last executing test programs: 13m18.910480055s ago: executing program 4 (id=47): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 13m16.89810186s ago: executing program 4 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13m15.052858888s ago: executing program 4 (id=54): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000040)="8c03fa92b5f384c8021b0a08ae03bcaa0db2fbc3"}) 13m13.00403987s ago: executing program 4 (id=59): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x8e}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x40, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x24, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x10, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}, @generic]}]}, @nested={0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 13m4.263345423s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}], 0x1, 0x2, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x1, 0x100) listen(r3, 0x0) 13m1.990913827s ago: executing program 4 (id=84): socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 12m46.624649636s ago: executing program 32 (id=84): socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 11m24.547851487s ago: executing program 5 (id=277): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r1, 0x2) syz_ublk_setup_queues(r5, r3, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x400, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x0, 0x20a}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r2, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180)) 11m23.023624381s ago: executing program 5 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x1, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe50, 0x0, 0x0}}, 0x0) 11m21.955165319s ago: executing program 5 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 11m20.215606433s ago: executing program 5 (id=290): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 11m14.649833707s ago: executing program 5 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x1, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe50, 0x0, 0x0}}, 0x0) 11m11.783249779s ago: executing program 5 (id=306): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002340)=0xc) kcmp(r1, r4, 0x0, r0, r2) 11m11.727726605s ago: executing program 0 (id=307): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x1002000, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@nombcache}]}, 0x6, 0x47e, &(0x7f0000000640)="$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") r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1ff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000100)={{0x8, 0x0, &(0x7f0000000040)}, 0xfd, 0x4, 0x0, 0x1, 0x0, 0x8230, 0x5, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000140)={r4}) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000004380)=ANY=[], 0xfe, 0x1508, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000000)='127.0.0.1:/\x00', 0x1bf) 11m9.438806791s ago: executing program 0 (id=313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) 11m9.336342743s ago: executing program 0 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x1) close(0x3) 11m5.234516589s ago: executing program 0 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x1, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x1, 0x20a}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe50, 0x0, 0x0}}, 0x0) 11m3.222543923s ago: executing program 0 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 10m56.694360564s ago: executing program 33 (id=306): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002340)=0xc) kcmp(r1, r4, 0x0, r0, r2) 10m56.639598093s ago: executing program 0 (id=330): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002340)=0xc) kcmp(r1, r4, 0x0, r0, r2) 10m40.101337854s ago: executing program 34 (id=330): r0 = socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002340)=0xc) kcmp(r1, r4, 0x0, r0, r2) 8m52.526098274s ago: executing program 6 (id=503): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670977db5e911ef2ad63e849901d8433129dbacbfd4924d7545517fd18b52504cede0ac594eeb7d29903b5e1ac84c1e749c6be08d302d3f933666e79d44372a5460e8a014172ed453919ea227cf8087304638788e656f1c3fb7013cdcac9612ebfe53e88cc3226b457a2cd37a993310f36acf1e40e34d4f60e", 0xc7}], 0x1}}], 0x2, 0x2090) shutdown(r3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x8) 8m50.954198193s ago: executing program 6 (id=506): r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m47.349457857s ago: executing program 6 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 8m42.499862692s ago: executing program 6 (id=516): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670977db5e911ef2ad63e849901d8433129dbacbfd4924d7545517fd18b52504cede0ac594eeb7d29903b5e1ac84c1e749c6be08d302d3f933666e79d44372a5460e8a014172ed453919ea227cf8087304638788e656f1c3fb7013cdcac9612ebfe53e88cc3226b457a2cd37a993310f36acf1e40e34d4f60e", 0xc7}], 0x1}}], 0x2, 0x2090) shutdown(r3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) open$dir(&(0x7f0000000080)='./file0\x00', 0x10001, 0x8) 8m40.788821808s ago: executing program 6 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x401, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) 8m38.727255304s ago: executing program 6 (id=519): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x4, 0x37, 0x89}, {0x4feb, 0x9, 0xf0, 0x1}, {0x7, 0x0, 0x9, 0x1ff}, {0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r4 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pidfd_send_signal(r4, 0x37, &(0x7f0000000140)={0x33, 0x2, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 8m22.986896351s ago: executing program 35 (id=519): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x4, 0x37, 0x89}, {0x4feb, 0x9, 0xf0, 0x1}, {0x7, 0x0, 0x9, 0x1ff}, {0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r4 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pidfd_send_signal(r4, 0x37, &(0x7f0000000140)={0x33, 0x2, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1m47.072104197s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x40, 0x9f}, 0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x3c, 0x0) 1m45.891327224s ago: executing program 2 (id=1103): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000) io_uring_enter(r3, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x41) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000062c000000000000c1334d04000280040003"], 0x64}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r7, &(0x7f0000007480), 0x29e15b2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 1m45.624539793s ago: executing program 1 (id=1105): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) 1m44.98690703s ago: executing program 1 (id=1107): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x206643, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x10c08, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) 1m42.923114452s ago: executing program 1 (id=1108): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000000880), 0x0, 0x0) 1m38.021213953s ago: executing program 2 (id=1112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) 1m36.367411182s ago: executing program 2 (id=1115): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.991620094s ago: executing program 1 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="09e200000000000000000000000000000000e200", @ANYBLOB], 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xffe0, 0xe}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x4, 0x400a, 0x2, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x4, 0xc, 0x1, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r2 = socket$kcm(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']', 0x1}], 0x1}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="ac184d", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0}) 1m35.141484693s ago: executing program 2 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x206643, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) pipe(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x10c08, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 1m33.002324402s ago: executing program 2 (id=1121): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1m30.990306965s ago: executing program 1 (id=1124): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa2d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m30.784281303s ago: executing program 1 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 1m16.793864588s ago: executing program 36 (id=1121): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1m15.172856277s ago: executing program 37 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) 18.973637101s ago: executing program 9 (id=1264): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r3, r2, 0x0, 0x20000) 18.291335208s ago: executing program 9 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 16.085880137s ago: executing program 9 (id=1267): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0xffffffff, 0x0, 0x4, 0x10, 0x5, 0xfffffffe, 0xfff, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 13.75745005s ago: executing program 8 (id=1272): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x25, 0x0, 0xfffe}, 'syz0\x00', 0x45}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.185865736s ago: executing program 3 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x2000000, 0x0, 0x3}, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000440)={&(0x7f0000000380)=""/169, 0xa9}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) timer_create(0xf22a315a24c63374, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d64, 0x80400) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000300)={0xf00001, 0x205, "084c9e5a162d4be5c3ee49327d3fdb140dc9a318812c58c7d9abe1253f390ef7", 0x7f, 0x101, 0x1, 0x8, 0x4}) 10.979374032s ago: executing program 8 (id=1275): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.954691685s ago: executing program 9 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) 9.49560167s ago: executing program 3 (id=1277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x24, r2, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) 9.417795027s ago: executing program 8 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.15541531s ago: executing program 3 (id=1280): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.597877266s ago: executing program 9 (id=1281): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) eventfd(0xfffffffa) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 8.153352881s ago: executing program 8 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x100, 0x7, 0xaf, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r2, r3, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="7d11e69edb9ba197993a8d0e11ac0dbb597cd4e2ea37c79e956586ac5619a405e348abf8ede7817562933b7c35722f19f5279901eed15a98c597915274fff639172b181e52f17268e3859590a7647ca9ac8c2fd86abb08ca2e6bfbbb4a10e4267ad7d1aea7e5144ad960ce5e67e45679611a97f31f7811293096dfb7d05e837893c6ec24433d80810c1993337603a87eda07048a28e70ca92301eebfe08a3ae79b1087bbf1c0e15ee0e2ba84ade259fa509bb9ebd01b77d9fdd17012b087d7ba857a232b2a59be63f6d39fc0b35d53ee55a65db5af79a6ecffeafd273ea9ea7b54debbc62b4a0d5282c0ed88b8d5c63c3ac899266cf560806f287c8626c98125a7b8bcd8e9ea058bcd0adadca88ae43de7ef6a1882f1ac9c70bcfdb9663ec97968b2f5ab4579625e1b584f92f4a1d483fe642b0dbe86bfb0e48874174f383d33630b64d445f8cbcdc7bc20e4c26e1321d310343cd09682247a13d43b0ee6eb56097cf2d98acdcc91fca56edd653338e51c07adc6b058e63c100d216954d04dba6525024c19fb5c87752626cc01c1afedbb4d891be98841667533c605e80cf70ad4485e80ad885ee8c0fd2fcec3b0e4c756f3c2b346d7cf66fa8a322a315235f2b2b9b7913d0e2cc98f6acaae5d69cf355ea39b4ea724e1fc80eef039a61b216408e9583cde84909b0181ba5a63c924cc061c1c36ffe7a7d076425143e9c894108ca64c75aa580aeaf68cbf208c2f0a98f76d64032cea3d24dcbd9016c1dd7e29cc3135ff57ba80b2e8c18a81041e1d075b5e4efc4b735005c2d6d7e67c282d8c0fadcd0125788e45c4178b8a1218b9530759f9928db543c1804f1b314a365e9132baae0fd7722d1b5f0722e5e71ba245d3de5fdc11526b61f78252c5f709381c2dc7ff9bad31ce48d04c8a56db83ea43e2ff27f01d7494221f07799bcbf7fbc619d46bdc0c5bf125ec0ac36e6a65b6a4970420c83cb5538c53bbb979dfa8d75f9f27a269995b22a8c6c8e89a0e88cb970d49acd60a4e385c5f6f219a0de1e162fb4bc7df8b28a5ee151422673d4e99fb6c0d748124eb2db39def419ae59eb1c0dc8dd70ef6e14588b231c6fe2642c2e5ac45911c91213208bc669f6fa764ea90131a998f5ceb4d33f77c7d447315cbd3d02ae7e478fea77f9de6e8c82aef9a72e61724794658c5d3c6b05f8fbc43656854a8d439f685f9fe6d419eb154943e600cc332e27d934010cb5b2bc3bc2e7446809dd23101830e9ed75dc18924b0940af8c889a55673b087ba46144666cc8d368058d5bd216de2b2d04563da8f19b74d4e46d36de9e9415cde3feb3b0ade18ced64d103c728f806b39c046d15556bcbf218adeab9608474f32c1991fac178df3674dee52c27f9832b6e7323c6a5c4331bc0f96c6d266d6ad83863b225cbcce9caf8466b168cd8e1a21dc1a0b7434596e44cb8e210a82d3eeb1ccbe054bc96608b49f411ee5c6473f12e55bf8505c35759e63d7cf2bbdebc1728615fcd876994934af6840b33ee7ce22e8b5245f957ad4bd2867c568099aa80157404c924ebba08e034d2361ee283c1617f348585153f20ea11e7e920170ef8b2c612be15e2c35cd71c65eccbab71dce5b72eda13a584077b59c2aeb8136f76062dec6a741b8f06946c4d518a679735d912d906f94589ce44d59fa36b0b2a7ca5cd076f3486cbea747d861222caac1abf9713572696f4b89855de7aea0aadf735ba62decf79b8f9e8166effd026a3fd184869129e534babb66e89c8490c8687f413d0dc0549f2530e400b43a6688f5b5fc2207195783e8701b60730c59f27a25e54a84712ad8f1726593cad75d0f26a96a469dad2229052f5608da79086e0d08fb7f6a811cf342be4b3ae11d631a4b30932123ddb9d99494fb8ef468592dfde3454ff372f991e7e131aa8bb196bd379842f125eb440f982d66114404a676db6ddd161a8a1a370037a0bdafa0c4092c562a9b088fccef404f6700234a1aeeae994ca0e6026c0d286b5f9a15289201d3dd482b09b541b49f078dc00b2ede7a4023bc21ead4d4fcac45b887508030af20e8680d240a31a97981d92955f4633d751dd6bd2d64e6aff0e95bb65f6bbd3f823c34e4cade810293572826bd63ae892486e6cbed5db71cb41390240a09674399aee21bcc2778a2ed6b0451ea9d7bc36734a0382ce5322559368157d3038cc42b3a6bb7a0db2deaf97b51102ad21fac41e74389f3b53b1690521ea8cb5a113a25f43a37ead4c54db05254110c48f3119ed16cb57de0ac568919fbadf6c1f7744fdafd50c327cc67d6b26f52b40e84846e0357483def514cc3376e85f70a4be689c0c9d66676c08fd6630f6fe96d8b857cb36c27747e281523efb8a7b36132e911974f70ff7b7d41ca51d225031fc23b022a1d95be5871e243a254b121f9561a90571704793c27c60a4e64371952f0203b4d4994ef83376677ea4838f610ac800cd18fc45e68bc2726a68586a1e1a1b49fe41bfa8c0c97716bda1cfd3f63dc21e7b6b4773a81b55300026d8a5abbbc0e0df57e580e159336493544667316473d6e61a6d5ab95557eafdf93690674ae6c3787e199a39776bc887ae2400e2c3d5e7ec56ed4b3d8e9f6d1f73bba2d5b227aba663247f83f65eb7e9453094b73d0e9c69bf473cfd46394c7a47a6fb94fb47299342582c1edffbed93b463a29111dab2ed849f4f66019577c194049feff7959ee84403357836a024e219df08c4c88d6b60fd58f052d58bdaa1f7dad100c8f2fcc56e642e3f80d6422fbfb5ed699dcfad4451c428102670910a9b399b5c86f32886d6e328f937327feab0b13d7de5c1d7666e95123bc7277b6deea6b8311ff5b1a587275c7cb76e49386409bae34e27591e81024afcec03678f89a272b1dde1d45a3d79e4b0f7d6299b989be0a8b6addf77503a3633fbe0db8235f9a5ad754bd5a451ed439924445670b95f3d4c3b330a86c6cab77259a0a14b0a19fa4bcb661e564905b316af59e09611b45c3949ebb289c81ff6e71e1535682e63da6c736381d66d4205802fabdca48fc4d734614e0ad05ebc55defd8f93a2a4b700d48be5f9271623caa3176a9aa9ac20ba310399e4e28bc2afa1dd01a55a333aa38805e27a822c5526fb183e1d6a6cc736e0780de0acaa7aa6ab060e316924eaf6d5b1d4afd2b8d5932d34f2a417f2faaa401aff9f35143d4a84f234a8b0d1af5816364d8d0e38d5dd04cd196666f859dcdb5fa10f26ac971f1440c403565ab43ba7170e59faf7dce7d21b103d8cda9bc2182386e745da850db73d688b0fdf0a310fbaba52a400af3279aa635f7015c56ab0757608ee9097d3cf6ba6beced9137d476785215c466f9b70e9706e530aee00380de9d1899dbcbdce7bef5a076ec76007fa3acb1a7f5901402a72b889be85a54ed04a499c43c7fb5ae80a99c5eb103c121b24c678e9e8f5dd4ab60741c6b599d4aa73c2400461615942748a1e555ef67c68af4048170b46960084eaea9ac7f1d096924c29c959527d3464a85501686c322791a122f4d69986a6e3a1e5ccd77c08a064b23472083ba4b2acb4482c82ea91d5b9e7d33859b571352726c29fea7410a391ae8a573928b28097cb5e41c95aa5ce5c766d9adac6afea92f3c30c381dc966c442bbcf2ffd0e52bc1ad8c675f8491b4c1dce38f37e44f9bd533bc11c8816c18220b14912daf99115c13e26cdf67aa6272b8005fd049b2db4df12c88406cb7eb093a25e916c8784410ff8058d9fee19e2341ef3826db5a4957af2a34f7026b5d9a22b44a58cfd210604ee8364331a8aa5fe9b8987612faf4e8b4315285c775515bb8d43916b5f7dfbf1115bc0f1653ac8ca0b55c78800a3230aabd2b18840681b3908680df264bb35fd195e752465341878b96bdee9821901193829d89ccd802271ffef4ab587063a8656acddac07eea98bd8684cab530f5d566068e6c3ee3bca9c7395d7fb8282da7159fd33727a031e23caef8e3440f09df2381588b9d2a3aef910e83175ccbe2bfc28bdf30dcfae06a6fb81624d21f0f6d40dc370b61348aa71220b73886089926e34db1932be545e8059971627a812f78cb98803a9461ba55dc8172501556f310b29d7042b1dc9d8bb9b8f46637797b1ddda83c795c37501380e940139ab1e2fa559fcd45f2ad1187da2ca771f276070861ab3ee14b89083948f335d46dcc65e0d5456827fc3fc767201fcdf1254cfdc4f0bff5c090f4f1c5257c81385f3e00d3a796332c9827b2335b851695e2ce763cfabaef3b404bf8da4bc816739c19cb2c7044855faa7f246ab5be8e518004d1d7c5d0c46b2567bb0e99039c9a5edc7896bbbbf6f532c9d7c02a38eec7dfc077dc51c11ef14091c5f37fd2441fb68a5a8f2f3a081bae17444d1edf771c82cb05011c9002a0bbe34504b18f3cd06ffceb54ef090be128bcd207db97bb0f4bd87a0550e1f5f39d65002e8e792bfd8a84fee55ce82e2a967a29212e8a2edd4fbe863041761f4dd91d21c847abb8c44b623a29a94508c10a11f82df60f202563358716b667684fb20bd01d9c6c5a570b04d21beace8aa58badfbc13aa8c47e874819570d5d85d5dfe749028d093595696a5cfc444899f4a22e1832b45ea35c92a996affddc8e3598f5c1d4e8a5dde667f32ec52430fe20e4ebaae192e43f286d9101805ec2ca4cd4fcdbdd3fefd543495fc4e2ed81e0dbbed2f45bc4f57b1da5910d2353e6d47afcb47d6847ab181413931f4971381465448219508a3cc0dc41469bed12cdc3d4f3b13e644c138acf8ce5736a6cea6bc31fa57b038a365af10165d1525a7e754ac4e46699413917743878808fa523191c93ce473cdd875c700c94632167b473cb55d16abb2fb2a28aa8317e48bb21a7fc47b98791815dcf8ae45bcf7b06e0506af594