?? [ 203.757891][ T5825] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 204.058616][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.063616][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.074879][ T5519] usb usb46-port1: unable to enumerate USB device [ 204.122514][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.127233][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.434138][ T29] usb 50-1: device descriptor read/8, error -110 [ 204.814631][ T8142] loop8: detected capacity change from 0 to 7 [ 204.819732][ T8142] Dev loop8: unable to read RDB block 7 [ 204.821590][ T8142] loop8: unable to read partition table [ 204.826137][ T29] usb usb50-port1: attempt power cycle [ 204.828202][ T8142] loop8: partition table beyond EOD, truncated [ 204.830548][ T8142] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.925430][ T34] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 205.073421][ T5825] usb 12-1: USB disconnect, device number 20 [ 205.094040][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 205.156861][ T34] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.197349][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.209276][ T34] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.211826][ T34] usb 11-1: Product: syz [ 205.213154][ T34] usb 11-1: Manufacturer: syz [ 205.214862][ T34] usb 11-1: SerialNumber: syz [ 205.222011][ T8148] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 205.223623][ T34] usb 11-1: config 0 descriptor?? [ 205.224048][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.225451][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 205.228321][ T34] hub 11-1:0.0: bad descriptor, ignoring hub [ 205.233697][ T34] hub 11-1:0.0: probe with driver hub failed with error -5 [ 205.579798][ T8154] nvme nvme0: rdma connection establishment failed (-104) [ 205.596740][ T29] usb usb50-port1: unable to enumerate USB device [ 205.857674][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.863163][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.003955][ T8160] nvme nvme0: rdma connection establishment failed (-104) [ 206.574242][ T34] usb 11-1: USB disconnect, device number 26 [ 206.586492][ T8164] nvme nvme0: rdma connection establishment failed (-104) [ 206.838027][ T41] usb 48-1: device descriptor read/8, error -110 [ 206.914353][ T8149] vhci_hcd: connection closed [ 206.915532][ T34] usb 11-1: new full-speed USB device number 27 using dummy_hcd [ 206.921889][ T13] vhci_hcd vhci_hcd.4: stop threads [ 206.923567][ T13] vhci_hcd vhci_hcd.4: release socket [ 206.944142][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 206.964042][ T5821] usb 46-1: enqueue for inactive port 0 [ 207.019505][ T8171] netlink: 128 bytes leftover after parsing attributes in process `syz.7.495'. [ 207.022423][ T8171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.074713][ T34] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 207.079212][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.086618][ T34] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 207.089921][ T34] usb 11-1: Product: syz [ 207.091576][ T34] usb 11-1: Manufacturer: syz [ 207.093467][ T34] usb 11-1: SerialNumber: syz [ 207.097504][ T34] usb 11-1: config 0 descriptor?? [ 207.101016][ T34] hub 11-1:0.0: bad descriptor, ignoring hub [ 207.103447][ T34] hub 11-1:0.0: probe with driver hub failed with error -5 [ 207.223972][ T5519] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 207.234495][ T41] usb usb48-port1: attempt power cycle [ 207.373967][ T5519] usb 10-1: device descriptor read/64, error -71 [ 207.414233][ T34] usb 11-1: USB disconnect, device number 27 [ 207.476039][ T5821] usb usb46-port1: attempt power cycle [ 207.628095][ T5519] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 207.645766][ T8175] nvme nvme0: rdma connection establishment failed (-104) [ 207.795954][ T41] usb usb48-port1: unable to enumerate USB device [ 207.823974][ T5519] usb 10-1: device descriptor read/64, error -71 [ 207.934937][ T5519] usb usb10-port1: attempt power cycle [ 208.058050][ T5821] usb usb46-port1: unable to enumerate USB device [ 208.262832][ T8185] rdma_rxe: rxe_newlink: failed to add lo [ 208.305432][ T5519] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 208.364038][ T1476] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 208.397202][ T5519] usb 10-1: device descriptor read/8, error -71 [ 208.673997][ T5519] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 208.674038][ T1476] usb 12-1: Using ep0 maxpacket: 8 [ 208.678476][ T1476] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.682252][ T1476] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.685289][ T1476] usb 12-1: config 0 has no interface number 0 [ 208.687276][ T1476] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.690708][ T1476] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.696416][ T1476] usb 12-1: config 0 descriptor?? [ 208.697030][ T5519] usb 10-1: device descriptor read/8, error -71 [ 208.701538][ T1476] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 208.814466][ T5519] usb usb10-port1: unable to enumerate USB device [ 209.039862][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.042638][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.100388][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.104248][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.130888][ T8197] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 209.133569][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.137378][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 209.462012][ T8202] nvme nvme0: rdma connection establishment failed (-104) [ 209.524405][ T5519] usb 50-1: SetAddress Request (22) to port 0 [ 209.585043][ T5519] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd [ 209.957810][ T24] usb 12-1: USB disconnect, device number 21 [ 210.101985][ T8198] vhci_hcd: connection reset by peer [ 210.104811][ T13] vhci_hcd vhci_hcd.6: stop threads [ 210.106485][ T13] vhci_hcd vhci_hcd.6: release socket [ 210.108248][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 210.224397][ T8209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 210.227004][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.231186][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 210.374041][ T1034] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 210.514070][ T5821] usb 46-1: SetAddress Request (22) to port 0 [ 210.516838][ T5821] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 210.524995][ T1034] usb 10-1: Using ep0 maxpacket: 32 [ 210.553523][ T1034] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.557524][ T1034] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.571667][ T1034] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.575030][ T1034] usb 10-1: Product: syz [ 210.576441][ T1034] usb 10-1: Manufacturer: syz [ 210.579019][ T1034] usb 10-1: SerialNumber: syz [ 210.605070][ T1034] usb 10-1: config 0 descriptor?? [ 210.615248][ T8205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.631787][ T1034] hub 10-1:0.0: bad descriptor, ignoring hub [ 210.633852][ T1034] hub 10-1:0.0: probe with driver hub failed with error -5 [ 210.740462][ T8216] netlink: 128 bytes leftover after parsing attributes in process `syz.6.506'. [ 210.745759][ T8216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.858639][ T8210] vhci_hcd: connection reset by peer [ 210.861179][ T13] vhci_hcd vhci_hcd.4: stop threads [ 210.862901][ T13] vhci_hcd vhci_hcd.4: release socket [ 210.865079][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 211.336963][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.342471][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.808467][ T8232] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 211.810483][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.871552][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 212.324910][ T7488] raw-gadget.0 gadget.5: failed to queue suspend event [ 212.394026][ T8219] raw-gadget.0 gadget.5: failed to queue resume event [ 212.416152][ T7488] raw-gadget.0 gadget.5: failed to queue suspend event [ 212.494059][ T8219] raw-gadget.0 gadget.5: failed to queue resume event [ 212.527540][ T7534] raw-gadget.0 gadget.5: failed to queue suspend event [ 212.546482][ T8222] raw-gadget.0 gadget.5: failed to queue disconnect event [ 213.215040][ T29] usb 52-1: SetAddress Request (18) to port 0 [ 213.226997][ T29] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 213.793765][ T8233] vhci_hcd: connection reset by peer [ 213.796478][ T13] vhci_hcd vhci_hcd.7: stop threads [ 213.798891][ T13] vhci_hcd vhci_hcd.7: release socket [ 213.801403][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 214.114035][ T34] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 214.244070][ T34] usb 9-1: device descriptor read/64, error -71 [ 214.494043][ T34] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 214.624029][ T34] usb 9-1: device descriptor read/64, error -71 [ 214.664314][ T1476] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 214.674166][ T5519] usb 50-1: device descriptor read/8, error -110 [ 214.734234][ T34] usb usb9-port1: attempt power cycle [ 214.814026][ T1476] usb 12-1: Using ep0 maxpacket: 32 [ 214.816167][ T1476] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.820153][ T1476] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.826743][ T1476] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.829641][ T1476] usb 12-1: Product: syz [ 214.830947][ T1476] usb 12-1: Manufacturer: syz [ 214.832446][ T1476] usb 12-1: SerialNumber: syz [ 214.836621][ T1476] usb 12-1: config 0 descriptor?? [ 214.840791][ T1476] hub 12-1:0.0: bad descriptor, ignoring hub [ 214.843150][ T1476] hub 12-1:0.0: probe with driver hub failed with error -5 [ 215.067048][ T5519] usb usb50-port1: attempt power cycle [ 215.074157][ T34] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 215.095443][ T34] usb 9-1: device descriptor read/8, error -71 [ 215.344149][ T34] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 215.374387][ T34] usb 9-1: device descriptor read/8, error -71 [ 215.484181][ T34] usb usb9-port1: unable to enumerate USB device [ 215.567089][ T5821] usb 46-1: device descriptor read/8, error -110 [ 215.612535][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.616319][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.638175][ T5519] usb usb50-port1: unable to enumerate USB device [ 215.936195][ T1034] usb 10-1: USB disconnect, device number 27 [ 216.005327][ T5821] usb usb46-port1: attempt power cycle [ 216.272703][ T8270] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 216.274724][ T8270] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.378085][ T8273] nvme nvme0: rdma connection establishment failed (-104) [ 216.404521][ T8270] vhci_hcd vhci_hcd.0: Device attached [ 216.434229][ T1034] usb 12-1: USB disconnect, device number 22 [ 216.763965][ T1034] usb 12-1: new full-speed USB device number 23 using dummy_hcd [ 216.916557][ T1034] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.921558][ T1034] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.929906][ T1034] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.933367][ T1034] usb 12-1: Product: syz [ 216.939241][ T1034] usb 12-1: Manufacturer: syz [ 216.941376][ T1034] usb 12-1: SerialNumber: syz [ 216.945235][ T5821] usb usb46-port1: unable to enumerate USB device [ 216.946145][ T1034] usb 12-1: config 0 descriptor?? [ 216.950900][ T1034] hub 12-1:0.0: bad descriptor, ignoring hub [ 216.953835][ T1034] hub 12-1:0.0: probe with driver hub failed with error -5 [ 217.014043][ T5519] usb 48-1: SetAddress Request (10) to port 0 [ 217.015988][ T5519] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 217.025737][ T8271] vhci_hcd: connection closed [ 217.025961][ T13] vhci_hcd vhci_hcd.5: stop threads [ 217.029173][ T13] vhci_hcd vhci_hcd.5: release socket [ 217.031026][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 217.044040][ T5519] usb 48-1: enqueue for inactive port 0 [ 217.266452][ T1034] usb 12-1: USB disconnect, device number 23 [ 217.304509][ T51] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 217.326502][ T8281] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 217.328550][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.345163][ T8281] vhci_hcd vhci_hcd.0: Device attached [ 217.427235][ T8281] macvlan2: entered promiscuous mode [ 217.429093][ T8281] bridge0: entered promiscuous mode [ 217.454029][ T51] usb 9-1: Using ep0 maxpacket: 32 [ 217.456653][ T51] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.457164][ T5519] usb usb48-port1: attempt power cycle [ 217.460344][ T51] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 217.464727][ T51] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 217.471066][ T51] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.473657][ T51] usb 9-1: Product: syz [ 217.476399][ T51] usb 9-1: Manufacturer: syz [ 217.477878][ T51] usb 9-1: SerialNumber: syz [ 217.480468][ T51] usb 9-1: config 0 descriptor?? [ 217.486204][ T51] hub 9-1:0.0: bad descriptor, ignoring hub [ 217.488306][ T51] hub 9-1:0.0: probe with driver hub failed with error -5 [ 217.748251][ T41] usb 50-1: SetAddress Request (26) to port 0 [ 217.750227][ T41] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 217.964054][ T34] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 218.048716][ T8282] vhci_hcd: connection reset by peer [ 218.051387][ T13] vhci_hcd vhci_hcd.6: stop threads [ 218.053769][ T13] vhci_hcd vhci_hcd.6: release socket [ 218.057863][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 218.088149][ T5519] usb usb48-port1: unable to enumerate USB device [ 218.123728][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.124731][ T34] usb 12-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 218.127468][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.130546][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.135592][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.141094][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.145006][ T34] usb 12-1: Product: syz [ 218.146785][ T34] usb 12-1: Manufacturer: syz [ 218.148730][ T34] usb 12-1: SerialNumber: syz [ 218.156451][ T34] symbolserial 12-1:1.0: symbol converter detected [ 218.161841][ T34] usb 12-1: symbol converter now attached to ttyUSB0 [ 218.354123][ T29] usb 52-1: device descriptor read/8, error -110 [ 218.360494][ T8287] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 218.754466][ T29] usb usb52-port1: attempt power cycle [ 218.882522][ T34] usb 9-1: USB disconnect, device number 22 [ 219.238678][ T34] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 219.325566][ T29] usb usb52-port1: unable to enumerate USB device [ 219.410361][ T34] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.433245][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 219.457767][ T34] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.462013][ T34] usb 9-1: Product: syz [ 219.469540][ T34] usb 9-1: Manufacturer: syz [ 219.471672][ T34] usb 9-1: SerialNumber: syz [ 219.513239][ T34] usb 9-1: config 0 descriptor?? [ 219.529558][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 219.532010][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 219.962686][ T34] usb 9-1: USB disconnect, device number 23 [ 220.235798][ T851] usb 12-1: USB disconnect, device number 24 [ 220.240232][ T851] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 220.242913][ T851] symbolserial 12-1:1.0: device disconnected [ 220.716172][ T8312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 220.718225][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.726166][ T8313] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 220.728206][ T8313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.733757][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 220.754034][ T8313] vhci_hcd vhci_hcd.0: Device attached [ 220.758757][ T8318] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 220.760782][ T8318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.898348][ T8318] vhci_hcd vhci_hcd.0: Device attached [ 221.014023][ T29] usb 46-1: SetAddress Request (26) to port 0 [ 221.018355][ T29] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 221.074031][ T5519] usb 48-1: SetAddress Request (14) to port 0 [ 221.077020][ T5519] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 221.203985][ T851] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 221.350337][ T8316] vhci_hcd: connection reset by peer [ 221.352544][ T13] vhci_hcd vhci_hcd.5: stop threads [ 221.374048][ T851] usb 12-1: Using ep0 maxpacket: 8 [ 221.386427][ T851] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.390992][ T13] vhci_hcd vhci_hcd.5: release socket [ 221.391045][ T851] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.394117][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 221.396691][ T851] usb 12-1: config 0 has no interface number 0 [ 221.400151][ T851] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.404680][ T851] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.409987][ T851] usb 12-1: config 0 descriptor?? [ 221.420839][ T851] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 221.501908][ T8314] vhci_hcd: connection reset by peer [ 221.503826][ T13] vhci_hcd vhci_hcd.4: stop threads [ 221.506863][ T8319] vhci_hcd: connection closed [ 221.507374][ T13] vhci_hcd vhci_hcd.4: release socket [ 221.511174][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 221.513030][ T13] vhci_hcd vhci_hcd.6: stop threads [ 221.514706][ T13] vhci_hcd vhci_hcd.6: release socket [ 221.516477][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 221.725947][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.729234][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.792963][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.796911][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.679258][ T851] usb 12-1: USB disconnect, device number 25 [ 222.873050][ T41] usb 50-1: device descriptor read/8, error -110 [ 222.874659][ T8341] nvme nvme0: rdma connection establishment failed (-104) [ 223.664074][ T51] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 223.763934][ T41] usb usb50-port1: attempt power cycle [ 223.843981][ T51] usb 12-1: Using ep0 maxpacket: 32 [ 223.848496][ T51] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.854774][ T51] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 223.857959][ T51] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 223.862503][ T51] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.865295][ T51] usb 12-1: Product: syz [ 223.866626][ T51] usb 12-1: Manufacturer: syz [ 223.868165][ T51] usb 12-1: SerialNumber: syz [ 223.871225][ T51] usb 12-1: config 0 descriptor?? [ 223.874451][ T51] hub 12-1:0.0: bad descriptor, ignoring hub [ 223.876347][ T51] hub 12-1:0.0: probe with driver hub failed with error -5 [ 224.066284][ T8362] nvme nvme0: rdma connection establishment failed (-104) [ 224.482198][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.485552][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.794360][ T8364] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 224.796787][ T8364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.821664][ T8364] vhci_hcd vhci_hcd.0: Device attached [ 224.940296][ T8364] macvlan2: entered promiscuous mode [ 224.942412][ T8364] bridge0: entered promiscuous mode [ 225.024000][ T51] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 225.204008][ T51] usb 9-1: Using ep0 maxpacket: 32 [ 225.205835][ T851] usb 12-1: USB disconnect, device number 26 [ 225.206158][ T51] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.214656][ T51] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 225.219510][ T51] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.222039][ T51] usb 9-1: Product: syz [ 225.223333][ T51] usb 9-1: Manufacturer: syz [ 225.224963][ T51] usb 9-1: SerialNumber: syz [ 225.230158][ T51] usb 9-1: config 0 descriptor?? [ 225.232308][ T8366] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 225.234987][ T41] usb usb50-port1: unable to enumerate USB device [ 225.235870][ T51] hub 9-1:0.0: bad descriptor, ignoring hub [ 225.239719][ T51] hub 9-1:0.0: probe with driver hub failed with error -5 [ 225.247457][ T8367] vhci_hcd: connection closed [ 225.247697][ T13] vhci_hcd vhci_hcd.5: stop threads [ 225.250846][ T13] vhci_hcd vhci_hcd.5: release socket [ 225.252573][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 225.554004][ T41] usb 12-1: new full-speed USB device number 27 using dummy_hcd [ 225.704534][ T41] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.712833][ T41] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 225.725868][ T41] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.731681][ T41] usb 12-1: Product: syz [ 225.733559][ T41] usb 12-1: Manufacturer: syz [ 225.741844][ T41] usb 12-1: SerialNumber: syz [ 225.747403][ T41] usb 12-1: config 0 descriptor?? [ 225.758750][ T41] hub 12-1:0.0: bad descriptor, ignoring hub [ 225.767124][ T41] hub 12-1:0.0: probe with driver hub failed with error -5 [ 225.947234][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.957557][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.095455][ T51] usb 12-1: USB disconnect, device number 27 [ 226.114067][ T5519] usb 48-1: device descriptor read/8, error -110 [ 226.116625][ T29] usb 46-1: device descriptor read/8, error -110 [ 226.194113][ T8385] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 226.196143][ T8385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.205712][ T8385] vhci_hcd vhci_hcd.0: Device attached [ 226.384539][ T5519] usb 48-1: SetAddress Request (15) to port 0 [ 226.393572][ T5519] usb 48-1: new SuperSpeed USB device number 15 using vhci_hcd [ 226.404758][ T7490] raw-gadget.2 gadget.4: failed to queue suspend event [ 226.474071][ T8374] raw-gadget.2 gadget.4: failed to queue resume event [ 226.508385][ T7487] raw-gadget.2 gadget.4: failed to queue suspend event [ 226.514589][ T29] usb usb46-port1: attempt power cycle [ 226.574038][ T8366] raw-gadget.2 gadget.4: failed to queue resume event [ 226.622771][ T8375] raw-gadget.2 gadget.4: failed to queue suspend event [ 226.626498][ T8375] raw-gadget.2 gadget.4: failed to queue disconnect event [ 226.707612][ T41] usb 9-1: USB disconnect, device number 24 [ 226.804831][ T8386] vhci_hcd: connection reset by peer [ 226.809005][ T5780] vhci_hcd vhci_hcd.5: stop threads [ 226.810768][ T5780] vhci_hcd vhci_hcd.5: release socket [ 226.814389][ T5780] vhci_hcd vhci_hcd.5: disconnect device [ 226.857898][ T8397] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 226.859953][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.862566][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 227.104020][ T851] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 227.114927][ T29] usb usb46-port1: unable to enumerate USB device [ 227.164462][ T5830] usb 52-1: SetAddress Request (22) to port 0 [ 227.166433][ T5830] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 227.168868][ T41] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 227.254146][ T851] usb 11-1: Using ep0 maxpacket: 8 [ 227.257549][ T851] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.261708][ T851] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.264466][ T851] usb 11-1: config 0 has no interface number 0 [ 227.266398][ T851] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.269763][ T851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.273625][ T851] usb 11-1: config 0 descriptor?? [ 227.278933][ T851] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 227.314897][ T41] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.319466][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 227.328402][ T41] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.332785][ T41] usb 9-1: Product: syz [ 227.336873][ T41] usb 9-1: Manufacturer: syz [ 227.341008][ T41] usb 9-1: SerialNumber: syz [ 227.350814][ T41] usb 9-1: config 0 descriptor?? [ 227.356064][ T8366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.364386][ T41] hub 9-1:0.0: bad descriptor, ignoring hub [ 227.370474][ T41] hub 9-1:0.0: probe with driver hub failed with error -5 [ 227.447868][ T8398] vhci_hcd: connection reset by peer [ 227.449849][ T5780] vhci_hcd vhci_hcd.7: stop threads [ 227.451457][ T5780] vhci_hcd vhci_hcd.7: release socket [ 227.453236][ T5780] vhci_hcd vhci_hcd.7: disconnect device [ 227.645026][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.648354][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.674368][ T851] usb 9-1: USB disconnect, device number 25 [ 228.443401][ T8416] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 228.445590][ T8416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.448516][ T8416] vhci_hcd vhci_hcd.0: Device attached [ 228.528171][ T34] usb 11-1: USB disconnect, device number 28 [ 228.813967][ T851] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 228.915895][ T8421] nvme nvme0: rdma connection establishment failed (-104) [ 228.974166][ T851] usb 9-1: Using ep0 maxpacket: 32 [ 228.977011][ T851] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.981398][ T851] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.984727][ T851] usb 9-1: config 0 has no interfaces? [ 228.987926][ T851] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.990510][ T851] usb 9-1: Product: syz [ 228.991812][ T851] usb 9-1: Manufacturer: syz [ 228.993381][ T851] usb 9-1: SerialNumber: syz [ 229.000461][ T851] usb 9-1: config 0 descriptor?? [ 229.304090][ T851] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 229.327709][ T8417] vhci_hcd: connection closed [ 229.327929][ T5780] vhci_hcd vhci_hcd.5: stop threads [ 229.331437][ T5780] vhci_hcd vhci_hcd.5: release socket [ 229.333657][ T5780] vhci_hcd vhci_hcd.5: disconnect device [ 229.485686][ T851] usb 11-1: Using ep0 maxpacket: 8 [ 229.487804][ T851] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.491915][ T851] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.495468][ T851] usb 11-1: config 0 has no interface number 0 [ 229.497837][ T851] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.501268][ T851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.505625][ T851] usb 11-1: config 0 descriptor?? [ 229.514458][ T851] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 229.618850][ T8429] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 229.620889][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.623761][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 229.734388][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.739912][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.815395][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.818203][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.877064][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.879873][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.423989][ T8430] vhci_hcd: connection closed [ 230.424232][ T13] vhci_hcd vhci_hcd.7: stop threads [ 