last executing test programs: 5.640045098s ago: executing program 3 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$full(0xffffff9c, &(0x7f0000000040), 0x82000, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000003c0), 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0x2000, 0x3c00, 0x800, 0x7, 0x8, 0x2, 0x0, {0x3, 0x7, 0x1}, {0x1, 0x7}, {0x2}, {0x2, 0x1}, 0x2, 0x0, 0x2, 0x5, 0x0, 0x2, 0x7fffffff, 0x4, 0x6ae5, 0x10000, 0x8, 0xfffffffb, 0x16, 0x100, 0x1, 0xb}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, 0x0) 4.789041201s ago: executing program 3 (id=139): syz_emit_ethernet(0x32, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@remote, 0x500, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe, 0x4}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c000280180003801000"], 0x48}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4.369661875s ago: executing program 3 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async, rerun: 64) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0x9, 0x853c, 0xc1, 0x8, 0x0, 0x81}, 0x1c) (async, rerun: 64) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0xe06a, 0x81) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a00010081"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000600)=""/170, 0x1c, 0xaa, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x80) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4010, r0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1c, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x1, 0x2, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x2, 0x8, 0x9, 0xfffffffffffffffc, 0x6a16599f90889a3c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x58, &(0x7f00000004c0)=""/88, 0x41000, 0x50, '\x00', r2, @fallback=0x1a, r6, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x1, 0x0, 0xfffffff7}, 0x10, r7, 0xffffffffffffffff, 0x5, &(0x7f0000000800)=[r8], &(0x7f0000000840)=[{0x2, 0x4, 0x3, 0x2}, {0x3, 0x5, 0x8, 0x5}, {0x2, 0x2, 0x2, 0x3}, {0x4, 0x2, 0x10, 0x9}, {0x0, 0x2, 0x4, 0x1}], 0x10, 0x1a}, 0x94) 4.239376918s ago: executing program 3 (id=145): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="020027bd0500ffdbdf25350000000c009900001000007e0000001a0034005756c2441b590203c6321c43f22ff332"], 0x64}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000580)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000fdff3c289ffd0567b3666b31a00a5921f9e4f7b7efe9adc9816533763b04c44209ce12c3270b455921261cbec7518db49d47d7985e37650a1e44c00d7bcd99b323e95c0afe0486fbabda4e6820e3061947f3eead6136c9082f93675594cd617d56aef664c8e41c7ccda2fb52431817aa69511f471dcf13e27efaf90c075", 0xa7}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_gettime(r1, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) iopl(0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x9d9f, {{0xa, 0x4e23, 0xe0, @empty, 0x4}}}, 0x84) shutdown(r0, 0x0) recvfrom(r3, &(0x7f0000000540)=""/32, 0x20, 0x6667b9fe4a4fda2, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', r7, 0x8000, 0x1, 0x1a, 0x9, {{0xb, 0x4, 0x0, 0x35, 0x2c, 0x64, 0x0, 0xb0, 0x29, 0x0, @broadcast, @multicast2, {[@noop, @timestamp={0x44, 0x14, 0xcd, 0x0, 0x1, [0xffff, 0x7, 0xffffffff, 0xfffffffa]}, @end]}}}}}) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000440)=ANY=[@ANYBLOB="34e2442ac1eaa8a344c74577e98432eead464144e1b2916fa33a669e43f94106b54ea92fe9c8aa096993e5128c10304e2659697d069cec796c73591e1c0d73a50158a7f97563ec32", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf2517000000040004801c00068016000300fe9695b3ecd77a69596394aca56e81d005130000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.530006902s ago: executing program 0 (id=151): socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002380)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r7, r7) write$vhost_msg_v2(r8, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000004c0)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000380)=0x1) dup(r6) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) socket$inet6(0x10, 0x3, 0x0) 3.363852851s ago: executing program 3 (id=152): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x80, 0x3, &(0x7f0000000340)={0x10, "05000000275d80698d01980000004756038923ec02b61472ceb17c66f7481b00"}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r1, r1) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d83be09}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d1f3efd}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xbc}}, 0x0) 3.346513821s ago: executing program 0 (id=153): socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r4, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/10, 0xa}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8001, 0x0, 0x0, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c40000000001050500000000000000000a0000003c0002802c00018014000300ff01000010000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001ff0f040000000000000000000000ffffac1414bb08000740010000013000068014000400000000000000000000000000000000010400038014000500fc010000000000000000000000000001"], 0xc4}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 2.890905043s ago: executing program 1 (id=155): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000440)={0x6, @win={{0x735, 0x9, 0xe1, 0xfffffff9}, 0x1, 0xa, 0x0, 0xfffff241, 0x0, 0xcf}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x42042) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000000)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000683200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="00000000000f0000b70500000800000085000000760000009500000000000000410ab1cbd9e7935204ddeaf34294414c03e80deebbc79b90beaa3a69417e9dd9ec3b6440bbd1977b5fb04ec5b13451a402b9a5de3229983a89a1b8308d2069b66b355fb583c699935173f4b8061820a806d637ee42024de93d00901e676b248eaf1030c43acdf07851cb13da5f7a81f4617b511877eb69b95719394646e57ef5f6845177090da8b2fad11f2ca373a65cb9f0df2a0e736ce2145f817f93843fed2fff019f3f5e4f4c88223091d3899cad642b1726dc22f9ea48996ad2a706643a19"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r11, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TIOCPKT(r11, 0x5420, &(0x7f0000000140)=0x5) 2.431261135s ago: executing program 0 (id=159): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) 2.43092973s ago: executing program 0 (id=160): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000180)=0x75e6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.953853318s ago: executing program 1 (id=161): r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x80000, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000080)={0xc000002, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000002440)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYBLOB="4a042cb152b1c4fef723e3163d81c4870167be40c99680ded67991b81331de88f403ec8550e7ddb8302a44e7e55012c9cef2342321efad0fb69649fe998292a0c342d2df715221c04d9a5e2f6e2b368d185e042c30f3634161"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40081, 0x8}, 0x0) sched_setscheduler(0x0, 0x387393150893d477, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x48010) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_open_procfs(r1, &(0x7f0000000100)='net/dev_snmp6\x00') read$FUSE(r4, &(0x7f00000024c0)={0x2020}, 0x2020) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000000070102000000000000000000000009080005f8df3a8cb86ed243649e32b7df602ef550dcbcd340000000020c0006400000000000002a2bf1378ea3b8aebbb0d08a7d88ba00b623935bca"], 0x34}, 0x1, 0x0, 0x0, 0x24008894}, 0x20000854) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) close(0x3) 1.861084823s ago: executing program 0 (id=162): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/125, 0x7d}], 0x3, &(0x7f0000000500)=""/88, 0x58}, 0x4}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0xbbc5e000) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r6, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) 1.621105371s ago: executing program 2 (id=166): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.615233394s ago: executing program 2 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4044044) 1.53142153s ago: executing program 2 (id=168): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) 1.531101615s ago: executing program 2 (id=169): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xd, 0x2}, {0x2}}}}, 0xf) 1.427324073s ago: executing program 2 (id=170): mount$9p_virtio(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000)=0x800000, 0xa6020000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', 0x0, 0x0, 0x20c0c24, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) 1.056398983s ago: executing program 1 (id=171): r0 = socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r1 = getpid() syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x20004, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0xfffffffd) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') lseek(r6, 0x2000, 0x0) r7 = syz_usbip_server_init(0x5) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) writev(r2, &(0x7f0000000500), 0x0) r9 = socket(0x8000000010, 0x2, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x541b, 0xb) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRESOCT=r7, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r3, @ANYRES64=r9], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r12 = socket(0x840000000002, 0x3, 0x100) connect$inet(r12, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r13, 0x8955, 0x0) 884.93437ms ago: executing program 0 (id=172): syz_ublk_setup_io_uring(0x2589, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r9) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) 200.971975ms ago: executing program 3 (id=173): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0xfffffffd, 0x5, 0x81, 0x4010, 0xffffffffffffffff, 0x3, '\x00', r0, r1, 0x0, 0x5, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000a49b3d1fbf9b6c6cde2c74d1138df50000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xa8}}, 0x20054800) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) mkdirat(r4, &(0x7f0000000740)='./config\x00', 0x24) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=ANY=[@ANYBLOB="38000000180000c20000000000000000020000000000000500000000060015000800000014001680100008800c00028008000100090000001da9a3afe740494243acd4604c903db4adb5545ab12b6801ee8264a9aca7afc47d2b7dd3ebdd1c00ca4193433e53da7ad366406e567fbee1e199fe969e393403cca6e8858e49e6e36a51cb6ba63cca5aa3c449943cd7902b4c98351833293646156de1c7f1ea603b5bc7d3"], 0x38}}, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) renameat(r4, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', r6, &(0x7f0000000340)='./config/file0\x00') write(r4, &(0x7f0000001600)='dummy_udc.0', 0xb) syz_usb_connect(0x0, 0x84a, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xd8, 0xd, 0xc, 0x10, 0x12d1, 0xc90a, 