b80a4dae48a72efc5c6a6368fb9334f7f4d5b60eced4d83b7c9eb46b081f074602d842adf9d9d57b58ccf47ea037b17c7202bb816f6d0fe5873aa581c2f52bf241991cf5723d0e75a3ec4fcb2181e3a97d9c019017d05c6ffb9070631249a9ec25f3d5c8b9acf4d372d7c6c7e9c68b9c63fbfc0de0fa8f4724b4a1e34270d0b09719d8452eda5ba665b5b987136da1afe7d8ee5d40fbe28acf1a03607454b03c5d6519a0af5df50d730c31972d6e54181bf423da650ad45dbd383a3155902bdab4150627d1b9ce7afb8c0d5074a7149ca591d22f00f734af55d251c4145aae58c2c70e21a712fa6623935b6fd021e29a1f889aa6ce2455ae339bd9bec263df8dbe3920bd2e3f87d0afbf8411c17927c89c93a209bd9380a902ac4c585b98f83426824fe20b5958d621d986e2959f9930673162708b48975bab9a4313cb7955d244baad7346bbd0490e317fae43cc06232037a93d1bd572958b5a54b71ad48cb3c619095be723d42e8ae55ffb089df7a5ae5f9b994740f40e2a7f354c9cc8aed59ff00432a34a64eb4469fd3bd7e49fe8e34c787ca2c083f255629148bdab626384cf7ecc44a8ee114ff44a0281593f5b1eef4958c81deef78dd1cefce4016b2ff55be4f91daf6a9840abba1a0c14631f36790b8244764bdb9d4f73e1cb705c9105ec3cea44148a54f8c60b652959dcc8a94c03cffee859965336611f43c4d221ff6c9c24765b0ac9189f854482e1095b9048707baf2fa459220a3df95b865e8d62ddcdba7df60c0139a7d06575ef664071030aab5217edbcf8888efaaeeb7103eb96e305fb347a15a466bbea0f1333dd63c6187dfd2b16a0c41411cf193861bf2e6de5f1e44ad2ce00eec24f4b4fcc81897d28d830bf5f50cd3f50681a10e3f97df00d94721cbb4dda1efed5844d4521d75a7274a0b22fec26eaeabf3003d7e081ff42eab9b13627dfa52eb3caa054e000855f969ca017e9a2c0575d4b2b46644ef4b80304bdf060ce5498b8c2709ece2af268c5f3acf68e4de18efc8bdcc4fa390ebf3a5ca01cb09157d6874e6d1f436af34a7ce5279e5a6efc2780bada96392dc2edb32cf3f5cca285ce8e8d97ddee152346012f4bb9c70253d0dbd5adbbbe70976f41357da9a0e5305bb1a16f23041f340dcdb1b2a561d38a6ce5c0244728078025b1be4d7e115053f75e1b9185918c863db22951e2aeb07d257e4eeea1f117848446bc84fbc6604825d3494001fe53d176a38465f3d47b4c471ee74383f204d86033318996802a5321e608b4404a2ae06198dd097767e71d32c94fd92089db84ceb82f70fc3d1da5992d8c3726f7182a3c5dbf2c46c181335d488857541bfa09e146b970cfa2cf01bb60fa42d0f4c4e98dff43f9cb1ae003a0348070453dbf2e240c0f58983bf84a1d66e12ac4a846b18a61fae0927213229f9432b1d1a413e8bf8e24d338ee4fb9fea9d9f935b429771bb6d11bea839e7181b290f8c7d249f91c64b19ae3f973bd6eddef38ccf2377c19b4b8805946ef59112622fe0029f05b1f52e23b069e28def0953e9cecf1750a4f239917e3d247b1733b23eeb285fd29abb40d331afa4d36c1a75f5749323a8700337561dd1ed19d42805aa7cd63dc208bf39990662c7c4bb2bd0d4e83f5f60e84b24b1e468e08b84ed0d17ab72ce10ee65dcc581f1ccea30841dd82b78450f301cce34611c0512f75b266eef75464fe1b21a791fb47b04383a89754d8dd9922e1120619c19ce11f6ad670de3c4ee5d17e001cff46a639dfd92482c5911c9731a2c4be3e45be25e30a4d69b80b46a7899b44133107711841d66a358792d129727e5c2f3cbddbaea7164ad41f5e83a9e27a2073c17cb9d7362944222ec7f1c4b2bf1011a72830db01b9f9b9b4330601f6b67654d431ea9dc6e0609442416a1d3bd804798096759a505faa70d5d619b362be7c168fe48657153f01d300dcc8a8442adaffc6fb1d4e1e1197541b16bac9a9c935b11e01c34e2c4fe4f07eabed98eaee3ca63ff13ab6e83072e254778a751bbf42ffc93096e200166961570b44b21fc00faeaf06cf99f32156307f74ce09d439be51de0c71097702bef268ec4a25daa2a0879a657693f8616aec1b46dcb6f956139b9d99ebf00306728ab129672f476a5b0993662dc46ba928fea34f6da166ead235ba7c6264be1097858faf2471e4e65a7159f289a5768a5ec189a38cdb0bb938ccfedf8cdd6a07118da514236d36e1bd193fdc5dbc776baab4686b8720e9bfce68a9e3217bf8679b247e5c7ab78c58b156e647440d3d5a131265e65553dccafdd8b26ee52f99f938a4a6890090cf188f98011282f7d9c8d0fa9ad326c2c4a8dc74e2c06edabcfb00cf210d4d37e35e81b60a65f11d605372e3f0a79c48b73cd078adde1a19a77e6f0fce46ed95c53e5959e39b7847553b3a5714dc096d5dd3ce43c9aa53055b9a80ae79b1ae560a07ae1f2ffddd0f4cf85d66c0ccc96bb1ce3b30edc6e2c246b56fb96f103dea3aaca132e12ba2a33ed4d8ec42de0b7515a436b429b034d0cdad86abb5289f60a332cd18467bce91d97077867ce413238d068eec6ca0a2cc281e21b399673cafbd1dc0518e9bc1ac474178f0c9f4f9f4ec36fdbd5fe6153c959ced70468503b9c3ae7d0dae6808048646d15330c5040353d06be25e586086e4a7909aa5360fc7d238f939968d1d8c46e3ce58032933e20bef8c5114bae9b8211debfec28c97d981d4b9839d139b7094b6b5b402270e44ed59b256e7f502b7fec1e7b4245bc4d821bcb6500e22786a7851ee44e5e8f94f534255e83e6af38d87560f3a34dd854d9838d2943fe6f87217f2ef9cc4347b581f3fb9cd20f34b0a5f31e8db11ad64b359ee757b22287dcaf3b898c331fa8658a97cac6b62780da2baa8352ff887902a362553e6baf94928f224dd051f8431749a6183ac24b88445949862df73c70aeec52d8d2952e3349a2e930b3dfa751d3505d0b85deb7a8bc4b2bacb2a193024405e484091238caa81e5be9a90c0b42669a395e3388910ccc7141dcb60025536e8e9ae42c5d5e7fed6104368193e32111b810a05f719226a87945871746c269769c4c808cb2d72776123cbd1536949ac8198503d6366be8e93d82fdb33117cdf9a9d9fb0989e2b02401211d34c9a7aafa1a21e9568bff3521263b0f694cee579c967e3da57fbc062cc555851a90e5a9f49f674adb555aec1b46d17c110a9126b5eb6a1f5c4321210ab5ed114d883adf51cf02a6622593c41244962c8670a1e8f4c9703d68f07dac063ddf5004a0c01f4eefd04681c900effa4c273d256b7cdda3b7c4981b2a902c7d13df1fe23ac3c33bbbd005e7bf034a67b509d4d7a4e375f58e2a7029a898d1dca988aa60e0825a639e595fc6942585d772e6c6950b85f14c99b71ae2ab457a1a6378ca448451678c3ee789aae6677b426f532f601817ae1cf38425c9393daceb2c80d483a68651b839fc28667b143ae0dfd113b18d86d03702f165debcc6fc215d9a9820bf9157f326b09820ff1feb2e6e7a2ac7883aa4281da9b582bf6dc8098f63208f9be01c884b8f434ef12e47983e941561336a634211eaff84ac8f01e556b22ccc438b85759b868f7ddb935c90f6c45853934488617d9a67a7445d2a6b97637a7ad4f046de38eedeb14fafa6847baec303427914f8d26cf99a70388801696b20f978b3225f97b3516a2a5f50c260225cd10d010ef8ca9327c80a36dff9933e8617e75d49009d58e126512962fd873ceba9f95984fdc5f387bb6638b80509c0b7188d4ead4af2b1f1ed3e3399c363e9a6c17104f053df07ca2ec929b12e3ba006ff0779fb0e79ff19f470d1e9e806c9437626b8da67acbe054aaf45cc494cb98a2fbccffd6a606134fe6fb9936d733a50a85612ffe69e0adcf57f6efd4c22950bceaaa95c5c38cdf93714e616414f167a67520566a8c4dc1bf616189469d4ebb94c05ce327cc715b135f095783f7844656dd411753f5f968019509bb75dc20409220b3e3ea28356f0f396897e40a696ccc7593c9cdd5c66945e6d55cc6be9f0b963e8fc7db4501d384ee55c43dee2d58c3b9aaf690db9a71f949b4b6a06bf817fe51bdc62ddfb61055d5bde49248fcfb4f6b9c0420280cac1e1940d2fa0dce7318c7a189874ce0c7550bc4623043c36f622855ae2650f8acd2c7d5aa0ada283dbd1853430bc33e4ff7922139166280077abd28d6f7928ea28c28d42be9370b13a23f8711c78b0fc74a960252d4f30034e85b5be1c87218b43e033d9d3f6e64d7ed4f9bd9f3ece27a5c36cfab16c9f420513e658c64fe06e973264b1d132d2139a20fda3bda0a4ed42971a5109643ae8ad46c2d5f5356e2ce47dfcfcc6c5da007564ff3c049befe7b77f294bba25d7fcdb916cbf565c4c48e9b0516e930db3d72668a765c4e85c9fb5857cb4edfb0fff61ecce4c3e8f9f5fa1e4dde741aa811fa1cfb7201504943924eb27e7dc50db07e50339a44dd078631859aa7649d0980a3a99f6f0ae8af16f8c01813a81ab5fafea73f59f017ad1c796f59944579c7f5d306ed5b7aa8a2850f4e78bce2d10d00f64d8e2943cfb5f5bacf9b0021d24a4be286f092b8e0cd20a0079ebf04045c06c6b337d8d7ee26c48b7ead2183a270fe72bcbc462f90f4923687213cdad47e09d1eefe9fa117e3698467efd1e18ed0c96311c9dd157304efa6308145ea9e80c1599c0d9c81b5a5eba37e1dce69a561dc5186a06c0306596a31b5437805a49f02aa8db37ff12a2a6bcdd36ee2687dccad3cb864ab91b9f1a457ffea677afd2143e3e786e1e1e89c47895cbae112ec2e6c93b67bb00b905a55095a27a4626b9fee68d75e13c5f649b14428576ef45ae64d439f0317846c1376956bee318c6f07754c183d693de0af185bdf9674da66bac0903c370634361981a167c51dd133a61fb98cb1e4ec5543137f58022e5d4dca24fe470b54572386c54b8f8d7f9369ce469b4e23f4b3e1ed793eb94771ba11d3cf1e8d54c15f23ceed1997431052c766df619b116b6c8089a064fe5dcc47b5fcbbc7e94241aa64553260178928e8430fd8442139a0d5a801a67bce05ad2f22a9946499241f630dc56d35398170a25da696c4ace18234761f0ea834f3e1b8740877f0f9288d72dd0da4c803a21af93271ecff7a1df00f8fbfdb187e4b077ba71f5be5f3c2c2bbec377070fa01cb77569bb84000e3db036272299ce829f411bf0ca740b7cb1e5c83f5c42937bc121051d9b407596af97c4830a1129b82d76268ac79dcd78f99b7c2a9aa71b3abe5538b66b0df5d20faef2d2c139fef463a387945a13cb5feb3343599d56231d780f46afe487432e24f325eaab84be537f11c9cea72ef3abe2ddd62f7e53a57cdf08c6f0bd1775ee645d80d40485d732b888919bd39e64ef68c140e0698eedcbb3f9d54b5f20955138611605a1002fb17aafb328ff25e34b3f280a2c9a2ae1a8e09b28b286f479c71fb0e89d150ece35b0512135b195281f2111328085596c971cdb5367ed965ee98caa45647910cb7d583a9c9fcd5fec8573264137f650c99c436a5fb6979f7f390437760d8daee8ec86b70d932ec3ee16ce7e25dcda4dedf612f98b1c2b634f337bc4986efc398981a2590ddfe156c6b04fcb26eed88a1fc03fcd583ab8f6063b87182530a33072b94bdd181f7fa675b0e2c8a4a83356dc794a8a5d767ad799ac8c4aa7de7defebaa0cbdadab842e7784966bb45d53f243917c4602412368a2da4fb0d8c7b53c5d0cba75647309c0eae651b7cf18ee1b02290fcbc303876c69832e3e2572285f1f10a188d6878b43a14aa6aaa9826a5a0907baa14ca782a40812966d36e1b075bf68c491b855b47fd9b5dd11edd77ebe72ff3adcc79f2bdb464ed5f929cc96c53f396b883b1f245c3a830432efa89a7a896dfbdc7b9a241f637682cdb65bafa341147f3594e8fcd121b13f4513cce0d1470fe6bc8166ff6992063a15e016c75d9d1c019a3a128b3b05c81a99a562bb7c73ab3135802cafe8f895c148b714a0507ed037ea4f5de90832225735eb9c37a2d09f70c136c3a37fa4b36118ffd731f1e96bba567b17ea76544b925489f421015bacdb11db38ebf9b5272c6afece7e8dba610792c0c9dee0d1ac65bbeb736ec0670b51f32bdf80ffa2ea95449a8052dd0f65cc97501d1752bc44b66187b2d85b7c971ff838bb0ede61c64ddc95451718ad7819847ff3c6865ffaf07c9ca53555e28e618b82756d3a5e4e036de5f25d45e12b87cc689b2d90babf0016e9835b8490f32330c38a3fc9bd72f41a3880a8ca3c041dbef56ab0075aa29e9cfa4076815c31bf97f81bed7698416217e238dbaf06f75117e2430c2788c3277ca6657023f4a9f7650227a8ea149272600e1e8386f9cbd5cdc54d7c8c6e7bcc0280bd7569fcb24a87a0d6ed68313669dd43694b208f67467e5455979186733196f5ca251ff80c554562a68b29b9c0003ac3762daa930e05d8e1cc9fb2ba04e24359c7588e4dea3e5fcd79cfd52c68c48afc8ea3e189a2d87a12ab75f6b085b349eccde73f5649e02a0dcaf4a10f389f5e4ff592c4057954cd93ccd98662f8220239e9475aba19ce2bc5935c79509fabc93441e18252ad03d5fe9c364810aff5d286d40d5f7ef0f74adffff7871", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0xe00, {0x6, 0x3, 0x7, 0x101, 0xc5b, 0x2, {0x4, 0x8000000000000001, 0x8, 0x5, 0x7, 0x3, 0x7, 0xd75, 0x7, 0x703327eea4d9e39a, 0x7fff, r2, r3, 0x7, 0x1aeb9df5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.985187454s ago: executing program 7 (id=1283): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) 6.997875897s ago: executing program 7 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000080)) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100"], 0x0) 6.954015417s ago: executing program 8 (id=1285): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) gettid() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x25, 0x0, 0xfffe}, 'syz0\x00', 0x45}) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.735395931s ago: executing program 9 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) write(r2, &(0x7f0000000300)="8000006c000000010000000000000002000186a3000000040000000100000000000000000000000000000000000000000000000000000001000000120000000000000001000000000000000000000000000000047465737400000001000000000000000000000000000000000000000474657374", 0x70) read(r2, &(0x7f0000000400)=""/256, 0x100) 5.053233401s ago: executing program 7 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x2000000, 0x0, 0x3}, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000440)={&(0x7f0000000380)=""/169, 0xa9}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) timer_create(0xf22a315a24c63374, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d64, 0x80400) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000300)={0xf00001, 0x205, "084c9e5a162d4be5c3ee49327d3fdb140dc9a318812c58c7d9abe1253f390ef7", 0x7f, 0x101, 0x1, 0x8, 0x4}) 3.875357629s ago: executing program 3 (id=1288): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.772534848s ago: executing program 7 (id=1289): r0 = socket(0x2, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.9634149s ago: executing program 8 (id=1290): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x1002000, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@nombcache}]}, 0x6, 0x47e, &(0x7f0000000640)="$eJzs3MtvG8UfAPDv2kn66+uXUMqjpYXQUlHxSJr0QQ9cikDiABISHIo4hSStSt0GNUGiVQUth3JElbgjuCHxF3ChXBBwQuKEBBJHhFShXlo4Ga29a1zHTpzEsQP+fKRNZjKzmvnu7tjjWW8C6Fuj6Y8kYltE/BwRw9Xs3RVGq7/u3Lo8/eety9NJlMuv/pFU6t2+dXk6r5rvt7WaKZeXaPfaGxFTpdLshSw/vnDu7fH5i5eePnNu6vTs6dnzk8ePHzm8d+jY5NGOxJnGdXv3e3N7dr34+vWXp09ef/O7L9L+bsvK6+PolNHq0W3qQKcb67HtdelkoIcdYUWKEZGersHK+B+OYmyulQ3HCx/0tHPAuiqXC+VNrYuvlIH/sHSiDvSj/I0+/fybb12aemwIN09EbR3jTrZVSwaikNUZzD4jrYfRiDh55a9P0i3WaR0CAKDejRMR8VSz+V8h7q+r9//sHspIRNwTETsi4t6I2BkR90VU6j4QEQ+usP3GOySL5z/l4VUF1qZ0/vdsdm/r7vlfPvuLkWKW216JfzA5daY0eyg7JgdjcFOan1iija+f//GjVmX18790S9vP54JZP34faFigm5lamFpLzPVuXo3YPdAs/qQ2503nx7siYvcq2zjzxOd7WpWNLBv/EjowKS9/GvF49fxfiYb4c0nL+5MTzxybPDr+vyjNHhrPr4rFvv/h2iut2l98/g98FtFm/B1w80Y5tjRc/w2HdSQZylKl0uyF+RU28FPEtV8+bPmZZrXX/1DyWiWdd+3dqYWFCxMRQ8lLi/8++c++eT6vn17/B/fX4k+ibvzvyPZJz/9DEZFexHsj4uGIeCTr+6MRsS8i9i9xCL597rG3Vh7/EqvyHZTGP9P09a92/Y+kqfmLl85W7tevIlE8+82XK48/tSU7/0cquYPZPu28/rXbwbUePwAAAPg3KFS+A58UxmrpQmFsrPod/p2xpVCam1948tTcO+dnqt+VH4nBQr7SNVy3HjqRreXl+cmG/OFs3fjj4uZKfmx6rjTT6+Chz21tMf5TvxWrv3/taQ+BdeV5Lehfxj/0L+Mf+pfxD/3L+If+1Wz8v9+DfgDdt8z7/+Zu9QPoPvN/6F/GP/Sv5cb/vu48iwx0V8tn4wtreuRfokeJr4bW9r8a2k9EYYOEvEETxTbqXM1GYfUvg9G08kDb/8zirkT+pr585U1Ni3r4ogQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBBfwcAAP//7+7Zrg==") r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1ff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000100)={{0x8, 0x0, 0x0}, 0xfd, 0x4, 0x0, 0x1, 0x0, 0x8230, 0x5, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000140)={r4}) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000004380)=ANY=[], 0xfe, 0x1508, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000000)='127.0.0.1:/\x00', 0x1bf) 2.829119248s ago: executing program 3 (id=1291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) 2.151981632s ago: executing program 7 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) chmod(&(0x7f0000000180)='./sys/module/gpiolib_acpi/parameters/ignore_wake\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/gpiolib_acpi/parameters/ignore_wake\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='foo@0\x00', 0x6) 71.602326ms ago: executing program 3 (id=1293): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 7 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='ucsi_acpi\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='pcspkr\n', 0x7) close(r3) kernel console output (not intermixed with test programs): rt 2(bridge_slave_1) entered disabled state [ 634.704913][ T13] bridge_slave_0: left allmulticast mode [ 634.705027][ T13] bridge_slave_0: left promiscuous mode [ 635.440799][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.996303][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.093497][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.148138][ T13] bond0 (unregistering): Released all slaves [ 639.242913][ T9257] hsr_slave_0: entered promiscuous mode [ 639.249572][ T9257] hsr_slave_1: entered promiscuous mode [ 639.250366][ T9257] debugfs: 'hsr0' already exists in 'hsr' [ 639.250393][ T9257] Cannot create hsr debugfs directory [ 639.425697][ T13] hsr_slave_0: left promiscuous mode [ 639.443843][ T13] hsr_slave_1: left promiscuous mode [ 639.444801][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.454647][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.936963][ T13] team0 (unregistering): Port device team_slave_1 removed [ 641.056930][ T13] team0 (unregistering): Port device team_slave_0 removed [ 641.138367][ T8714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.140345][ T8714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.150672][ T8714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.167946][ T8714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.169142][ T8714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.145034][ T9485] autofs: Unknown parameter 'dns_resolver' [ 643.182470][ T8714] Bluetooth: hci0: command tx timeout [ 645.289506][ T8714] Bluetooth: hci0: command tx timeout [ 647.352980][ T8714] Bluetooth: hci0: command tx timeout [ 648.915972][ T1146] bridge_slave_1: left allmulticast mode [ 648.916012][ T1146] bridge_slave_1: left promiscuous mode [ 648.916273][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.129554][ T1146] bridge_slave_0: left allmulticast mode [ 649.129590][ T1146] bridge_slave_0: left promiscuous mode [ 649.129819][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.226927][ T9542] autofs: Unknown parameter 'dns_resolver' [ 649.420916][ T8714] Bluetooth: hci0: command tx timeout [ 649.635274][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.654399][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.659419][ T1146] bond0 (unregistering): Released all slaves [ 650.658146][ T9257] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 650.704655][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.745575][ T9257] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 650.794658][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.859682][ T1146] hsr_slave_0: left promiscuous mode [ 650.870494][ T1146] hsr_slave_1: left promiscuous mode [ 650.881014][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.884908][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.032188][ T5734] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 652.432692][ T5734] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 652.434056][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.489752][ T5734] usb-storage 2-1:1.0: USB Mass Storage device detected [ 652.515388][ T5734] scsi host1: usb-storage 2-1:1.0 [ 652.686432][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 652.761125][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 654.028387][ T25] usb 2-1: USB disconnect, device number 16 [ 654.215363][ T9257] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 654.270044][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.281901][ T9257] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 654.321358][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.595411][ T31] audit: type=1800 