last executing test programs: 2m48.39140935s ago: executing program 1 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000070000030000007202e5a361e901000000981b63a8654c000000000000000000232672bbc156236b0633121cac1fa249cc9957d75dfa95eb35ca5ad2269006a389edda05088cda3d59af83a2e4d4db82ef790ee4ec67c0be7bd3a0190feb8e7d283ab711b8206ce2839eadef671cc1e687a07003c2729aeceeff1bf3bf20c109a0072b3d9d725d8a53882f6d3a665511315eaebd8f2bcc6d2344a2dba4e746bb6ee5ce266edf9154150b276dd228abe9eeab6697a67483b0264c2c79f7ee64c04a1c05fd88cfdf7ac9cbad66ce3fbe8002b05a26f733f232374b47bbadf4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x9, 0x9bfb, {{0x34, 0x4, 0x2, 0x9, 0xd0, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x4c, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x80000001}, {@empty, 0x6170f029}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0), 0x4) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m47.1738408s ago: executing program 1 (id=1112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) 2m46.158276345s ago: executing program 1 (id=1113): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m42.872550396s ago: executing program 1 (id=1122): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x9, 0x9bfb, {{0x34, 0x4, 0x2, 0x9, 0xd0, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x4c, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x80000001}, {@empty, 0x6170f029}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0), 0x4) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m41.355394043s ago: executing program 1 (id=1128): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc8) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xe, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x20, 0x2, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, r6, 0x7, '\x00', r7, r1, 0x3, 0x0, 0x3, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m34.370371386s ago: executing program 1 (id=1139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) 2m19.289041878s ago: executing program 32 (id=1139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) 2m17.011013805s ago: executing program 4 (id=1206): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) 2m16.343767021s ago: executing program 4 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000280)={0x0, "0c31786fced7a4524d96de72ab9e889b"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}}, 0x4000800) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0) write(r2, &(0x7f0000000380)='4', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='4096', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1:0', 0x3) write(r7, &(0x7f00000004c0)='1:1', 0x3) write(r7, &(0x7f0000000540)='1:3', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='0', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000001380)="fe7c0400000000000000f1aa22f790f8cf5bc967346b5e1ffcfa73d3d6084f661839d047c549887125005c7f8b0d2d7759ad2d0499c3000000000100000000000000ca84d494d3483a73000000005182d5c3b980627cc37f10b1abb8a89d068c31178923fe75460d6189da0589e7313a591150b99fc652d8bcbcf4a5db7a7a7c872e069f958b3a2bfd984cc0bca2821e82b87ae953ff44e758c7dd75ca6820cfe1b0b5c55c8216041796a764a42748504d053c0526e6d32aa6994e27b5204993783a35184d84cb93a1d09991ab2826b3e1a8886c351ae8830714d3334f30bb3a0fa7027d950ddc7d33c2fec83e6b3b918387ffa24fd67c8c", 0xf8) 2m14.118941197s ago: executing program 4 (id=1216): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2m13.534135971s ago: executing program 4 (id=1218): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m11.273536257s ago: executing program 4 (id=1222): syz_clone(0x80141000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) 2m10.71422597s ago: executing program 4 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x529247731525211c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="56020000010900"], 0x256) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0), 0xfe5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x1000000) 2m6.059930575s ago: executing program 0 (id=1237): socket$packet(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271d, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffdffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) socket(0x1d, 0x80802, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m5.052041581s ago: executing program 0 (id=1239): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x3}, 0xffffff96) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 2m4.032940256s ago: executing program 0 (id=1246): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24008004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x7, 0x8000000000000001}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0xe, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) syz_ublk_add_dev(r6, r7, r8, r9, 0x0, &(0x7f0000000440)) 2m2.891961834s ago: executing program 0 (id=1248): socket$packet(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271d, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffdffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) socket(0x1d, 0x80802, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m0.001520955s ago: executing program 0 (id=1250): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m58.98789923s ago: executing program 0 (id=1254): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x8) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1m54.569894259s ago: executing program 33 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x529247731525211c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="56020000010900"], 0x256) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0), 0xfe5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x1000000) 1m43.738482867s ago: executing program 34 (id=1254): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x8) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 35.984052251s ago: executing program 3 (id=1493): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 34.634182325s ago: executing program 3 (id=1494): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0xa50003d1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 34.440961859s ago: executing program 3 (id=1498): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0x99, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @gre={{0xf, 0x4, 0x1, 0x6, 0x83, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x2, 0x8, "461b49acc1f2"}, {0x6, 0xb, "a738d016a304662b2e"}, {0x0, 0xe, "2272e07dd6f28fa30f8557d0"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "f80f83"}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="7c050000400007012dbd7000fedbdf25027c0000d0002a80ca000980d782bfb514af055e07aa8a8a4dba1021a57332d838c172e4824ce87caeb5da8fcae1a9887391f95274adf44d89ffca5f1aa322bb846e711fc8a80c34b45683762e99844de662319d5638af5edc5a15048ed96ed7e1c0b2d6957e04a886b8b75745bb640ae27aa1b8cd85e2004e7c6b934690a441558c2fc5453f111c3e93ee780653cfa72084f355720526dc2a7196c860d09d6623f5c86c58c26c49c896279ea913fb4569509e7d358240e9320d2d1321ee83e689c91c5684ec918b7aeff4507bd2038343d500008c0401801a020a800c001d8004008780040087800c005a0009000000000000005ca704bca20e2a595278a810dadc19e65b01f759fbf19051ae590b5e6e59f7069fd459f6a9da92f8dd1787c74779186bf2717ea03ce353d00b1868bfef68a1895b5fefda41c6e6becb6c785544ba2d57ae5664b70a74f2e18c3e730df63716565779e34f9375a740f99713b90adef9335ebb178a777e66098ae1ce997d60a632689178781a58a9a5ec3c6d92847efb1f2dea0680f47160b44759896bc724bb95126909a4516096c622f0d848440c914c4b21d1c91f4033e5f8288d560e1f9ad86e62b3ad1ff4000000000000aadee661ef8296ceef8829bd6d402ced4193008c60c9aafa060ce3755a9ed46e61ced779c432379ea033710a1a87972dcc9fd7348572393fd4401a2ded90b4d2d2e510cbd739b8879186acf0498b00436a7960271d75b58cac3bd64633d54137f3cffa2e1e45f0e84a8b3c47a108af74f7061400ad7ac70b3482c080c418b103d27e8c768fdb7627fa3374864b8bb05bfd081e682b1a6e1deca510f29191c3e7aacd0499b120098f925858f85bf0457cf1b423eda1c407373ecce9f43fbfdd8d6c4796d61dcb551655d15d2027cd1f6b105056ca7d5afbd4a217b10635d8d4a65882aba52f3ee6a6e42dba4a326e77bdb89a91b668d18e0b24d3bf5ebd170ef1a39de028d88078604c2d1473fb3ce6b936ed69728b1f6a5a2c41b115313215245ff974a8e0512f548a5645be343eff34fa6f00006a02dd80a2a70bff0c7b466a75eb0f61d39f9fd27640d1f6e761879480ef0936dde3b3b4b104461a43d1dcc2990b9c697caa10d5f246ff0ef9452ec042c52639568b715ee2cffde31dc7a9417b298160798248199e05d07a72dc856027a596b6ff0078641caabfcb46b16f60eb88c9867f26fa428cb2026c4e0d51dad170644e62c31d2e9777bdacdd70f72e358b7d9b1fcd67ad0d7d94e837cd6c9a8b8b78d62483221ac448ab0a996fe1984ec75d8c04004600b900ad80876abdf589cec4bde6f2d1ac0f9228263fd50833c926d378f4c6f3656dab449b1fc9b15a0b6e0242079dcf62d60a8060d1fd1ab0c08488899ad39a6416085600587c5b570fff7dc85305f0495b4ddc06348e2269452f591fa5cfc7c16e319d376a437d5fac0b53fdb92b7a96076d6a41f66f420d90e633800460b6576f91c6118b10e49821a33efe4ab53af64efb6771445a81d225965726622611606b0f1016271ded19a857fba28c0900f00073797a30000000000000000b0019006e756d67656e000061007f0043243477c85dbd18f84ae68981f58cae3c89e134511a8b00735c36712a90eb6916f5878a6cb36753b8e768a4c20e1b436b1ebabcc72bf12a8e9572266fb215ce0193135523db12b74ff2d4ddb193363d90f5dc2422a71b0b77fa9b45800000004955a9263557199545813e196b8fd018921394ad6e92f9212e1748a3f55d842f9077dd14811963449834963c21f794f4659ab44be780ddf3a047c29764b8253ffd3aa8880f7038cb466c9e3c66fce19df1f3b00c49dce63f0d36955238b28ba421afb944b52a2505afce071017d1c1a31c7eb8adf7a60169a2edf4cadbcff160c29acc7e4e7d503e8cf800000c0008"], 0x57c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd29, 0x25dfdc01, {0x1d, 0x1, 0x4}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2}, 0x6, 0x2, 0x0, 0x0, "eb0f7c6012e5caa3"}, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 32.160604725s ago: executing program 3 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010403000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x54) 30.161912225s ago: executing program 3 (id=1506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 25.89801162s ago: executing program 3 (id=1514): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 21.242284846s ago: executing program 6 (id=1524): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x0, 0x111900) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdir(0x0, 0x13b) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r2) add_key(&(0x7f0000000340)='encrypted\x00', 0x0, 0x0, 0x0, r2) 20.21942068s ago: executing program 6 (id=1526): socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x400, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000fe800000000700000000000000000000fe8000000000000000000000000000aa000000000000000000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b00", @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r2, 0x101fff) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0xe003e45c, 0x700000000000000) 12.693812896s ago: executing program 7 (id=1542): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r8, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330"], 0x48) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) socket$nl_route(0x10, 0x3, 0x0) 12.194149839s ago: executing program 5 (id=1544): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(0x0, 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 11.852765867s ago: executing program 2 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000070000030000007202e5a361e901000000981b63a8654c000000000000000000232672bbc156236b0633121cac1fa249cc9957d75dfa95eb35ca5ad2269006a389edda05088cda3d59af83a2e4d4db82ef790ee4ec67c0be7bd3a0190feb8e7d283ab711b8206ce2839eadef671cc1e687a07003c2729aeceeff1bf3bf20c109a0072b3d9d725d8a53882f6d3a665511315eaebd8f2bcc6d2344a2dba4e746bb6ee5ce266edf9154150b276dd228abe9eeab6697a67483b0264c2c79f7ee64c04a1c05fd88cfdf7ac9cbad66ce3fbe8002b05a26f733f232374b47bbadf4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x9, 0x9bfb, {{0x34, 0x4, 0x2, 0x9, 0xd0, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x4c, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x80000001}, {@empty, 0x6170f029}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0), 0x4) listen(r7, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 10.048684292s ago: executing program 35 (id=1514): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 9.989486993s ago: executing program 7 (id=1547): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x7, r0, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 9.898705195s ago: executing program 5 (id=1548): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 9.759414199s ago: executing program 2 (id=1549): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105000000000000"], 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) syz_emit_ethernet(0x26, &(0x7f00000006c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@void, {0x8100, 0x5, 0x1}}, {@mpls_mc={0x8848, {[{0x8000, 0x0, 0x1}, {0xff}, {0xffff}, {0x256, 0x0, 0x1}, {0x29e}]}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) acct(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) 8.92212188s ago: executing program 7 (id=1550): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.322281144s ago: executing program 6 (id=1551): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 6.268036445s ago: executing program 6 (id=1552): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 6.108408579s ago: executing program 7 (id=1553): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) acct(&(0x7f0000000000)='./bus\x00') listen(0xffffffffffffffff, 0x5) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x800, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x1, 0x6, 0x4c11b0c5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0x7}) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r1}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x6080, 0x1d6) 6.052819981s ago: executing program 2 (id=1554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080) r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) syz_io_uring_setup(0x34b8, &(0x7f00000004c0)={0x0, 0xc1e6, 0x40, 0x2, 0x386}, &(0x7f0000000180)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) syz_ublk_add_dev(r0, r6, r2, r3, &(0x7f0000002a80)={0x2e, 0x1, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0xa56, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002a40)=@any_dev={0x3, 0x9be, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}}}, &(0x7f0000002b00)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.881348375s ago: executing program 5 (id=1555): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) getdents(r2, 0x0, 0x0) 3.836983435s ago: executing program 2 (id=1556): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000400)="3ce21add19a385fa7b18da22f4e0a7e22c0577a925228dfe7ba89a8ac5e3097e09f2246752c0774a61c68a2acbae5dad49941ee6953b0504ba0ee4d96afeab224945aa1b56b96fc2e8", 0x49, 0x4, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000200), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) mount(&(0x7f0000000080)=@filename='none\x00', 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) write(r1, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 3.835925565s ago: executing program 6 (id=1557): syz_open_dev$vim2m(0x0, 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x251, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x30, r8, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4000000000900fe5da7ded000000000000059ec8303cfef91b9000000000000000000008f5be75bf9a94245178c408cddc2c6cf7a168d68e9b59506ad7658f50a68adc6a1b1c092a82dca67078024ce823e88b87d4df9de10a449440a54227bd08cef4cb0630c6c148e3e6d2d4f4b0309fb098e64fec121e746b4d0f6e001912b795692899d874833c8172f1423b330"], 0x48) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000000980)={0x7, 0x3, 0x0, [{0x7ff, 0x0, 0xe04, 0x3, 0x6, 0x20, 0x8, '\x00', 0x10000}, {0x5, 0xa3, 0x8, 0x5, 0xe8, 0x26, 0x3, '\x00', 0x6e5cd63d}, {0xfffffffffffffffa, 0x765, 0x329, 0xf, 0x6, 0x4, 0x0, '\x00', 0x942}]}) socket$nl_route(0x10, 0x3, 0x0) 3.757205698s ago: executing program 7 (id=1558): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(0x0, 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3.721124838s ago: executing program 5 (id=1559): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.496717193s ago: executing program 7 (id=1560): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) exit(0xfffffffffffffffd) 1.477542294s ago: executing program 2 (id=1561): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1.315981478s ago: executing program 5 (id=1562): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.2070206s ago: executing program 6 (id=1563): r0 = syz_open_dev$dri(0x0, 0x8, 0x101401) syncfs(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r1, 0x1) 139.859777ms ago: executing program 2 (id=1564): syz_clone(0x80141000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) 0s ago: executing program 5 (id=1565): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @gre={{0xf, 0x4, 0x1, 0x6, 0x83, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x2, 0x8, "461b49acc1f2"}, {0x6, 0xb, "a738d016a304662b2e"}, {0x0, 