230.428478][ T13] vhci_hcd vhci_hcd.7: release socket [ 230.430375][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 230.767115][ T851] usb 11-1: USB disconnect, device number 29 [ 230.925693][ T34] usb 9-1: USB disconnect, device number 26 [ 231.203570][ T8450] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 231.206244][ T8450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.212997][ T8450] vhci_hcd vhci_hcd.0: Device attached [ 231.557080][ T34] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 231.794012][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 231.806607][ T34] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.811419][ T34] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.823525][ T34] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.827273][ T34] usb 12-1: Product: syz [ 231.829083][ T34] usb 12-1: Manufacturer: syz [ 231.831097][ T34] usb 12-1: SerialNumber: syz [ 231.833416][ T8451] vhci_hcd: connection reset by peer [ 231.835560][ T13] vhci_hcd vhci_hcd.5: stop threads [ 231.840121][ T34] usb 12-1: config 0 descriptor?? [ 231.841641][ T13] vhci_hcd vhci_hcd.5: release socket [ 231.843118][ T8454] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 231.847394][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 231.848518][ T5519] usb 48-1: device descriptor read/8, error -110 [ 231.849649][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 231.850380][ T34] hub 12-1:0.0: bad descriptor, ignoring hub [ 231.850400][ T34] hub 12-1:0.0: probe with driver hub failed with error -5 [ 232.136408][ T5519] usb usb48-port1: attempt power cycle [ 232.185931][ T8472] nvme nvme0: rdma connection establishment failed (-104) [ 232.194795][ T5830] usb 52-1: device descriptor read/8, error -110 [ 232.227184][ T8475] rdma_rxe: rxe_newlink: failed to add lo [ 232.559339][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.564487][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.848647][ T8482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 232.850665][ T8482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.853300][ T8482] vhci_hcd vhci_hcd.0: Device attached [ 232.875991][ T5519] usb usb48-port1: unable to enumerate USB device [ 232.878544][ T5830] usb usb52-port1: attempt power cycle [ 232.971553][ T7488] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.044070][ T8454] raw-gadget.0 gadget.7: failed to queue resume event [ 233.074227][ T7484] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.144358][ T8454] raw-gadget.0 gadget.7: failed to queue resume event [ 233.164029][ T41] usb 46-1: SetAddress Request (30) to port 0 [ 233.166034][ T41] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 233.174189][ T7484] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.244110][ T8477] raw-gadget.0 gadget.7: failed to queue resume event [ 233.266948][ T1160] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.277582][ T8491] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 233.279647][ T8491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 233.289788][ T8483] vhci_hcd: connection reset by peer [ 233.290678][ T8491] vhci_hcd vhci_hcd.0: Device attached [ 233.291825][ T13] vhci_hcd vhci_hcd.4: stop threads [ 233.295246][ T13] vhci_hcd vhci_hcd.4: release socket [ 233.297273][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 233.344164][ T8454] raw-gadget.0 gadget.7: failed to queue resume event [ 233.365534][ T7534] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.434145][ T8454] raw-gadget.0 gadget.7: failed to queue resume event [ 233.459929][ T7534] raw-gadget.0 gadget.7: failed to queue suspend event [ 233.463054][ T8480] raw-gadget.0 gadget.7: failed to queue disconnect event [ 233.484382][ T34] usb 12-1: USB disconnect, device number 28 [ 233.584598][ T5830] usb usb52-port1: unable to enumerate USB device [ 233.654167][ T29] usb 50-1: SetAddress Request (30) to port 0 [ 233.656259][ T29] usb 50-1: new SuperSpeed USB device number 30 using vhci_hcd [ 233.857901][ T8493] vhci_hcd: connection reset by peer [ 233.859977][ T13] vhci_hcd vhci_hcd.6: stop threads [ 233.861857][ T13] vhci_hcd vhci_hcd.6: release socket [ 233.863702][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 233.974701][ T34] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 234.124807][ T34] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.129750][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 234.136793][ T34] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.140134][ T34] usb 12-1: Product: syz [ 234.141940][ T34] usb 12-1: Manufacturer: syz [ 234.144621][ T34] usb 12-1: SerialNumber: syz [ 234.149291][ T34] usb 12-1: config 0 descriptor?? [ 234.155318][ T8480] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 234.159715][ T34] hub 12-1:0.0: bad descriptor, ignoring hub [ 234.162053][ T34] hub 12-1:0.0: probe with driver hub failed with error -5 [ 234.184641][ T34] usb 12-1: USB disconnect, device number 29 [ 234.203997][ T51] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 234.324094][ T34] usb 12-1: new full-speed USB device number 30 using dummy_hcd [ 234.364201][ T51] usb 9-1: Using ep0 maxpacket: 8 [ 234.368194][ T51] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.372618][ T51] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.376212][ T51] usb 9-1: config 0 has no interface number 0 [ 234.378216][ T51] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.382373][ T51] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.386939][ T51] usb 9-1: config 0 descriptor?? [ 234.396174][ T51] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 234.697759][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.706876][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.769993][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.773839][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.937309][ T8512] rdma_rxe: rxe_newlink: failed to add lo [ 235.007756][ T8513] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 235.010582][ T8513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.034774][ T8513] vhci_hcd vhci_hcd.0: Device attached [ 235.464046][ T34] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 235.613985][ T34] usb 12-1: Using ep0 maxpacket: 32 [ 235.616739][ T34] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.621486][ T34] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.625751][ T34] usb 12-1: config 0 has no interfaces? [ 235.629869][ T34] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.633303][ T34] usb 12-1: Product: syz [ 235.635435][ T34] usb 12-1: Manufacturer: syz [ 235.637442][ T34] usb 12-1: SerialNumber: syz [ 235.641670][ T34] usb 12-1: config 0 descriptor?? [ 235.653133][ T51] usb 9-1: USB disconnect, device number 27 [ 235.683400][ T8514] vhci_hcd: connection closed [ 235.683826][ T13] vhci_hcd vhci_hcd.6: stop threads [ 235.689341][ T13] vhci_hcd vhci_hcd.6: release socket [ 235.691557][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 236.251925][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.256825][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.396137][ T8531] nvme nvme0: rdma connection establishment failed (-104) [ 237.207260][ T8537] netlink: 128 bytes leftover after parsing attributes in process `syz.6.577'. [ 237.211348][ T8537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.234258][ T34] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 237.266090][ T851] usb 12-1: USB disconnect, device number 31 [ 237.314203][ T8541] nvme nvme0: rdma connection establishment failed (-104) [ 237.386155][ T34] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 237.391301][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.397911][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.401332][ T34] usb 10-1: Product: syz [ 237.403120][ T34] usb 10-1: Manufacturer: syz [ 237.405184][ T34] usb 10-1: SerialNumber: syz [ 237.415900][ T34] symbolserial 10-1:1.0: required endpoints missing [ 238.152745][ T8549] nvme nvme0: rdma connection establishment failed (-104) [ 238.284035][ T41] usb 46-1: device descriptor read/8, error -110 [ 238.756812][ T29] usb 50-1: device descriptor read/8, error -110 [ 238.781522][ T41] usb usb46-port1: attempt power cycle [ 239.144851][ T29] usb usb50-port1: attempt power cycle [ 239.360209][ T41] usb usb46-port1: unable to enumerate USB device [ 239.366075][ T51] usb 10-1: USB disconnect, device number 28 [ 239.806812][ T29] usb usb50-port1: unable to enumerate USB device [ 239.914002][ T1476] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 240.084177][ T1476] usb 11-1: Using ep0 maxpacket: 8 [ 240.104406][ T1476] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 240.113225][ T1476] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.116285][ T1476] usb 11-1: config 0 has no interface number 0 [ 240.128671][ T1476] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.141305][ T1476] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.156075][ T1476] usb 11-1: config 0 descriptor?? [ 240.159870][ T8579] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 240.161892][ T8579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.165522][ T8579] vhci_hcd vhci_hcd.0: Device attached [ 240.175841][ T1476] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 240.435137][ T29] usb 48-1: SetAddress Request (18) to port 0 [ 240.445458][ T29] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 240.496096][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.500118][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.562643][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.567688][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.169650][ T8580] vhci_hcd: connection reset by peer [ 241.172162][ T13] vhci_hcd vhci_hcd.5: stop threads [ 241.174778][ T13] vhci_hcd vhci_hcd.5: release socket [ 241.177152][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 241.233851][ T8596] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 241.236415][ T8596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 241.257448][ T8596] vhci_hcd vhci_hcd.0: Device attached [ 241.398640][ T851] usb 11-1: USB disconnect, device number 30 [ 241.606461][ T5830] usb 46-1: SetAddress Request (34) to port 0 [ 241.608422][ T5830] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 241.968760][ T8597] vhci_hcd: connection reset by peer [ 241.971255][ T13] vhci_hcd vhci_hcd.4: stop threads [ 241.972940][ T13] vhci_hcd vhci_hcd.4: release socket [ 241.974766][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 242.134094][ T51] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 242.314130][ T24] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 242.324084][ T51] usb 10-1: Using ep0 maxpacket: 32 [ 242.326551][ T51] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.331283][ T51] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.336861][ T51] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.344694][ T51] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.347954][ T51] usb 10-1: Product: syz [ 242.349634][ T51] usb 10-1: Manufacturer: syz [ 242.351486][ T51] usb 10-1: SerialNumber: syz [ 242.357450][ T51] usb 10-1: config 0 descriptor?? [ 242.362077][ T51] hub 10-1:0.0: bad descriptor, ignoring hub [ 242.364528][ T51] hub 10-1:0.0: probe with driver hub failed with error -5 [ 242.464038][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 242.467951][ T24] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.472711][ T24] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.475800][ T24] usb 11-1: config 0 has no interface number 0 [ 242.477710][ T24] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.480971][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.493717][ T24] usb 11-1: config 0 descriptor?? [ 242.548428][ T24] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 242.847453][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.852407][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.869903][ T8615] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 242.872631][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.874805][ T8620] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 242.876516][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 242.878002][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.900385][ T8620] vhci_hcd vhci_hcd.0: Device attached [ 242.924204][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.929338][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.993807][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.001138][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.176124][ T41] usb 52-1: SetAddress Request (26) to port 0 [ 243.179365][ T41] usb 52-1: new SuperSpeed USB device number 26 using vhci_hcd [ 243.536024][ T8618] vhci_hcd: connection closed [ 243.536378][ T13] vhci_hcd vhci_hcd.4: stop threads [ 243.539867][ T13] vhci_hcd vhci_hcd.4: release socket [ 243.541865][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 243.569749][ T8621] vhci_hcd: connection reset by peer [ 243.572221][ T13] vhci_hcd vhci_hcd.7: stop threads [ 243.573994][ T13] vhci_hcd vhci_hcd.7: release socket [ 243.576136][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 243.796416][ T851] usb 11-1: USB disconnect, device number 31 [ 244.344221][ T1476] usb 10-1: USB disconnect, device number 29 [ 244.364209][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 244.524411][ T24] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 244.532214][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.539459][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.549373][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.556590][ T24] usb 9-1: Product: syz [ 244.558830][ T24] usb 9-1: Manufacturer: syz [ 244.564256][ T24] usb 9-1: SerialNumber: syz [ 244.572355][ T24] symbolserial 9-1:1.0: required endpoints missing [ 245.261983][ T8644] nvme nvme0: rdma connection establishment failed (-104) [ 245.474220][ T29] usb 48-1: device descriptor read/8, error -110 [ 246.145654][ T29] usb usb48-port1: attempt power cycle [ 246.224484][ T8653] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 246.226756][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.230413][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 246.564279][ T29] usb 48-1: SetAddress Request (20) to port 0 [ 246.575679][ T29] usb 48-1: new SuperSpeed USB device number 20 using vhci_hcd [ 246.693765][ T5830] usb 46-1: device descriptor read/8, error -110 [ 246.836669][ T8654] vhci_hcd: connection reset by peer [ 246.838529][ T13] vhci_hcd vhci_hcd.5: stop threads [ 246.840081][ T13] vhci_hcd vhci_hcd.5: release socket [ 246.841947][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 247.115251][ T5830] usb usb46-port1: attempt power cycle [ 247.305556][ T24] usb 9-1: USB disconnect, device number 28 [ 247.398788][ T8663] rdma_rxe: rxe_newlink: failed to add lo [ 247.442037][ T8661] smpboot: CPU 1 is now offline [ 247.578951][ T8665] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 247.583858][ T8673] ------------[ cut here ]------------ [ 247.584510][ T8673] [ 247.584515][ T8673] ====================================================== [ 247.584519][ T8673] WARNING: possible circular locking dependency detected [ 247.584524][ T8673] syzkaller #0 Not tainted [ 247.584530][ T8673] ------------------------------------------------------ [ 247.584534][ T8673] syz.5.606/8673 is trying to acquire lock: [ 247.584539][ T8673] ffffffff8ecf5a00 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 247.584573][ T8673] [ 247.584573][ T8673] but task is already holding lock: [ 247.584576][ T8673] ffff88802b23c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 247.584601][ T8673] [ 247.584601][ T8673] which lock already depends on the new lock. [ 247.584601][ T8673] [ 247.584604][ T8673] [ 247.584604][ T8673] the existing dependency chain (in reverse order) is: [ 247.584608][ T8673] [ 247.584608][ T8673] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 247.584621][ T8673] lock_acquire+0x1b9/0x370 [ 247.584634][ T8673] _raw_spin_lock_nested+0x31/0x40 [ 247.584645][ T8673] raw_spin_rq_lock_nested+0x2c/0x140 [ 247.584658][ T8673] _task_rq_lock+0xcf/0x500 [ 247.584670][ T8673] cgroup_move_task+0x81/0x320 [ 247.584679][ T8673] css_set_move_task+0x285/0x600 [ 247.584701][ T8673] cgroup_post_fork+0x1f9/0x9a0 [ 247.584712][ T8673] copy_process+0x64da/0x8370 [ 247.584727][ T8673] kernel_clone+0x176/0x9d0 [ 247.584741][ T8673] rest_init+0xa3/0x2e0 [ 247.584756][ T8673] start_kernel+0x48e/0x490 [ 247.584768][ T8673] x86_64_start_reservations+0x24/0x30 [ 247.584780][ T8673] x86_64_start_kernel+0x12b/0x130 [ 247.584792][ T8673] common_startup_64+0x13e/0x158 [ 247.584801][ T8673] [ 247.584801][ T8673] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 247.584814][ T8673] lock_acquire+0x1b9/0x370 [ 247.584825][ T8673] _raw_spin_lock_irq_disable+0x5e/0x90 [ 247.584834][ T8673] try_to_wake_up+0xc1/0x1c90 [ 247.584846][ T8673] __queue_work+0x4a6/0x1370 [ 247.584856][ T8673] queue_work_on+0x1a9/0x1e0 [ 247.584865][ T8673] rpm_suspend+0xf6b/0x1220 [ 247.584876][ T8673] rpm_idle+0x60c/0x790 [ 247.584886][ T8673] __pm_runtime_idle+0xba/0x1a0 [ 247.584897][ T8673] __device_attach+0x37e/0x4d0 [ 247.584908][ T8673] device_initial_probe+0xaf/0xd0 [ 247.584919][ T8673] bus_probe_device+0x64/0x160 [ 247.584931][ T8673] device_add+0x121d/0x1970 [ 247.584949][ T8673] serial_base_port_add+0x227/0x2b0 [ 247.584968][ T8673] serial_core_register_port+0x13c/0x16f0 [ 247.584987][ T8673] serial8250_register_8250_port+0x15af/0x2330 [ 247.585001][ T8673] serial_pnp_probe+0x436/0x930 [ 247.585010][ T8673] pnp_device_probe+0x2b3/0x4a0 [ 247.585024][ T8673] really_probe+0x241/0xa60 [ 247.585034][ T8673] __driver_probe_device+0x210/0x460 [ 247.585045][ T8673] driver_probe_device+0x4a/0x140 [ 247.585081][ T8673] __driver_attach+0x21f/0x5b0 [ 247.585092][ T8673] bus_for_each_dev+0x13e/0x1d0 [ 247.585107][ T8673] bus_add_driver+0x305/0x5b0 [ 247.585117][ T8673] driver_register+0x1e2/0x360 [ 247.585130][ T8673] serial8250_init+0xcc/0x1c0 [ 247.585140][ T8673] do_one_initcall+0x11c/0x6f0 [ 247.585156][ T8673] kernel_init_freeable+0x6ea/0x7b0 [ 247.585167][ T8673] kernel_init+0x21/0x1e0 [ 247.585180][ T8673] ret_from_fork+0x730/0xd60 [ 247.585196][ T8673] ret_from_fork_asm+0x1a/0x30 [ 247.585204][ T8673] [ 247.585204][ T8673] -> #2 (&dev->power.lock){-...