0x6a3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x838, 0x3, 0x2, 0x3, 0xf0, 0x6, "", [{{0x9, 0x4, 0xaa, 0xf, 0x0, 0xff, 0x3, 0x73, 0xb, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "174749"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x6, 0xeb}, {0x6, 0x24, 0x1a, 0x800, 0x2}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0xfffb, 0x19d, 0xd5, 0x3e, 0x4, 0xfa}]}]}}, {{0x9, 0x4, 0x94, 0xcb, 0xd, 0xbf, 0xd3, 0xbc, 0xb7, [], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x4, 0x5, 0x0, [@generic={0x89, 0x24, "737ca60c30cb176628dd342d2f7c203fa3445c2d8ce3e22ec9d7e8711dfd7ff983bcfbcdf2f7fa3298cffd9dc5712cb17b7802dd8a654d107c035e320b14ca2f7a5a5ccdc6e25c8602c7600fbef3dc12bcfe83f9e2594c351836cc8f96468358e225af846fc3e599b6b2dd085b0a4a985e7ca3722397fba9ec89bf5f459b2c5db6a031609b29b6"}]}}, {{0x9, 0x5, 0x6, 0x14, 0x10, 0x3, 0xf7, 0xc, [@generic={0x26, 0x24, "332992a6f84d967246cd0832f3a8989416c7eb72fbc901d8e32fdb2ff73d904d763832f6"}, @generic={0xf7, 0x23, "43fdbe4657b842a15be0d130016ae2db8da37219b18bb9ea7c9e51f24f8c8c9f26b4ff6a668bf9cab348bed230af95ab4155642315a7b4aae19f01aa97d3bed3d44a8988f8f6de6f786bfc5958f9e598e6934540ec7dab534ad665d70e8917278ad77c5e4f7f31f9756c036de8c02ab5d3a5ffd33598eecfa0b1fe102db0761b13aecccbb9184d50105ec170b927502f7a78e27d3337278d2e07b634af882a471f7c69bdce7ca3906f6a04c9ab4e361c1d81503e8b2994dfe7c45cc83e6e62dce4c09131a96613415c1b74b4a9f385cbb7d74d290c0535a66713b2b49008a0c2e03faf88956dad83a804ebe2cb4654ce662d8d46e9"}]}}, {{0x9, 0x5, 0xa, 0x2351c1f04f3e68c3, 0x20, 0xb, 0x7, 0x0, [@generic={0x3c, 0xb, "896a57a565d36f44ff821e90f6636eb9810c3e2a4c05fa19f4cc21ada55d98acc6708df27f5abbae4c37eac966f68acbefad207278e321f9809d"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x32, 0x1, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x8, 0xe}}, {{0x9, 0x5, 0x5, 0x22, 0x40, 0x6, 0x9, 0x5, [@generic={0x8a, 0x7, "bcd8fd613eefa0bf142b8bbf5f7775524043403908249afdfcae7cc91a3f1dc58fbdec13eb5a3ebb52fbb905a82d948eab4111e2802c1dcebea785d56e4f4fd0720728c64e620f97710292c005fa6962448442fab8e7f493000bfba89e92252708a161627fed0c27a26e922916dd8dd6b486893f32d3e49a11e1e03f1d77a6357cdca19f852f0fa7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x5, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x92, 0x80, 0xa6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xb, 0x6, 0xf}}, {{0x9, 0x5, 0x9, 0x1c, 0x200, 0x5, 0x4b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe8, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0x6, 0x3, [@generic={0xb9, 0x24, "9c94bd101b16d11bc96fa1fbdb57a65f602a84bd9978daf23989116cf971ed02c3467b147c2e265b87978a8a2874eb31b548cd2b44d113429e29ff338d875428ff56ac9a4dcfe7c6c8b921764108abfa4d8dbe1ccbe2d4a096317a6fb9dd1abaf583b66f375e773c300363d22670a8e504ddc08977da68b9644731a26bb50e9eca12c42542b22827139cefa50c8710e3179434a97b8119382c20ae46430cde7cc8f14a77a9ff5975309838169ae5722cdfe465be29a95c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x83, 0x41, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x49}, @generic={0x29, 0x21, "076ccc97744b9172af614d7012314d8e31cc1ccf5be12d77d398a5242c7d827aee8f7715c44366"}]}}]}}, {{0x9, 0x4, 0xf6, 0x2, 0xc, 0x12, 0xe4, 0x2c, 0x7, [@generic={0xc3, 0xa, "fd9a35490ed481298fbecb1ccc85e05bdfc5b653c8d3e363386aa7ca60960c74604fa2c43ec364ac749d7d40aab573db90955f6e9f5be9597bd5120d1b0f3f0d2a62266a359c1eaf59195caac0dc8ae0e0107e9084c72bbceb2f2d7c1392bf441f4ae2420316a60c28c77d9fcd0401da83ad673e69d8be7f9eed2b4c99e2a345b3e6003edf88efa591e9569e35469cc8566ccb043d749e45d8dc8387915297c906f1d54059d0dcf1ef5cdfe70c85956da4c59f1a653707ed90bad8b9825f921fc4"}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0xf8, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0x6, 0x1, 0x0, 0x30, 0x17, 0xe9, [@generic={0x92, 0xa, "83daca11f50db2df54957f76e43f791c025bd33bbb191d071835dc9304e77f078cfd41d070dd3be764c37937f1a4e7d234c8bc9528dda9d555da6d5a152f61099ae6e84475f67d90d2fd6dd5e2e9f3e1d5b0fc28116c830a4bad5f15cf679a0576fd5d3a379c70763d002bd5944c29c5a6ef82cc342d547b18dd58a91f0e26f24660359319b5fb830bf903058b4c85f4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6951}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x7, 0x2, 0x6, [@generic={0x5b, 0xc, "8535fb393bf5fbdc34ddcfa2322a25ceaba6a4d32e8215460e1873390b85ffc1ca828bef4c110d7cabc8dc39015c44008584c7a397fb28ea95f25778871e015b8d23b00fe0609f3e9521b25060fadb05b9eb0f688d5237030d"}, @generic={0x91, 0x31, "a67cb8b913d701df8ff8150f4737e6393541f47e710a532293a855b14191877f0cdef3a5283528dd83aa448327bf61a2d20d94ed5a45323e0c055086cf924ac4b11ca6d4c887d79b21b8b28b8080765cb911291821cb822b198af56e1926ec7762215566ef2d45fd0101a0d4f1f4e9f42cf00805baff55680fd70ceded5140985c7afcd4dcedaaf0d2b43b235bc91e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x7f, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0xe4}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x8, 0xf, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x30, 0x9d}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x6f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x4}]}}, {{0x9, 0x5, 0xb, 0x18, 0x40, 0x4, 0x8, 0x6, [@generic={0xf9, 0xd, "701661b2d5ef0797d7e4a834d064ebaa56bdb5f1322c72f43cd417e2e124622da813b2c1bf5ed4cef54430d84f9a3293bacdf5e45db7ebfc83206c0f1a7a6d552a23e16f6994005e725cddd2c29725152f2520c2c960bd22d29cdfeb3c23b71d222a488ace559605746f77c33e5a3570a1625a5289acf1c4234628585a86c4d0758f6773167052c10aec31bd4631bbcbe7d2b630ac34e00a80a14126481f61a17c831eaaa04e7553f7e9a49c198a47fc25be70cb6467ff584b790d8e58847e3b962004e630b0bb4820dc55971d8995a496f12cd1372c0b4402741595476654b10c319f5c44fb78c960e40bed0f516206655f94c7ef86ba"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5b, 0x8}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x250, 0x8, 0x4, 0x4, 0x10, 0x58}, 0xbb, &(0x7f0000001340)={0x5, 0xf, 0xbb, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb0, 0x10, 0x2, "b07db4c913ef133a9915e208db11e66d83035645fe65caf2580a6ede760fb2382f93a839aa0f588ea55fb4aa256155e05a18e042539eeadc97da186d6a57adfce923492f8ca42ce8f11a76708427d1a02232e6eba959049beb24174f49370b54ffd5eb0e65de238a8e792ec331c562448b24064c812931cd51be5b0d549a370d7d9663279f98528b578e91f78037a7cf78fe938e3dd92930748c6920bdc33aa23205288ca237a1464837c50fde"}]}, 0x8, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x2809}}, {0xe3, &(0x7f0000001640)=@string={0xe3, 0x3, "8ef1ee325a77ee2738ffd9cb33a5bc3ea83b8025d144b4732c06a9f025c0ad38fbb84fa0ff9d3d27e1e71771281f01cc3c212665d0c458e522ee559eb78aeccf1fe2d5fdedf2afe170fac004e3ea8d15ed9eac5c9500e01fccb7aacb71198450fac8b7f8e3a9be522b3827aaea1021b00efca10ae804ee0c4776895d0c3c01a158217409f9304a248bf130dd8532a5aa8dbe75255653301c553364a9f9f9570bd28ae004848643fc0004a982ce6e33c10ce6e1b00659ddf0dfc027321cfc46b5d603fd18c8cad7b402e744a6b69ad32fab10e4ba465e5b54a5eebdae6369c71abf"}}, {0x3d, &(0x7f0000000080)=@string={0x3d, 0x3, "b2bba9bcdabff8a510022bbd16549ecdbb44742c71ab03d81dca67e1655e5345c115e9bb93753784761f865a555531b2c26734c6575d496e3cdd42"}}, {0x53, &(0x7f0000001780)=@string={0x53, 0x3, "6591c8c3243385ca569f65ccf07bab439fb23d762f7dc6da2b336c996521dd99253cf10ffda700bef04b63e6d25bb739db633c0d799f3268704901fefb99bb8a30eaf8d9c45508f29fbd85b99b748d7820"}}, {0xf5, &(0x7f0000001800)=@string={0xf5, 0x3, "a1046761fd5069f4ac0836cf1223fba0dd318820e2a4c93804d46ad6df6d3c82feefa842e3873321e84803add11f4654bd33936ceedb65f2ebf109465346030f4dc1c73d2feb5df1633f887198186b378aaaa2a66a81285e6da825f095453be3909332ad48187a3c6743487e9dd57a61da4b5ae2912f86cf39731be4a2946534c39491341a7b064d5ff3cc903083924fcf8e6797f82a132ac198d1e61c353dbca705d5347a94aef08c3f2f59cb5b66f0afd4c6cb6e3a0fa2d8af9263255700fe5cb53fe308858ab3b64e76a5dac918671e0d2263f87c7758eb0ade45b6dcff85f761d47f3d51192cd3a561146315d9ac45eea7"}}, {0x7b, &(0x7f0000001900)=@string={0x7b, 0x3, "dd70fd5cf1a2caea15b62b9a76d45a9a11caa0015fa4af4573a2d1a48224b639b904ed58bd68c2b32bc900a703b8a1b72bb4b5dbd1a0711f6c8b0596e190e4c821c868d0657beab76e41848e34a5d4499caa44347f7af0ed1f6e71d539d0f646f5524ccfe7227578738b4cfac8de8a228eb8cdb0e1c522c015"}}, {0x102, &(0x7f0000001c00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x1007}}]}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)={0xfffffffa, 0x1, 0x5, 0x7, 0x16, "7974420aebb6d1ac610d6515272d9341e7f019"}) unlink(&(0x7f0000000140)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) 130.578524ms ago: executing program 1 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@mpls_newroute={0x54, 0x18, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x6, 0xfd, 0x2, 0xfe, 0x8, 0x400}, [@RTA_VIA={0x14, 0x12, {0x27, "3dedc42ac680d9e8b5198963aca2"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_DST={0x8, 0x1, {0x1ff, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x25, 0x4, r3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 127.090255ms ago: executing program 1 (id=175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 65.720369ms ago: executing program 1 (id=176): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0xe}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x80042) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "b1cb9417230429d5a32139d07e4466b1d1213eddea9e54576dafb9304db547d596b516b8ecf9a72bc6d20fec30a59a7c237bd84e21f608443da16ef93712aa9b", 0x32}, 0x48, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000000ac0)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r6, 0x0, r7) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet(0xa, 0x801, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 2 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3", 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420df6fda) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x4609}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000140)) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_emit_vhci(&(0x7f0000004040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x58}, {0x7f, 0x73}}}}, 0x8) syz_emit_vhci(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58206' (ED25519) to the list of known hosts. [ 42.201100][ T5707] cgroup: Unknown subsys name 'net' [ 42.339295][ T5707] cgroup: Unknown subsys name 'cpuset' [ 42.343325][ T5707] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.323293][ T5707] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.523604][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.529023][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.535572][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.543743][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.548761][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.549501][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.553369][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.556465][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.558125][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.559959][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.561183][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.562467][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.563019][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.564476][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.565736][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.566867][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.573678][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.573939][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.576048][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.588360][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.222814][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.225587][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.229138][ T5749] bridge_slave_0: entered allmulticast mode [ 48.231927][ T5749] bridge_slave_0: entered promiscuous mode [ 48.236070][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.240586][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.246049][ T5749] bridge_slave_1: entered allmulticast mode [ 48.250623][ T5749] bridge_slave_1: entered promiscuous mode [ 48.256888][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.259778][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.261967][ T5750] bridge_slave_0: entered allmulticast mode [ 48.264533][ T5750] bridge_slave_0: entered promiscuous mode [ 48.268278][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.270580][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.272843][ T5750] bridge_slave_1: entered allmulticast mode [ 48.275402][ T5750] bridge_slave_1: entered promiscuous mode [ 48.335067][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.341203][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.346171][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.372632][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.412899][ T5749] team0: Port device team_slave_0 added [ 48.415189][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.417781][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.420268][ T5742] bridge_slave_0: entered allmulticast mode [ 48.422934][ T5742] bridge_slave_0: entered promiscuous mode [ 48.427344][ T5750] team0: Port device team_slave_0 added [ 48.435357][ T5749] team0: Port device team_slave_1 added [ 48.443695][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.446063][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.448469][ T5742] bridge_slave_1: entered allmulticast mode [ 48.451145][ T5742] bridge_slave_1: entered promiscuous mode [ 48.455608][ T5750] team0: Port device team_slave_1 added [ 48.502568][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.504734][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.512746][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.522995][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.525457][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.533649][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.537771][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.540087][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.542376][ T5740] bridge_slave_0: entered allmulticast mode [ 48.545096][ T5740] bridge_slave_0: entered promiscuous mode [ 48.548720][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.551088][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.553375][ T5740] bridge_slave_1: entered allmulticast mode [ 48.555963][ T5740] bridge_slave_1: entered promiscuous mode [ 48.559061][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.561367][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.569524][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.575693][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.579206][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.582019][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.593047][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.622903][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.669612][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.690732][ T5749] hsr_slave_0: entered promiscuous mode [ 48.694455][ T5749] hsr_slave_1: entered promiscuous mode [ 48.700905][ T5742] team0: Port device team_slave_0 added [ 48.706311][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.735172][ T5742] team0: Port device team_slave_1 added [ 48.759632][ T5750] hsr_slave_0: entered promiscuous mode [ 48.762834][ T5750] hsr_slave_1: entered promiscuous mode [ 48.765769][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 48.768481][ T5750] Cannot create hsr debugfs directory [ 48.818525][ T5740] team0: Port device team_slave_0 added [ 48.821547][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.824365][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.835032][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.849297][ T5740] team0: Port device team_slave_1 added [ 48.864421][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.867470][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.878329][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.926441][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.928529][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.936163][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.957372][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.959962][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.969708][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.027747][ T5742] hsr_slave_0: entered promiscuous mode [ 49.030769][ T5742] hsr_slave_1: entered promiscuous mode [ 49.033516][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.035794][ T5742] Cannot create hsr debugfs directory [ 49.112360][ T5740] hsr_slave_0: entered promiscuous mode [ 49.114819][ T5740] hsr_slave_1: entered promiscuous mode [ 49.117536][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.119538][ T5740] Cannot create hsr debugfs directory [ 49.278388][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.285133][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.287812][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.291686][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.307753][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.312015][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.314696][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.318613][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.355909][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.363610][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.373325][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.378223][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.380892][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.385841][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.388732][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.393041][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.460037][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.467631][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.471204][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.479549][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.482299][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.489432][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.493033][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.499958][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.554559][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.573513][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.580181][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.587661][ T64] Bluetooth: hci1: command tx timeout [ 49.587689][ T5101] Bluetooth: hci2: command tx timeout [ 49.588391][ T5743] Bluetooth: hci0: command tx timeout [ 49.591797][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.598539][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.602218][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.607916][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.610859][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.615903][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.627320][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.659605][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.661911][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.666751][ T5101] Bluetooth: hci3: command tx timeout [ 49.678314][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.680871][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.688074][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.713925][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.724068][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.727041][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.751169][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.762875][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.769340][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.771634][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.791837][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.798070][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.800722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.814694][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.817437][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.854107][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.891703][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.905435][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.908457][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.925620][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.928565][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.140981][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.155884][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.180575][ T5749] veth0_vlan: entered promiscuous mode [ 50.190940][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.204436][ T5749] veth1_vlan: entered promiscuous mode [ 50.215581][ T5750] veth0_vlan: entered promiscuous mode [ 50.225601][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.234517][ T5750] veth1_vlan: entered promiscuous mode [ 50.273800][ T5749] veth0_macvtap: entered promiscuous mode [ 50.283512][ T5742] veth0_vlan: entered promiscuous mode [ 50.285721][ T5750] veth0_macvtap: entered promiscuous mode [ 50.290375][ T5749] veth1_macvtap: entered promiscuous mode [ 50.300828][ T5750] veth1_macvtap: entered promiscuous mode [ 50.312875][ T5740] veth0_vlan: entered promiscuous mode [ 50.316780][ T5742] veth1_vlan: entered promiscuous mode [ 50.322807][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.331711][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.335384][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.348072][ T5740] veth1_vlan: entered promiscuous mode [ 