audit(1789439234.825:16): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.858" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 654.739663][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.740342][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.755299][ T9384] bridge_slave_0: entered allmulticast mode [ 654.759504][ T9384] bridge_slave_0: entered promiscuous mode [ 654.778574][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.778682][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.778813][ T9384] bridge_slave_1: entered allmulticast mode [ 654.807678][ T9384] bridge_slave_1: entered promiscuous mode [ 655.318026][ T9384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.616138][ T9384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.807119][ T9384] team0: Port device team_slave_0 added [ 656.832172][ T9384] team0: Port device team_slave_1 added [ 656.961213][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.961240][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.961288][ T9384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.974570][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.974593][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.974639][ T9384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.215379][ T9384] hsr_slave_0: entered promiscuous mode [ 657.217999][ T9384] hsr_slave_1: entered promiscuous mode [ 657.218817][ T9384] debugfs: 'hsr0' already exists in 'hsr' [ 657.218844][ T9384] Cannot create hsr debugfs directory [ 657.828344][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.839347][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.848022][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.849880][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.851222][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.221239][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 658.382687][ T5906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.386382][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.386446][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.410403][ T1585] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 658.430809][ T5906] usb 2-1: config 0 descriptor?? [ 658.453979][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 658.566975][ T1585] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 658.570611][ T1585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.601142][ T1585] usb-storage 3-1:1.0: USB Mass Storage device detected [ 658.648063][ T1585] scsi host1: usb-storage 3-1:1.0 [ 658.727589][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.727747][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.727976][ T9477] bridge_slave_0: entered allmulticast mode [ 658.759388][ T9477] bridge_slave_0: entered promiscuous mode [ 658.813341][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.813495][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.813686][ T9477] bridge_slave_1: entered allmulticast mode [ 658.832917][ T9477] bridge_slave_1: entered promiscuous mode [ 658.898030][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 658.898732][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 658.899521][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 658.900224][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 658.906675][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 658.907472][ T5906] pwc: recv_control_msg error -32 req 04 val 1400 [ 658.909741][ T5906] pwc: recv_control_msg error -32 req 02 val 2000 [ 658.913037][ T5906] pwc: recv_control_msg error -32 req 02 val 2100 [ 658.913747][ T5906] pwc: recv_control_msg error -32 req 04 val 1500 [ 659.126096][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 659.128096][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 659.130079][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 659.130730][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 659.131681][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 659.132174][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 659.173056][ T5906] pwc: Registered as video103. [ 659.181857][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 659.222848][ T5906] usb 2-1: USB disconnect, device number 17 [ 659.903345][ T8714] Bluetooth: hci2: command tx timeout [ 660.309727][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.312677][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.356082][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.390234][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.759068][ T5906] usb 3-1: USB disconnect, device number 11 [ 660.937894][ T9477] team0: Port device team_slave_0 added [ 662.647882][ T8714] Bluetooth: hci2: command tx timeout [ 662.887191][ T9477] team0: Port device team_slave_1 added [ 662.996975][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.997001][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.997050][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.084743][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.084767][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.084816][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.085525][ T9384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 663.155009][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.158424][ T9384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 663.198541][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.255692][ T9384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 663.269012][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.313315][ T9384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 663.566741][ T9384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.071767][ T9477] hsr_slave_0: entered promiscuous mode [ 664.074762][ T9477] hsr_slave_1: entered promiscuous mode [ 664.076079][ T9477] debugfs: 'hsr0' already exists in 'hsr' [ 664.076108][ T9477] Cannot create hsr debugfs directory [ 664.700095][ T8714] Bluetooth: hci2: command tx timeout [ 666.483200][ T7102] bridge_slave_1: left allmulticast mode [ 666.483237][ T7102] bridge_slave_1: left promiscuous mode [ 666.483513][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.488782][ T7102] bridge_slave_0: left allmulticast mode [ 666.488813][ T7102] bridge_slave_0: left promiscuous mode [ 666.489034][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.779948][ T8714] Bluetooth: hci2: command tx timeout [ 668.164596][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.207806][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.223935][ T7102] bond0 (unregistering): Released all slaves [ 668.274577][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 670.382444][ T7102] hsr_slave_0: left promiscuous mode [ 670.393182][ T7102] hsr_slave_1: left promiscuous mode [ 670.394670][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.429892][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.882075][ T31] audit: type=1800 audit(1789439251.106:17): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.873" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 671.241362][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 671.291706][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 672.502796][ T9762] 0x000000000000-0x000000020000 : "" [ 672.522104][ T9762] ftl_cs: FTL header not found. [ 673.548660][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.548854][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.549003][ T9619] bridge_slave_0: entered allmulticast mode [ 673.588158][ T9619] bridge_slave_0: entered promiscuous mode [ 673.613588][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.616842][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.616988][ T9619] bridge_slave_1: entered allmulticast mode [ 673.710750][ T9619] bridge_slave_1: entered promiscuous mode [ 673.914432][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.943012][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.969058][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.062720][ T9477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 674.311995][ T9788] Need at least one configuration in g1. [ 674.312113][ T9788] udc dummy_udc.0: failed to start g1: -22 [ 674.312138][ T9788] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 674.312781][ T9788] UDC core: g1: couldn't find an available UDC or it's busy [ 674.367803][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.368815][ T9477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 674.486963][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.497882][ T9477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 674.529314][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.872590][ T9477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 674.890718][ T9477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.876674][ T9619] team0: Port device team_slave_0 added [ 675.883206][ T9619] team0: Port device team_slave_1 added [ 675.918075][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.918098][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.918147][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.920998][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.921020][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.921102][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.731356][ T9384] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.013694][ T9619] hsr_slave_0: entered promiscuous mode [ 678.027952][ T9619] hsr_slave_1: entered promiscuous mode [ 678.035322][ T9619] debugfs: 'hsr0' already exists in 'hsr' [ 678.035350][ T9619] Cannot create hsr debugfs directory [ 678.285849][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.285943][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.445147][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.445284][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.312249][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.947484][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.123135][ T9477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 681.123172][ T9477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.361954][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.362081][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.394715][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.394870][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.530200][ T9863] Need at least one configuration in g1. [ 681.530331][ T9863] udc dummy_udc.0: failed to start g1: -22 [ 681.530365][ T9863] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 681.531190][ T9863] UDC core: g1: couldn't find an available UDC or it's busy [ 685.116017][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.116093][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.229469][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 685.232403][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 685.233448][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 685.235902][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 685.237085][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 685.590525][ T9892] autofs: Unknown parameter 'dns_resolver' [ 685.999185][ T9619] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 686.144899][ T9619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.181778][ T9619] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 686.661132][ T9619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.681985][ T9619] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 686.754854][ T9619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.769715][ T9619] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 686.811109][ T9619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.339981][ T52] Bluetooth: hci6: command tx timeout [ 687.559171][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.511422][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.586704][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.586828][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.697458][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.697589][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.743365][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.418691][ T52] Bluetooth: hci6: command tx timeout [ 691.845820][ T52] Bluetooth: hci6: command tx timeout [ 692.768678][ T8466] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 692.893095][ T50] bridge_slave_1: left allmulticast mode [ 692.893129][ T50] bridge_slave_1: left promiscuous mode [ 692.893356][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.925491][ T50] bridge_slave_0: left allmulticast mode [ 692.925520][ T50] bridge_slave_0: left promiscuous mode [ 692.926188][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.952070][ T8466] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 693.101742][ T8466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.235494][ T8466] usb-storage 3-1:1.0: USB Mass Storage device detected [ 693.285580][ T8466] scsi host1: usb-storage 3-1:1.0 [ 693.899186][ T52] Bluetooth: hci6: command tx timeout [ 693.914514][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.931734][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.935874][ T50] bond0 (unregistering): Released all slaves [ 694.033006][ T9477] veth0_vlan: entered promiscuous mode [ 694.078014][ T50] hsr_slave_0: left promiscuous mode [ 694.089055][ T50] hsr_slave_1: left promiscuous mode [ 694.090059][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.095010][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.370303][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.502969][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.506211][ T50] team0 (unregistering): Port device team_slave_1 removed [ 694.640139][ T50] team0 (unregistering): Port device team_slave_0 removed [ 695.131707][ T9477] veth1_vlan: entered promiscuous mode [ 695.317996][ T9477] veth0_macvtap: entered promiscuous mode [ 695.345167][ T9477] veth1_macvtap: entered promiscuous mode [ 695.505486][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.602837][T10008] 0x000000000000-0x000000020000 : "" [ 695.647355][T10008] ftl_cs: FTL header not found. [ 696.022768][ T5734] usb 3-1: USB disconnect, device number 12 [ 696.162483][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.969659][ T6192] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.125261][ T1144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.601709][ T7102] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.602666][ T7102] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.623243][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.623369][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.623519][ T9886] bridge_slave_0: entered allmulticast mode [ 700.633077][ T9886] bridge_slave_0: entered promiscuous mode [ 700.644342][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.646099][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.646247][ T9886] bridge_slave_1: entered allmulticast mode [ 700.660887][ T9886] bridge_slave_1: entered promiscuous mode [ 700.856587][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.867193][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.055339][ T9886] team0: Port device team_slave_0 added [ 701.093738][ T9886] team0: Port device team_slave_1 added [ 701.148943][ T8714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.150998][ T8714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.154899][ T8714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 701.181357][ T8714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 701.185127][ T8714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 701.296485][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.296507][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.296550][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.326208][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.360730][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.360752][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.360800][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.021625][ T9886] hsr_slave_0: entered promiscuous mode [ 703.039962][ T9886] hsr_slave_1: entered promiscuous mode [ 703.056838][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 703.056871][ T9886] Cannot create hsr debugfs directory [ 703.258423][ T8714] Bluetooth: hci1: command tx timeout [ 704.550095][ T1402] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.271239][T10083] 0x000000000000-0x000000020000 : "" [ 705.751844][ T8714] Bluetooth: hci1: command tx timeout [ 705.778718][T10083] ftl_cs: FTL header not found. [ 706.993499][ T1402] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.840829][ T8714] Bluetooth: hci1: command tx timeout [ 708.244310][ T1402] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.897469][ T8714] Bluetooth: hci1: command tx timeout [ 709.908656][T10127] Need at least one configuration in g1. [ 709.908789][T10127] udc dummy_udc.0: failed to start g1: -22 [ 709.908821][T10127] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 709.909687][T10127] UDC core: g1: couldn't find an available UDC or it's busy [ 709.955499][ T1402] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.456048][T10139] 0x000000000000-0x000000020000 : "" [ 711.142986][T10139] ftl_cs: FTL header not found. [ 714.368908][ T9619] veth0_vlan: entered promiscuous mode [ 714.546721][ T9619] veth1_vlan: entered promiscuous mode [ 714.850351][ T1402] bridge_slave_1: left allmulticast mode [ 714.850387][ T1402] bridge_slave_1: left promiscuous mode [ 714.850632][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.881304][ T1402] bridge_slave_0: left allmulticast mode [ 