0xe, "2272e07dd6f28fa30f8557d0"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "f80f83"}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="7c050000400007012dbd7000fedbdf25027c0000d0002a80ca000980d782bfb514af055e07aa8a8a4dba1021a57332d838c172e4824ce87caeb5da8fcae1a9887391f95274adf44d89ffca5f1aa322bb846e711fc8a80c34b45683762e99844de662319d5638af5edc5a15048ed96ed7e1c0b2d6957e04a886b8b75745bb640ae27aa1b8cd85e2004e7c6b934690a441558c2fc5453f111c3e93ee780653cfa72084f355720526dc2a7196c860d09d6623f5c86c58c26c49c896279ea913fb4569509e7d358240e9320d2d1321ee83e689c91c5684ec918b7aeff4507bd2038343d500008c0401801a020a800c001d8004008780040087800c005a0009000000000000005ca704bca20e2a595278a810dadc19e65b01f759fbf19051ae590b5e6e59f7069fd459f6a9da92f8dd1787c74779186bf2717ea03ce353d00b1868bfef68a1895b5fefda41c6e6becb6c785544ba2d57ae5664b70a74f2e18c3e730df63716565779e34f9375a740f99713b90adef9335ebb178a777e66098ae1ce997d60a632689178781a58a9a5ec3c6d92847efb1f2dea0680f47160b44759896bc724bb95126909a4516096c622f0d848440c914c4b21d1c91f4033e5f8288d560e1f9ad86e62b3ad1ff4000000000000aadee661ef8296ceef8829bd6d402ced4193008c60c9aafa060ce3755a9ed46e61ced779c432379ea033710a1a87972dcc9fd7348572393fd4401a2ded90b4d2d2e510cbd739b8879186acf0498b00436a7960271d75b58cac3bd64633d54137f3cffa2e1e45f0e84a8b3c47a108af74f7061400ad7ac70b3482c080c418b103d27e8c768fdb7627fa3374864b8bb05bfd081e682b1a6e1deca510f29191c3e7aacd0499b120098f925858f85bf0457cf1b423eda1c407373ecce9f43fbfdd8d6c4796d61dcb551655d15d2027cd1f6b105056ca7d5afbd4a217b10635d8d4a65882aba52f3ee6a6e42dba4a326e77bdb89a91b668d18e0b24d3bf5ebd170ef1a39de028d88078604c2d1473fb3ce6b936ed69728b1f6a5a2c41b115313215245ff974a8e0512f548a5645be343eff34fa6f00006a02dd80a2a70bff0c7b466a75eb0f61d39f9fd27640d1f6e761879480ef0936dde3b3b4b104461a43d1dcc2990b9c697caa10d5f246ff0ef9452ec042c52639568b715ee2cffde31dc7a9417b298160798248199e05d07a72dc856027a596b6ff0078641caabfcb46b16f60eb88c9867f26fa428cb2026c4e0d51dad170644e62c31d2e9777bdacdd70f72e358b7d9b1fcd67ad0d7d94e837cd6c9a8b8b78d62483221ac448ab0a996fe1984ec75d8c04004600b900ad80876abdf589cec4bde6f2d1ac0f9228263fd50833c926d378f4c6f3656dab449b1fc9b15a0b6e0242079dcf62d60a8060d1fd1ab0c08488899ad39a6416085600587c5b570fff7dc85305f0495b4ddc06348e2269452f591fa5cfc7c16e319d376a437d5fac0b53fdb92b7a96076d6a41f66f420d90e633800460b6576f91c6118b10e49821a33efe4ab53af64efb6771445a81d225965726622611606b0f1016271ded19a857fba28c0900f00073797a30000000000000000b0019006e756d67656e000061007f0043243477c85dbd18f84ae68981f58cae3c89e134511a8b00735c36712a90eb6916f5878a6cb36753b8e768a4c20e1b436b1ebabcc72bf12a8e9572266fb215ce0193135523db12b74ff2d4ddb193363d90f5dc2422a71b0b77fa9b45800000004955a9263557199545813e196b8fd018921394ad6e92f9212e1748a3f55d842f9077dd14811963449834963c21f794f4659ab44be780ddf3a047c29764b8253ffd3aa8880f7038cb466c9e3c66fce19df1f3b00c49dce63f0d36955238b28ba421afb944b52a2505afce071017d1c1a31c7eb8adf7a60169a2edf4cadbcff160c29acc7e4e7d503e8cf800000c0008"], 0x57c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd29, 0x25dfdc01, {0x1d, 0x1, 0x4}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2}, 0x6, 0x2, 0x0, 0x0, "eb0f7c6012e5caa3"}, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): e0d9 code=0x7ffc0000 [ 345.417713][ T6683] Invalid option length (1047276) for dns_resolver key [ 345.449651][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 345.629259][ T6694] MTD: Couldn't look up './dev/mtdblock0': -2 [ 345.774076][ T6698] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 345.858861][ T6698] device bond6 entered promiscuous mode [ 345.943168][ T4364] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 346.695283][ T4364] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.510161][ T4364] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 347.525023][ T4364] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.535120][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.555857][ T6692] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.281534][ T6724] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 350.464908][ T4364] usb 3-1: USB disconnect, device number 6 [ 350.498546][ T6728] Invalid option length (1047276) for dns_resolver key [ 350.519773][ T26] audit: type=1326 audit(1786132516.031:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8af9e0d9 code=0x7ffc0000 [ 350.544704][ T26] audit: type=1326 audit(1786132516.031:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8e8af9e0d9 code=0x7ffc0000 [ 350.569031][ T26] audit: type=1326 audit(1786132516.031:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8af9e0d9 code=0x7ffc0000 [ 350.593293][ T26] audit: type=1326 audit(1786132516.071:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8af9e0d9 code=0x7ffc0000 [ 350.672184][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 350.695604][ T6569] udevd[6569]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.831060][ T6739] MTD: Couldn't look up './dev/mtdblock0': -2 [ 351.925138][ T6753] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 352.315304][ T6753] device bond7 entered promiscuous mode [ 356.219121][ T6766] CIFS: Attempting to mount \\127.0.0.1\share [ 356.248345][ T6770] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 356.296300][ T26] audit: type=1326 audit(1786132521.811:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad0b9e0d9 code=0x7ffc0000 [ 356.336946][ T26] audit: type=1326 audit(1786132521.831:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5ad0b9e0d9 code=0x7ffc0000 [ 356.371440][ T26] audit: type=1326 audit(1786132521.831:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad0b9e0d9 code=0x7ffc0000 [ 356.399640][ T6766] CIFS: VFS: cifs_mount failed w/return code = -112 [ 356.430578][ T26] audit: type=1326 audit(1786132521.851:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.671" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad0b9e0d9 code=0x7ffc0000 [ 357.407473][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 358.622957][ T6804] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 359.224279][ T6817] CIFS: Attempting to mount \\127.0.0.1\share [ 360.172314][ T6817] CIFS: VFS: cifs_mount failed w/return code = -112 [ 362.394233][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'. [ 363.554561][ T6857] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 364.736364][ T26] audit: type=1326 audit(1786132530.251:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 364.761392][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'. [ 364.780894][ T26] audit: type=1326 audit(1786132530.281:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 364.868950][ T26] audit: type=1326 audit(1786132530.281:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 365.173063][ T4319] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 365.928691][ T4319] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.032473][ T4319] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.191866][ T4319] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.290076][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.562411][ T6878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.074986][ T129] usb 3-1: USB disconnect, device number 7 [ 370.206596][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'. [ 370.264955][ T6912] mkiss: ax0: crc mode is auto. [ 370.285313][ T6914] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 370.392063][ T6593] udevd[6593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.105778][ T6916] random: crng reseeded on system resumption [ 375.991590][ T6936] 9pnet_fd: Insufficient options for proto=fd [ 376.243345][ T4366] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 376.352937][ T4319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 376.366106][ T6952] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 376.872918][ T4366] usb 1-1: Using ep0 maxpacket: 8 [ 377.137511][ T4366] usb 1-1: config 0 has no interfaces? [ 377.153472][ T4366] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.172982][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.197664][ T4366] usb 1-1: config 0 descriptor?? [ 377.314821][ T4319] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.330682][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.729'. [ 377.341876][ T4319] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.352110][ T4319] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.361357][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.376669][ T6940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.453379][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 377.614660][ T6969] mkiss: ax0: crc mode is auto. [ 378.587742][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.594429][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.345298][ T6976] random: crng reseeded on system resumption [ 381.196399][ T4319] usb 1-1: USB disconnect, device number 13 [ 381.507032][ T3599] usb 3-1: USB disconnect, device number 8 [ 381.930614][ T6980] 9pnet_fd: Insufficient options for proto=fd [ 383.076588][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 383.198461][ T7001] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 383.266357][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 385.103305][ T4366] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 385.196757][ T7025] udc usbip-vudc.0: soft-connect without a gadget driver [ 385.291955][ T7029] mkiss: ax0: crc mode is auto. [ 385.354905][ T4366] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.484823][ T7032] random: crng reseeded on system resumption [ 385.500943][ T7031] 9pnet_fd: Insufficient options for proto=fd [ 385.508374][ T4366] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.591805][ T4366] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.369579][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.388846][ T7017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.201335][ T4364] usb 4-1: USB disconnect, device number 9 [ 389.705573][ T6315] udevd[6315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.926284][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 390.344359][ T7059] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 391.248937][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 391.764588][ T7079] 9pnet_virtio: no channels available for device syz [ 393.302677][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 393.602898][ T7038] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 394.260832][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 394.278738][ T7105] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 394.300210][ T7105] Invalid option length (1047276) for dns_resolver key [ 394.334666][ T7038] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.350347][ T7038] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 394.361254][ T7038] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.371214][ T7038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.397462][ T7097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.507086][ T7109] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 395.408280][ T7114] device syzkaller0 entered promiscuous mode [ 395.444257][ T4364] usb 1-1: USB disconnect, device number 14 [ 395.510288][ T7112] mkiss: ax0: crc mode is auto. [ 395.749976][ T7112] random: crng reseeded on system resumption [ 396.492447][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 397.018094][ T7135] 9pnet_virtio: no channels available for device syz [ 399.094427][ T7148] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 400.418579][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'. [ 400.792920][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 401.584090][ T4318] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.603092][ T4318] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.613446][ T4318] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.622514][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.633354][ T7164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.747441][ T26] audit: type=1326 audit(1786132567.261:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 401.817636][ T26] audit: type=1326 audit(1786132567.261:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 402.495567][ T26] audit: type=1326 audit(1786132567.261:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 402.521058][ T26] audit: type=1326 audit(1786132567.261:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 402.545572][ T26] audit: type=1326 audit(1786132567.261:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.3.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 403.123509][ T7197] random: crng reseeded on system resumption [ 403.379273][ T4319] usb 2-1: USB disconnect, device number 6 [ 403.714485][ T7202] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 404.680299][ T7206] 9pnet_virtio: no channels available for device syz [ 405.357882][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 405.884787][ T7230] MTD: Couldn't look up './dev/mtdblock0': -2 [ 406.015491][ T26] audit: type=1326 audit(1786132571.531:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 406.042427][ T26] audit: type=1326 audit(1786132571.561:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 406.116481][ T26] audit: type=1326 audit(1786132571.561:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 406.189420][ T26] audit: type=1326 audit(1786132571.561:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 406.225927][ T26] audit: type=1326 audit(1786132571.561:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 407.013012][ T4319] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 407.206033][ T7250] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 407.312496][ T4319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.336037][ T26] audit: type=1800 audit(1786132572.851:127): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.811" name="zoned" dev="configfs" ino=43876 res=0 errno=0 [ 407.531098][ T26] audit: type=1800 audit(1786132572.921:128): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.811" name="memory_backed" dev="configfs" ino=43877 res=0 errno=0 [ 407.800421][ T26] audit: type=1800 audit(1786132572.951:129): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.811" name="zone_nr_conv" dev="configfs" ino=43878 res=0 errno=0 [ 407.956627][ T4319] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.966702][ T4319] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.975815][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.994013][ T7242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.001513][ T26] audit: type=1800 audit(1786132572.981:130): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.811" name="power" dev="configfs" ino=43879 res=0 errno=0 [ 408.372894][ T7261] mkiss: ax0: crc mode is auto. [ 408.672635][ T7263] MTD: Couldn't look up './dev/mtdblock0': -2 [ 408.697602][ T26] audit: type=1326 audit(1786132574.211:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 408.723949][ T26] audit: type=1326 audit(1786132574.241:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 408.748699][ T26] audit: type=1326 audit(1786132574.241:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 408.873220][ T26] audit: type=1326 audit(1786132574.241:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 408.897407][ T26] audit: type=1326 audit(1786132574.241:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcbb9e0d9 code=0x7ffc0000 [ 409.270340][ T7272] random: crng reseeded on system resumption [ 411.283682][ T7] usb 2-1: USB disconnect, device number 7 [ 411.405029][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 411.969366][ T26] audit: type=1800 audit(1786132577.481:136): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.823" name="zoned" dev="configfs" ino=44699 res=0 errno=0 [ 412.083252][ T7300] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 413.000932][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 413.001040][ T26] audit: type=1326 audit(1786132578.511:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 413.888798][ T26] audit: type=1326 audit(1786132578.511:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 413.913287][ T26] audit: type=1326 audit(1786132578.511:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 413.937365][ T26] audit: type=1326 audit(1786132578.511:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 413.961621][ T26] audit: type=1326 audit(1786132578.511:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.0.829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f579e0d9 code=0x7ffc0000 [ 414.564244][ T7327] mkiss: ax0: crc mode is auto. [ 414.733066][ T7330] random: crng reseeded on system resumption [ 414.852933][ T3599] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 416.755023][ T3599] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.474229][ T3599] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 417.484311][ T3599] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.493449][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.505172][ T7329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.582244][ T4262] usb 1-1: USB disconnect, device number 15 [ 417.592202][ T26] audit: type=1800 audit(1786132583.101:145): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.837" name="zoned" dev="configfs" ino=43975 res=0 errno=0 [ 418.403682][ T26] audit: type=1800 audit(1786132583.111:146): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.837" name="memory_backed" dev="configfs" ino=43976 res=0 errno=0 [ 418.414321][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 418.484100][ T26] audit: type=1800 audit(1786132583.111:147): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.837" name="zone_nr_conv" dev="configfs" ino=43977 res=0 errno=0 [ 418.553242][ T6946] udevd[6946]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.604794][ T7354] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 418.623815][ T7353] jffs2: notice: (7353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 418.688520][ T26] audit: type=1800 audit(1786132583.111:148): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.837" name="power" dev="configfs" ino=43978 res=0 errno=0 [ 421.398599][ T7379] mkiss: ax0: crc mode is auto. [ 421.718546][ T7387] random: crng reseeded on system resumption [ 422.905841][ T26] audit: type=1800 audit(1786132588.421:149): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.848" name="memory_backed" dev="configfs" ino=44831 res=0 errno=0 [ 422.928323][ T7398] siw: device registration error -23 [ 423.052416][ T26] audit: type=1800 audit(1786132588.461:150): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.848" name="zone_nr_conv" dev="configfs" ino=44832 res=0 errno=0 [ 423.183209][ T26] audit: type=1800 audit(1786132588.461:151): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.848" name="power" dev="configfs" ino=44833 res=0 errno=0 [ 423.369876][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.855'. [ 424.073372][ T7438] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 426.206573][ T7447] siw: device registration error -23 [ 426.276245][ T7449] mkiss: ax0: crc mode is auto. [ 426.403727][ T7449] random: crng reseeded on system resumption [ 426.897567][ T7434] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 428.814357][ T26] audit: type=1800 audit(1786132594.331:152): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="memory_backed" dev="configfs" ino=45216 res=0 errno=0 [ 428.950120][ T26] audit: type=1800 audit(1786132594.381:153): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="zone_nr_conv" dev="configfs" ino=45026 res=0 errno=0 [ 429.037264][ T26] audit: type=1800 audit(1786132594.381:154): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="power" dev="configfs" ino=45027 res=0 errno=0 [ 429.108050][ T7497] siw: device registration error -23 [ 429.218335][ T7501] mkiss: ax0: crc mode is auto. [ 429.316615][ T7501] random: crng reseeded on system resumption [ 431.631057][ T7537] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 431.641829][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 432.591446][ T26] audit: type=1800 audit(1786132598.101:155): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.889" name="memory_backed" dev="configfs" ino=45290 res=0 errno=0 [ 432.669847][ T26] audit: type=1800 audit(1786132598.101:156): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.889" name="zone_nr_conv" dev="configfs" ino=45291 res=0 errno=0 [ 432.777029][ T26] audit: type=1800 audit(1786132598.101:157): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.889" name="power" dev="configfs" ino=45292 res=0 errno=0 [ 432.858444][ T7558] mkiss: ax0: crc mode is auto. [ 432.948489][ T7558] random: crng reseeded on system resumption [ 435.915999][ T26] audit: type=1800 audit(1786132601.431:158): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="zoned" dev="configfs" ino=46201 res=0 errno=0 [ 435.976601][ T7594] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 435.991268][ T26] audit: type=1800 audit(1786132601.471:159): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="memory_backed" dev="configfs" ino=46204 res=0 errno=0 [ 436.021310][ T7594] Invalid option length (1047276) for dns_resolver key [ 436.082966][ T26] audit: type=1800 audit(1786132601.471:160): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="zone_nr_conv" dev="configfs" ino=46205 res=0 errno=0 [ 436.150765][ T26] audit: type=1800 audit(1786132601.471:161): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="power" dev="configfs" ino=46206 res=0 errno=0 [ 436.204251][ T7604] mkiss: ax0: crc mode is auto. [ 436.266897][ T7604] random: crng reseeded on system resumption [ 440.026717][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.033294][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.542641][ T7638] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 440.548282][ T7641] mkiss: ax0: crc mode is auto. [ 440.564976][ T7641] random: crng reseeded on system resumption [ 442.191880][ T7638] Invalid option length (1047276) for dns_resolver key [ 442.209421][ T53] block nbd1: Attempted send on invalid socket [ 442.215846][ T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 442.350178][ T7659] jffs2: notice: (7659) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 443.694163][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 447.401554][ T7705] mkiss: ax0: crc mode is auto. [ 447.406169][ T7704] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 448.278328][ T7705] random: crng reseeded on system resumption [ 448.562226][ T7704] Invalid option length (1047276) for dns_resolver key [ 448.690961][ T26] audit: type=1326 audit(1786132614.201:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83359e0d9 code=0x7ffc0000 [ 448.844614][ T26] audit: type=1326 audit(1786132614.241:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd83359e0d9 code=0x7ffc0000 [ 448.938371][ T26] audit: type=1326 audit(1786132614.241:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83359e0d9 code=0x7ffc0000 [ 448.974654][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.936'. [ 449.077339][ T7733] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 449.088610][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'. [ 449.185263][ T26] audit: type=1326 audit(1786132614.241:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.923" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83359e0d9 code=0x7ffc0000 [ 449.568253][ T26] audit: type=1800 audit(1786132614.451:166): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.937" name="zoned" dev="configfs" ino=46363 res=0 errno=0 [ 449.821100][ T26] audit: type=1800 audit(1786132614.481:167): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.937" name="memory_backed" dev="configfs" ino=46364 res=0 errno=0 [ 449.842095][ T26] audit: type=1800 audit(1786132614.481:168): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.937" name="zone_nr_conv" dev="configfs" ino=46365 res=0 errno=0 [ 449.862954][ T26] audit: type=1800 audit(1786132614.481:169): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.937" name="power" dev="configfs" ino=46366 res=0 errno=0 [ 452.771763][ T7753] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 452.786641][ T7753] Invalid option length (1047276) for dns_resolver key [ 452.885408][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 452.997166][ T7767] CIFS: Attempting to mount \\127.0.0.1\share [ 453.007071][ T7767] CIFS: VFS: No username specified [ 453.806683][ T7761] mkiss: ax0: crc mode is auto. [ 453.838628][ T7761] random: crng reseeded on system resumption [ 454.753364][ T53] block nbd3: Attempted send on invalid socket [ 454.759657][ T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 454.905371][ T26] audit: type=1800 audit(1786132620.411:170): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="zoned" dev="configfs" ino=45590 res=0 errno=0 [ 454.941938][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.951'. [ 454.969514][ T26] audit: type=1800 audit(1786132620.491:171): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="memory_backed" dev="configfs" ino=45596 res=0 errno=0 [ 455.058513][ T26] audit: type=1800 audit(1786132620.551:172): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="zone_nr_conv" dev="configfs" ino=46433 res=0 errno=0 [ 455.208884][ T7787] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 455.229609][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 455.993636][ T7789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.955'. [ 456.064129][ T26] audit: type=1800 audit(1786132620.551:173): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="power" dev="configfs" ino=46434 res=0 errno=0 [ 458.613943][ T7797] 9pnet_virtio: no channels available for device syz [ 458.664056][ T7804] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 458.674114][ T7789] fuse: Unknown parameter '0x0000000000000003' [ 458.679690][ T7804] Invalid option length (1047276) for dns_resolver key [ 458.871655][ T7807] program syz.3.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.010620][ T7802] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 459.737088][ T7814] mkiss: ax0: crc mode is auto. [ 459.822439][ T7814] random: crng reseeded on system resumption [ 459.983119][ T4321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 460.193185][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 460.208192][ T4321] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.339120][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.453815][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.348305][ T4321] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.675342][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.846716][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.361869][ T7822] program syz.2.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.671319][ T4321] usb 1-1: usb_control_msg returned -71 [ 462.678415][ T4321] usbtmc 1-1:16.0: can't read capabilities [ 462.701251][ T4321] usb 1-1: USB disconnect, device number 16 [ 462.844759][ T7831] device syzkaller0 entered promiscuous mode [ 462.852154][ T7829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 462.917856][ T7051] block nbd3: Attempted send on invalid socket [ 462.925558][ T7051] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 464.124472][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.969'. [ 464.137578][ T7845] netlink: 'syz.3.969': attribute type 12 has an invalid length. [ 467.207967][ T7853] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 467.266097][ T7853] Invalid option length (1047276) for dns_resolver key [ 467.339707][ T7861] program syz.1.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.231715][ T7866] mkiss: ax0: crc mode is auto. [ 468.287580][ T7866] random: crng reseeded on system resumption [ 469.325432][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 469.664059][ T7860] Process accounting resumed [ 469.750769][ T53] block nbd0: Attempted send on invalid socket [ 469.757489][ T53] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 472.777534][ T7908] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 472.815289][ T7908] Invalid option length (1047276) for dns_resolver key [ 473.203815][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574d3c00: rx timeout, send abort [ 473.703935][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574d0800: rx timeout, send abort [ 473.712360][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574d3c00: abort rx timeout. Force session deactivation [ 474.212245][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574d0800: abort rx timeout. Force session deactivation [ 474.323586][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 478.750888][ T7051] block nbd3: Attempted send on invalid socket [ 478.757205][ T7051] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 478.840543][ T7960] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 480.268663][ T7960] Invalid option length (1047276) for dns_resolver key [ 480.507644][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 480.745749][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d3f800: rx timeout, send abort [ 481.254114][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d3f800: abort rx timeout. Force session deactivation [ 482.722990][ T7038] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 485.089860][ T7038] usb 1-1: Dual-Role OTG device on HNP port [ 485.097229][ T7038] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 485.109766][ T7038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.135740][ T7038] gspca_main: spca501-2.14.0 probing 0000:0000 [ 485.153378][ T7038] gspca_spca501: reg write: error -32 [ 485.158814][ T7038] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 485.179184][ T7038] spca501: probe of 1-1:1.0 failed with error -22 [ 485.280732][ T8014] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 485.313215][ T8012] Device name cannot be null; rc = [-22] [ 485.328101][ T8014] Invalid option length (1047276) for dns_resolver key [ 485.663185][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625e400: rx timeout, send abort [ 486.163285][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625f000: rx timeout, send abort [ 486.171731][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625e400: abort rx timeout. Force session deactivation [ 486.673287][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805625f000: abort rx timeout. Force session deactivation [ 488.339984][ T8025] mkiss: ax0: crc mode is auto. [ 488.363136][ T8025] random: crng reseeded on system resumption [ 491.073016][ T7038] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 492.462622][ T8062] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 492.557724][ T8062] Invalid option length (1047276) for dns_resolver key [ 492.580878][ T7038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 492.609150][ T7038] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 492.637163][ T7038] usb 4-1: can't read configurations, error -71 [ 492.663238][ T4322] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 492.719554][ T8070] mkiss: ax0: crc mode is auto. [ 492.740615][ T8070] random: crng reseeded on system resumption [ 493.054590][ T4322] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.244654][ T4322] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 494.255380][ T4322] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.264551][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.290405][ T4322] usb 3-1: invalid MIDI out EP 0 [ 494.377176][ T4322] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 494.418782][ T6946] udevd[6946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 496.307209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802795e000: rx timeout, send abort [ 496.807270][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057071800: rx timeout, send abort [ 496.815684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802795e000: abort rx timeout. Force session deactivation [ 497.969275][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057071800: abort rx timeout. Force session deactivation [ 498.114138][ T7038] usb 3-1: USB disconnect, device number 9 [ 500.928205][ T8108] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 500.936071][ T8108] netlink: 'syz.4.1045': attribute type 8 has an invalid length. [ 501.474207][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.481022][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.777294][ T8112] mkiss: ax0: crc mode is auto. [ 501.865463][ T8112] random: crng reseeded on system resumption [ 502.050547][ T8114] device syzkaller0 entered promiscuous mode [ 503.202943][ T4366] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 503.984536][ T4366] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.052852][ T4366] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 504.107336][ T4366] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.126463][ T4366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.196482][ T8144] 9pnet_fd: Insufficient options for proto=fd [ 504.238243][ T8144] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 504.267156][ T8144] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 504.386020][ T8144] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 504.427485][ T8144] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 504.434602][ T8144] pci 0000:00:05.0: vgaarb: bridge control possible [ 504.441217][ T8144] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 504.460313][ T8144] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 507.341323][ T4366] usb 2-1: can't set config #27, error -71 [ 507.360826][ T4366] usb 2-1: USB disconnect, device number 8 [ 507.570633][ T8154] mkiss: ax0: crc mode is auto. [ 507.638800][ T8160] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 507.646727][ T8160] netlink: 'syz.0.1060': attribute type 8 has an invalid length. [ 508.486723][ T8154] random: crng reseeded on system resumption [ 508.882973][ T8169] device syzkaller0 entered promiscuous mode [ 510.111708][ T8185] batman_adv: batadv0: Adding interface: veth0 [ 510.118772][ T8185] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.251232][ T8185] batman_adv: batadv0: Interface activated: veth0 [ 511.165211][ T8187] batman_adv: batadv0: Interface deactivated: veth0 [ 511.171908][ T8187] batman_adv: batadv0: Removing interface: veth0 [ 511.191283][ T8183] Process accounting resumed [ 511.258227][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.367270][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.380542][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.390581][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.552919][ T3599] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 511.582430][ T8189] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 511.757969][ T3599] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.832606][ T3599] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.988265][ T3599] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 512.110857][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.328657][ T8191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 512.371913][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.379902][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.471600][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.478855][ T8189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.487634][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.494865][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.506168][ T8189] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.558279][ T8192] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:544d:f4ff:feef:f494 error=-28 [ 512.695618][ T8205] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 512.703560][ T8205] netlink: 'syz.0.1074': attribute type 8 has an invalid length. [ 513.479291][ T4319] usb 3-1: USB disconnect, device number 10 [ 513.575722][ T8207] random: crng reseeded on system resumption [ 514.378729][ T8212] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1077'. [ 514.400353][ T8192] infiniband syz1: set active [ 514.406811][ T8192] infiniband syz1: added bridge_slave_1 [ 514.413992][ T8192] rdma_rxe: unable to create cq [ 514.419429][ T8192] infiniband syz1: Couldn't create ib_mad CQ [ 514.427128][ T8192] infiniband syz1: Couldn't open port 1 [ 514.515801][ T8192] RDS/IB: syz1: added [ 514.533624][ T8192] smc: adding ib device syz1 with port count 1 [ 514.537688][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1077'. [ 514.600641][ T8192] smc: ib device syz1 port 1 has pnetid [ 516.276703][ T8226] 9pnet_virtio: no channels available for device syz [ 518.033377][ T8236] Process accounting resumed [ 520.692696][ T8252] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 520.700649][ T8252] netlink: 'syz.3.1087': attribute type 