50.352015][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.411623][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.413664][ T5742] veth0_macvtap: entered promiscuous mode [ 50.414347][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.430530][ T5740] veth0_macvtap: entered promiscuous mode [ 50.434086][ T5742] veth1_macvtap: entered promiscuous mode [ 50.453121][ T5740] veth1_macvtap: entered promiscuous mode [ 50.466457][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.473623][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.479931][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.490855][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.507315][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.508356][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.512959][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.527805][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.538926][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.543881][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.554122][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.557202][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.557653][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.567864][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.574987][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.590552][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.606656][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.634634][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.643424][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.678822][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.681583][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.684564][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.688116][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.709843][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.712468][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.724705][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.729526][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.737577][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.741399][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.757517][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.761047][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764164][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.772471][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.781839][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.795637][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.801500][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.805760][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.812102][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.818604][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.069648][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.260646][ T5833] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 51.263631][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.268689][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.274258][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.280930][ T5833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.284029][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.296402][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.336365][ T5833] usb 7-1: config 0 descriptor?? [ 51.681197][ T5101] Bluetooth: hci2: command tx timeout [ 51.681437][ T64] Bluetooth: hci0: command tx timeout [ 51.685264][ T5101] Bluetooth: hci1: command tx timeout [ 51.756719][ T64] Bluetooth: hci3: command tx timeout [ 51.966383][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 51.983045][ T5833] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 52.001492][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.015361][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.183847][ T5833] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 52.266120][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.777111][ T5906] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 52.806045][ T5906] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 52.809194][ T5906] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 52.813385][ T5906] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 52.816183][ T5906] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 52.827527][ T5906] pci 0000:00:01.0: Adding to iommu group 1 [ 52.859081][ T5906] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 52.861298][ T5906] pci 0000:00:01.0: vgaarb: bridge control possible [ 52.863413][ T5906] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 52.873296][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.884007][ T5906] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 52.898839][ T5906] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 52.910235][ T5906] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 52.925499][ T5906] [drm] Found bochs VGA, ID 0xb0c5. [ 52.936446][ T5906] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 52.962220][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.965232][ T5890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 52.968384][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.978149][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 52.985070][ T5906] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 52.986300][ T5890] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 52.990560][ T5890] usb 6-1: Manufacturer: syz [ 52.997211][ T5890] usb 6-1: config 0 descriptor?? [ 53.027235][ T5833] usb 7-1: USB disconnect, device number 2 [ 53.102779][ T5906] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 53.267249][ T5890] rc_core: IR keymap rc-hauppauge not found [ 53.300626][ T5924] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7'. [ 53.747386][ T64] Bluetooth: hci2: command tx timeout [ 53.757446][ T64] Bluetooth: hci1: command tx timeout [ 53.836406][ T64] Bluetooth: hci3: command tx timeout [ 53.912042][ T5890] Registered IR keymap rc-empty [ 54.130902][ T5923] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 54.149172][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.170880][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.198371][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 54.231302][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 54.266169][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.288188][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.308887][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.327455][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.347351][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.377217][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.415697][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.437351][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.456957][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.477001][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 54.526446][ T5890] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 54.530095][ T5890] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 55.531859][ T5745] usb 6-1: USB disconnect, device number 2 [ 55.828297][ T5743] Bluetooth: hci2: command tx timeout [ 55.830726][ T64] Bluetooth: hci1: command tx timeout [ 55.922785][ T64] Bluetooth: hci3: command tx timeout [ 55.982135][ T5833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.936408][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 56.943045][ T5833] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 56.947158][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.950415][ T5833] usb 8-1: Product: syz [ 56.952133][ T5833] usb 8-1: Manufacturer: syz [ 56.954021][ T5833] usb 8-1: SerialNumber: syz [ 56.959755][ T5833] usb 8-1: config 0 descriptor?? [ 57.199880][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.210490][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.279311][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 57.425553][ T5833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 57.431068][ T5981] process 'syz.0.21' launched './file0' with NULL argv: empty string added [ 57.439826][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 57.446586][ T5833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 57.451015][ T5833] usb 8-1: media controller created [ 57.528097][ T5989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22'. [ 57.570195][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.669671][ T5951] capability: warning: `syz.3.13' uses deprecated v2 capabilities in a way that may be insecure [ 57.696427][ T5833] zl10353_read_register: readreg error (reg=127, ret==0) [ 57.723923][ T5833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 57.742954][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 57.787697][ T5833] usb 8-1: USB disconnect, device number 2 [ 58.043534][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 58.668811][ T42] audit: type=1804 audit(1785794205.544:2): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.28" name="bus" dev="ramfs" ino=8837 res=1 errno=0 [ 58.684529][ T42] audit: type=1804 audit(1785794205.544:3): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.28" name="bus" dev="ramfs" ino=8837 res=1 errno=0 [ 59.199509][ T6001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.204414][ T6001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.282647][ T6001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.313554][ T6001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.316792][ T6001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.344784][ T6001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.377982][ T6001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.381026][ T6001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.404118][ T6001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.685677][ T6024] tmpfs: Unknown parameter 'hug P' [ 59.690152][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 59.707091][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 59.966837][ T846] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 60.146363][ T846] usb 6-1: not running at top speed; connect to a high speed hub [ 60.177067][ T846] usb 6-1: config 3 has an invalid interface number: 255 but max is 0 [ 60.180138][ T846] usb 6-1: config 3 has an invalid descriptor of length 242, skipping remainder of the config [ 60.184512][ T846] usb 6-1: config 3 has no interface number 0 [ 60.193036][ T846] usb 6-1: config 3 interface 255 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 60.197895][ T846] usb 6-1: config 3 interface 255 has no altsetting 0 [ 60.220467][ T846] usb 6-1: language id specifier not provided by device, defaulting to English [ 60.298298][ T846] usb 6-1: New USB device found, idVendor=24d2, idProduct=1084, bcdDevice=50.4f [ 60.302925][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.574819][ T6032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'. [ 60.624358][ T6036] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 60.626364][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.675759][ T6026] Zero length message leads to an empty skb [ 60.737660][ T6024] Bluetooth: MGMT ver 1.23 [ 60.746017][ T846] usb 6-1: USB disconnect, device number 3 [ 61.176252][ T6047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.35'. [ 61.349744][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.434642][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.703755][ T6072] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 61.706709][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 61.751624][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 62.078023][ T5858] usb 42-1: SetAddress Request (2) to port 0 [ 62.078078][ T5858] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 62.222312][ T6084] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 62.449121][ T6070] hfs: can't find a HFS filesystem on dev sr0 [ 62.604971][ T6073] vhci_hcd: connection reset by peer [ 62.609625][ T5818] vhci_hcd vhci_hcd.2: stop threads [ 62.613474][ T5818] vhci_hcd vhci_hcd.2: release socket [ 62.617688][ T5818] vhci_hcd vhci_hcd.2: disconnect device [ 62.716945][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.357125][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.452045][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.506428][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.567395][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.635264][ T6108] loop0: detected capacity change from 0 to 2640 [ 63.644571][ T6108] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.649767][ T5958] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.654177][ T5958] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.655064][ T6103] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 63.659611][ T6108] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.664259][ T5958] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.668916][ T6108] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.672886][ T5958] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.676972][ T5958] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.680341][ T6108] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.684086][ T6108] Buffer I/O error on dev loop0, logical block 0, async page read [ 63.687150][ T6108] ldm_validate_partition_table(): Disk read failed. [ 63.689309][ T6108] Dev loop0: unable to read RDB block 0 [ 63.691059][ T6108] loop0: unable to read partition table [ 63.695179][ T6108] loop_reread_partitions: partition scan of loop0 (3„ ¾‚³˜) failed (rc=-5) [ 63.729203][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 63.732463][ T29] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 63.740000][ T29] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 63.772430][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.789748][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.809782][ T29] usb 7-1: Product: syz [ 63.822994][ T29] usb 7-1: Manufacturer: syz [ 63.825327][ T29] usb 7-1: SerialNumber: syz [ 63.850357][ T6113] uhci_hcd 0000:00:1d.0: remove, state 4 [ 63.854874][ T6113] usb usb2: USB disconnect, device number 1 [ 64.019565][ T6103] ldm_validate_partition_table(): Disk read failed. [ 64.021982][ T6103] Dev loop0: unable to read RDB block 0 [ 64.023940][ T6103] loop0: unable to read partition table [ 64.026054][ T6103] loop_reread_partitions: partition scan of loop0 (3„ ¾‚³˜) failed (rc=-5) [ 64.167046][ T6113] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 64.308724][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.552592][ T6101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 64.743242][ T6127] bond1: entered promiscuous mode [ 64.779821][ T29] usb 7-1: USB disconnect, device number 3 [ 64.796641][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.799883][ T5917] udevd[5917]: setting mode of /dev/bus/usb/007/003 to 020664 failed: No such file or directory [ 64.823365][ T5917] udevd[5917]: setting owner of /dev/bus/usb/007/003 to uid=0, gid=0 failed: No such file or directory [ 64.842667][ T6123] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 64.849000][ T6125] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 65.197844][ T6125] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 65.272818][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.345649][ T6114] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 65.350326][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.362093][ T6114] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 65.383281][ T6114] pci 0000:00:1d.0: Adding to iommu group 7 [ 65.397951][ T6114] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 65.418966][ T6142] netlink: 72 bytes leftover after parsing attributes in process `syz.3.50'. [ 65.506480][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.524631][ T6114] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 119122 usecs [ 65.573432][ T6114] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 65.586467][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.590151][ T6114] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 65.598998][ T6114] uhci_hcd 0000:00:1d.0: detected 2 ports [ 65.614783][ T6114] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 65.628598][ T6114] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 65.632136][ T6114] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 65.635134][ T6114] usb usb2: Product: UHCI Host Controller [ 65.638715][ T6114] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 65.640829][ T6114] usb usb2: SerialNumber: 0000:00:1d.0 [ 65.678827][ T6114] hub 2-0:1.0: USB hub found [ 65.689074][ T6114] hub 2-0:1.0: 2 ports detected [ 66.143076][ T6145] lo speed is unknown, defaulting to 1000 [ 66.146027][ T6145] lo speed is unknown, defaulting to 1000 [ 66.174281][ T6145] lo speed is unknown, defaulting to 1000 [ 66.197598][ T6145] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 66.207742][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 66.214240][ T6145] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 66.220337][ T6145] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 66.233811][ T6149] netlink: NAT attribute has 5 unknown bytes [ 66.243454][ T6145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.259480][ T6149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.278442][ T6145] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 66.388862][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.398399][ T6145] lo speed is unknown, defaulting to 1000 [ 66.408552][ T6145] lo speed is unknown, defaulting to 1000 [ 66.412438][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.430724][ T6145] lo speed is unknown, defaulting to 1000 [ 66.459679][ T6145] lo speed is unknown, defaulting to 1000 [ 67.188898][ T5858] usb 42-1: device descriptor read/8, error -110 [ 67.222329][ T6165] nfs4: Unknown parameter '/dev/snd/midiC#D#' [ 67.426760][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.653094][ T5858] usb usb42-port1: attempt power cycle [ 68.227804][ T5858] usb usb42-port1: unable to enumerate USB device [ 69.082999][ T6201] 9p: Bad value for 'rfdno' [ 69.217373][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.436609][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.734710][ T6229] openvswitch: netlink: Duplicate key (type 6). [ 70.227265][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.390283][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 70.927958][ T6231] lo speed is unknown, defaulting to 1000 [ 70.947494][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.043150][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.046990][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.054388][ T6250] lo speed is unknown, defaulting to 1000 [ 71.118520][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.123028][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.127084][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.132752][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.137887][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.147964][ T10] usb 8-1: config 0 descriptor?? [ 71.266625][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.587202][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 72.306695][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.317920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.469733][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.956445][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.346535][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.642373][ T5833] usb 8-1: USB disconnect, device number 3 [ 74.386442][ T29] net_ratelimit: 1 callbacks suppressed [ 74.386458][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.426557][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.466580][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.629769][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.437341][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.506563][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.556621][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.349746][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.586670][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.666706][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.626944][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.278159][ T41] cfg80211: failed to load regulatory.db [ 81.296449][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.666726][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.707194][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.746787][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.826940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.306700][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.786590][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.826541][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.899223][ T6281] ======================================================= [ 85.899223][ T6281] WARNING: The mand mount option has been deprecated and [ 85.899223][ T6281] and is ignored by this kernel. Remove the mand [ 85.899223][ T6281] option from the mount to silence this warning. [ 85.899223][ T6281] ======================================================= [ 85.942022][ T6281] overlayfs: failed lookup in lower (newroot/18, name='file1', err=-40): overlapping layers [ 86.036344][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.206391][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 86.231402][ T29] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 