714.881335][ T1402] bridge_slave_0: left promiscuous mode [ 714.886267][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.065548][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.098441][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.125710][ T1402] bond0 (unregistering): Released all slaves [ 718.610654][ T1402] hsr_slave_0: left promiscuous mode [ 718.626714][ T1402] hsr_slave_1: left promiscuous mode [ 718.634544][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.634572][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.656473][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.656501][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.703859][ T1402] veth1_macvtap: left promiscuous mode [ 718.703905][ T1402] veth0_macvtap: left promiscuous mode [ 718.704027][ T1402] veth1_vlan: left promiscuous mode [ 718.704113][ T1402] veth0_vlan: left promiscuous mode [ 719.360291][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.364655][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.365907][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.394228][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.394925][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.518837][ T52] Bluetooth: hci0: command tx timeout [ 723.455904][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 723.513707][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 723.577217][ T52] Bluetooth: hci0: command tx timeout [ 725.946742][ T52] Bluetooth: hci0: command tx timeout [ 726.722390][T10257] loop3: detected capacity change from 0 to 512 [ 727.607089][ T31] audit: type=1800 audit(1789439307.749:18): pid=10266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.970" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 727.634594][T10263] loop3: detected capacity change from 0 to 256 [ 727.911864][ T9886] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 727.991426][ T52] Bluetooth: hci0: command tx timeout [ 728.010244][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.011633][ T9886] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 728.162021][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.193777][ T9886] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 728.236512][T10263] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 728.236943][T10263] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 728.239991][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.254888][ T9886] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 728.325053][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.606441][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.606601][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.606768][T10038] bridge_slave_0: entered allmulticast mode [ 731.610495][T10038] bridge_slave_0: entered promiscuous mode [ 731.614196][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.614314][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.614460][T10038] bridge_slave_1: entered allmulticast mode [ 731.676790][T10038] bridge_slave_1: entered promiscuous mode [ 732.164910][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.947292][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.634733][T10334] 0x000000000000-0x000000020000 : "" [ 733.729705][T10334] ftl_cs: FTL header not found. [ 734.319526][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.334196][T10038] team0: Port device team_slave_0 added [ 734.377714][T10038] team0: Port device team_slave_1 added [ 734.735914][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.735942][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.773411][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.841077][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.841109][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.841176][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.679077][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.326371][T10038] hsr_slave_0: entered promiscuous mode [ 739.335335][T10038] hsr_slave_1: entered promiscuous mode [ 739.357433][T10038] debugfs: 'hsr0' already exists in 'hsr' [ 739.357539][T10038] Cannot create hsr debugfs directory [ 739.527418][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.527547][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.912313][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.912437][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.842174][ T1402] bridge_slave_1: left allmulticast mode [ 741.842211][ T1402] bridge_slave_1: left promiscuous mode [ 741.842450][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.882391][ T1402] bridge_slave_0: left allmulticast mode [ 741.882431][ T1402] bridge_slave_0: left promiscuous mode [ 741.882692][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.943422][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.964860][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.980015][ T1402] bond0 (unregistering): Released all slaves [ 743.258611][ T1402] hsr_slave_0: left promiscuous mode [ 743.259649][ T1402] hsr_slave_1: left promiscuous mode [ 743.260619][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.262503][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.316466][ T1402] veth1_vlan: left promiscuous mode [ 743.316556][ T1402] veth0_vlan: left promiscuous mode [ 744.790625][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 745.099750][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 746.835220][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.842988][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.532997][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 747.542944][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 747.547996][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 747.556370][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 747.557715][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.313381][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.313503][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.313673][T10205] bridge_slave_0: entered allmulticast mode [ 748.339910][T10205] bridge_slave_0: entered promiscuous mode [ 748.564008][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.564128][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.564290][T10205] bridge_slave_1: entered allmulticast mode [ 748.571871][T10205] bridge_slave_1: entered promiscuous mode [ 748.885730][T10205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.897792][T10205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.272879][T10205] team0: Port device team_slave_0 added [ 749.367186][T10205] team0: Port device team_slave_1 added [ 749.449973][T10447] Need at least one configuration in g1. [ 749.450104][T10447] udc dummy_udc.0: failed to start g1: -22 [ 749.450137][T10447] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 749.496365][T10447] UDC core: g1: couldn't find an available UDC or it's busy [ 749.596174][T10205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.596200][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.596252][T10205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.611873][T10205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.611895][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.611941][T10205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.655991][ T8714] Bluetooth: hci2: command tx timeout [ 750.130309][T10205] hsr_slave_0: entered promiscuous mode [ 750.133082][T10205] hsr_slave_1: entered promiscuous mode [ 750.136664][T10205] debugfs: 'hsr0' already exists in 'hsr' [ 750.136692][T10205] Cannot create hsr debugfs directory [ 750.822357][T10038] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 750.842375][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.860949][T10038] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 750.892359][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.002833][T10038] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 751.020738][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.232616][T10038] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 751.243386][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.736194][ T8714] Bluetooth: hci2: command tx timeout [ 752.583417][ T7102] bridge_slave_1: left allmulticast mode [ 752.583453][ T7102] bridge_slave_1: left promiscuous mode [ 752.583686][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.621926][ T7102] bridge_slave_0: left allmulticast mode [ 752.621957][ T7102] bridge_slave_0: left promiscuous mode [ 752.622179][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.380757][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.397442][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.400871][ T7102] bond0 (unregistering): Released all slaves [ 753.609682][ T7102] hsr_slave_0: left promiscuous mode [ 753.612055][ T7102] hsr_slave_1: left promiscuous mode [ 753.612999][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.636040][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.814995][ T8714] Bluetooth: hci2: command tx timeout [ 753.998529][T10502] capability: warning: `syz.2.1012' uses 32-bit capabilities (legacy support in use) [ 754.064082][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 754.092665][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 755.350241][T10509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.915355][ T8714] Bluetooth: hci2: command tx timeout [ 756.118744][T10511] bond1: option packets_per_slave: invalid value (65537) [ 756.118783][T10511] bond1: option packets_per_slave: allowed values 0 - 65535 [ 756.122489][T10511] bond1 (unregistering): Released all slaves [ 756.469857][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.470024][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.470183][T10417] bridge_slave_0: entered allmulticast mode [ 756.512721][T10417] bridge_slave_0: entered promiscuous mode [ 756.539738][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.540338][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.540483][T10417] bridge_slave_1: entered allmulticast mode [ 756.552446][T10417] bridge_slave_1: entered promiscuous mode [ 756.592690][ T31] audit: type=1800 audit(1789439336.821:19): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 756.714512][T10417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.724112][T10417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.893194][T10417] team0: Port device team_slave_0 added [ 756.926933][T10417] team0: Port device team_slave_1 added [ 758.330126][ T951] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 758.494769][ T951] usb 2-1: Using ep0 maxpacket: 16 [ 758.495509][ T951] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 758.495565][ T951] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 758.499386][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.500860][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.504537][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.566686][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.567974][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.571536][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.573048][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.629811][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.646910][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 758.646950][ T951] usb 2-1: SerialNumber: syz [ 758.931790][ T951] usb 2-1: config 0 descriptor?? [ 759.605130][ T951] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 759.652408][T10417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.652433][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.652514][T10417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.768787][T10417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.768813][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.768862][T10417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.778688][T10535] input: syz0 as /devices/virtual/input/input20 [ 760.049375][ T4966] bcm5974 2-1:0.0: could not read from device [ 760.050227][ T5777] usb 2-1: USB disconnect, device number 18 [ 760.051901][ T4966] bcm5974 2-1:0.0: could not read from device [ 760.599411][T10417] hsr_slave_0: entered promiscuous mode [ 760.600792][T10417] hsr_slave_1: entered promiscuous mode [ 760.606830][T10417] debugfs: 'hsr0' already exists in 'hsr' [ 760.606878][T10417] Cannot create hsr debugfs directory [ 761.206002][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.214303][T10205] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 761.290091][T10205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.292788][T10205] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 761.341818][T10205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.535990][T10205] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 761.580184][T10205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.593367][T10205] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 761.631857][T10205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.537764][T10568] xt_hashlimit: size too large, truncated to 1048576 [ 764.261297][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.367130][T10574] xt_hashlimit: size too large, truncated to 1048576 [ 764.864866][T10205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.134700][T10205] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.379812][T10584] loop2: detected capacity change from 0 to 512 [ 765.426761][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.427342][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.598226][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 765.619744][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 765.630524][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 765.688571][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 765.689717][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.931826][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.931956][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.986079][T10584] loop2: detected capacity change from 0 to 256 [ 767.040838][T10584] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 767.041246][T10584] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 768.132187][ T8714] Bluetooth: hci1: command tx timeout [ 769.253937][T10417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 769.370526][T10417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 769.391987][T10619] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 769.453127][T10417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 769.488608][T10417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.499091][T10417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 769.527292][T10417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.546900][ T1144] bridge_slave_1: left allmulticast mode [ 769.546932][ T1144] bridge_slave_1: left promiscuous mode [ 769.547161][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.562701][ T1144] bridge_slave_0: left allmulticast mode [ 769.562732][ T1144] bridge_slave_0: left promiscuous mode [ 769.569938][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.139818][ T8714] Bluetooth: hci1: command tx timeout [ 772.211661][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.214544][ T8714] Bluetooth: hci1: command tx timeout [ 772.242924][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.388978][ T1144] bond0 (unregistering): Released all slaves [ 773.437432][T10417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.482974][T10417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.647904][ T1144] hsr_slave_0: left promiscuous mode [ 773.653343][ T1144] hsr_slave_1: left promiscuous mode [ 773.676249][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.682897][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.275833][ T31] audit: type=1800 audit(1789439354.502:20): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 774.325355][ T8714] Bluetooth: hci1: command tx timeout [ 775.455356][T10667] Need at least one configuration in g1. [ 775.455487][T10667] udc dummy_udc.0: failed to start g1: -22 [ 775.455520][T10667] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 775.456354][T10667] UDC core: g1: couldn't find an available UDC or it's busy [ 775.607381][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 775.665297][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 778.854375][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.907866][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.953433][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.953587][ T7102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.995253][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.995378][ T7102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.396020][T10715] jffs2: notice: (10715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 779.730450][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.731324][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.731882][T10586] bridge_slave_0: entered allmulticast mode [ 779.789881][T10586] bridge_slave_0: entered promiscuous mode [ 779.871053][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.871730][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.873233][T10586] bridge_slave_1: entered allmulticast mode [ 779.919638][T10586] bridge_slave_1: entered promiscuous mode [ 780.642129][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.738106][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 780.741639][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 780.761007][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.764214][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.764990][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.862814][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.983924][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 782.142738][T10586] team0: Port device team_slave_0 added [ 782.158209][T10586] team0: Port device team_slave_1 added [ 782.313371][ T5777] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 782.387055][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.387080][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.387129][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.403599][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.403621][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.403668][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.464591][ T5777] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 782.472808][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.531021][ T5777] usb-storage 4-1:1.0: USB Mass Storage device detected [ 782.554379][ T5777] scsi host1: usb-storage 4-1:1.0 [ 783.014682][ T8714] Bluetooth: hci0: command tx timeout [ 783.255939][T10586] hsr_slave_0: entered promiscuous mode [ 783.257051][T10586] hsr_slave_1: entered promiscuous mode [ 783.257830][T10586] debugfs: 'hsr0' already exists in 'hsr' [ 783.257858][T10586] Cannot create hsr debugfs directory [ 783.654926][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.662674][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.919393][T10417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.122243][ T5777] usb 4-1: USB disconnect, device number 16 [ 784.399081][T10789] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 784.421927][T10789] syz.1.1065: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 784.422061][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.1.