}-{3:3}: [ 247.585218][ T8673] lock_acquire+0x1b9/0x370 [ 247.585228][ T8673] _raw_spin_lock_irqsave+0x3a/0x60 [ 247.585238][ T8673] __pm_runtime_resume+0xa9/0x170 [ 247.585249][ T8673] __uart_start+0x1b0/0x510 [ 247.585259][ T8673] uart_write+0x211/0xb20 [ 247.585270][ T8673] n_tty_write+0x431/0x1160 [ 247.585285][ T8673] file_tty_write.isra.0+0x4d2/0x890 [ 247.585297][ T8673] redirected_tty_write+0xd4/0x120 [ 247.585309][ T8673] vfs_write+0x6af/0x1050 [ 247.585321][ T8673] ksys_write+0x12a/0x250 [ 247.585333][ T8673] do_syscall_64+0x121/0x770 [ 247.585345][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.585354][ T8673] [ 247.585354][ T8673] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 247.585367][ T8673] lock_acquire+0x1b9/0x370 [ 247.585378][ T8673] _raw_spin_lock_irqsave+0x3a/0x60 [ 247.585387][ T8673] serial8250_console_write+0x177/0x1a50 [ 247.585401][ T8673] console_flush_one_record+0x78e/0xf10 [ 247.585416][ T8673] console_unlock+0x103/0x260 [ 247.585429][ T8673] vprintk_emit+0x407/0x6b0 [ 247.585443][ T8673] _printk+0xcf/0x110 [ 247.585451][ T8673] register_console.cold+0xc0/0x248 [ 247.585461][ T8673] univ8250_console_init+0x6f/0x80 [ 247.585470][ T8673] console_init+0x3d5/0x5b0 [ 247.585484][ T8673] start_kernel+0x314/0x490 [ 247.585494][ T8673] x86_64_start_reservations+0x24/0x30 [ 247.585506][ T8673] x86_64_start_kernel+0x12b/0x130 [ 247.585518][ T8673] common_startup_64+0x13e/0x158 [ 247.585527][ T8673] [ 247.585527][ T8673] -> #0 (console_owner){-.-.}-{0:0}: [ 247.585539][ T8673] check_prev_add+0xeb/0xe60 [ 247.585550][ T8673] __lock_acquire+0x1492/0x1ec0 [ 247.585561][ T8673] lock_acquire+0x1b9/0x370 [ 247.585571][ T8673] console_lock_spinning_enable+0x72/0x80 [ 247.585585][ T8673] console_flush_one_record+0x737/0xf10 [ 247.585600][ T8673] console_unlock+0x103/0x260 [ 247.585613][ T8673] vprintk_emit+0x407/0x6b0 [ 247.585627][ T8673] _printk+0xcf/0x110 [ 247.585635][ T8673] __report_bug.cold+0x34/0x141 [ 247.585646][ T8673] report_bug+0xb3/0x220 [ 247.585657][ T8673] handle_bug+0x16a/0x2a0 [ 247.585669][ T8673] exc_invalid_op+0x17/0x50 [ 247.585688][ T8673] asm_exc_invalid_op+0x1a/0x20 [ 247.585697][ T8673] update_rq_clock+0x40a/0xd20 [ 247.585712][ T8673] __schedule+0x1c69/0x6920 [ 247.585721][ T8673] preempt_schedule_irq+0x4e/0x90 [ 247.585732][ T8673] irqentry_exit+0x205/0xa10 [ 247.585744][ T8673] asm_sysvec_call_function_single+0x1a/0x20 [ 247.585756][ T8673] bad_range+0xe9/0x3f0 [ 247.585766][ T8673] get_page_from_freelist+0x10e6/0x35b0 [ 247.585781][ T8673] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 247.585795][ T8673] alloc_pages_mpol+0x201/0x550 [ 247.585805][ T8673] folio_alloc_mpol_noprof+0x36/0x260 [ 247.585817][ T8673] shmem_alloc_folio+0x135/0x160 [ 247.585827][ T8673] shmem_alloc_and_add_folio+0x371/0xd40 [ 247.585838][ T8673] shmem_get_folio_gfp+0x75b/0x1980 [ 247.585850][ T8673] shmem_fault+0x1fb/0xa30 [ 247.585861][ T8673] __do_fault+0x10b/0x440 [ 247.585875][ T8673] do_fault+0xb3f/0x1830 [ 247.585883][ T8673] __handle_mm_fault+0x150b/0x2f60 [ 247.585895][ T8673] handle_mm_fault+0x37b/0xa30 [ 247.585906][ T8673] __get_user_pages+0x1169/0x3280 [ 247.585914][ T8673] populate_vma_page_range+0x267/0x3f0 [ 247.585924][ T8673] __mm_populate+0x107/0x3a0 [ 247.585933][ T8673] vm_mmap_pgoff+0x441/0x470 [ 247.585947][ T8673] ksys_mmap_pgoff+0xe4/0x610 [ 247.585955][ T8673] __do_fast_syscall_32+0x13a/0x8b0 [ 247.585967][ T8673] do_fast_syscall_32+0x32/0x70 [ 247.585979][ T8673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.585991][ T8673] [ 247.585991][ T8673] other info that might help us debug this: [ 247.585991][ T8673] [ 247.585994][ T8673] Chain exists of: [ 247.585994][ T8673] console_owner --> &p->pi_lock --> &rq->__lock [ 247.585994][ T8673] [ 247.586008][ T8673] Possible unsafe locking scenario: [ 247.586008][ T8673] [ 247.586011][ T8673] CPU0 CPU1 [ 247.586013][ T8673] ---- ---- [ 247.586016][ T8673] lock(&rq->__lock); [ 247.586021][ T8673] lock(&p->pi_lock); [ 247.586028][ T8673] lock(&rq->__lock); [ 247.586038][ T8673] lock(console_owner); [ 247.586046][ T8673] [ 247.586046][ T8673] *** DEADLOCK *** [ 247.586046][ T8673] [ 247.586049][ T8673] locks held by syz.5.606/8673: 4, last CPU#0: [ 247.586060][ T8673] #0: ffff888021664378 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 247.586091][ T8673] #1: ffff88802b23c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 247.586124][ T8673] #2: ffffffff8edd5e40 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 247.586153][ T8673] #3: ffffffff8edd5eb8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 247.586187][ T8673] [ 247.586187][ T8673] stack backtrace: [ 247.586194][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.5.606 Not tainted syzkaller #0 PREEMPT(full) [ 247.586210][ T8673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.586217][ T8673] Call Trace: [ 247.586221][ T8673] [ 247.586226][ T8673] dump_stack_lvl+0x100/0x190 [ 247.586245][ T8673] print_circular_bug.cold+0x178/0x1be [ 247.586267][ T8673] check_noncircular+0x146/0x160 [ 247.586285][ T8673] check_prev_add+0xeb/0xe60 [ 247.586301][ T8673] __lock_acquire+0x1492/0x1ec0 [ 247.586321][ T8673] lock_acquire+0x1b9/0x370 [ 247.586338][ T8673] ? console_lock_spinning_enable+0x61/0x80 [ 247.586359][ T8673] ? console_lock_spinning_enable+0x4a/0x80 [ 247.586375][ T8673] console_lock_spinning_enable+0x72/0x80 [ 247.586390][ T8673] ? console_lock_spinning_enable+0x61/0x80 [ 247.586404][ T8673] console_flush_one_record+0x737/0xf10 [ 247.586421][ T8673] ? __pfx_console_flush_one_record+0x10/0x10 [ 247.586437][ T8673] ? is_printk_cpu_sync_owner+0x32/0x40 [ 247.586448][ T8673] console_unlock+0x103/0x260 [ 247.586462][ T8673] ? __pfx_console_unlock+0x10/0x10 [ 247.586477][ T8673] ? do_raw_spin_unlock+0x145/0x1e0 [ 247.586491][ T8673] ? _printk+0xcf/0x110 [ 247.586501][ T8673] vprintk_emit+0x407/0x6b0 [ 247.586516][ T8673] ? __pfx_vprintk_emit+0x10/0x10 [ 247.586532][ T8673] _printk+0xcf/0x110 [ 247.586541][ T8673] ? __pfx__printk+0x10/0x10 [ 247.586550][ T8673] ? unwind_get_return_address+0x59/0xa0 [ 247.586562][ T8673] ? arch_stack_walk+0x88/0xf0 [ 247.586572][ T8673] ? __report_bug.cold+0x24/0x141 [ 247.586584][ T8673] __report_bug.cold+0x34/0x141 [ 247.586596][ T8673] ? update_rq_clock+0x40a/0xd20 [ 247.586609][ T8673] ? __pfx___report_bug+0x10/0x10 [ 247.586622][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 247.586636][ T8673] ? update_rq_clock+0x40a/0xd20 [ 247.586650][ T8673] report_bug+0xb3/0x220 [ 247.586662][ T8673] ? update_rq_clock+0x40a/0xd20 [ 247.586676][ T8673] handle_bug+0x16a/0x2a0 [ 247.586695][ T8673] exc_invalid_op+0x17/0x50 [ 247.586709][ T8673] asm_exc_invalid_op+0x1a/0x20 [ 247.586719][ T8673] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 247.586734][ T8673] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 18 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 247.586744][ T8673] RSP: 0018:ffffc9000e81eba8 EFLAGS: 00010046 [ 247.586753][ T8673] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 247.586759][ T8673] RDX: 0000000000000046 RSI: ffffffff8e3c0b74 RDI: ffffffff8c61bb80 [ 247.586766][ T8673] RBP: ffffc9000e81ed48 R08: 0000000000000001 R09: 0000000000000001 [ 247.586772][ T8673] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144d564 [ 247.586778][ T8673] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 247.586788][ T8673] ? update_rq_clock+0x9c/0xd20 [ 247.586802][ T8673] __schedule+0x1c69/0x6920 [ 247.586815][ T8673] ? __pfx___schedule+0x10/0x10 [ 247.586827][ T8673] preempt_schedule_irq+0x4e/0x90 [ 247.586838][ T8673] irqentry_exit+0x205/0xa10 [ 247.586850][ T8673] asm_sysvec_call_function_single+0x1a/0x20 [ 247.586862][ T8673] RIP: 0010:bad_range+0xe9/0x3f0 [ 247.586873][ T8673] Code: 89 ef e8 aa d8 78 ff 48 8b 74 24 78 4c 89 ef e8 0d de 78 ff 9c 5a 49 bb 00 00 00 00 00 fc ff df 80 e6 02 58 0f 85 c8 01 00 00 <41> 0f b6 16 41 38 d4 7c 08 84 d2 0f 85 fe 01 00 00 8b 93 d0 00 00 [ 247.586883][ T8673] RSP: 0018:ffffc9000e81ee68 EFLAGS: 00000246 [ 247.586890][ T8673] RAX: 00000000000004dd RBX: ffff88807ffd6940 RCX: ffffffff826e2896 [ 247.586897][ T8673] RDX: 0000000000000006 RSI: ffffffff8e3e6d9b RDI: ffffffff8c61bb80 [ 247.586903][ T8673] RBP: ffffea00016b66c0 R08: 0000000000000001 R09: 0000000000000000 [ 247.586909][ T8673] R10: 0000000000000001 R11: dffffc0000000000 R12: 0000000000000003 [ 247.586915][ T8673] R13: ffff88807ffd6a18 R14: ffffed100fffad42 R15: 000000000005ad9b [ 247.586923][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 247.586939][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 247.586954][ T8673] get_page_from_freelist+0x10e6/0x35b0 [ 247.586972][ T8673] ? __pfx_get_page_from_freelist+0x10/0x10 [ 247.586986][ T8673] ? prepare_alloc_pages+0x1f0/0x5b0 [ 247.586997][ T8673] ? rcu_read_unlock+0x17/0x60 [ 247.587010][ T8673] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 247.587025][ T8673] ? irqentry_exit+0x24d/0xa10 [ 247.587037][ T8673] ? __asan_memset+0x23/0x50 [ 247.587051][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 247.587064][ T8673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.587079][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 247.587090][ T8673] ? __css_rstat_updated+0x1ce/0x590 [ 247.587104][ T8673] ? do_raw_spin_lock+0x128/0x260 [ 247.587118][ T8673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.587133][ T8673] ? find_held_lock+0x2b/0x80 [ 247.587143][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 247.587155][ T8673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.587167][ T8673] ? policy_nodemask+0xed/0x4f0 [ 247.587178][ T8673] alloc_pages_mpol+0x201/0x550 [ 247.587188][ T8673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 247.587201][ T8673] folio_alloc_mpol_noprof+0x36/0x260 [ 247.587214][ T8673] shmem_alloc_folio+0x135/0x160 [ 247.587225][ T8673] shmem_alloc_and_add_folio+0x371/0xd40 [ 247.587239][ T8673] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 247.587253][ T8673] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 247.587267][ T8673] shmem_get_folio_gfp+0x75b/0x1980 [ 247.587281][ T8673] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 247.587295][ T8673] ? filemap_map_pages+0x112c/0x2020 [ 247.587307][ T8673] shmem_fault+0x1fb/0xa30 [ 247.587320][ T8673] ? __pfx_shmem_fault+0x10/0x10 [ 247.587333][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 247.587344][ T8673] ? find_held_lock+0x2b/0x80 [ 247.587354][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 247.587364][ T8673] __do_fault+0x10b/0x440 [ 247.587379][ T8673] do_fault+0xb3f/0x1830 [ 247.587390][ T8673] ? __pfx_do_fault+0x10/0x10 [ 247.587399][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 247.587412][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 247.587424][ T8673] ? __pte_offset_map+0x179/0x310 [ 247.587440][ T8673] __handle_mm_fault+0x150b/0x2f60 [ 247.587454][ T8673] ? __pfx___handle_mm_fault+0x10/0x10 [ 247.587466][ T8673] ? pte_offset_map_lock+0x174/0x320 [ 247.587482][ T8673] ? find_held_lock+0x2b/0x80 [ 247.587491][ T8673] ? find_held_lock+0x2b/0x80 [ 247.587499][ T8673] ? follow_page_pte+0x536/0x1360 [ 247.587511][ T8673] handle_mm_fault+0x37b/0xa30 [ 247.587525][ T8673] __get_user_pages+0x1169/0x3280 [ 247.587535][ T8673] ? __pfx_mt_find+0x10/0x10 [ 247.587549][ T8673] ? __pfx___get_user_pages+0x10/0x10 [ 247.587560][ T8673] populate_vma_page_range+0x267/0x3f0 [ 247.587571][ T8673] ? __pfx_populate_vma_page_range+0x10/0x10 [ 247.587582][ T8673] ? __pfx_find_vma_intersection+0x10/0x10 [ 247.587600][ T8673] __mm_populate+0x107/0x3a0 [ 247.587610][ T8673] ? __pfx___mm_populate+0x10/0x10 [ 247.587621][ T8673] ? up_write+0x2dc/0x5b0 [ 247.587635][ T8673] vm_mmap_pgoff+0x441/0x470 [ 247.587651][ T8673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 247.587667][ T8673] ? __pfx_do_futex+0x10/0x10 [ 247.587684][ T8673] ? sched_setaffinity+0xe0/0x400 [ 247.587701][ T8673] ksys_mmap_pgoff+0xe4/0x610 [ 247.587711][ T8673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 247.587722][ T8673] __do_fast_syscall_32+0x13a/0x8b0 [ 247.587736][ T8673] do_fast_syscall_32+0x32/0x70 [ 247.587749][ T8673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.587762][ T8673] RIP: 0023:0xf706efec [ 247.587773][ T8673] Code: Unable to access opcode bytes at 0xf706efc2. [ 247.587778][ T8673] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 247.587788][ T8673] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 247.587794][ T8673] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 247.587800][ T8673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.587806][ T8673] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 247.587812][ T8673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.587821][ T8673] [ 248.071229][ T8673] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 248.071239][ T8673] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: syz.5.606/8673 [ 248.076640][ T8673] Modules linked in: [ 248.077820][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.5.606 Not tainted syzkaller #0 PREEMPT(full) [ 248.080540][ T8673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.083616][ T8673] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 248.085330][ T8673] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 18 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 248.091138][ T8673] RSP: 0018:ffffc9000e81eba8 EFLAGS: 00010046 [ 248.093033][ T8673] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 248.095480][ T8673] RDX: 0000000000000046 RSI: ffffffff8e3c0b74 RDI: ffffffff8c61bb80 [ 248.097883][ T8673] RBP: ffffc9000e81ed48 R08: 0000000000000001 R09: 0000000000000001 [ 248.100285][ T8673] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144d564 [ 248.102734][ T8673] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 248.105129][ T8673] FS: 0000000000000000(0000) GS:ffff888096982000(0063) knlGS:00000000f545db40 [ 248.107855][ T8673] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 248.109878][ T8673] CR2: 00000000f706f000 CR3: 0000000055000000 CR4: 0000000000352ef0 [ 248.112312][ T8673] Call Trace: [ 248.113365][ T8673] [ 248.114284][ T8673] __schedule+0x1c69/0x6920 [ 248.115683][ T8673] ? __pfx___schedule+0x10/0x10 [ 248.117181][ T8673] preempt_schedule_irq+0x4e/0x90 [ 248.118724][ T8673] irqentry_exit+0x205/0xa10 [ 248.120150][ T8673] asm_sysvec_call_function_single+0x1a/0x20 [ 248.121985][ T8673] RIP: 0010:bad_range+0xe9/0x3f0 [ 248.123526][ T8673] Code: 89 ef e8 aa d8 78 ff 48 8b 74 24 78 4c 89 ef e8 0d de 78 ff 9c 5a 49 bb 00 00 00 00 00 fc ff df 80 e6 02 58 0f 85 c8 01 00 00 <41> 0f b6 16 41 38 d4 7c 08 84 d2 0f 85 fe 01 00 00 8b 93 d0 00 00 [ 248.129319][ T8673] RSP: 0018:ffffc9000e81ee68 EFLAGS: 00000246 [ 248.131173][ T8673] RAX: 00000000000004dd RBX: ffff88807ffd6940 RCX: ffffffff826e2896 [ 248.133599][ T8673] RDX: 0000000000000006 RSI: ffffffff8e3e6d9b RDI: ffffffff8c61bb80 [ 248.136005][ T8673] RBP: ffffea00016b66c0 R08: 0000000000000001 R09: 0000000000000000 [ 248.138421][ T8673] R10: 0000000000000001 R11: dffffc0000000000 R12: 0000000000000003 [ 248.140826][ T8673] R13: ffff88807ffd6a18 R14: ffffed100fffad42 R15: 000000000005ad9b [ 248.143244][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 248.144992][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 248.146745][ T8673] get_page_from_freelist+0x10e6/0x35b0 [ 248.148448][ T8673] ? __pfx_get_page_from_freelist+0x10/0x10 [ 248.150260][ T8673] ? prepare_alloc_pages+0x1f0/0x5b0 [ 248.151871][ T8673] ? rcu_read_unlock+0x17/0x60 [ 248.153367][ T8673] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 248.155170][ T8673] ? irqentry_exit+0x24d/0xa10 [ 248.156637][ T8673] ? __asan_memset+0x23/0x50 [ 248.158073][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.159590][ T8673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.161531][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.163056][ T8673] ? __css_rstat_updated+0x1ce/0x590 [ 248.164673][ T8673] ? do_raw_spin_lock+0x128/0x260 [ 248.166243][ T8673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.167885][ T8673] ? find_held_lock+0x2b/0x80 [ 248.169338][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.170857][ T8673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.172683][ T8673] ? policy_nodemask+0xed/0x4f0 [ 248.174201][ T8673] alloc_pages_mpol+0x201/0x550 [ 248.175706][ T8673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 248.177363][ T8673] folio_alloc_mpol_noprof+0x36/0x260 [ 248.179003][ T8673] shmem_alloc_folio+0x135/0x160 [ 248.180519][ T8673] shmem_alloc_and_add_folio+0x371/0xd40 [ 248.182281][ T8673] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 248.184166][ T8673] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 248.186000][ T8673] shmem_get_folio_gfp+0x75b/0x1980 [ 248.187597][ T8673] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 248.189318][ T8673] ? filemap_map_pages+0x112c/0x2020 [ 248.190944][ T8673] shmem_fault+0x1fb/0xa30 [ 248.192330][ T8673] ? __pfx_shmem_fault+0x10/0x10 [ 248.193867][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 248.195555][ T8673] ? find_held_lock+0x2b/0x80 [ 248.197016][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 248.198703][ T8673] __do_fault+0x10b/0x440 [ 248.200043][ T8673] do_fault+0xb3f/0x1830 [ 248.201384][ T8673] ? __pfx_do_fault+0x10/0x10 [ 248.202828][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 248.204298][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 248.205784][ T8673] ? __pte_offset_map+0x179/0x310 [ 248.207336][ T8673] __handle_mm_fault+0x150b/0x2f60 [ 248.208914][ T8673] ? __pfx___handle_mm_fault+0x10/0x10 [ 248.210613][ T8673] ? pte_offset_map_lock+0x174/0x320 [ 248.212313][ T8673] ? find_held_lock+0x2b/0x80 [ 248.213766][ T8673] ? find_held_lock+0x2b/0x80 [ 248.215223][ T8673] ? follow_page_pte+0x536/0x1360 [ 248.216776][ T8673] handle_mm_fault+0x37b/0xa30 [ 248.218254][ T8673] __get_user_pages+0x1169/0x3280 [ 248.219806][ T8673] ? __pfx_mt_find+0x10/0x10 [ 248.221268][ T8673] ? __pfx___get_user_pages+0x10/0x10 [ 248.222943][ T8673] populate_vma_page_range+0x267/0x3f0 [ 248.224606][ T8673] ? __pfx_populate_vma_page_range+0x10/0x10 [ 248.226434][ T8673] ? __pfx_find_vma_intersection+0x10/0x10 [ 248.228232][ T8673] __mm_populate+0x107/0x3a0 [ 248.229684][ T8673] ? __pfx___mm_populate+0x10/0x10 [ 248.231267][ T8673] ? up_write+0x2dc/0x5b0 [ 248.232617][ T8673] vm_mmap_pgoff+0x441/0x470 [ 248.234052][ T8673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 248.235632][ T8673] ? __pfx_do_futex+0x10/0x10 [ 248.237098][ T8673] ? sched_setaffinity+0xe0/0x400 [ 248.238653][ T8673] ksys_mmap_pgoff+0xe4/0x610 [ 248.240104][ T8673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 248.241737][ T8673] __do_fast_syscall_32+0x13a/0x8b0 [ 248.243347][ T8673] do_fast_syscall_32+0x32/0x70 [ 248.244859][ T8673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.246784][ T8673] RIP: 0023:0xf706efec [ 248.248008][ T8673] Code: Unable to access opcode bytes at 0xf706efc2. [ 248.249943][ T8673] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 248.252430][ T8673] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 248.254767][ T8673] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 248.257075][ T8673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.259397][ T8673] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.261804][ T8673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.264243][ T8673] [ 248.265224][ T8673] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.267455][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.5.606 Not tainted syzkaller #0 PREEMPT(full) [ 248.270252][ T8673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.273348][ T8673] Call Trace: [ 248.274390][ T8673] [ 248.275330][ T8673] dump_stack_lvl+0x100/0x190 [ 248.276794][ T8673] vpanic+0x553/0x970 [ 248.278047][ T8673] ? __pfx_vpanic+0x10/0x10 [ 248.279471][ T8673] ? lock_release+0x24d/0x310 [ 248.280952][ T8673] panic+0xd1/0xe0 [ 248.282136][ T8673] ? __pfx_panic+0x10/0x10 [ 248.283539][ T8673] check_panic_on_warn.cold+0x19/0x34 [ 248.285202][ T8673] ? update_rq_clock+0x40a/0xd20 [ 248.286761][ T8673] __warn.cold+0x191/0x318 [ 248.288167][ T8673] __report_bug+0x30f/0x440 [ 248.289601][ T8673] ? update_rq_clock+0x40a/0xd20 [ 248.291150][ T8673] ? __pfx___report_bug+0x10/0x10 [ 248.292716][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.294265][ T8673] ? update_rq_clock+0x40a/0xd20 [ 248.295800][ T8673] report_bug+0xb3/0x220 [ 248.297135][ T8673] ? update_rq_clock+0x40a/0xd20 [ 248.298681][ T8673] handle_bug+0x16a/0x2a0 [ 248.300024][ T8673] exc_invalid_op+0x17/0x50 [ 248.301459][ T8673] asm_exc_invalid_op+0x1a/0x20 [ 248.302979][ T8673] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 248.304675][ T8673] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 18 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 248.310479][ T8673] RSP: 0018:ffffc9000e81eba8 EFLAGS: 00010046 [ 248.312363][ T8673] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 248.314761][ T8673] RDX: 0000000000000046 RSI: ffffffff8e3c0b74 RDI: ffffffff8c61bb80 [ 248.317158][ T8673] RBP: ffffc9000e81ed48 R08: 0000000000000001 R09: 0000000000000001 [ 248.319565][ T8673] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144d564 [ 248.322023][ T8673] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 248.324425][ T8673] ? update_rq_clock+0x9c/0xd20 [ 248.325925][ T8673] __schedule+0x1c69/0x6920 [ 248.327319][ T8673] ? __pfx___schedule+0x10/0x10 [ 248.328812][ T8673] preempt_schedule_irq+0x4e/0x90 [ 248.330357][ T8673] irqentry_exit+0x205/0xa10 [ 248.331778][ T8673] asm_sysvec_call_function_single+0x1a/0x20 [ 248.333653][ T8673] RIP: 0010:bad_range+0xe9/0x3f0 [ 248.335169][ T8673] Code: 89 ef e8 aa d8 78 ff 48 8b 74 24 78 4c 89 ef e8 0d de 78 ff 9c 5a 49 bb 00 00 00 00 00 fc ff df 80 e6 02 58 0f 85 c8 01 00 00 <41> 0f b6 16 41 38 d4 7c 08 84 d2 0f 85 fe 01 00 00 8b 93 d0 00 00 [ 248.341030][ T8673] RSP: 0018:ffffc9000e81ee68 EFLAGS: 00000246 [ 248.342938][ T8673] RAX: 00000000000004dd RBX: ffff88807ffd6940 RCX: ffffffff826e2896 [ 248.345340][ T8673] RDX: 0000000000000006 RSI: ffffffff8e3e6d9b RDI: ffffffff8c61bb80 [ 248.347739][ T8673] RBP: ffffea00016b66c0 R08: 0000000000000001 R09: 0000000000000000 [ 248.350147][ T8673] R10: 0000000000000001 R11: dffffc0000000000 R12: 0000000000000003 [ 248.352557][ T8673] R13: ffff88807ffd6a18 R14: ffffed100fffad42 R15: 000000000005ad9b [ 248.354965][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 248.356720][ T8673] ? get_page_from_freelist+0x10e6/0x35b0 [ 248.358475][ T8673] get_page_from_freelist+0x10e6/0x35b0 [ 248.360173][ T8673] ? __pfx_get_page_from_freelist+0x10/0x10 [ 248.361993][ T8673] ? prepare_alloc_pages+0x1f0/0x5b0 [ 248.363539][ T8673] ? rcu_read_unlock+0x17/0x60 [ 248.364934][ T8673] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 248.366676][ T8673] ? irqentry_exit+0x24d/0xa10 [ 248.368158][ T8673] ? __asan_memset+0x23/0x50 [ 248.369597][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.371119][ T8673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.373060][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.374586][ T8673] ? __css_rstat_updated+0x1ce/0x590 [ 248.376221][ T8673] ? do_raw_spin_lock+0x128/0x260 [ 248.377796][ T8673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.379441][ T8673] ? find_held_lock+0x2b/0x80 [ 248.380824][ T8673] ? __lock_acquire+0x4c5/0x1ec0 [ 248.382391][ T8673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.384183][ T8673] ? policy_nodemask+0xed/0x4f0 [ 248.385683][ T8673] alloc_pages_mpol+0x201/0x550 [ 248.387185][ T8673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 248.388823][ T8673] folio_alloc_mpol_noprof+0x36/0x260 [ 248.390481][ T8673] shmem_alloc_folio+0x135/0x160 [ 248.391995][ T8673] shmem_alloc_and_add_folio+0x371/0xd40 [ 248.393736][ T8673] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 248.395627][ T8673] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 248.397464][ T8673] shmem_get_folio_gfp+0x75b/0x1980 [ 248.399060][ T8673] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 248.400784][ T8673] ? filemap_map_pages+0x112c/0x2020 [ 248.402435][ T8673] shmem_fault+0x1fb/0xa30 [ 248.403827][ T8673] ? __pfx_shmem_fault+0x10/0x10 [ 248.405356][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 248.406950][ T8673] ? find_held_lock+0x2b/0x80 [ 248.408311][ T8673] ? __pfx_filemap_map_pages+0x10/0x10 [ 248.409946][ T8673] __do_fault+0x10b/0x440 [ 248.411288][ T8673] do_fault+0xb3f/0x1830 [ 248.412607][ T8673] ? __pfx_do_fault+0x10/0x10 [ 248.414071][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 248.415552][ T8673] ? rcu_read_unlock+0x2d/0xb0 [ 248.417038][ T8673] ? __pte_offset_map+0x179/0x310 [ 248.418623][ T8673] __handle_mm_fault+0x150b/0x2f60 [ 248.420203][ T8673] ? __pfx___handle_mm_fault+0x10/0x10 [ 248.421887][ T8673] ? pte_offset_map_lock+0x174/0x320 [ 248.423532][ T8673] ? find_held_lock+0x2b/0x80 [ 248.424975][ T8673] ? find_held_lock+0x2b/0x80 [ 248.426457][ T8673] ? follow_page_pte+0x536/0x1360 [ 248.428008][ T8673] handle_mm_fault+0x37b/0xa30 [ 248.429509][ T8673] __get_user_pages+0x1169/0x3280 [ 248.431065][ T8673] ? __pfx_mt_find+0x10/0x10 [ 248.432526][ T8673] ? __pfx___get_user_pages+0x10/0x10 [ 248.434178][ T8673] populate_vma_page_range+0x267/0x3f0 [ 248.435848][ T8673] ? __pfx_populate_vma_page_range+0x10/0x10 [ 248.437687][ T8673] ? __pfx_find_vma_intersection+0x10/0x10 [ 248.439497][ T8673] __mm_populate+0x107/0x3a0 [ 248.440940][ T8673] ? __pfx___mm_populate+0x10/0x10 [ 248.442524][ T8673] ? up_write+0x2dc/0x5b0 [ 248.443869][ T8673] vm_mmap_pgoff+0x441/0x470 [ 248.445310][ T8673] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 248.446880][ T8673] ? __pfx_do_futex+0x10/0x10 [ 248.448334][ T8673] ? sched_setaffinity+0xe0/0x400 [ 248.449886][ T8673] ksys_mmap_pgoff+0xe4/0x610 [ 248.451322][ T8673] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 248.452941][ T8673] __do_fast_syscall_32+0x13a/0x8b0 [ 248.454556][ T8673] do_fast_syscall_32+0x32/0x70 [ 248.456055][ T8673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.457980][ T8673] RIP: 0023:0xf706efec [ 248.459238][ T8673] Code: Unable to access opcode bytes at 0xf706efc2. [ 248.461279][ T8673] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 248.463804][ T8673] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 248.466195][ T8673] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 248.468568][ T8673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.470952][ T8673] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.473364][ T8673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.475776][ T8673] [ 248.477399][ T8673] Kernel Offset: disabled [ 248.478725][ T8673] Rebooting in 86400 seconds..