86.253020][ T29] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 86.262853][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.265830][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.269302][ T29] usb 5-1: Product: syz [ 86.270696][ T29] usb 5-1: Manufacturer: syz [ 86.274136][ T29] usb 5-1: SerialNumber: syz [ 86.339849][ T6278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.71'. [ 86.467780][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.492716][ T6272] netlink: 52 bytes leftover after parsing attributes in process `syz.0.67'. [ 86.532456][ T29] usb 5-1: USB disconnect, device number 2 [ 86.556448][ T6299] netlink: 112 bytes leftover after parsing attributes in process `syz.3.74'. [ 86.698357][ T6302] netlink: 112 bytes leftover after parsing attributes in process `syz.3.75'. [ 86.914734][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.346869][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.356557][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.506614][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.516598][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 87.520659][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.524816][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.529201][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.532918][ T41] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 87.536850][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.543027][ T41] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 87.546873][ T41] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 87.549623][ T41] usb 5-1: Manufacturer: syz [ 87.552575][ T41] usb 5-1: config 0 descriptor?? [ 87.684560][ T6306] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 87.806289][ T41] rc_core: IR keymap rc-hauppauge not found [ 87.808152][ T41] Registered IR keymap rc-empty [ 87.810008][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.826520][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.849430][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 87.855602][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 87.863383][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.876339][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.896336][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.917269][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.936447][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.956495][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.976778][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 87.987303][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.991532][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 87.998731][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 88.013198][ T6314] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.016350][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 88.036485][ T41] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 88.054647][ T6314] bond1 (unregistering): Released all slaves [ 88.059601][ T41] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 88.064056][ T41] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 88.093116][ T6328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 88.095211][ T6328] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.110941][ T6328] vhci_hcd vhci_hcd.0: Device attached [ 88.293731][ T10] usb 5-1: USB disconnect, device number 3 [ 88.386549][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 88.386593][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 88.547113][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.617924][ T6329] vhci_hcd: connection reset by peer [ 88.620203][ T13] vhci_hcd vhci_hcd.3: stop threads [ 88.621883][ T13] vhci_hcd vhci_hcd.3: release socket [ 88.623963][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 88.786485][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.836359][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.868227][ T6344] bridge1: entered promiscuous mode [ 88.946474][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.988194][ T41] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice= 1.00 [ 88.992435][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.456300][ T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.607399][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 89.614386][ T41] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 89.620041][ T41] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 89.627761][ T41] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.634015][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.636581][ T41] usb 8-1: Product: syz [ 89.639068][ T41] usb 8-1: Manufacturer: syz [ 89.642570][ T41] usb 8-1: SerialNumber: syz [ 89.684531][ T6356] netlink: 112 bytes leftover after parsing attributes in process `syz.2.88'. [ 89.857462][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.3.87'. [ 89.871719][ T41] usb 8-1: USB disconnect, device number 4 [ 90.076545][ T56] net_ratelimit: 4 callbacks suppressed [ 90.076561][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.158539][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.227161][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.246353][ T846] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.396991][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.399690][ T846] usb 5-1: Using ep0 maxpacket: 32 [ 90.405360][ T846] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 90.408519][ T846] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 90.417196][ T846] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.420493][ T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.422995][ T846] usb 5-1: Product: syz [ 90.424348][ T846] usb 5-1: Manufacturer: syz [ 90.425929][ T846] usb 5-1: SerialNumber: syz [ 90.626449][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.655429][ T6361] netlink: 52 bytes leftover after parsing attributes in process `syz.0.90'. [ 90.679435][ T846] usb 5-1: USB disconnect, device number 4 [ 90.719242][ C2] vxcan1: j1939_tp_rxtimer: 0xffff8880502bfc00: rx timeout, send abort [ 91.108074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.112186][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.187624][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.223318][ C2] vxcan1: j1939_tp_rxtimer: 0xffff8880502bfc00: abort rx timeout. Force session deactivation [ 91.424851][ T6432] netlink: 72 bytes leftover after parsing attributes in process `syz.3.97'. [ 91.517441][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.517599][ T10] usb 6-1: USB disconnect, device number 4 [ 91.671045][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.695243][ T6434] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 92.066308][ T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.117167][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 92.292102][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.298679][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.306180][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.317372][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.327758][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.338774][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 92.346379][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 92.358389][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 92.372398][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.378368][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.385876][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.396156][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.404621][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.420507][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 92.425224][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 92.431732][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 92.438139][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.441139][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 92.445426][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.450146][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.454790][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.459311][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 92.463884][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 92.469415][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 92.474747][ T10] usb 6-1: string descriptor 0 read error: -22 [ 92.477172][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.480682][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.500696][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.566338][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 92.585957][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.597005][ T56] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 92.599500][ T56] usb 5-1: can't read configurations, error -71 [ 93.012501][ T5858] usb 6-1: USB disconnect, device number 5 [ 93.439226][ T29] usb 44-1: device descriptor read/8, error -110 [ 93.815028][ T42] audit: type=1326 audit(1785794240.684:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 93.846826][ T42] audit: type=1326 audit(1785794240.694:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 93.856830][ T29] usb usb44-port1: attempt power cycle [ 93.860872][ T42] audit: type=1326 audit(1785794240.694:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 93.875886][ T42] audit: type=1326 audit(1785794240.694:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 93.885345][ T42] audit: type=1326 audit(1785794240.704:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.3.107" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709efec code=0x7ffc0000 [ 94.422850][ T29] usb usb44-port1: unable to enumerate USB device [ 94.422919][ T6481] MTRR 1 not used [ 95.036444][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.046398][ T55] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 95.186279][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 95.190965][ T29] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 95.196359][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 95.197154][ T29] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 95.201821][ T55] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 95.202904][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.207741][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.208178][ T29] usb 6-1: Product: syz [ 95.212803][ T29] usb 6-1: Manufacturer: syz [ 95.214042][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.214744][ T29] usb 6-1: SerialNumber: syz [ 95.221742][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.223175][ T29] usb 6-1: config 0 descriptor?? [ 95.228282][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.230707][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 