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.422102][T10789] Tainted: [L]=SOFTLOCKUP [ 784.422113][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 784.422130][T10789] Call Trace: [ 784.422140][T10789] [ 784.422151][T10789] dump_stack_lvl+0x100/0x190 [ 784.422197][T10789] warn_alloc.cold+0x9e/0xb2 [ 784.422231][T10789] ? __pfx_warn_alloc+0x10/0x10 [ 784.422270][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422321][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422365][T10789] __vmalloc_node_range_noprof+0x123b/0x1420 [ 784.422398][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422432][T10789] ? rcu_is_watching+0x13/0xc0 [ 784.422469][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422504][T10789] ? trace_contention_end+0x126/0x160 [ 784.422540][T10789] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 784.422571][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422608][T10789] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 784.422640][T10789] ? tomoyo_path_number_perm+0x28f/0x580 [ 784.422690][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.422729][T10789] ? __pfx___mutex_lock+0x10/0x10 [ 784.422759][T10789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.422791][T10789] ? tomoyo_path_number_perm+0x188/0x580 [ 784.422839][T10789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.422903][T10789] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 784.422938][T10789] __vmalloc_node_noprof+0xad/0xf0 [ 784.422969][T10789] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 784.423006][T10789] dvb_dvr_do_ioctl+0x15d/0x270 [ 784.423045][T10789] dvb_usercopy+0x167/0x340 [ 784.423076][T10789] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 784.423111][T10789] ? __pfx_dvb_usercopy+0x10/0x10 [ 784.423142][T10789] ? __fget_files+0x34/0x3d0 [ 784.423200][T10789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.423247][T10789] ? __fget_files+0x21f/0x3d0 [ 784.423293][T10789] dvb_dvr_ioctl+0x29/0x40 [ 784.423335][T10789] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 784.423378][T10789] __x64_sys_ioctl+0x18e/0x210 [ 784.423437][T10789] do_syscall_64+0x123/0x790 [ 784.423505][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.423545][T10789] RIP: 0033:0x7f7ec059e159 [ 784.423575][T10789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.423613][T10789] RSP: 002b:00007f7ec1553028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.423650][T10789] RAX: ffffffffffffffda RBX: 00007f7ec0825fa0 RCX: 00007f7ec059e159 [ 784.423721][T10789] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 784.423740][T10789] RBP: 00007f7ec063503b R08: 0000000000000000 R09: 0000000000000000 [ 784.423758][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.423776][T10789] R13: 00007f7ec0826038 R14: 00007f7ec0825fa0 R15: 00007ffd21abaf88 [ 784.423815][T10789] [ 784.423954][T10789] Mem-Info: [ 784.423969][T10789] active_anon:8263 inactive_anon:0 isolated_anon:0 [ 784.423969][T10789] active_file:42 inactive_file:64584 isolated_file:0 [ 784.423969][T10789] unevictable:0 dirty:231 writeback:0 [ 784.423969][T10789] slab_reclaimable:11357 slab_unreclaimable:98954 [ 784.423969][T10789] mapped:35408 shmem:1314 pagetables:1628 [ 784.423969][T10789] sec_pagetables:0 bounce:0 [ 784.423969][T10789] kernel_misc_reclaimable:0 [ 784.423969][T10789] free:1280496 free_pcp:12131 free_cma:0 [ 784.424042][T10789] Node 0 active_anon:33052kB inactive_anon:0kB active_file:168kB inactive_file:258132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141632kB dirty:920kB writeback:0kB shmem:5256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13496kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 784.424151][T10789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 784.424227][T10789] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.424308][T10789] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 784.424360][T10789] Node 0 DMA32 free:1161068kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33052kB inactive_anon:0kB active_file:168kB inactive_file:258132kB unevictable:0kB writepending:920kB zspages:0kB present:3129332kB managed:2530604kB mlocked:0kB bounce:0kB free_pcp:48524kB local_pcp:21044kB free_cma:0kB [ 784.424444][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 784.424494][T10789] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.424573][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 784.424623][T10789] Node 1 Normal free:3945588kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.424714][T10789] lowmem_reserve[]: 0 0 0 0 0 [ 784.424764][T10789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 784.424976][T10789] Node 0 DMA32: 2307*4kB (UM) 1829*8kB (UM) 1126*16kB (UME) 661*32kB (UME) 456*64kB (UME) 405*128kB (UM) 259*256kB (UME) 83*512kB (UM) 45*1024kB (M) 21*2048kB (UM) 200*4096kB (UM) = 1161140kB [ 784.425216][T10789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 784.425373][T10789] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 3*16kB (UM) 6*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3945588kB [ 784.425598][T10789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.425621][T10789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.425644][T10789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.425667][T10789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.425695][T10789] 65936 total pagecache pages [ 784.425705][T10789] 0 pages in swap cache [ 784.425715][T10789] Free swap = 124996kB [ 784.425725][T10789] Total swap = 124996kB [ 784.425736][T10789] 2097051 pages RAM [ 784.425746][T10789] 0 pages HighMem/MovableOnly [ 784.425756][T10789] 432765 pages reserved [ 784.425766][T10789] 0 pages cma reserved [ 784.489185][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 784.578426][ T7102] bridge_slave_1: left allmulticast mode [ 784.578461][ T7102] bridge_slave_1: left promiscuous mode [ 784.578696][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.620962][ T7102] bridge_slave_0: left allmulticast mode [ 784.620994][ T7102] bridge_slave_0: left promiscuous mode [ 784.630352][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.093577][ T8714] Bluetooth: hci0: command tx timeout [ 785.653355][ T5734] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 785.808740][ T5734] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 785.829526][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.829617][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.829740][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.010287][ T5734] usb 2-1: config 0 descriptor?? [ 787.173416][ T8714] Bluetooth: hci0: command tx timeout [ 787.709122][T10803] Need at least one configuration in g1. [ 787.709271][T10803] udc dummy_udc.0: failed to start g1: -22 [ 787.709308][T10803] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 787.710233][T10803] UDC core: g1: couldn't find an available UDC or it's busy [ 788.529816][ T5734] usbhid 2-1:0.0: can't add hid device: -71 [ 788.529913][ T5734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 788.587300][ T5734] usb 2-1: USB disconnect, device number 19 [ 788.898018][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.987797][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.998799][ T7102] bond0 (unregistering): Released all slaves [ 789.254039][ T8714] Bluetooth: hci0: command tx timeout [ 789.470765][ T7102] hsr_slave_0: left promiscuous mode [ 789.482022][ T7102] hsr_slave_1: left promiscuous mode [ 789.483294][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.510350][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.210789][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 791.269961][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 791.968013][T10417] veth0_vlan: entered promiscuous mode [ 792.117509][T10832] binder: 10831:10832 ioctl c0306201 200000000080 returned -14 [ 792.380001][T10417] veth1_vlan: entered promiscuous mode [ 792.389041][T10832] binder: 10831:10832 ioctl c0306201 2000000003c0 returned -14 [ 792.449484][T10417] veth0_macvtap: entered promiscuous mode [ 792.465923][T10417] veth1_macvtap: entered promiscuous mode [ 792.501523][T10417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.523835][T10417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.793030][ T7079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.979314][T10824] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 793.520339][T10824] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 793.592096][T10824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.593070][ T7079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.593141][ T7079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.895879][ T7102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.116844][T10824] usb-storage 3-1:1.0: USB Mass Storage device detected [ 794.147835][T10824] scsi host1: usb-storage 3-1:1.0 [ 794.184626][T10586] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 794.210036][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.292351][T10586] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 794.315143][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.364643][T10586] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 794.400638][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.417757][T10586] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 794.450005][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.206199][ T7079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.206231][ T7079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.325905][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.327891][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.366968][T10727] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.367131][T10727] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.367339][T10727] bridge_slave_0: entered allmulticast mode [ 795.370425][T10727] bridge_slave_0: entered promiscuous mode [ 795.378180][T10727] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.378326][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.378529][T10727] bridge_slave_1: entered allmulticast mode [ 795.381050][T10727] bridge_slave_1: entered promiscuous mode [ 795.992716][T10727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.999798][T10727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.044429][T10874] key id 000004d2 not found [ 796.163221][T10727] team0: Port device team_slave_0 added [ 796.195365][ T470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.195389][ T470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.223153][T10727] team0: Port device team_slave_1 added [ 796.345396][T10727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.345417][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.345536][T10727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.376905][T10727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.376931][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.376978][T10727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.556209][T10727] hsr_slave_0: entered promiscuous mode [ 796.557308][T10727] hsr_slave_1: entered promiscuous mode [ 796.559698][T10727] debugfs: 'hsr0' already exists in 'hsr' [ 796.559725][T10727] Cannot create hsr debugfs directory [ 796.796191][ T5777] usb 3-1: USB disconnect, device number 13 [ 796.903521][T10883] NILFS (nullb0): couldn't find nilfs on the device [ 798.032644][T10894] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.406781][T10914] binder: 10910:10914 ioctl c0306201 200000000080 returned -14 [ 799.447360][T10918] 0x000000000000-0x000000020000 : "" [ 799.463413][T10918] ftl_cs: FTL header not found. [ 799.672773][T10914] binder: 10910:10914 ioctl c0306201 2000000003c0 returned -14 [ 799.932871][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.043340][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.102228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.102414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.051691][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.051823][ T7079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.095057][ T5276] 8021q: adding VLAN 0 to HW filter on device eth21 [ 801.222922][T10932] input: syz0 as /devices/virtual/input/input21 [ 802.588365][T10727] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 802.614392][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.615680][T10727] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 802.640926][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 802.653389][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.655695][T10727] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 802.682687][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.692009][T10727] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 802.708243][T10727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.793021][ T30] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 802.795361][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.835758][ T30] usb-storage 8-1:1.0: USB Mass Storage device detected [ 802.857908][ T30] scsi host1: usb-storage 8-1:1.0 [ 803.148555][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.190144][T10727] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.287458][T10727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 803.287498][T10727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.577684][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.577818][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.591780][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.591931][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.714578][ T30] usb 8-1: USB disconnect, device number 2 [ 807.456359][T10996] Need at least one configuration in g1. [ 807.456495][T10996] udc dummy_udc.0: failed to start g1: -22 [ 807.456530][T10996] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 807.457414][T10996] UDC core: g1: couldn't find an available UDC or it's busy [ 807.975736][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.975814][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.049990][T11007] jffs2: notice: (11007) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.379476][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.920339][T10727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.101770][ T5747] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 811.269177][ T5747] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 811.272803][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.334789][ T5747] usb-storage 8-1:1.0: USB Mass Storage device detected [ 811.385082][ T5747] scsi host1: usb-storage 8-1:1.0 [ 811.709685][T10586] veth0_vlan: entered promiscuous mode [ 811.746023][T10586] veth1_vlan: entered promiscuous mode [ 811.809062][T10586] veth0_macvtap: entered promiscuous mode [ 811.827841][T10586] veth1_macvtap: entered promiscuous mode [ 811.875847][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.891282][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.093242][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.136322][ T470] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.136397][ T470] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.136460][ T470] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.356575][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.356608][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.716931][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.717661][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.770968][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.771001][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.813641][T10727] veth0_vlan: entered promiscuous mode [ 812.891972][T10727] veth1_vlan: entered promiscuous mode [ 815.563592][T10727] veth0_macvtap: entered promiscuous