8 has an invalid length. [ 522.433305][ T8260] mkiss: ax0: crc mode is auto. [ 522.500479][ T8260] random: crng reseeded on system resumption [ 522.599531][ T4319] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 522.789923][ T4319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.024001][ T4319] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 524.145216][ T4319] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 524.295416][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.999080][ T8254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.676837][ T4319] usb 2-1: USB disconnect, device number 9 [ 526.003702][ T8305] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 526.127402][ T8305] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 526.312902][ T4319] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 528.126905][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.148179][ T8318] 9pnet_fd: Insufficient options for proto=fd [ 528.913231][ T4319] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 529.640040][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.653348][ T4319] usb 2-1: config 0 descriptor?? [ 529.670396][ T4319] usb 2-1: can't set config #0, error -71 [ 529.695624][ T8293] udevd[8293]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 529.713279][ T4319] usb 2-1: USB disconnect, device number 10 [ 530.015292][ T8328] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 530.023348][ T8328] netlink: 'syz.0.1103': attribute type 8 has an invalid length. [ 530.899151][ T8335] random: crng reseeded on system resumption [ 531.233923][ T8332] Falling back ldisc for ptm0. [ 531.503286][ T8353] 9pnet_fd: Insufficient options for proto=fd [ 531.863116][ T4319] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 532.536219][ T4319] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.556641][ T4319] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.577460][ T4319] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.597446][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.629759][ T8341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.820637][ T8369] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 534.833720][ T8368] device syzkaller0 entered promiscuous mode [ 534.926311][ T8321] usb 3-1: USB disconnect, device number 11 [ 534.950192][ T8369] device bond6 entered promiscuous mode [ 535.648947][ T8378] mkiss: ax0: crc mode is auto. [ 535.727919][ T8378] random: crng reseeded on system resumption [ 536.614715][ T8390] 9pnet_fd: Insufficient options for proto=fd [ 540.453000][ T7038] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 540.644676][ T7038] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 540.664193][ T7038] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.497658][ T7038] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.508092][ T7038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.523257][ T8408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 541.737087][ T8422] 9pnet_virtio: no channels available for device syz [ 542.318723][ T14] usb 2-1: USB disconnect, device number 11 [ 542.438069][ T8442] mkiss: ax0: crc mode is auto. [ 542.460252][ T8442] random: crng reseeded on system resumption [ 544.242485][ T8446] 9pnet_fd: Insufficient options for proto=fd [ 545.242554][ T14] usb 1-1: USB disconnect, device number 17 [ 545.336811][ T8462] siw: device registration error -23 [ 547.626496][ T8488] 9pnet_fd: Insufficient options for proto=fd [ 547.842313][ T129] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 548.516577][ T8489] 9pnet_virtio: no channels available for device syz [ 548.584137][ T129] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.598289][ T129] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.608750][ T129] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.618537][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.633731][ T8482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 548.854948][ T53] block nbd3: Attempted send on invalid socket [ 548.861221][ T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 548.967959][ T8507] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 549.387469][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 549.630430][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.265405][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.398230][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.584212][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'. [ 552.346687][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.519421][ T53] block nbd2: Attempted send on invalid socket [ 552.525917][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 552.690527][ T8560] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 552.764930][ T8560] device bond2 entered promiscuous mode [ 553.390320][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.849633][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 553.925820][ T8589] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1176'. [ 554.423214][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.430261][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.981073][ T8594] Process accounting resumed [ 555.199020][ T8609] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 555.214445][ T8609] Invalid option length (1047276) for dns_resolver key [ 556.032858][ T14] ALSA: seq_lock: waiting [48 left] in sound/core/seq/seq_ports.c:250 [ 556.104519][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.481544][ T7051] block nbd4: Attempted send on invalid socket [ 556.489179][ T7051] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 557.140953][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880788dd000: rx timeout, send abort [ 557.463413][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.641060][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880290c9400: rx timeout, send abort [ 557.649528][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880788dd000: abort rx timeout. Force session deactivation [ 557.741633][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.623521][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880290c9400: abort rx timeout. Force session deactivation [ 558.676957][ T8645] 9pnet_virtio: no channels available for device syz [ 558.750811][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.443174][ T8665] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 559.783280][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.504612][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.882971][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.937982][ T8665] Invalid option length (1047276) for dns_resolver key [ 561.571664][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1204'. [ 561.653628][ T8681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.744972][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.755061][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.763796][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 561.772816][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 561.794858][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 561.947404][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 561.960529][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 561.964428][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.980242][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 561.990102][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 561.991724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d93fc00: rx timeout, send abort [ 562.019171][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 562.027893][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.491825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d93d000: rx timeout, send abort [ 562.505490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d93fc00: abort rx timeout. Force session deactivation [ 562.918574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.927793][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.016584][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d93d000: abort rx timeout. Force session deactivation [ 563.089243][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.323818][ T8678] lo speed is unknown, defaulting to 1000 [ 563.505983][ T8689] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 563.532473][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.539928][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.549335][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.856548][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.863835][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.871510][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.878723][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.088792][ T8689] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 564.102948][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 564.122166][ T8708] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 564.147017][ T8692] rdma_rxe: rxe_register_device failed with error -23 [ 564.192176][ T8708] Invalid option length (1047276) for dns_resolver key [ 564.209027][ T8692] rdma_rxe: failed to add bridge_slave_1 [ 564.556833][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.724212][ T8719] 9pnet_fd: Insufficient options for proto=fd [ 565.571478][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 565.630474][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.030733][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803023a400: rx timeout, send abort [ 566.192860][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 566.530975][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030239c00: rx timeout, send abort [ 566.539356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803023a400: abort rx timeout. Force session deactivation [ 567.153675][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030239c00: abort rx timeout. Force session deactivation [ 567.793077][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.800286][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.855855][ T8678] device bridge_slave_0 entered promiscuous mode [ 567.870885][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.879014][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.051526][ T8678] device bridge_slave_1 entered promiscuous mode [ 568.150999][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.197672][ T8752] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 568.221912][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.263013][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 568.345025][ T8752] Invalid option length (1047276) for dns_resolver key [ 568.353058][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.383842][ T8678] team0: Port device team_slave_0 added [ 568.452132][ T8758] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 568.473713][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.481828][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.527576][ T8760] rdma_rxe: rxe_register_device failed with error -23 [ 568.534697][ T8760] rdma_rxe: failed to add bridge_slave_1 [ 568.541318][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.548539][ T8758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.556264][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.563441][ T8758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.574513][ T8760] md: could not open device unknown-block(1,1). [ 568.582031][ T8760] md: could not open device unknown-block(1,3). [ 568.596287][ T8758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 568.608927][ T8678] team0: Port device team_slave_1 added [ 568.671683][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.695540][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.724167][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.784319][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.791520][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.818712][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.837818][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 568.887059][ T8771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1229'. [ 568.907533][ T8768] device syzkaller0 entered promiscuous mode [ 568.928223][ T8678] device hsr_slave_0 entered promiscuous mode [ 568.935248][ T8678] device hsr_slave_1 entered promiscuous mode [ 568.942029][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.958217][ T8678] Cannot create hsr debugfs directory [ 569.383139][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.352932][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 570.433006][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.840720][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.328200][ T8777] 9pnet_virtio: no channels available for device syz [ 571.360478][ T8678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 571.434293][ T8678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 571.463585][ T8678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 571.515439][ T8678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 572.429701][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.466394][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.486192][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.500783][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.517052][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.560979][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 572.591945][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.604240][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.611384][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.675207][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 572.737974][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 572.805896][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.864082][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.871272][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.004139][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.091113][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.190534][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.257007][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.358773][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 573.401435][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 573.456810][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 573.477806][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.485995][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.545742][ T8678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.582688][ T8678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.612113][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 573.626829][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.627911][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.651427][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 573.656936][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.663640][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.678325][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.687991][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.703420][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.732126][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 573.774328][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.808767][ T8813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.860764][ T8813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.878455][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.038413][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 574.046850][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.060416][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.078774][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 574.107843][ T8820] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1241'. [ 574.210915][ T8826] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 574.234600][ T8826] Invalid option length (1047276) for dns_resolver key [ 578.556206][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 578.573246][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.684914][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.697063][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.716423][ T8678] device veth0_vlan entered promiscuous mode [ 578.729381][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.740316][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.758994][ T8678] device veth1_vlan entered promiscuous mode [ 578.767465][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 578.810455][ T8678] device veth0_macvtap entered promiscuous mode [ 578.818072][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 578.828415][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 578.841058][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 578.851418][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 578.866349][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 578.878098][ T8678] device veth1_macvtap entered promiscuous mode [ 578.889183][ T8861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1251'. [ 579.068367][ T4286] net_ratelimit: 14 callbacks suppressed [ 579.068472][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.169565][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.243773][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.337734][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.458347][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.469018][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.491845][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.538094][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.609678][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.625057][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.639267][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.652600][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.661817][ T8869] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 579.663185][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.681585][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.694122][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.703092][ T8869] Invalid option length (1047276) for dns_resolver key [ 579.705889][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.721383][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.731873][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.745543][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.763182][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 579.779927][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 579.822503][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.832044][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.841165][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.854560][ T8678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.864531][ T8678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.876403][ T8678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.885645][ T8678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.896340][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 579.943918][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.001484][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.012171][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.030552][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 580.086627][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.149354][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.194799][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.205165][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.286776][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 581.626946][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.958023][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.971132][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.023583][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.247846][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.256724][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.268392][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.294757][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.304499][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.311084][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.453591][ T8907] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 585.463900][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.488959][ T8907] Invalid option length (1047276) for dns_resolver key [ 585.543709][ T4290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 585.554561][ T4290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 585.564369][ T4290] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 585.582815][ T4290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 585.591509][ T4290] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 585.599394][ T4290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 585.749145][ T8910] lo speed is unknown, defaulting to 1000 [ 585.760936][ T8916] 9pnet_virtio: no channels available for device ./bus [ 586.516847][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.525563][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.940746][ T8916] siw: device registration error -23 [ 586.983345][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.622889][ T4290] Bluetooth: hci6: command 0x0409 tx timeout [ 588.617895][ T8910] chnl_net:caif_netlink_parms(): no params data found [ 588.702254][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.714940][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.727296][ T8910] device bridge_slave_0 entered promiscuous mode [ 588.736303][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.753595][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.781255][ T8910] device bridge_slave_1 entered promiscuous mode [ 588.816782][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.828406][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.857082][ T8910] team0: Port device team_slave_0 added [ 588.866321][ T8910] team0: Port device team_slave_1 added [ 588.902657][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.910186][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.985914][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.999582][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.010221][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.038950][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.119191][ T8910] device hsr_slave_0 entered promiscuous mode [ 589.129485][ T8910] device hsr_slave_1 entered promiscuous mode [ 589.150663][ T8910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.177052][ T8910] Cannot create hsr debugfs directory [ 589.702847][ T4290] Bluetooth: hci6: command 0x041b tx timeout [ 589.784702][ T4413] net_ratelimit: 5 callbacks suppressed [ 589.784719][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.799347][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.810833][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.030465][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.090522][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 590.250165][ T8960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1278'. [ 591.073294][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.098216][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.206406][ T8910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 591.252562][ T8910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.342365][ T8979] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 591.381330][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 591.408019][ T8910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 591.565126][ T8910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 591.782837][ T4290] Bluetooth: hci6: command 0x040f tx timeout [ 592.098147][ T8974] 9pnet: Could not find request transport: fd0x0000000000000004 [ 592.106387][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.118360][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.063372][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.143390][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.466915][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.481608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 593.507034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.531442][ T8910] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.560429][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.578821][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.590801][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.598074][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.615516][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.652633][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.677344][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.692413][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.699650][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.748241][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.767805][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.829159][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.862037][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.870195][ T4290] Bluetooth: hci6: command 0x0419 tx timeout [ 593.889537][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.898919][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.907868][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.921252][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.930464][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.941996][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.954773][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.963159][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 595.037175][ T9013] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 595.543284][ T31] net_ratelimit: 6 callbacks suppressed [ 595.543297][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.561588][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.789764][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.799395][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.812133][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.103408][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.141000][ T9017] 9pnet: Could not find request transport: fd0x0000000000000004 [ 596.188153][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.905811][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.916783][ T9022] Process accounting resumed [ 597.069152][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.074860][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.093907][ T4283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 597.096077][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.111450][ T4283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 597.128114][ T4283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 597.140030][ T4283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 597.147967][ T4283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 597.155563][ T4283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 597.169575][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.562059][ T7051] block nbd5: Attempted send on invalid socket [ 597.568484][ T7051] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 597.981885][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.056995][ T9023] lo speed is unknown, defaulting to 1000 [ 598.467572][ T9053] 9pnet_fd: Insufficient options for proto=fd [ 599.313189][ T4290] Bluetooth: hci7: command 0x0405 tx timeout [ 599.621709][ T9065] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 599.969168][ T9023] chnl_net:caif_netlink_parms(): no params data found [ 600.835315][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.844554][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.018708][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.039481][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.054605][ T9073] 9pnet: Could not find request transport: fd0x0000000000000004 [ 601.070932][ T8910] device veth0_vlan entered promiscuous mode [ 601.137477][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.298253][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.310137][ T11] net_ratelimit: 11 callbacks suppressed [ 601.310152][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.314988][ T8910] device veth1_vlan entered promiscuous mode [ 601.331251][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.362372][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.383071][ T4283] Bluetooth: hci7: command 0x0409 tx timeout [ 601.395309][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.183224][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.427002][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.435500][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.937392][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.952570][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.063632][ T9090] 9pnet_virtio: no channels available for device syz [ 603.105980][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.124898][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.144644][ T9023] device bridge_slave_0 entered promiscuous mode [ 603.185490][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.192638][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.220266][ T9023] device bridge_slave_1 entered promiscuous mode [ 603.250180][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.280758][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.321383][ T8910] device veth0_macvtap entered promiscuous mode [ 603.340508][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.354677][ T8910] device veth1_macvtap entered promiscuous mode [ 603.365769][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.388885][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.402288][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.450455][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.468086][ T9098] 9pnet_fd: Insufficient options for proto=fd [ 603.474699][ T4283] Bluetooth: hci7: command 0x041b tx timeout [ 603.483393][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.492115][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.678326][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.803088][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.917374][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.997378][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.078593][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.170061][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.192039][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.204235][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.325809][ T9106] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 604.676544][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.007010][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.052423][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 605.088944][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.118666][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.162786][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.191876][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.221867][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.243752][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.255686][ T9113] 9pnet_fd: Insufficient options for proto=fd [ 605.268619][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.290505][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.302202][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.344692][ T8910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.418043][ T8910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.496906][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.553121][ T4283] Bluetooth: hci7: command 0x0419 tx timeout [ 605.629887][ T9023] team0: Port device team_slave_0 added [ 605.701275][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 605.752148][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.865479][ T9023] team0: Port device team_slave_1 added [ 606.076274][ T8910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.153225][ T8910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.593341][ T4422] net_ratelimit: 6 callbacks suppressed [ 606.593358][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.607653][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.330717][ T8910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.339718][ T8910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.461018][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.477782][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.505113][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.620248][ T9126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.630628][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.639303][ T4283] Bluetooth: hci7: command 0x0406 tx timeout [ 607.645669][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.655883][ T9126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.703683][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.757570][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.769836][ T9126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.779715][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.810306][ T9126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.816500][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.837236][ T9126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.881395][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.902640][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.959962][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.030782][ T9023] device hsr_slave_0 entered promiscuous mode [ 608.039017][ T9023] device hsr_slave_1 entered promiscuous mode [ 608.056067][ T9023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.077281][ T9023] Cannot create hsr debugfs directory [ 608.099431][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.111301][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.144609][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.804677][ T9144] 9pnet_fd: Insufficient options for proto=fd [ 609.571369][ T9023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 609.591261][ T9023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 609.601716][ T9023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 609.632864][ T9023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 609.820939][ T26] audit: type=1800 audit(1786132775.331:174): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1329" name="zoned" dev="configfs" ino=52868 res=0 errno=0 [ 609.883235][ T26] audit: type=1800 audit(1786132775.361:175): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1329" name="memory_backed" dev="configfs" ino=52005 res=0 errno=0 [ 609.953173][ T26] audit: type=1800 audit(1786132775.361:176): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1329" name="zone_nr_conv" dev="configfs" ino=52006 res=0 errno=0 [ 610.020434][ T26] audit: type=1800 audit(1786132775.371:177): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1329" name="power" dev="configfs" ino=52007 res=0 errno=0 [ 610.120546][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.666520][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.994447][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.037118][ T4321] net_ratelimit: 19 callbacks suppressed [ 612.037134][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.074097][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.260391][ T9023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.271517][ T9023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.355786][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.378230][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.392849][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.400029][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.408782][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.418246][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.427262][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.434435][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.442734][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.476317][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.498059][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.528898][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.547258][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.583639][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.600897][ T26] audit: type=1800 audit(1786132778.111:178): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1340" name="zoned" dev="configfs" ino=52990 res=0 errno=0 [ 612.648156][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.724067][ T9187] 9pnet_fd: Insufficient options for proto=fd [ 612.751153][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.821818][ T26] audit: type=1800 audit(1786132778.141:179): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1340" name="memory_backed" dev="configfs" ino=52991 res=0 errno=0 [ 612.978137][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.136230][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.187376][ T26] audit: type=1800 audit(1786132778.141:180): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1340" name="zone_nr_conv" dev="configfs" ino=52992 res=0 errno=0 [ 613.220127][ T9167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.366237][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.427056][ T26] audit: type=1800 audit(1786132778.141:181): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1340" name="power" dev="configfs" ino=52993 res=0 errno=0 [ 613.477883][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.565232][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.822117][ T9197] 9pnet_fd: Insufficient options for proto=fd [ 614.001937][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'. [ 614.103369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.440965][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.914815][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.924025][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.924809][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.999717][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.156692][ T26] audit: type=1800 audit(1786132780.671:182): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1351" name="zoned" dev="configfs" ino=53069 res=0 errno=0 [ 615.474930][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.348426][ T26] audit: type=1800 audit(1786132780.671:183): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1351" name="memory_backed" dev="configfs" ino=53073 res=0 errno=0 [ 616.370120][ T26] audit: type=1800 audit(1786132780.671:184): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1351" name="zone_nr_conv" dev="configfs" ino=53074 res=0 errno=0 [ 616.391647][ T26] audit: type=1800 audit(1786132780.671:185): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1351" name="power" dev="configfs" ino=53075 res=0 errno=0 [ 616.503581][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.976350][ T9246] siw: device registration error -23 [ 617.545180][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.847005][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 617.943495][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.953077][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.731900][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.821873][ T26] audit: type=1800 audit(1786132784.331:186): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1364" name="zoned" dev="configfs" ino=53331 res=0 errno=0 [ 618.911838][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.920257][ T26] audit: type=1800 audit(1786132784.341:187): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1364" name="memory_backed" dev="configfs" ino=53332 res=0 errno=0 [ 618.962520][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.967239][ T26] audit: type=1800 audit(1786132784.341:188): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1364" name="zone_nr_conv" dev="configfs" ino=53333 res=0 errno=0 [ 619.058939][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 619.112868][ T26] audit: type=1800 audit(1786132784.341:189): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1364" name="power" dev="configfs" ino=53334 res=0 errno=0 [ 619.134991][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.011969][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.105376][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.123765][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.173204][ T9023] device veth0_vlan entered promiscuous mode [ 620.217340][ T9023] device veth1_vlan entered promiscuous mode [ 620.395054][ T9289] siw: device registration error -23 [ 620.983019][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.106899][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.142628][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.179112][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.284737][ T9023] device veth0_macvtap entered promiscuous mode [ 621.336316][ T9023] device veth1_macvtap entered promiscuous mode [ 621.443726][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.661143][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.193252][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.252986][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.263964][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.273852][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.285133][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.298214][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.308765][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.320151][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.330663][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.340530][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.351088][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.363987][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.378375][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.399196][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.424594][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.435310][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.446166][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.459121][ T26] audit: type=1800 audit(1786132787.971:190): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1377" name="zoned" dev="configfs" ino=53444 res=0 errno=0 [ 622.487147][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.491727][ T26] audit: type=1800 audit(1786132787.981:191): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1377" name="memory_backed" dev="configfs" ino=53446 res=0 errno=0 [ 622.500872][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.520820][ T26] audit: type=1800 audit(1786132787.981:192): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1377" name="zone_nr_conv" dev="configfs" ino=53447 res=0 errno=0 [ 622.532761][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.550758][ T26] audit: type=1800 audit(1786132787.981:193): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1377" name="power" dev="configfs" ino=53448 res=0 errno=0 [ 622.560751][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.591655][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.605226][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.616111][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.631152][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.650248][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 622.671216][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 622.702976][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.713861][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.737041][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.767965][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 622.791677][ T9023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.806631][ T9023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.817473][ T9023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.223166][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.661824][ T9023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.994183][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.022988][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.043271][ T9330] siw: device registration error -23 [ 624.085673][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.275183][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.287330][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 624.358315][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.365508][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.761393][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.812517][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.844731][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.853727][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.878243][ T9335] 9pnet_fd: Insufficient options for proto=fd [ 625.003394][ T26] audit: type=1800 audit(1786132790.521:194): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1387" name="zoned" dev="configfs" ino=53502 res=0 errno=0 [ 625.044126][ T26] audit: type=1800 audit(1786132790.551:195): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1387" name="memory_backed" dev="configfs" ino=53503 res=0 errno=0 [ 625.102871][ T26] audit: type=1800 audit(1786132790.551:196): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1387" name="zone_nr_conv" dev="configfs" ino=53504 res=0 errno=0 [ 625.124427][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1291'. [ 625.142870][ T26] audit: type=1800 audit(1786132790.551:197): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1387" name="power" dev="configfs" ino=53505 res=0 errno=0 [ 625.313962][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.948922][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.066715][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1391'. [ 627.359391][ T9363] siw: device registration error -23 [ 627.544358][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.839318][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.128563][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.202282][ T9365] Invalid option length (1047276) for dns_resolver key [ 628.342533][ T9373] 9pnet_fd: Insufficient options for proto=fd [ 628.374070][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1401'. [ 628.443510][ T26] audit: type=1800 audit(1786132793.961:198): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1399" name="zoned" dev="configfs" ino=54704 res=0 errno=0 [ 628.521316][ T26] audit: type=1800 audit(1786132793.991:199): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1399" name="memory_backed" dev="configfs" ino=54708 res=0 errno=0 [ 628.632373][ T26] audit: type=1800 audit(1786132793.991:200): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1399" name="zone_nr_conv" dev="configfs" ino=54709 res=0 errno=0 [ 628.697555][ T26] audit: type=1800 audit(1786132793.991:201): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1399" name="power" dev="configfs" ino=54712 res=0 errno=0 [ 628.742919][ T4262] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 629.554863][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.796099][ T9395] siw: device registration error -23 [ 629.796930][ T4262] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.512424][ T4262] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 630.522502][ T4262] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.532198][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.543018][ T9378] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 630.596299][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.679789][ T9400] Invalid option length (1047276) for dns_resolver key [ 630.903452][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.948875][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 631.146083][ T26] audit: type=1800 audit(1786132796.661:202): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1415" name="zoned" dev="configfs" ino=53755 res=0 errno=0 [ 631.202318][ T26] audit: type=1800 audit(1786132796.701:203): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1415" name="memory_backed" dev="configfs" ino=53756 res=0 errno=0 [ 631.247212][ T26] audit: type=1800 audit(1786132796.711:204): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1415" name="zone_nr_conv" dev="configfs" ino=54798 res=0 errno=0 [ 631.308849][ T26] audit: type=1800 audit(1786132796.711:205): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1415" name="power" dev="configfs" ino=54799 res=0 errno=0 [ 631.449624][ T9426] netlink: 'syz.6.1419': attribute type 1 has an invalid length. [ 631.457545][ T9426] netlink: 'syz.6.1419': attribute type 8 has an invalid length. [ 631.627455][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.943461][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.101168][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.157256][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.223597][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.424844][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.438975][ T9443] siw: device registration error -23 [ 636.480537][ T9440] Process accounting resumed [ 636.753107][ T9450] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 636.808299][ T9450] Invalid option length (1047276) for dns_resolver key [ 636.824871][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 637.173080][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.416644][ T9471] netlink: 'syz.7.1432': attribute type 1 has an invalid length. [ 637.424595][ T9471] netlink: 'syz.7.1432': attribute type 8 has an invalid length. [ 637.463321][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.504442][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.464181][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.542997][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.952090][ T9474] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 640.963158][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1433'. [ 640.998896][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.023531][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.608192][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.806010][ T9492] Process accounting resumed [ 642.817254][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1441'. [ 642.979873][ T9504] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 643.229007][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.281802][ T9511] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 643.281910][ T9511] netlink: 'syz.3.1444': attribute type 8 has an invalid length. [ 643.900372][ T9504] Invalid option length (1047276) for dns_resolver key [ 644.265706][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.303450][ T4286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.539654][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1449'. [ 646.293651][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.361897][ T4422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.432789][ T4286] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 646.641620][ T4286] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 646.641891][ T4286] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 646.642093][ T4286] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 646.642148][ T4286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.675240][ T9526] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 646.743339][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.827579][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1455'. [ 647.489635][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.551477][ T9539] Process accounting resumed [ 648.514378][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.543558][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.915353][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.045713][ T9575] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 651.056135][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1463'. [ 651.821370][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.976509][ T9578] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 651.985196][ T9578] netlink: 'syz.6.1462': attribute type 8 has an invalid length. [ 652.475073][ T9586] netlink: 'syz.3.1467': attribute type 10 has an invalid length. [ 652.503477][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.510785][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.585048][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.680504][ T9595] rdma_rxe: already configured on bridge_slave_1 [ 652.928473][ T9593] 9pnet_virtio: no channels available for device syz [ 653.342912][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.410573][ T9586] md: could not open device unknown-block(1,0). [ 653.458882][ T9598] 9pnet_virtio: no channels available for device syz [ 653.499470][ T9586] md: could not open device unknown-block(1,1). [ 653.609022][ T9602] 9pnet_fd: Insufficient options for proto=fd [ 654.423423][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.506806][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.623419][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.898706][ T9619] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 655.909834][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1475'. [ 656.367194][ T9594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.618410][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.623190][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.663181][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.226978][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.442420][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1482'. [ 659.921070][ T9641] 9pnet_virtio: no channels available for device syz [ 660.380925][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.588569][ T9651] 9pnet_fd: Insufficient options for proto=fd [ 661.454507][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.703252][ T9594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.799251][ T9658] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 661.810063][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'. [ 662.504009][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.543203][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.902991][ T9659] Process accounting resumed [ 664.148701][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1496'. [ 664.582944][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.743193][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.943542][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.964392][ T9689] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 665.972287][ T9689] netlink: 'syz.3.1498': attribute type 8 has an invalid length. [ 666.133131][ T9691] 9pnet_virtio: no channels available for device syz [ 666.274271][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.510591][ T9697] 9pnet_fd: Insufficient options for proto=fd [ 667.308491][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.783150][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.196804][ T9705] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 668.207806][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1502'. [ 668.360285][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.445589][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.175387][ T9720] Process accounting resumed [ 670.506584][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.589176][ T26] audit: type=1800 audit(1786132836.101:206): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1509" name="zoned" dev="configfs" ino=56649 res=0 errno=0 [ 671.280155][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.405458][ T26] audit: type=1800 audit(1786132836.101:207): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1509" name="memory_backed" dev="configfs" ino=56650 res=0 errno=0 [ 671.633009][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.716364][ T9742] netlink: 'syz.7.1513': attribute type 1 has an invalid length. [ 671.724419][ T9742] netlink: 'syz.7.1513': attribute type 8 has an invalid length. [ 672.541025][ T26] audit: type=1800 audit(1786132836.101:208): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1509" name="zone_nr_conv" dev="configfs" ino=56651 res=0 errno=0 [ 672.879283][ T26] audit: type=1800 audit(1786132836.101:209): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1509" name="power" dev="configfs" ino=56652 res=0 errno=0 [ 673.935439][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1512'. [ 674.343084][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.477425][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.383071][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.543832][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.554401][ T4635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.575008][ T8306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.585550][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.201449][ T26] audit: type=1800 audit(1786132841.711:210): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1521" name="zoned" dev="configfs" ino=56829 res=0 errno=0 [ 677.149398][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.173460][ T26] audit: type=1800 audit(1786132842.591:211): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1521" name="memory_backed" dev="configfs" ino=55827 res=0 errno=0 [ 677.173502][ T26] audit: type=1800 audit(1786132842.591:212): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1521" name="zone_nr_conv" dev="configfs" ino=55828 res=0 errno=0 [ 677.173532][ T26] audit: type=1800 audit(1786132842.591:213): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1521" name="power" dev="configfs" ino=55829 res=0 errno=0 [ 677.207285][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.534062][ T9789] 9pnet_fd: Insufficient options for proto=fd [ 677.544870][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.193017][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.427565][ T9766] Process accounting resumed [ 678.600725][ T9794] 9pnet_virtio: no channels available for device syz [ 678.640473][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1528'. [ 680.422290][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.573452][ T26] audit: type=1800 audit(1786132846.091:214): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1534" name="zoned" dev="configfs" ino=57047 res=0 errno=0 [ 680.595630][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.741470][ T26] audit: type=1800 audit(1786132846.151:215): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1534" name="memory_backed" dev="configfs" ino=57050 res=0 errno=0 [ 680.937898][ T26] audit: type=1800 audit(1786132846.151:216): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1534" name="zone_nr_conv" dev="configfs" ino=57051 res=0 errno=0 [ 680.959025][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.220314][ T26] audit: type=1800 audit(1786132846.191:217): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1534" name="power" dev="configfs" ino=57052 res=0 errno=0 [ 681.240587][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.304151][ T4414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.319642][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.329538][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.019041][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.623253][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.040723][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.874814][ T9834] 9pnet_fd: Insufficient options for proto=fd [ 685.623238][ T4364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.640772][ T9826] Process accounting resumed [ 685.791358][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.799542][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.925405][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1541'. [ 686.663517][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.671718][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.063356][ T9487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.862860][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 688.526811][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.540358][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.559649][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.612388][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.704282][ T9594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.708220][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.378239][ T4283] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 692.393259][ T4283] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 692.404788][ T4283] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 692.414795][ T4283] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 692.422368][ T4283] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 692.430568][ T4283] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 692.743193][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.743411][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.296540][ T9883] lo speed is unknown, defaulting to 1000 [ 694.306917][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.426286][ T9897] 9pnet_fd: Insufficient options for proto=fd [ 694.512984][ T4283] Bluetooth: hci8: command 0x0409 tx timeout [ 694.758476][ T9891] Process accounting resumed [ 694.984279][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 695.011726][ T9909] Invalid option length (1047276) for dns_resolver key [ 695.783369][ T5453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.583000][ T4283] Bluetooth: hci8: command 0x041b tx timeout [ 696.928941][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.304519][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.311759][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.363287][ T9883] device bridge_slave_0 entered promiscuous mode [ 697.386468][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.965110][ T9594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.246439][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.263594][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.272367][ T9883] device bridge_slave_1 entered promiscuous mode [ 698.301050][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.313714][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.344207][ T9883] team0: Port device team_slave_0 added [ 698.353913][ T9883] team0: Port device team_slave_1 added [ 698.393252][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.412917][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.448456][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.485655][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.501776][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.528813][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.582941][ T27] INFO: task kworker/0:2:129 blocked for more than 143 seconds. [ 698.609458][ T27] Not tainted syzkaller #0 [ 698.616015][ T9883] device hsr_slave_0 entered promiscuous mode [ 698.658714][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.673150][ T4283] Bluetooth: hci8: command 0x040f tx timeout [ 698.675174][ T27] task:kworker/0:2 state:D stack:23808 pid:129 ppid:2 flags:0x00004000 [ 698.704094][ T27] Workqueue: usb_hub_wq hub_event [ 698.709786][ T27] Call Trace: [ 698.713531][ T27] [ 698.716827][ T27] __schedule+0x107f/0x4030 [ 698.721794][ T27] ? __sched_text_start+0x8/0x8 [ 698.734945][ T9948] netlink: 'syz.5.1565': attribute type 1 has an invalid length. [ 698.742954][ T9948] netlink: 'syz.5.1565': attribute type 8 has an invalid length. [ 698.789405][ T27] ? __mutex_trylock_common+0x86/0x260 [ 698.823464][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.855843][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 698.903277][ T27] schedule+0xb9/0x180 [ 698.946315][ T27] schedule_preempt_disabled+0xf/0x20 [ 698.991125][ T27] __mutex_lock+0x548/0xae0 [ 699.021022][ T27] ? __mutex_lock+0x3ba/0xae0 [ 699.097527][ T27] ? usb_audio_probe+0x3e7/0x1e70 [ 699.159302][ T27] ? mutex_lock_nested+0x10/0x10 [ 699.212627][ T27] ? mark_lock+0x94/0x320 [ 699.267840][ T27] usb_audio_probe+0x3e7/0x1e70 [ 699.310397][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 699.313003][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.331727][ T27] ? snd_usb_autosuspend+0x1b0/0x1b0 [ 699.375278][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 699.423574][ T27] usb_probe_interface+0x5be/0xae0 [ 699.460411][ T27] ? usb_register_driver+0x3c0/0x3c0 [ 699.542827][ T27] really_probe+0x24a/0xb40 [ 699.547598][ T27] ? pm_runtime_barrier+0x147/0x1c0 [ 699.552973][ T27] __driver_probe_device+0x1f5/0x390 [ 699.558928][ T27] driver_probe_device+0x4f/0x420 [ 699.564272][ T27] __device_attach_driver+0x2c6/0x510 [ 699.569755][ T27] ? coredump_store+0x90/0x90 [ 699.574564][ T27] bus_for_each_drv+0x184/0x210 [ 699.579451][ T27] ? coredump_store+0x90/0x90 [ 699.584283][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 699.590066][ T27] ? __mutex_lock+0x1ab/0xae0 [ 699.595049][ T27] __device_attach+0x2a7/0x480 [ 699.600235][ T27] ? device_attach+0x20/0x20 [ 699.605550][ T27] ? kobject_uevent_env+0x364/0x890 [ 699.610868][ T27] bus_probe_device+0xba/0x1d0 [ 699.616269][ T27] device_add+0xbcf/0x1050 [ 699.622317][ T27] usb_set_configuration+0x19d5/0x2030 [ 699.628834][ T27] usb_generic_driver_probe+0x89/0x150 [ 699.634670][ T27] usb_probe_device+0x126/0x250 [ 699.639581][ T27] ? usb_register_device_driver+0x230/0x230 [ 699.645854][ T27] really_probe+0x24a/0xb40 [ 699.650404][ T27] ? pm_runtime_barrier+0x147/0x1c0 [ 699.655888][ T27] __driver_probe_device+0x1f5/0x390 [ 699.661220][ T27] driver_probe_device+0x4f/0x420 [ 699.666458][ T27] __device_attach_driver+0x2c6/0x510 [ 699.671886][ T27] ? coredump_store+0x90/0x90 [ 699.676796][ T27] bus_for_each_drv+0x184/0x210 [ 699.681694][ T27] ? coredump_store+0x90/0x90 [ 699.686772][ T27] ? subsys_find_device_by_id+0x360/0x360 [ 699.692582][ T27] __device_attach+0x2a7/0x480 [ 699.699944][ T27] ? device_attach+0x20/0x20 [ 699.705539][ T27] ? kobject_uevent_env+0x364/0x890 [ 699.710954][ T27] bus_probe_device+0xba/0x1d0 [ 699.716186][ T27] device_add+0xbcf/0x1050 [ 699.720710][ T27] usb_new_device+0xa01/0x15e0 [ 699.725881][ T27] ? usb_disconnect+0x8a0/0x8a0 [ 699.730781][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 699.736116][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 699.741527][ T27] hub_event+0x2b2f/0x5200 [ 699.746102][ T27] ? hub_post_resume+0x120/0x120 [ 699.751106][ T27] ? read_lock_is_recursive+0x10/0x10 [ 699.756605][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 699.762542][ T27] ? _raw_spin_unlock+0x40/0x40 [ 699.767494][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 699.772788][ T27] ? process_one_work+0x7b4/0x1160 [ 699.778099][ T27] process_one_work+0x8ab/0x1160 [ 699.783305][ T27] ? worker_detach_from_pool+0x240/0x240 [ 699.788999][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 699.794408][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 699.800026][ T27] ? wq_worker_running+0x97/0x190 [ 699.805765][ T27] worker_thread+0xaf5/0x12a0 [ 699.810659][ T27] kthread+0x29d/0x330 [ 699.815106][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 699.820192][ T27] ? kthread_blkcg+0xd0/0xd0 [ 699.825235][ T27] ret_from_fork+0x1f/0x30 [ 699.829736][ T27] [ 699.833185][ T27] INFO: task udevd:8258 blocked for more than 144 seconds. [ 699.833515][ T9883] device hsr_slave_1 entered promiscuous mode [ 699.840388][ T27] Not tainted syzkaller #0 [ 699.840399][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.840407][ T27] task:udevd state:D stack:23120 pid:8258 ppid:3639 flags:0x00004002 [ 699.840439][ T27] Call Trace: [ 699.873550][ T27] [ 699.876536][ T27] __schedule+0x107f/0x4030 [ 699.881157][ T27] ? __sched_text_start+0x8/0x8 [ 699.887358][ T27] ? __mutex_trylock_common+0x86/0x260 [ 699.893341][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 699.899634][ T27] schedule+0xb9/0x180 [ 699.904228][ T27] schedule_preempt_disabled+0xf/0x20 [ 699.910379][ T27] __mutex_lock+0x548/0xae0 [ 699.915152][ T27] ? __mutex_lock+0x3ba/0xae0 [ 699.920029][ T27] ? uevent_show+0x16e/0x320 [ 699.925032][ T27] ? mutex_lock_nested+0x10/0x10 [ 699.930253][ T27] uevent_show+0x16e/0x320 [ 699.935051][ T27] dev_attr_show+0x50/0xb0 [ 699.939667][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 699.944825][ T27] ? device_get_ownership+0xa0/0xa0 [ 699.950241][ T27] seq_read_iter+0x460/0xc50 [ 699.955148][ T27] vfs_read+0x471/0x960 [ 699.959533][ T27] ? kernel_read+0x1e0/0x1e0 [ 699.964343][ T27] ? __x64_sys_newfstat+0x19a/0x220 [ 699.969783][ T27] ? do_sys_openat2+0x20a/0x4f0 [ 699.974880][ T27] ? __fdget_pos+0x2b5/0x360 [ 699.979521][ T27] ksys_read+0x14d/0x260 [ 699.983837][ T27] ? vfs_write+0x9a0/0x9a0 [ 699.988381][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 699.993674][ T27] do_syscall_64+0x4c/0xa0 [ 699.998268][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.003155][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.008613][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.014674][ T27] RIP: 0033:0x7f122d6a7407 [ 700.019148][ T27] RSP: 002b:00007ffe09a76a60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 700.035129][ T27] RAX: ffffffffffffffda RBX: 00007f122de31880 RCX: 00007f122d6a7407 [ 700.044837][ T27] RDX: 0000000000001000 RSI: 000055b197797770 RDI: 0000000000000008 [ 700.053266][ T27] RBP: 00007f122d7efff0 R08: 0000000000000000 R09: 0000000000000000 [ 700.061493][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 700.069631][ T27] R13: 00007f122d7efea0 R14: 0000000000000000 R15: 000055b197779fa0 [ 700.077688][ T27] [ 700.080842][ T27] INFO: task syz.1.1139:8452 blocked for more than 144 seconds. [ 700.089134][ T27] Not tainted syzkaller #0 [ 700.097098][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.106187][ T27] task:syz.1.1139 state:D stack:25680 pid:8452 ppid:4276 flags:0x00004004 [ 700.116143][ T27] Call Trace: [ 700.119517][ T27] [ 700.123004][ T27] __schedule+0x107f/0x4030 [ 700.127575][ T27] ? __sched_text_start+0x8/0x8 [ 700.132451][ T27] ? __mutex_trylock_common+0x86/0x260 [ 700.138765][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 700.145177][ T27] schedule+0xb9/0x180 [ 700.149291][ T27] schedule_preempt_disabled+0xf/0x20 [ 700.155312][ T27] __mutex_lock+0x548/0xae0 [ 700.159872][ T27] ? __mutex_lock+0x3ba/0xae0 [ 700.164801][ T27] ? snd_seq_midisynth_remove+0x68/0x4f0 [ 700.170646][ T27] ? mutex_lock_nested+0x10/0x10 [ 700.175664][ T27] snd_seq_midisynth_remove+0x68/0x4f0 [ 700.181144][ T27] ? kernfs_remove_by_name_ns+0x113/0x150 [ 700.186929][ T27] ? snd_seq_midisynth_probe+0x1610/0x1610 [ 700.192808][ T27] device_release_driver_internal+0x4cf/0x7c0 [ 700.198921][ T27] bus_remove_device+0x2dd/0x400 [ 700.203961][ T27] device_del+0x63f/0xa80 [ 700.208345][ T27] ? kill_device+0x160/0x160 [ 700.214074][ T27] ? snd_unregister_device+0x1e5/0x200 [ 700.219690][ T27] snd_seq_device_dev_disconnect+0x39/0x40 [ 700.225870][ T27] snd_device_disconnect_all+0xcf/0x200 [ 700.231454][ T27] ? snd_mixer_oss_ioctl1+0x1830/0x1830 [ 700.237175][ T27] snd_card_disconnect+0x385/0x810 [ 700.242602][ T27] ? snd_card_locked+0x60/0x60 [ 