95.236127][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 95.237197][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.239954][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.247040][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 95.248791][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.250824][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.263159][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.268484][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 95.271978][ T29] usb 6-1: media controller created [ 95.285168][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.302148][ T29] usb 6-1: selecting invalid altsetting 3 [ 95.305256][ T29] ttusb2: set interface to alts=3 failed [ 95.331802][ T29] DVB: Unable to find symbol tda10086_attach() [ 95.333796][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 95.337076][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 95.338886][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.341988][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 95.343728][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.347174][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 95.435715][ T6490] dvb-usb: bulk message failed: -22 (7/0) [ 95.438180][ T6490] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 95.441555][ T6490] ttusb2: i2c transfer failed. [ 95.468421][ T55] usb 7-1: usb_control_msg returned -32 [ 95.470832][ T55] usbtmc 7-1:16.0: can't read capabilities [ 95.507435][ T29] net_ratelimit: 17 callbacks suppressed [ 95.507448][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.507473][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.519056][ T1042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.525759][ T56] usb 6-1: USB disconnect, device number 6 [ 95.563726][ T56] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 95.677630][ T55] usb 7-1: USB disconnect, device number 4 [ 95.744354][ T6505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.115'. [ 95.826801][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.231211][ T6509] lo speed is unknown, defaulting to 1000 [ 96.255481][ T6515] netlink: 112 bytes leftover after parsing attributes in process `syz.1.118'. [ 96.546618][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.595864][ T6520] netlink: 104 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.601594][ T6520] netlink: 104 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.617868][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.623630][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.632480][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.635150][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.638464][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.055984][ T6526] overlayfs: failed to resolve '/ile0': -2 [ 98.126354][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.278430][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 98.283114][ T29] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.290995][ T29] usb 8-1: string descriptor 0 read error: -22 [ 98.293605][ T29] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 98.297478][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.842618][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.149663][ T29] usb 8-1: 1:1: cannot get freq at ep 0x1 [ 99.271837][ T29] usb 8-1: USB disconnect, device number 5 [ 99.449894][ T6554] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 99.463049][ T6554] evm: overlay not supported [ 99.695415][ T6563] netlink: 100 bytes leftover after parsing attributes in process `syz.1.132'. [ 99.729040][ T6569] file system registered [ 99.751038][ T6568] ffs_data_put(): freeing [ 99.754284][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 99.757186][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 99.760076][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'. [ 99.760645][ T6569] netlink: 'syz.0.134': attribute type 5 has an invalid length. [ 99.765562][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'. [ 99.768272][ T6568] geneve2: entered promiscuous mode [ 99.770816][ T6568] geneve2: entered allmulticast mode [ 99.791466][ T5742] ffs_data_put(): freeing [ 99.801301][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 99.804001][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 99.807161][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 99.809844][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 100.349511][ T6583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.540515][ T6582] net_ratelimit: 642 callbacks suppressed [ 100.540538][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.546419][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.546524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.560056][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.564447][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.576390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.615664][ T6582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.619721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.712132][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.712143][ T846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.123928][ T64] Bluetooth: hci1: unexpected event for opcode 0x201c [ 101.169389][ T6607] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 101.370196][ T6615] x_tables: duplicate underflow at hook 1 [ 102.097462][ T6644] netlink: 'syz.0.151': attribute type 10 has an invalid length. [ 102.100987][ T6644] netlink: 152 bytes leftover after parsing attributes in process `syz.0.151'. [ 102.343697][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 102.387122][ T6651] comedi comedi3: pcl818: I/O base address or length out of range [ 102.752065][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 102.984559][ T42] audit: type=1326 audit(1785794249.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 102.992646][ T42] audit: type=1326 audit(1785794249.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 102.999415][ T42] audit: type=1326 audit(1785794249.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.007429][ T42] audit: type=1326 audit(1785794249.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.015554][ T42] audit: type=1326 audit(1785794249.854:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.022194][ T42] audit: type=1326 audit(1785794249.854:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.028730][ T42] audit: type=1326 audit(1785794249.854:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.035271][ T42] audit: type=1326 audit(1785794249.854:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.041891][ T42] audit: type=1326 audit(1785794249.854:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.048834][ T42] audit: type=1326 audit(1785794249.854:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 103.772948][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.051184][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 104.168414][ T6702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 104.170494][ T6702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.173429][ T6702] vhci_hcd vhci_hcd.0: Device attached [ 104.179453][ T6702] futex_wake_op: syz.2.170 tries to shift op by 32; fix this program [ 104.449332][ T6678] block nbd1: shutting down sockets [ 104.825517][ T6708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 104.828342][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.835190][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 104.844858][ T846] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 104.856291][ T6711] vhci_hcd: connection closed [ 104.860419][ T13] vhci_hcd vhci_hcd.1: stop threads [ 104.863974][ T13] vhci_hcd vhci_hcd.1: release socket [ 104.867476][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 105.010990][ T6703] vhci_hcd: connection closed [ 105.013834][ T13] vhci_hcd vhci_hcd.2: stop threads [ 105.020089][ T13] vhci_hcd vhci_hcd.2: release socket [ 105.023965][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 105.189777][ T6715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.218398][ T846] usb 41-1: enqueue for inactive port 0 [ 105.586748][ T846] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 105.688510][ T5889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.710289][ T64] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 105.746413][ T29] net_ratelimit: 33 callbacks suppressed [ 105.746428][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.837393][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.841233][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.845217][ T5889] usb 5-1: Dual-Role OTG device on HNP port [ 105.848133][ T5889] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 105.851922][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.863612][ C0] ------------[ cut here ]------------ [ 105.866053][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 105.868759][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: udevd/6297 [ 105.872076][ C0] Modules linked in: [ 105.873928][ C0] CPU: 0 UID: 0 PID: 6297 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 105.878211][ C0] Tainted: [L]=SOFTLOCKUP [ 105.880060][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.884184][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 105.886445][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea 8d 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 91 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 84 b7 8c [ 105.894361][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010046 [ 105.896820][ C0] RAX: dffffc0000000000 RBX: ffff888023b5c0e0 RCX: ffffffff8cb7c820 [ 105.899557][ C0] RDX: 0000000000000081 RSI: ffffffff8cb79180 RDI: ffffffff91306790 [ 105.902829][ C0] RBP: 0000000000000081 R08: ffffffff8cb78460 R09: 0000000000000000 [ 105.905815][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cb78460 [ 105.909014][ C0] R13: 0000000000000000 R14: ffff888023b5c0e0 R15: ffff8880243b28a0 [ 105.911689][ C0] FS: 00007f5c02153880(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 105.914837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.917571][ C0] CR2: 00007ffe3f5ca750 CR3: 00000000705fb000 CR4: 0000000000352ef0 [ 105.920561][ C0] Call Trace: [ 105.921801][ C0] [ 105.922761][ C0] hidg_set_alt+0x190/0xa10 [ 105.924295][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.926174][ C0] ? rcu_is_watching+0x12/0xc0 [ 105.928202][ C0] composite_setup+0x2ccf/0x9290 [ 105.930322][ C0] ? __pfx_composite_setup+0x10/0x10 [ 105.932528][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.934422][ C0] ? do_raw_spin_lock+0x128/0x260 [ 105.936552][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.938396][ C0] ? configfs_composite_setup+0xfb/0x130 [ 105.940139][ C0] configfs_composite_setup+0xfb/0x130 [ 105.941813][ C0] dummy_timer+0x2045/0x36f0 [ 105.943370][ C0] ? trace_fn_trace+0xf0/0x200 [ 105.944888][ C0] ? do_raw_spin_lock+0x128/0x260 [ 105.946386][ C0] ? find_held_lock+0x2b/0x80 [ 105.947849][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 105.949712][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 105.951527][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 105.953433][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 105.955602][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 105.958101][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 105.960195][ C0] ? mark_held_locks+0x40/0x70 [ 105.961998][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.964388][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 105.966279][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 105.968080][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 105.969782][ C0] handle_softirqs+0x1ea/0x9b0 [ 105.971344][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 105.973535][ C0] ? _raw_spin_unlock+0x28/0x50 [ 105.975258][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 105.977624][ C0] __irq_exit_rcu+0x162/0x210 [ 105.979629][ C0] irq_exit_rcu+0x9/0x30 [ 105.981440][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 105.983795][ C0] [ 105.985058][ C0] [ 105.986288][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.988738][ C0] RIP: 0010:write_comp_data+0x3a/0x90 [ 105.990953][ C0] Code: 65 48 8b 3d 10 69 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 c0 1b b2 09 8b 87 24 17 00 00 85 c0 74 f1 <8b> 87 f8 16 00 00 83 f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 [ 105.998499][ C0] RSP: 0000:ffffc900035976c8 EFLAGS: 00000246 [ 106.000838][ C0] RAX: 0000000080000000 RBX: 00000000000000c3 RCX: ffffffff84d2617a [ 106.003881][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888028672540 [ 106.007004][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.010135][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900035977c0 [ 106.013288][ C0] R13: ffff888024ffe4b0 R14: 00000000000000c3 R15: 0000000000000000 [ 106.016435][ C0] ? tomoyo_check_acl+0x2fa/0x410 [ 106.018482][ C0] tomoyo_check_acl+0x2fa/0x410 [ 106.020484][ C0] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 106.022825][ C0] tomoyo_path_permission+0x1ff/0x3b0 [ 106.025000][ C0] tomoyo_check_open_permission+0x37f/0x3c0 [ 106.027375][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 106.029950][ C0] ? __lock_acquire+0x49f/0x1a40 [ 106.031969][ C0] ? hook_file_open+0x24f/0x8f0 [ 106.033970][ C0] ? path_get+0x61/0x80 [ 106.035656][ C0] tomoyo_file_open+0x6b/0x90 [ 106.037565][ C0] security_file_open+0xb5/0x1e0 [ 106.039559][ C0] do_dentry_open+0x588/0x14d0 [ 106.041486][ C0] vfs_open+0x82/0x3f0 [ 106.043148][ C0] path_openat+0x2873/0x4280 [ 106.044979][ C0] ? __pfx_path_openat+0x10/0x10 [ 106.046869][ C0] do_file_open+0x20e/0x430 [ 106.048608][ C0] ? __pfx_do_file_open+0x10/0x10 [ 106.050528][ C0] ? alloc_fd+0x471/0x7a0 [ 106.052087][ C0] ? do_getname+0x191/0x390 [ 106.053724][ C0] do_sys_openat2+0x10f/0x1e0 [ 106.055394][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.057239][ C0] __x64_sys_openat+0x12d/0x210 [ 106.059043][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.061258][ C0] do_syscall_64+0x115/0x840 [ 106.063207][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.065151][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.067551][ C0] RIP: 0033:0x7f5c021df407 [ 106.069338][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.076706][ C0] RSP: 002b:00007ffe3f5d9250 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 106.079794][ C0] RAX: ffffffffffffffda RBX: 00007f5c02153880 RCX: 00007f5c021df407 [ 106.082153][ C0] RDX: 0000000000080000 RSI: 00007ffe3f5d9380 RDI: ffffffffffffff9c [ 106.084716][ C0] RBP: 000055be9aacfb40 R08: 0000000000000000 R09: 0000000000000000 [ 106.087146][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be9aacfc30 [ 106.089897][ C0] R13: 00007ffe3f5d9380 R14: 00007ffe3f5db4c0 R15: 000055be851febcc [ 106.092681][ C0] [ 106.093906][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.096477][ C0] CPU: 0 UID: 0 PID: 6297 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 106.100321][ C0] Tainted: [L]=SOFTLOCKUP [ 106.102025][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.105377][ C0] Call Trace: [ 106.106520][ C0] [ 106.107629][ C0] dump_stack_lvl+0x100/0x190 [ 106.109331][ C0] vpanic+0x552/0x970 [ 106.110807][ C0] ? __pfx_vpanic+0x10/0x10 [ 106.112355][ C0] panic+0xd1/0xe0 [ 106.113677][ C0] ? __pfx_panic+0x10/0x10 [ 106.115102][ C0] ? check_panic_on_warn+0x1f/0x90 [ 106.116925][ C0] check_panic_on_warn.cold+0x19/0x34 [ 106.118753][ C0] ? usb_ep_enable+0x3e6/0x490 [ 106.120329][ C0] __warn.cold+0x191/0x318 [ 106.121994][ C0] __report_bug+0x30f/0x440 [ 106.123626][ C0] ? usb_ep_enable+0x3e6/0x490 [ 106.125350][ C0] ? __pfx___report_bug+0x10/0x10 [ 106.127234][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.129216][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 106.130962][ C0] report_bug_entry+0xe1/0x290 [ 106.132657][ C0] ? usb_ep_enable+0x3f8/0x490 [ 106.134369][ C0] handle_bug+0x1cd/0x2a0 [ 106.135896][ C0] exc_invalid_op+0x17/0x50 [ 106.137411][ C0] asm_exc_invalid_op+0x1a/0x20 [ 106.138993][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 106.140974][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea 8d 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 91 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 84 b7 8c [ 106.147212][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010046 [ 106.149103][ C0] RAX: dffffc0000000000 RBX: ffff888023b5c0e0 RCX: ffffffff8cb7c820 [ 106.151560][ C0] RDX: 0000000000000081 RSI: ffffffff8cb79180 RDI: ffffffff91306790 [ 106.154002][ C0] RBP: 0000000000000081 R08: ffffffff8cb78460 R09: 0000000000000000 [ 106.156441][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cb78460 [ 106.158878][ C0] R13: 0000000000000000 R14: ffff888023b5c0e0 R15: ffff8880243b28a0 [ 106.161374][ C0] hidg_set_alt+0x190/0xa10 [ 106.162818][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.164456][ C0] ? rcu_is_watching+0x12/0xc0 [ 106.165966][ C0] composite_setup+0x2ccf/0x9290 [ 106.167527][ C0] ? __pfx_composite_setup+0x10/0x10 [ 106.169189][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.170893][ C0] ? do_raw_spin_lock+0x128/0x260 [ 106.172484][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.174167][ C0] ? configfs_composite_setup+0xfb/0x130 [ 106.175937][ C0] configfs_composite_setup+0xfb/0x130 [ 106.177653][ C0] dummy_timer+0x2045/0x36f0 [ 106.179103][ C0] ? trace_fn_trace+0xf0/0x200 [ 106.180643][ C0] ? do_raw_spin_lock+0x128/0x260 [ 106.182230][ C0] ? find_held_lock+0x2b/0x80 [ 106.183705][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 106.185476][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 106.187229][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.189053][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 106.190833][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 106.192722][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 106.194284][ C0] ? mark_held_locks+0x40/0x70 [ 106.195802][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.197624][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 106.199176][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 106.200842][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 106.202453][ C0] handle_softirqs+0x1ea/0x9b0 [ 106.203979][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 106.205638][ C0] ? _raw_spin_unlock+0x28/0x50 [ 106.207177][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 106.208939][ C0] __irq_exit_rcu+0x162/0x210 [ 106.210441][ C0] irq_exit_rcu+0x9/0x30 [ 106.211777][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 106.213531][ C0] [ 106.214471][ C0] [ 106.215411][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.217288][ C0] RIP: 0010:write_comp_data+0x3a/0x90 [ 106.218966][ C0] Code: 65 48 8b 3d 10 69 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 c0 1b b2 09 8b 87 24 17 00 00 85 c0 74 f1 <8b> 87 f8 16 00 00 83 f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 [ 106.224894][ C0] RSP: 0000:ffffc900035976c8 EFLAGS: 00000246 [ 106.226790][ C0] RAX: 0000000080000000 RBX: 00000000000000c3 RCX: ffffffff84d2617a [ 106.229251][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888028672540 [ 106.231728][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.234172][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900035977c0 [ 106.236622][ C0] R13: ffff888024ffe4b0 R14: 00000000000000c3 R15: 0000000000000000 [ 106.239071][ C0] ? tomoyo_check_acl+0x2fa/0x410 [ 106.240696][ C0] tomoyo_check_acl+0x2fa/0x410 [ 106.242243][ C0] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 106.244076][ C0] tomoyo_path_permission+0x1ff/0x3b0 [ 106.245756][ C0] tomoyo_check_open_permission+0x37f/0x3c0 [ 106.247607][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 106.249647][ C0] ? __lock_acquire+0x49f/0x1a40 [ 106.251208][ C0] ? hook_file_open+0x24f/0x8f0 [ 106.252760][ C0] ? path_get+0x61/0x80 [ 106.254084][ C0] tomoyo_file_open+0x6b/0x90 [ 106.255563][ C0] security_file_open+0xb5/0x1e0 [ 106.257133][ C0] do_dentry_open+0x588/0x14d0 [ 106.258640][ C0] vfs_open+0x82/0x3f0 [ 106.259990][ C0] path_openat+0x2873/0x4280 [ 106.261455][ C0] ? __pfx_path_openat+0x10/0x10 [ 106.263021][ C0] do_file_open+0x20e/0x430 [ 106.264463][ C0] ? __pfx_do_file_open+0x10/0x10 [ 106.266056][ C0] ? alloc_fd+0x471/0x7a0 [ 106.267422][ C0] ? do_getname+0x191/0x390 [ 106.268848][ C0] do_sys_openat2+0x10f/0x1e0 [ 106.270374][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.272018][ C0] __x64_sys_openat+0x12d/0x210 [ 106.273552][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.275229][ C0] do_syscall_64+0x115/0x840 [ 106.276675][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.278150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.280020][ C0] RIP: 0033:0x7f5c021df407 [ 106.281421][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.287298][ C0] RSP: 002b:00007ffe3f5d9250 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 106.289927][ C0] RAX: ffffffffffffffda RBX: 00007f5c02153880 RCX: 00007f5c021df407 [ 106.292399][ C0] RDX: 0000000000080000 RSI: 00007ffe3f5d9380 RDI: ffffffffffffff9c [ 106.294915][ C0] RBP: 000055be9aacfb40 R08: 0000000000000000 R09: 0000000000000000 [ 106.297487][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055be9aacfc30 [ 106.300441][ C0] R13: 00007ffe3f5d9380 R14: 00007ffe3f5db4c0 R15: 000055be851febcc [ 106.303261][ C0] [ 106.304988][ C0] Kernel Offset: disabled [ 106.306407][ C0] Rebooting in 86400 seconds..