mode [ 815.571134][T10823] usb 8-1: USB disconnect, device number 3 [ 815.656345][T10727] veth1_macvtap: entered promiscuous mode [ 816.679726][T10727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.712678][T10727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.787246][ T7102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.787978][ T7102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.788210][ T7102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.788884][ T7102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.225035][ T7102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.225068][ T7102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.350461][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.350493][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.948988][ T5734] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 822.384970][ T5734] usb 2-1: device descriptor read/all, error -71 [ 822.542078][T11125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.186956][T11144] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 824.585080][T11136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.051942][ T8466] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 826.186760][T11169] sctp: [Deprecated]: syz.8.1130 (pid 11169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.186760][T11169] Use struct sctp_sack_info instead [ 826.254411][ T8466] usb 8-1: Using ep0 maxpacket: 16 [ 826.534536][ T8466] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 826.536157][ T8466] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 826.663342][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.681487][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.705127][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.721294][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.744917][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.750266][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.786020][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.788831][ T8466] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.822259][ T8466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 826.822306][ T8466] usb 8-1: SerialNumber: syz [ 826.854173][ T8466] usb 8-1: config 0 descriptor?? [ 826.944114][ T8466] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input22 [ 827.697416][T11163] input: syz0 as /devices/virtual/input/input23 [ 830.294661][ T4966] bcm5974 8-1:0.0: could not read from device [ 830.329640][ T4966] bcm5974 8-1:0.0: could not read from device [ 830.346831][ T8466] usb 8-1: USB disconnect, device number 4 [ 830.945484][ T8466] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 831.111834][ T8466] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 831.153802][ T8466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.153912][ T8466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.154033][ T8466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.516414][ T8466] usb 4-1: config 0 descriptor?? [ 833.740204][ T8466] usbhid 4-1:0.0: can't add hid device: -71 [ 833.740319][ T8466] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 833.768765][ T8466] usb 4-1: USB disconnect, device number 17 [ 838.490206][T11221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 838.493840][T11221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 838.498458][T11221] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 838.521373][T11221] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 838.543866][T11221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 839.095762][ T8714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 839.103506][ T8714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 839.110015][ T8714] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 839.114104][ T8714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 839.114842][ T8714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 840.623293][ T8714] Bluetooth: hci6: command tx timeout [ 841.180579][ T8714] Bluetooth: hci7: command tx timeout [ 842.689992][ T8714] Bluetooth: hci6: command tx timeout [ 842.784534][ T1402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.283772][ T8714] Bluetooth: hci7: command tx timeout [ 844.125862][ T1402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.360927][T11282] netlink: 'syz.7.1161': attribute type 1 has an invalid length. [ 844.362473][ T1402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.467732][T11282] gretap0: entered promiscuous mode [ 844.515199][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1160'. [ 844.525043][T11285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.775553][ T8714] Bluetooth: hci6: command tx timeout [ 844.841995][ T1402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.903357][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1162'. [ 845.379833][ T8714] Bluetooth: hci7: command tx timeout [ 845.860629][T11312] loop3: detected capacity change from 0 to 512 [ 846.850135][ T8714] Bluetooth: hci6: command tx timeout [ 847.365698][ T1402] bridge_slave_1: left allmulticast mode [ 847.365739][ T1402] bridge_slave_1: left promiscuous mode [ 847.365984][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.409685][ T8714] Bluetooth: hci7: command tx timeout [ 847.443321][ T1402] bridge_slave_0: left allmulticast mode [ 847.443358][ T1402] bridge_slave_0: left promiscuous mode [ 847.443655][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.588997][T11326] FAULT_INJECTION: forcing a failure. [ 847.588997][T11326] name failslab, interval 1, probability 0, space 0, times 1 [ 847.589055][T11326] CPU: 1 UID: 0 PID: 11326 Comm: syz.9.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.589110][T11326] Tainted: [L]=SOFTLOCKUP [ 847.589124][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 847.589147][T11326] Call Trace: [ 847.589160][T11326] [ 847.589175][T11326] dump_stack_lvl+0x100/0x190 [ 847.589235][T11326] should_fail_ex.cold+0x5/0xa [ 847.589280][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.589335][T11326] should_failslab+0xc2/0x120 [ 847.589375][T11326] __kmalloc_cache_noprof+0x91/0x6d0 [ 847.589424][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.589473][T11326] ? trace_kmalloc+0xeb/0x110 [ 847.589509][T11326] ? device_add+0xd3f/0x1970 [ 847.589582][T11326] device_add+0xd3f/0x1970 [ 847.589648][T11326] ? __pfx_device_add+0x10/0x10 [ 847.589716][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.589762][T11326] ? kfree+0x1e5/0x6d0 [ 847.589822][T11326] device_create_groups_vargs+0x1f8/0x270 [ 847.589894][T11326] device_create+0xed/0x130 [ 847.589959][T11326] ? __pfx_device_create+0x10/0x10 [ 847.590030][T11326] ? __pfx_vsnprintf+0x10/0x10 [ 847.590092][T11326] ? __pfx___debug_object_init+0x10/0x10 [ 847.590148][T11326] ? mark_held_locks+0x40/0x70 [ 847.590196][T11326] bdi_register_va+0x114/0x820 [ 847.590259][T11326] ? __pfx_bdi_register_va+0x10/0x10 [ 847.590317][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590362][T11326] ? lockdep_init_map_type+0x5c/0x250 [ 847.590403][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590449][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590504][T11326] super_setup_bdi_name+0xff/0x250 [ 847.590555][T11326] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 847.590607][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590652][T11326] ? __kasan_kmalloc+0xaa/0xb0 [ 847.590719][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590765][T11326] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 847.590814][T11326] ? afs_get_tree+0x380/0x1420 [ 847.590866][T11326] afs_get_tree+0xbe7/0x1420 [ 847.590906][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.590962][T11326] vfs_get_tree+0x92/0x320 [ 847.591007][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.591056][T11326] path_mount+0x7d0/0x24c0 [ 847.591110][T11326] ? __pfx_path_mount+0x10/0x10 [ 847.591153][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.591199][T11326] ? lockdep_hardirqs_on+0x7d/0x110 [ 847.591267][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.591312][T11326] ? kmem_cache_free+0x127/0x6c0 [ 847.591378][T11326] ? __x64_sys_mount+0x293/0x310 [ 847.591425][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.591471][T11326] __x64_sys_mount+0x293/0x310 [ 847.591520][T11326] ? __pfx___x64_sys_mount+0x10/0x10 [ 847.591573][T11326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.591629][T11326] do_syscall_64+0x123/0x790 [ 847.591704][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.591745][T11326] RIP: 0033:0x7ff8f7d9e159 [ 847.591775][T11326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.591814][T11326] RSP: 002b:00007ff8f8cdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.591851][T11326] RAX: ffffffffffffffda RBX: 00007ff8f8025fa0 RCX: 00007ff8f7d9e159 [ 847.591877][T11326] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 847.591903][T11326] RBP: 00007ff8f7e3503b R08: 0000200000000380 R09: 0000000000000000 [ 847.591928][T11326] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 847.591961][T11326] R13: 00007ff8f8026038 R14: 00007ff8f8025fa0 R15: 00007ffdce01c3b8 [ 847.592014][T11326] [ 848.939897][ T5734] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 851.353319][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1178'. [ 851.548948][ T5734] usb 4-1: device descriptor read/all, error -71 [ 851.574672][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.615856][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.646893][ T1402] bond0 (unregistering): Released all slaves [ 852.624567][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 855.105331][T11220] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.105445][T11220] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.105611][T11220] bridge_slave_0: entered allmulticast mode [ 855.108219][T11220] bridge_slave_0: entered promiscuous mode [ 855.139330][T11220] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.139476][T11220] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.139629][T11220] bridge_slave_1: entered allmulticast mode [ 855.141814][T11220] bridge_slave_1: entered promiscuous mode [ 856.458809][T11388] Can't find ip_set type hash:ne [ 856.463659][T11220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.568416][ T1402] hsr_slave_0: left promiscuous mode [ 856.579668][ T1402] hsr_slave_1: left promiscuous mode [ 856.580616][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.580646][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.622045][ T1402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.622074][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.688959][ T1402] veth1_macvtap: left promiscuous mode [ 856.689012][ T1402] veth0_macvtap: left promiscuous mode [ 856.696479][ T1402] veth1_vlan: left promiscuous mode [ 856.696570][ T1402] veth0_vlan: left promiscuous mode [ 857.191558][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1190'. [ 857.472707][T11405] Need at least one configuration in g1. [ 857.472839][T11405] udc dummy_udc.0: failed to start g1: -22 [ 857.472876][T11405] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 857.473749][T11405] UDC core: g1: couldn't find an available UDC or it's busy [ 857.529309][ T8467] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 857.592557][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 857.645209][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 857.689805][ T8467] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 857.691145][ T8467] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.691212][ T8467] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.731258][ T8467] usb 10-1: config 0 descriptor?? [ 857.757136][ T8467] pwc: Askey VC010 type 2 USB webcam detected. [ 858.138779][T11220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.140324][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.140467][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.140639][T11230] bridge_slave_0: entered allmulticast mode [ 858.147212][T11230] bridge_slave_0: entered promiscuous mode [ 858.155568][ T8467] pwc: recv_control_msg error -32 req 02 val 2b00 [ 858.156601][ T8467] pwc: recv_control_msg error -32 req 02 val 2700 [ 858.157234][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.157468][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.157642][T11230] bridge_slave_1: entered allmulticast mode [ 858.158758][ T8467] pwc: recv_control_msg error -32 req 02 val 2c00 [ 858.161704][ T8467] pwc: recv_control_msg error -32 req 04 val 1000 [ 858.163262][ T8467] pwc: recv_control_msg error -32 req 04 val 1300 [ 858.164322][ T8467] pwc: recv_control_msg error -32 req 04 val 1400 [ 858.166597][ T8467] pwc: recv_control_msg error -32 req 02 val 2000 [ 858.167716][T11230] bridge_slave_1: entered promiscuous mode [ 858.169561][ T8467] pwc: recv_control_msg error -32 req 02 val 2100 [ 858.171402][ T8467] pwc: recv_control_msg error -32 req 04 val 1500 [ 858.240994][T11409] 0x000000000000-0x000000020000 : "" [ 858.382877][T11409] ftl_cs: FTL header not found. [ 858.432313][T11230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.454212][T11230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.471687][T11220] team0: Port device team_slave_0 added [ 858.487721][T11220] team0: Port device team_slave_1 added [ 858.721670][ T8467] pwc: recv_control_msg error -71 req 02 val 2400 [ 858.723669][ T8467] pwc: recv_control_msg error -71 req 02 val 2600 [ 858.773390][T11230] team0: Port device team_slave_0 added [ 858.774183][T11220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.774211][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.774260][T11220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.781895][ T8467] pwc: recv_control_msg error -71 req 02 val 2900 [ 858.786374][ T8467] pwc: recv_control_msg error -71 req 02 val 2800 [ 858.788284][ T8467] pwc: recv_control_msg error -71 req 04 val 1100 [ 858.790022][ T8467] pwc: recv_control_msg error -71 req 04 val 1200 [ 858.833094][ T8467] pwc: Registered as video103. [ 858.842408][ T8467] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input24 [ 858.883827][ T8467] usb 10-1: USB disconnect, device number 2 [ 858.893279][T11220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.893303][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.893350][T11220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.035469][T11230] team0: Port device team_slave_1 added [ 860.272123][T11230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.272151][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.272199][T11230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.406285][T11230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.406309][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.406349][T11230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.568491][T11428] syz.3.1199: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 860.568597][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.3.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.568651][T11428] Tainted: [L]=SOFTLOCKUP [ 860.568665][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 860.568688][T11428] Call Trace: [ 860.568707][T11428] [ 860.568721][T11428] dump_stack_lvl+0x100/0x190 [ 860.568780][T11428] warn_alloc.cold+0x9e/0xb2 [ 860.568825][T11428] ? __pfx_warn_alloc+0x10/0x10 [ 860.568881][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.568952][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.569011][T11428] __vmalloc_node_range_noprof+0x123b/0x1420 [ 860.569056][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.569103][T11428] ? rcu_is_watching+0x13/0xc0 [ 860.569152][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.569200][T11428] ? trace_contention_end+0x126/0x160 [ 860.569248][T11428] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 860.569291][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.569340][T11428] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 860.569383][T11428] ? tomoyo_path_number_perm+0x28f/0x580 [ 860.569442][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.569494][T11428] ? __pfx___mutex_lock+0x10/0x10 [ 860.569533][T11428] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 860.569575][T11428] ? tomoyo_path_number_perm+0x188/0x580 [ 860.569634][T11428] ? __entry_text_end+0x102039/0x102039 [ 860.569683][T11428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 860.569758][T11428] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 860.569800][T11428] __vmalloc_node_noprof+0xad/0xf0 [ 860.569842][T11428] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 860.569890][T11428] dvb_dvr_do_ioctl+0x15d/0x270 [ 860.569943][T11428] dvb_usercopy+0x167/0x340 [ 860.569983][T11428] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 860.570030][T11428] ? __pfx_dvb_usercopy+0x10/0x10 [ 860.570070][T11428] ? __fget_files+0x34/0x3d0 [ 860.570123][T11428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.570170][T11428] ? __fget_files+0x21f/0x3d0 [ 860.570218][T11428] dvb_dvr_ioctl+0x29/0x40 [ 860.570257][T11428] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 860.570300][T11428] __x64_sys_ioctl+0x18e/0x210 [ 860.570360][T11428] do_syscall_64+0x123/0x790 [ 860.570428][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.570468][T11428] RIP: 0033:0x7efdf039e159 [ 860.570498][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.570536][T11428] RSP: 002b:00007efdf12db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.570573][T11428] RAX: ffffffffffffffda RBX: 00007efdf0625fa0 RCX: 00007efdf039e159 [ 860.570600][T11428] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 860.570625][T11428] RBP: 00007efdf043503b R08: 0000000000000000 R09: 0000000000000000 [ 860.570650][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.570674][T11428] R13: 00007efdf0626038 R14: 00007efdf0625fa0 R15: 00007ffd7b6237c8 [ 860.570732][T11428] [ 860.789219][T11428] Mem-Info: [ 860.789238][T11428] active_anon:8467 inactive_anon:0 isolated_anon:0 [ 860.789238][T11428] active_file:42 inactive_file:64618 isolated_file:0 [ 860.789238][T11428] unevictable:0 dirty:136 writeback:0 [ 860.789238][T11428] slab_reclaimable:11433 slab_unreclaimable:101835 [ 860.789238][T11428] mapped:35469 shmem:566 pagetables:1731 [ 860.789238][T11428] sec_pagetables:0 bounce:0 [ 860.789238][T11428] kernel_misc_reclaimable:0 [ 860.789238][T11428] free:1277268 free_pcp:11924 free_cma:0 [ 860.789339][T11428] Node 0 active_anon:33868kB inactive_anon:0kB active_file:168kB inactive_file:258268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141876kB dirty:544kB writeback:0kB shmem:2264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13744kB pagetables:6796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 860.789448][T11428] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 860.789553][T11428] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.789665][T11428] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 860.789739][T11428] Node 0 DMA32 free:1148156kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33868kB inactive_anon:0kB active_file:168kB inactive_file:258268kB unevictable:0kB writepending:544kB zspages:0kB present:3129332kB managed:2530604kB mlocked:0kB bounce:0kB free_pcp:47696kB local_pcp:19460kB free_cma:0kB [ 860.789856][T11428] lowmem_reserve[]: 0 0 0 0 0 [ 860.789920][T11428] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.790030][T11428] lowmem_reserve[]: 0 0 0 0 0 [ 860.790094][T11428] Node 1 Normal free:3945588kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.790210][T11428] lowmem_reserve[]: 0 0 0 0 0 [ 860.790276][T11428] Node 0 [ 860.930184][T11220] hsr_slave_0: entered promiscuous mode [ 860.936586][T11220] hsr_slave_1: entered promiscuous mode [ 860.941441][T11428] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 860.941724][T11428] Node 0 DMA32: 3293*4kB (UME) 1593*8kB (UME) 1272*16kB (UME) 508*32kB (UME) 332*64kB (UME) 376*128kB (UME) 254*256kB (UME) 84*512kB (UM) 47*1024kB (M) 20*2048kB (UM) 200*4096kB (UM) = 1148220kB [ 860.942035][T11428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 860.942223][T11428] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 3*16kB (UM) 6*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) [ 860.947832][T11220] debugfs: 'hsr0' already exists in 'hsr' [ 860.969545][T11220] Cannot create hsr debugfs directory [ 861.082272][T11428] 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3945588kB [ 861.082630][T11428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.082812][T11428] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 861.123250][T11428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.123406][T11428] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.123452][T11428] 65222 total pagecache pages [ 861.328593][T11428] 0 pages in swap cache [ 861.333538][T11428] Free swap = 124996kB [ 861.333633][T11428] Total swap = 124996kB [ 861.333688][T11428] 2097051 pages RAM [ 861.333765][T11428] 0 pages HighMem/MovableOnly [ 861.333829][T11428] 432765 pages reserved [ 861.333887][T11428] 0 pages cma reserved [ 861.797632][T11230] hsr_slave_0: entered promiscuous mode [ 861.843662][T11230] hsr_slave_1: entered promiscuous mode [ 861.848282][T11230] debugfs: 'hsr0' already exists in 'hsr' [ 861.848312][T11230] Cannot create hsr debugfs directory [ 862.174309][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1202'. [ 864.409202][T11460] syz.8.1206 (11460): drop_caches: 2 [ 864.897607][T11470] input: syz0 as /devices/virtual/input/input25 [ 864.909280][T10824] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 864.937516][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 865.069417][T10824] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 865.138668][T10824] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.138753][T10824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.817396][T10824] usb 10-1: config 0 descriptor?? [ 865.882388][T10824] pwc: Askey VC010 type 2 USB webcam detected. [ 865.926702][T11477] tipc: Started in network mode [ 865.926784][T11477] tipc: Node identity ac1414aa, cluster identity 4711 [ 865.941270][T11477] tipc: New replicast peer: 172.20.20.187 [ 865.943414][T11477] tipc: Enabled bearer , priority 10 [ 866.424833][T10824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 866.472002][T10824] pwc: recv_control_msg error -32 req 02 val 2700 [ 866.551399][T10824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 866.640485][T10824] pwc: recv_control_msg error -32 req 04 val 1000 [ 866.726958][T10824] pwc: recv_control_msg error -32 req 04 val 1300 [ 866.934806][T10824] pwc: recv_control_msg error -32 req 04 val 1400 [ 866.997465][T10824] pwc: recv_control_msg error -32 req 02 val 2000 [ 867.041676][T10824] pwc: recv_control_msg error -32 req 02 val 2100 [ 867.073248][T10824] pwc: recv_control_msg error -32 req 04 val 1500 [ 867.154404][ T5747] tipc: Node number set to 2886997162 [ 867.305399][T10824] pwc: recv_control_msg error -71 req 02 val 2400 [ 867.305845][T10824] pwc: recv_control_msg error -71 req 02 val 2600 [ 867.306294][T10824] pwc: recv_control_msg error -71 req 02 val 2900 [ 867.306724][T10824] pwc: recv_control_msg error -71 req 02 val 2800 [ 867.307333][T10824] pwc: recv_control_msg error -71 req 04 val 1100 [ 867.307765][T10824] pwc: recv_control_msg error -71 req 04 val 1200 [ 867.389947][T10824] pwc: Registered as video103. [ 867.392579][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1219'. [ 867.394174][T10824] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input26 [ 867.425158][T10824] usb 10-1: USB disconnect, device number 3 [ 867.630766][ T5734] hid_parser_main: 448 callbacks suppressed [ 867.630801][ T5734] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 867.740299][ T5734] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 869.436547][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.436624][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.385100][T11499] fido_id[11499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 871.490135][ T8714] Bluetooth: hci2: command 0x0406 tx timeout [ 872.917622][T11524] input: syz0 as /devices/virtual/input/input27 [ 876.948439][ T5276] 8021q: adding VLAN 0 to HW filter on device eth19 [ 877.068688][T10824] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 877.291501][T10824] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 877.292853][T10824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.292923][T10824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.300741][ T8466] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 877.333879][T10824] usb 4-1: config 0 descriptor?? [ 877.349955][T10824] pwc: Askey VC010 type 2 USB webcam detected. [ 877.376818][ T8466] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 877.887270][T10824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 877.957840][T10824] pwc: recv_control_msg error -32 req 02 val 2700 [ 878.046896][T10824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 878.102155][T10824] pwc: recv_control_msg error -32 req 04 val 1000 [ 878.172971][T10824] pwc: recv_control_msg error -32 req 04 val 1300 [ 878.245710][T10824] pwc: recv_control_msg error -32 req 04 val 1400 [ 878.316294][T10824] pwc: recv_control_msg error -32 req 02 val 2000 [ 878.396742][T10824] pwc: recv_control_msg error -32 req 02 val 2100 [ 878.489778][T10824] pwc: recv_control_msg error -32 req 04 val 1500 [ 878.722957][T10824] pwc: recv_control_msg error -71 req 02 val 2400 [ 878.793451][T10824] pwc: recv_control_msg error -71 req 02 val 2600 [ 878.873607][T10824] pwc: recv_control_msg error -71 req 02 val 2900 [ 878.952894][T10824] pwc: recv_control_msg error -71 req 02 val 2800 [ 879.083341][T10824] pwc: recv_control_msg error -71 req 04 val 1100 [ 879.166753][T10824] pwc: recv_control_msg error -71 req 04 val 1200 [ 880.150182][T10824] pwc: Registered as video103. [ 880.158476][T10824] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 880.162631][T10824] usb 4-1: USB disconnect, device number 20 [ 880.466418][T11571] fido_id[11571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 885.281492][T11230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 885.314664][T11230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.336913][T11230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 885.364434][T11230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.366218][T11230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 885.465523][T11230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.487225][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1242'. [ 885.487256][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1242'. [ 885.487293][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1242'. [ 885.493870][T11230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 885.524784][T11230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.644492][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 886.933551][T11631] input: syz0 as /devices/virtual/input/input29 [ 886.946878][T11220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.986334][T11220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.990781][T11220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 887.035709][T11220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.046959][T11220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 887.075242][T11220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 887.165465][T11220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 887.206520][T11220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.357688][T10823] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 888.423452][T11230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.690126][T10823] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 888.693628][T10823] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.693693][T10823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.706923][T10823] usb 10-1: config 0 descriptor?? [ 888.756759][T10823] pwc: Askey VC010 type 2 USB webcam detected. [ 889.499562][T11230] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.642241][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.642355][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.720422][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.720563][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.856786][T10823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 889.864038][T10823] pwc: recv_control_msg error -32 req 02 val 2700 [ 889.866819][T10823] pwc: recv_control_msg error -32 req 02 val 2c00 [ 889.873584][T10823] pwc: recv_control_msg error -32 req 04 val 1000 [ 889.876702][T10823] pwc: recv_control_msg error -32 req 04 val 1300 [ 889.885833][T10823] pwc: recv_control_msg error -32 req 04 val 1400 [ 889.887521][T10823] pwc: recv_control_msg error -32 req 02 val 2000 [ 889.893745][T10823] pwc: recv_control_msg error -32 req 02 val 2100 [ 889.913161][T10823] pwc: recv_control_msg error -32 req 04 val 1500 [ 889.964061][T11220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.236307][T10823] pwc: recv_control_msg error -71 req 02 val 2400 [ 890.315686][T10823] pwc: recv_control_msg error -71 req 02 val 2600 [ 890.637860][T10823] pwc: recv_control_msg error -71 req 02 val 2900 [ 890.676900][T10823] pwc: recv_control_msg error -71 req 02 val 2800 [ 890.772985][T10823] pwc: recv_control_msg error -71 req 04 val 1100 [ 890.971730][T10823] pwc: recv_control_msg error -71 req 04 val 1200 [ 891.204553][T10823] pwc: Registered as video103. [ 891.250374][T10823] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input30 [ 891.322625][T10823] usb 10-1: USB disconnect, device number 4 [ 891.401828][ T1483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.627505][ T5747] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 891.742317][ T1483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.794660][ T5747] usb 9-1: Using ep0 maxpacket: 16 [ 891.797640][ T5747] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 891.797697][ T5747] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 891.807867][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.816095][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.820769][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.838043][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.851141][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.856034][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.863207][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.871893][ T5747] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.877221][ T5747] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 891.877260][ T5747] usb 9-1: SerialNumber: syz [ 891.923182][ T5747] usb 9-1: config 0 descriptor?? [ 891.963602][T11220] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.974673][T11669] Bluetooth: hci1: command 0x0406 tx timeout [ 891.980140][ T5747] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input31 [ 892.013266][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.013427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.016076][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.016197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.099237][T11688] Need at least one configuration in g1. [ 892.099404][T11688] udc dummy_udc.0: failed to start g1: -22 [ 892.099439][T11688] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 892.100331][T11688] UDC core: g1: couldn't find an available UDC or it's busy [ 892.189874][ T4966] bcm5974 9-1:0.0: could not read from device [ 892.429310][ T4966] bcm5974 9-1:0.0: could not read from device [ 892.431144][ T5747] usb 9-1: USB disconnect, device number 2 [ 892.502479][ T1483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.519944][ T1483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.607329][ T5755] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 894.759903][ T5755] usb 9-1: unable to get BOS descriptor or descriptor too short [ 894.759965][ T5755] usb 9-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 894.763245][ T5755] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.763283][ T5755] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.810999][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.811040][ T5755] usb 9-1: Product: syz [ 894.811068][ T5755] usb 9-1: Manufacturer: syz [ 894.811095][ T5755] usb 9-1: SerialNumber: syz [ 895.025951][ T1483] bridge_slave_1: left allmulticast mode [ 895.026019][ T1483] bridge_slave_1: left promiscuous mode [ 895.026304][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.095531][ T1483] bridge_slave_0: left allmulticast mode [ 895.095567][ T1483] bridge_slave_0: left promiscuous mode [ 895.095804][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.238323][ T5755] usb 9-1: USB disconnect, device number 3 [ 895.325636][ T7799] udevd[7799]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.578859][ T5734] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 897.968907][ T5734] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 897.988571][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.988630][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.989194][T11669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.992647][T11669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 897.993833][T11669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 897.994915][ T5734] usb 4-1: config 0 descriptor?? [ 898.569649][T11669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 898.611667][T11669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 898.843763][ T5734] pwc: Askey VC010 type 2 USB webcam detected. [ 899.044730][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.065469][ T5734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 899.073575][ T5734] pwc: recv_control_msg error -32 req 02 val 2700 [ 899.075000][ T5734] pwc: recv_control_msg error -32 req 02 val 2c00 [ 899.075921][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.077876][ T5734] pwc: recv_control_msg error -32 req 04 val 1000 [ 899.091597][ T5734] pwc: recv_control_msg error -32 req 04 val 1300 [ 899.103487][ T5734] pwc: recv_control_msg error -32 req 04 val 1400 [ 899.107536][ T5734] pwc: recv_control_msg error -32 req 02 val 2000 [ 899.123123][ T1483] bond0 (unregistering): Released all slaves [ 899.129796][ T5734] pwc: recv_control_msg error -32 req 02 val 2100 [ 899.139083][ T5734] pwc: recv_control_msg error -32 req 04 val 1500 [ 899.357662][ T5734] pwc: recv_control_msg error -71 req 02 val 2400 [ 899.359679][ T5734] pwc: recv_control_msg error -71 req 02 val 2600 [ 899.361686][ T5734] pwc: recv_control_msg error -71 req 02 val 2900 [ 899.363666][ T5734] pwc: recv_control_msg error -71 req 02 val 2800 [ 899.365945][ T5734] pwc: recv_control_msg error -71 req 04 val 1100 [ 899.368697][ T5734] pwc: recv_control_msg error -71 req 04 val 1200 [ 899.419714][ T5734] pwc: Registered as video103. [ 899.436273][ T5734] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 899.543678][ T5734] usb 4-1: USB disconnect, device number 21 [ 899.582255][T11755] fuse: Bad value for 'group_id' [ 899.582283][T11755] fuse: Bad value for 'group_id' [ 900.167601][T11669] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 900.171615][T10823] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 900.175341][T11669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 900.203944][T11669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 900.208755][T11669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 900.209523][T11669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 900.258423][ T5755] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 900.329821][T10823] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 900.331172][T10823] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 900.331212][T10823] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 900.331255][T10823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 900.331318][T10823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 900.331358][T10823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 900.331406][T10823] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 900.331470][T10823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.420204][T10823] usb 8-1: config 0 descriptor?? [ 900.421289][T11760] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 900.426770][ T5755] usb 9-1: Using ep0 maxpacket: 16 [ 900.444587][ T5755] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 900.444639][ T5755] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 900.463436][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.464769][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.466261][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.501349][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.502879][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.504182][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.505492][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.548301][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.550463][ T5755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 900.550532][ T5755] usb 9-1: SerialNumber: syz [ 900.685403][T11772] binder: 11769:11772 ioctl 80045017 200000000400 returned -22 [ 900.699329][T11669] Bluetooth: hci4: command tx timeout [ 900.710412][T11772] overlayfs: failed to resolve './file0': -2 [ 900.851986][ T5755] usb 9-1: config 0 descriptor?? [ 901.589894][ T5755] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input33 [ 901.876708][ T1483] hsr_slave_0: left promiscuous mode [ 901.883758][T10823] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 901.885641][ T4966] bcm5974 9-1:0.0: could not read from device [ 901.943072][ T1483] hsr_slave_1: left promiscuous mode [ 901.947928][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.969825][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.985816][ T5755] usb 9-1: USB disconnect, device number 4 [ 901.994946][ T4966] bcm5974 9-1:0.0: could not read from device [ 902.050627][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.050660][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.155149][ T1483] veth1_macvtap: left promiscuous mode [ 902.155319][ T1483] veth0_macvtap: left promiscuous mode [ 902.155448][ T1483] veth1_vlan: left promiscuous mode [ 902.155539][ T1483] veth0_vlan: left promiscuous mode [ 902.286834][T11669] Bluetooth: hci5: command tx timeout [ 902.303175][T11785] input: syz0 as /devices/virtual/input/input34 [ 902.357554][ T8466] usb 8-1: USB disconnect, device number 5 [ 902.466851][ T8466] usblp0: removed [ 902.806726][T11669] Bluetooth: hci4: command tx timeout [ 904.810587][ T8714] Bluetooth: hci5: command tx timeout [ 904.856556][ T8714] Bluetooth: hci4: command tx timeout [ 905.415129][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 905.474619][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 905.653983][T11823] Need at least one configuration in g1. [ 905.654850][T11823] udc dummy_udc.0: failed to start g1: -22 [ 905.654966][T11823] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 905.659834][T11823] UDC core: g1: couldn't find an available UDC or it's busy [ 906.816410][T10823] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 906.846345][ T8714] Bluetooth: hci5: command tx timeout [ 906.927242][ T8714] Bluetooth: hci4: command tx timeout [ 906.976321][T10823] usb 9-1: Using ep0 maxpacket: 16 [ 906.977193][T10823] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 906.977251][T10823] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 906.978580][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.979842][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.981143][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.982408][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.983818][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.985111][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.009903][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.073564][T10823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.097637][T10823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 907.097678][T10823] usb 9-1: SerialNumber: syz [ 907.100960][T10823] usb 9-1: config 0 descriptor?? [ 907.129805][T10823] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input35 [ 907.162242][ T8466] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 907.326395][ T8714] Bluetooth: hci0: command 0x0406 tx timeout [ 907.340624][ T8466] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 907.341951][ T8466] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.341988][ T8466] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 907.342050][ T8466] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 907.342113][ T8466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.374993][ T8466] cdc_acm 8-1:1.0: Zero length descriptor references [ 907.375034][ T8466] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 907.438004][T11826] input: syz0 as /devices/virtual/input/input36 [ 907.696750][ T5734] usb 8-1: USB disconnect, device number 6 [ 908.466390][T11841] svc: failed to register lockdv1 RPC service (errno 111). [ 908.466638][T11841] lockd_up: makesock failed, error=-111 [ 908.928162][T11669] Bluetooth: hci5: command tx timeout [ 909.727600][T11862] FAULT_INJECTION: forcing a failure. [ 909.727600][T11862] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 909.727657][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.7.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.727713][T11862] Tainted: [L]=SOFTLOCKUP [ 909.727728][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 909.727752][T11862] Call Trace: [ 909.727764][T11862] [ 909.727779][T11862] dump_stack_lvl+0x100/0x190 [ 909.727838][T11862] should_fail_ex.cold+0x5/0xa [ 909.727883][T11862] ? prepare_alloc_pages+0x16d/0x5b0 [ 909.727927][T11862] should_fail_alloc_page+0xeb/0x140 [ 909.727972][T11862] prepare_alloc_pages+0x1f0/0x5b0 [ 909.728009][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728067][T11862] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 909.728138][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728186][T11862] ? rcu_is_watching+0x13/0xc0 [ 909.728248][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728296][T11862] ? __lock_acquire+0x5c0/0x1f40 [ 909.728338][T11862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 909.728396][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728446][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728495][T11862] ? __css_rstat_updated+0x1ce/0x590 [ 909.728545][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728594][T11862] ? lock_acquire+0x1d1/0x380 [ 909.728632][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728679][T11862] ? do_raw_spin_lock+0x128/0x260 [ 909.728728][T11862] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 909.728775][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728822][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728870][T11862] ? find_held_lock+0x2b/0x80 [ 909.728936][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.728983][T11862] ? __lock_acquire+0x5c0/0x1f40 [ 909.729023][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.729070][T11862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 909.729116][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.729163][T11862] ? policy_nodemask+0xed/0x4f0 [ 909.729209][T11862] alloc_pages_mpol+0x201/0x550 [ 909.729265][T11862] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 909.729320][T11862] folio_alloc_mpol_noprof+0x36/0x260 [ 909.729374][T11862] shmem_alloc_folio+0x135/0x160 [ 909.729417][T11862] shmem_alloc_and_add_folio+0x371/0xd40 [ 909.729470][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.729524][T11862] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 909.729577][T11862] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 909.729637][T11862] shmem_get_folio_gfp+0x75b/0x1980 [ 909.729697][T11862] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 909.729751][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.729799][T11862] ? filemap_map_pages+0x1155/0x2060 [ 909.729852][T11862] shmem_fault+0x1fb/0xa30 [ 909.729902][T11862] ? __pfx_shmem_fault+0x10/0x10 [ 909.729956][T11862] ? __pfx_filemap_map_pages+0x10/0x10 [ 909.730004][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.730051][T11862] ? find_held_lock+0x2b/0x80 [ 909.730108][T11862] ? __pfx_filemap_map_pages+0x10/0x10 [ 909.730148][T11862] __do_fault+0x10b/0x440 [ 909.730209][T11862] do_fault+0xb3f/0x1830 [ 909.730252][T11862] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 909.730306][T11862] ? __pfx_do_fault+0x10/0x10 [ 909.730340][T11862] ? rcu_read_unlock+0x2d/0xb0 [ 909.730387][T11862] ? rcu_read_unlock+0x2d/0xb0 [ 909.730435][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.730484][T11862] ? __pte_offset_map+0x179/0x310 [ 909.730553][T11862] __handle_mm_fault+0x150b/0x2f60 [ 909.730611][T11862] ? __pfx___handle_mm_fault+0x10/0x10 [ 909.730658][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.730705][T11862] ? pte_offset_map_lock+0x174/0x320 [ 909.730766][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.730814][T11862] ? find_held_lock+0x2b/0x80 [ 909.730866][T11862] ? find_held_lock+0x2b/0x80 [ 909.730918][T11862] ? follow_page_pte+0x536/0x1050 [ 909.730998][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.731057][T11862] handle_mm_fault+0x363/0xa20 [ 909.731115][T11862] __get_user_pages+0x8ae/0x2c30 [ 909.731192][T11862] ? __pfx_mt_find+0x10/0x10 [ 909.731242][T11862] ? __pfx___get_user_pages+0x10/0x10 [ 909.731314][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.731371][T11862] populate_vma_page_range+0x267/0x3f0 [ 909.731441][T11862] ? __pfx_populate_vma_page_range+0x10/0x10 [ 909.731508][T11862] ? __pfx_find_vma_intersection+0x10/0x10 [ 909.731586][T11862] __mm_populate+0x107/0x3a0 [ 909.731626][T11862] ? __pfx___mm_populate+0x10/0x10 [ 909.731693][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.731743][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.731791][T11862] ? up_write+0x2dc/0x5b0 [ 909.731841][T11862] vm_mmap_pgoff+0x441/0x470 [ 909.731906][T11862] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 909.731967][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.732022][T11862] ? __pfx_do_futex+0x10/0x10 [ 909.732083][T11862] ksys_mmap_pgoff+0xe4/0x610 [ 909.732146][T11862] ? __x64_sys_futex+0x358/0x4d0 [ 909.732199][T11862] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 909.732267][T11862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 909.732314][T11862] ? xfd_validate_state+0x129/0x190 [ 909.732391][T11862] __x64_sys_mmap+0x125/0x190 [ 909.732438][T11862] do_syscall_64+0x123/0x790 [ 909.732507][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.732547][T11862] RIP: 0033:0x7f179f99e159 [ 909.732578][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.732617][T11862] RSP: 002b:00007f17a0812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 909.732655][T11862] RAX: ffffffffffffffda RBX: 00007f179fc25fa0 RCX: 00007f179f99e159 [ 909.732682][T11862] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 909.732708][T11862] RBP: 00007f179fa3503b R08: ffffffffffffffff R09: 0000000000000000 [ 909.732733][T11862] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 909.732759][T11862] R13: 00007f179fc26038 R14: 00007f179fc25fa0 R15: 00007ffe4bb46418 [ 909.732811][T11862] [ 910.389335][ T4966] bcm5974 9-1:0.0: could not read from device [ 910.415148][ T4966] bcm5974 9-1:0.0: could not read from device [ 910.490488][ T4966] bcm5974 9-1:0.0: could not read from device [ 910.505202][ T4966] bcm5974 9-1:0.0: could not read from device [ 910.593779][T10823] usb 9-1: USB disconnect, device number 5 [ 910.635034][T11869] loop8: detected capacity change from 0 to 512 [ 911.898480][T11871] loop8: detected capacity change from 0 to 256 [ 912.754674][T11841] svc: failed to register nfsdv3 RPC service (errno 512). [ 912.800002][T11841] svc: failed to register nfsaclv3 RPC service (errno 512). [ 912.800053][T11841] failed to unregister tcp with rpcbind [ 912.855631][T11841] svc: failed to register nfsdv3 RPC service (errno 97). [ 912.855679][T11841] svc: failed to register nfsaclv3 RPC service (errno 97). [ 912.855719][T11841] failed to unregister tcp with rpcbind [ 912.934857][T11871] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 912.954349][T11871] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 913.504975][T11885] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000dd: 0000 [#1] SMP KASAN NOPTI [ 913.517090][T11885] KASAN: null-ptr-deref in range [0x00000000000006e8-0x00000000000006ef] [ 913.525518][T11885] CPU: 1 UID: 0 PID: 11885 Comm: syz.7.1294 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.536481][T11885] Tainted: [L]=SOFTLOCKUP [ 913.540799][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 913.550852][T11885] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 913.556342][T11885] Code: 84 db 74 09 e8 3d b4 08 fa 49 8d 6d f0 e8 34 b4 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 913.575960][T11885] RSP: 0018:ffffc90003e8fb20 EFLAGS: 00010217 [ 913.582037][T11885] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90018996000 [ 913.590015][T11885] RDX: 00000000000000dd RSI: ffffffff880357bc RDI: 00000000000006ec [ 913.597989][T11885] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 913.605962][T11885] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ef92000 [ 913.613942][T11885] R13: 0000000000000000 R14: ffff88801ef92430 R15: ffff88801ef92070 [ 913.621919][T11885] FS: 00007f17a08126c0(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 913.630858][T11885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 913.637448][T11885] CR2: 000000110c3e087b CR3: 000000006b5a3000 CR4: 0000000000350ef0 [ 913.645424][T11885] Call Trace: [ 913.648755][T11885] [ 913.651686][T11885] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 913.657016][T11885] platform_probe+0x106/0x1d0 [ 913.661709][T11885] ? __pfx_platform_probe+0x10/0x10 [ 913.666923][T11885] really_probe+0x241/0xa60 [ 913.671452][T11885] __driver_probe_device+0x210/0x460 [ 913.676764][T11885] device_driver_attach+0xd1/0x220 [ 913.681904][T11885] bind_store+0xf4/0x190 [ 913.686161][T11885] ? __pfx_bind_store+0x10/0x10 [ 913.691035][T11885] drv_attr_store+0x74/0xb0 [ 913.695545][T11885] ? __pfx_drv_attr_store+0x10/0x10 [ 913.700748][T11885] sysfs_kf_write+0xf2/0x150 [ 913.705374][T11885] kernfs_fop_write_iter+0x3e0/0x5f0 [ 913.710684][T11885] ? __pfx_sysfs_kf_write+0x10/0x10 [ 913.715925][T11885] vfs_write+0x6af/0x1050 [ 913.720282][T11885] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 913.726117][T11885] ? __pfx_vfs_write+0x10/0x10 [ 913.730906][T11885] ? find_held_lock+0x2b/0x80 [ 913.735620][T11885] ksys_write+0x12a/0x250 [ 913.739975][T11885] ? __pfx_ksys_write+0x10/0x10 [ 913.744851][T11885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 913.750504][T11885] do_syscall_64+0x123/0x790 [ 913.755131][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.761033][T11885] RIP: 0033:0x7f179f99e159 [ 913.765451][T11885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.785072][T11885] RSP: 002b:00007f17a0812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.793500][T11885] RAX: ffffffffffffffda RBX: 00007f179fc25fa0 RCX: 00007f179f99e159 [ 913.801479][T11885] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000005 [ 913.809456][T11885] RBP: 00007f179fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 913.817432][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.825406][T11885] R13: 00007f179fc26038 R14: 00007f179fc25fa0 R15: 00007ffe4bb46418 [ 913.833397][T11885] [ 913.836412][T11885] Modules linked in: [ 913.841821][T11885] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 913.934246][T11885] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 913.934314][T11885] Code: 84 db 74 09 e8 3d b4 08 fa 49 8d 6d f0 e8 34 b4 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 913.934600][T11885] RSP: 0018:ffffc90003e8fb20 EFLAGS: 00010217 [ 913.934634][T11885] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90018996000 [ 913.934661][T11885] RDX: 00000000000000dd RSI: ffffffff880357bc RDI: 00000000000006ec [ 913.934686][T11885] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 913.934710][T11885] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ef92000 [ 913.934744][T11885] R13: 0000000000000000 R14: ffff88801ef92430 R15: ffff88801ef92070 [ 913.934773][T11885] FS: 00007f17a08126c0(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 913.934809][T11885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 913.934836][T11885] CR2: 00007f31a4f87000 CR3: 000000006b5a3000 CR4: 0000000000350ef0 [ 913.934866][T11885] Kernel panic - not syncing: Fatal exception [ 914.035708][T11885] Kernel Offset: disabled [ 914.040050][T11885] Rebooting in 86400 seconds..