700.247546][ T27] ? usb_ep_disable+0x139/0x310 [ 700.252522][ T27] ? f_midi_disable+0x463/0x530 [ 700.258044][ T27] snd_card_free_when_closed+0x13/0x50 [ 700.263919][ T27] f_midi_unbind+0x99/0xf0 [ 700.268469][ T27] purge_configs_funcs+0x241/0x3a0 [ 700.273693][ T27] configfs_composite_unbind+0xa0/0x1c0 [ 700.279376][ T27] gadget_unbind_driver+0x1bb/0x3d0 [ 700.284814][ T27] ? gadget_bind_driver+0x760/0x760 [ 700.290239][ T27] device_release_driver_internal+0x47d/0x7c0 [ 700.296393][ T27] driver_detach+0x1ef/0x2d0 [ 700.301012][ T27] bus_remove_driver+0x11c/0x230 [ 700.306013][ T27] ? sysfs_remove_groups+0x8a/0xa0 [ 700.311183][ T27] usb_gadget_unregister_driver+0x4a/0x70 [ 700.317687][ T27] gadget_dev_desc_UDC_store+0x174/0x2e0 [ 700.323606][ T27] configfs_write_iter+0x30b/0x400 [ 700.328802][ T27] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 700.334474][ T27] vfs_write+0x482/0x9a0 [ 700.338747][ T27] ? file_end_write+0x250/0x250 [ 700.343751][ T27] ? __fget_files+0x3fc/0x460 [ 700.348519][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.349131][ T27] ? __fdget_pos+0x2ae/0x360 [ 700.361741][ T27] ? ksys_write+0x70/0x260 [ 700.366459][ T27] ksys_write+0x14d/0x260 [ 700.370832][ T27] ? __ia32_sys_read+0x80/0x80 [ 700.375756][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 700.381008][ T27] do_syscall_64+0x4c/0xa0 [ 700.385793][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.390510][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.395444][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.401699][ T27] RIP: 0033:0x7fd83359e0d9 [ 700.406525][ T27] RSP: 002b:00007fd834496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.415220][ T27] RAX: ffffffffffffffda RBX: 00007fd833825fa0 RCX: 00007fd83359e0d9 [ 700.423760][ T27] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 700.431767][ T27] RBP: 00007fd833635024 R08: 0000000000000000 R09: 0000000000000000 [ 700.439950][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.448329][ T27] R13: 00007fd833826038 R14: 00007fd833825fa0 R15: 00007ffe7e4a6f18 [ 700.456418][ T27] [ 700.459656][ T27] INFO: task syz.1.1139:8457 blocked for more than 145 seconds. [ 700.459675][ T9883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.470404][ T27] Not tainted syzkaller #0 [ 700.480857][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.486234][ T9883] Cannot create hsr debugfs directory [ 700.490166][ T27] task:syz.1.1139 state:D stack:28880 pid:8457 ppid:4276 flags:0x00004004 [ 700.509092][ T27] Call Trace: [ 700.512489][ T27] [ 700.515782][ T27] __schedule+0x107f/0x4030 [ 700.520883][ T27] ? __sched_text_start+0x8/0x8 [ 700.527045][ T27] ? __mutex_trylock_common+0x86/0x260 [ 700.532645][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 700.539680][ T27] schedule+0xb9/0x180 [ 700.544071][ T27] schedule_preempt_disabled+0xf/0x20 [ 700.549515][ T27] __mutex_lock+0x548/0xae0 [ 700.554181][ T27] ? __mutex_lock+0x3ba/0xae0 [ 700.559079][ T27] ? function_drop+0x30/0x140 [ 700.564608][ T27] ? mutex_lock_nested+0x10/0x10 [ 700.569602][ T27] ? mutex_lock_nested+0x10/0x10 [ 700.574691][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 700.579851][ T27] ? lockref_put_or_lock+0x6e/0xb0 [ 700.586893][ T27] function_drop+0x30/0x140 [ 700.591577][ T27] ? function_make+0x350/0x350 [ 700.596492][ T27] configfs_rmdir+0x88e/0x980 [ 700.601304][ T27] vfs_rmdir+0x34e/0x4a0 [ 700.605947][ T27] do_rmdir+0x29a/0x5c0 [ 700.610143][ T27] ? d_delete_notify+0x150/0x150 [ 700.615241][ T27] ? getname_flags+0x206/0x500 [ 700.620057][ T27] __x64_sys_rmdir+0x45/0x50 [ 700.625032][ T27] do_syscall_64+0x4c/0xa0 [ 700.629495][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.634391][ T27] ? clear_bhb_loop+0x60/0xb0 [ 700.639099][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.645101][ T27] RIP: 0033:0x7fd83359e0d9 [ 700.649549][ T27] RSP: 002b:00007fd834475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 700.658164][ T27] RAX: ffffffffffffffda RBX: 00007fd833826090 RCX: 00007fd83359e0d9 [ 700.666331][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 700.674516][ T27] RBP: 00007fd833635024 R08: 0000000000000000 R09: 0000000000000000 [ 700.682541][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.690621][ T27] R13: 00007fd833826128 R14: 00007fd833826090 R15: 00007ffe7e4a6f18 [ 700.700115][ T27] [ 700.709648][ T27] [ 700.709648][ T27] Showing all locks held in the system: [ 700.719293][ T27] 1 lock held by rcu_tasks_kthre/12: [ 700.734532][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 700.745691][ T4283] Bluetooth: hci8: command 0x0419 tx timeout [ 700.752124][ T27] 1 lock held by rcu_tasks_trace/13: [ 700.760652][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 700.772576][ T27] 8 locks held by kworker/0:1/14: [ 700.777953][ T27] #0: ffff88801e694538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 700.794443][ T27] #1: ffffc90000137d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 700.809705][ T27] #2: ffff888027a5a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5200 [ 700.822058][ T27] #3: ffff888054b95190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xf8/0x8a0 [ 700.861118][ T27] #4: ffff888054b94118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 700.872027][ T27] #5: ffffffff8dd00708 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_disconnect+0xd0/0x6f0 [ 700.882542][ T27] #6: ffff8880296a2170 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 700.893951][ T27] #7: ffffffff8dcc62c8 (register_mutex#7){+.+.}-{3:3}, at: snd_seq_midisynth_remove+0x68/0x4f0 [ 700.905011][ T27] 1 lock held by khungtaskd/27: [ 700.910096][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 700.920914][ T27] 6 locks held by kworker/0:2/129: [ 700.935039][ T27] #0: ffff88801e694538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 700.947080][ T27] #1: ffffc90002db7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 700.958658][ T27] #2: ffff8880280f2190 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5200 [ 700.967825][ T27] #3: ffff8880243c4190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 700.977409][ T27] #4: ffff8880234a0118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 700.987085][ T27] #5: ffffffff8dd00708 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x3e7/0x1e70 [ 700.991298][ T9883] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 700.997170][ T27] 2 locks held by getty/4028: [ 701.008890][ T27] #0: ffff88814cb4a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 701.018964][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 701.029907][ T27] 6 locks held by kworker/1:3/4262: [ 701.035691][ T27] #0: ffff88801e694538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.046579][ T27] #1: ffffc90003dc7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.058748][ T27] #2: ffff888028102190 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5200 [ 701.070773][ T27] #3: ffff88807410a190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 701.081599][ T27] #4: ffff88807b215118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 701.091034][ T27] #5: ffffffff8dd00708 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x3e7/0x1e70 [ 701.101153][ T27] 6 locks held by kworker/1:4/4286: [ 701.106432][ T27] #0: ffff88801e694538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.117223][ T27] #1: ffffc90003f17d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.128528][ T27] #2: ffff888144f5a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5200 [ 701.138039][ T27] #3: ffff888059450190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 701.149157][ T27] #4: ffff888059456118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 701.158851][ T27] #5: ffffffff8dd00708 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x3e7/0x1e70 [ 701.169021][ T27] 3 locks held by kworker/1:7/4320: [ 701.174673][ T27] #0: ffff88802f40cd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.186010][ T27] #1: ffffc90004107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.199562][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 701.209483][ T27] 2 locks held by kworker/u4:11/4413: [ 701.214990][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.226255][ T27] #1: ffffc900047dfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.238386][ T27] 4 locks held by udevd/8258: [ 701.243314][ T27] #0: ffff888026713668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 701.252161][ T27] #1: ffff88807b92f088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x59/0x410 [ 701.261529][ T27] #2: ffff888027d4f2c0 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 701.271246][ T27] #3: ffff8880243c4190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16e/0x320 [ 701.280464][ T27] 4 locks held by udevd/8291: [ 701.285399][ T27] #0: ffff8880277181c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 701.294308][ T27] #1: ffff8880786c0088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x59/0x410 [ 701.303703][ T27] #2: ffff8880458b2bd0 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 701.313395][ T27] #3: ffff88807410a190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16e/0x320 [ 701.322403][ T27] 4 locks held by udevd/8293: [ 701.327150][ T27] #0: ffff888051560b08 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 701.336023][ T27] #1: ffff888056f12888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x59/0x410 [ 701.345795][ T27] #2: ffff8880325bda00 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 701.355405][ T27] #3: ffff888059456118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16e/0x320 [ 701.364449][ T27] 8 locks held by syz.1.1139/8452: [ 701.369571][ T27] #0: ffff88807920e5e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 701.379057][ T27] #1: ffff8881422b2460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 701.388347][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.390519][ T27] #2: ffff8880799d0688 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 701.406896][ T27] #3: ffff88801fb02178 (&p->frag_sem){++++}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 701.416830][ T27] #4: ffff888055dd4310 (&gi->lock){+.+.}-{3:3}, at: gadget_dev_desc_UDC_store+0xed/0x2e0 [ 701.426912][ T27] #5: ffff88802678cdc0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 701.437522][ T27] #6: ffff888055dd0170 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 701.448589][ T27] #7: ffffffff8dcc62c8 (register_mutex#7){+.+.}-{3:3}, at: snd_seq_midisynth_remove+0x68/0x4f0 [ 701.459244][ T27] 5 locks held by syz.1.1139/8457: [ 701.465141][ T27] #0: ffff8881422b2460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 701.475023][ T27] #1: ffff888057bfb900 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 701.485962][ T27] #2: ffff888057ad9590 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 701.496339][ T27] #3: ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 701.506683][ T27] #4: ffff888055dd4310 (&gi->lock){+.+.}-{3:3}, at: function_drop+0x30/0x140 [ 701.515861][ T27] 2 locks held by syz.4.1224/8751: [ 701.521166][ T27] #0: ffff8881422b2460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 701.531114][ T27] #1: ffff888057bfb900 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 701.543079][ T27] 1 lock held by syz.0.1254/8872: [ 701.548750][ T27] #0: ffff88802678cdc0 (&dev->mutex){....}-{3:3}, at: __driver_attach+0x432/0x6c0 [ 701.558644][ T27] 2 locks held by kworker/0:12/9594: [ 701.564018][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.575946][ T27] #1: ffffc90003bcfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.589801][ T27] 3 locks held by kworker/u4:6/9632: [ 701.595503][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.607042][ T27] #1: ffffc900046dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 701.617624][ T27] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 701.627101][ T27] 1 lock held by syz.3.1514/9746: [ 701.632142][ T27] #0: ffff8880280f2190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x14e/0x7a0 [ 701.641629][ T27] 2 locks held by syz-executor/9883: [ 701.647431][ T27] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 701.657163][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 701.668518][ T27] [ 701.670978][ T27] ============================================= [ 701.670978][ T27] [ 701.671602][ T9883] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 701.687372][ T27] NMI backtrace for cpu 1 [ 701.691742][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 701.698956][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.709015][ T27] Call Trace: [ 701.712363][ T27] [ 701.715292][ T27] dump_stack_lvl+0x188/0x24e [ 701.719992][ T27] ? irq_work_queue+0xb8/0x140 [ 701.724869][ T27] ? show_regs_print_info+0x12/0x12 [ 701.730111][ T27] ? load_image+0x410/0x410 [ 701.734615][ T27] ? vprintk_emit+0x59f/0x6a0 [ 701.739339][ T27] ? printk_sprint+0x460/0x460 [ 701.744109][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 701.749162][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 701.755418][ T27] ? _printk+0xda/0x130 [ 701.759675][ T27] ? load_image+0x410/0x410 [ 701.764467][ T27] ? load_image+0x410/0x410 [ 701.769077][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 701.775142][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 701.781372][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 701.787401][ T27] watchdog+0xf0e/0xf50 [ 701.791705][ T27] ? watchdog+0x1ed/0xf50 [ 701.796063][ T27] kthread+0x29d/0x330 [ 701.800126][ T27] ? hungtask_pm_notify+0x40/0x40 [ 701.805149][ T27] ? kthread_blkcg+0xd0/0xd0 [ 701.809765][ T27] ret_from_fork+0x1f/0x30 [ 701.814310][ T27] [ 701.818169][ T27] Sending NMI from CPU 1 to CPUs 0: [ 701.823662][ C0] NMI backtrace for cpu 0 [ 701.823672][ C0] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 701.823688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.823697][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 701.823809][ C0] RIP: 0010:unwind_next_frame+0x1690/0x1fd0 [ 701.823840][ C0] Code: f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 c6 49 9a 00 49 8b 06 4d 39 fc 0f 96 c1 4c 39 f8 0f 97 c2 20 ca 80 fa 01 75 7f <49> 8d 4f 08 4c 39 e1 76 76 48 39 c1 77 71 4c 3b 7c 24 68 77 6a 4c [ 701.823885][ C0] RSP: 0018:ffffc900015875e0 EFLAGS: 00000246 [ 701.823897][ C0] RAX: ffffc90001588000 RBX: ffffc90001587688 RCX: 0000000000000001 [ 701.823908][ C0] RDX: ffffc90001587601 RSI: dffffc0000000000 RDI: ffffc90001587690 [ 701.823918][ C0] RBP: dffffc0000000000 R08: ffffc90001587b70 R09: ffffc900015876d8 [ 701.823929][ C0] R10: dffffc0000000000 R11: fffff520002b0edd R12: ffffc90001580000 [ 701.823939][ C0] R13: dffffc0000000000 R14: ffffc90001587698 R15: ffffc90001587b80 [ 701.823950][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 701.823963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.823972][ C0] CR2: 00007ffb117535c0 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 701.823985][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 701.823994][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 701.824003][ C0] Call Trace: [ 701.824007][ C0] [ 701.824016][ C0] ? consume_skb+0xa2/0x100 [ 701.824071][ C0] ? stack_trace_save+0xf0/0xf0 [ 701.824120][ C0] arch_stack_walk+0x10c/0x140 [ 701.824146][ C0] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 701.824166][ C0] stack_trace_save+0xa6/0xf0 [ 701.824183][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 701.824201][ C0] ? lockdep_unlock+0x142/0x2e0 [ 701.824222][ C0] kasan_set_track+0x4b/0x70 [ 701.824245][ C0] ? kasan_set_track+0x4b/0x70 [ 701.824262][ C0] ? kasan_save_free_info+0x27/0x40 [ 701.824300][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 701.824318][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 701.824334][ C0] ? __kmem_cache_free+0xb6/0x200 [ 701.824349][ C0] ? skb_release_data+0x5e9/0x7e0 [ 701.824367][ C0] ? consume_skb+0xa2/0x100 [ 701.824406][ C0] ? __kmem_cache_free+0xb6/0x200 [ 701.824421][ C0] kasan_save_free_info+0x27/0x40 [ 701.824434][ C0] ____kasan_slab_free+0x126/0x1f0 [ 701.824455][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 701.824473][ C0] ? skb_release_data+0x5e9/0x7e0 [ 701.824492][ C0] __kmem_cache_free+0xb6/0x200 [ 701.824509][ C0] skb_release_data+0x5e9/0x7e0 [ 701.824532][ C0] consume_skb+0xa2/0x100 [ 701.824552][ C0] nsim_dev_trap_report_work+0x71f/0xa80 [ 701.824576][ C0] ? process_one_work+0x7b4/0x1160 [ 701.824594][ C0] process_one_work+0x8ab/0x1160 [ 701.824616][ C0] ? worker_detach_from_pool+0x240/0x240 [ 701.824634][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 701.824651][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 701.824668][ C0] ? wq_worker_running+0x97/0x190 [ 701.824691][ C0] worker_thread+0xaf5/0x12a0 [ 701.824719][ C0] kthread+0x29d/0x330 [ 701.824731][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 701.824746][ C0] ? kthread_blkcg+0xd0/0xd0 [ 701.824759][ C0] ret_from_fork+0x1f/0x30 [ 701.824790][ C0] [ 701.826059][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 702.155945][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 702.163164][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.173304][ T27] Call Trace: [ 702.176597][ T27] [ 702.179532][ T27] dump_stack_lvl+0x188/0x24e [ 702.184225][ T27] ? memcpy+0x3c/0x60 [ 702.188216][ T27] ? show_regs_print_info+0x12/0x12 [ 702.193417][ T27] ? load_image+0x410/0x410 [ 702.197933][ T27] panic+0x2d3/0x710 [ 702.201829][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 702.207468][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 702.212000][ T27] ? load_image+0x410/0x410 [ 702.216717][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 702.222878][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 702.229065][ T27] watchdog+0xf4d/0xf50 [ 702.233245][ T27] ? watchdog+0x1ed/0xf50 [ 702.237595][ T27] kthread+0x29d/0x330 [ 702.241679][ T27] ? hungtask_pm_notify+0x40/0x40 [ 702.246731][ T27] ? kthread_blkcg+0xd0/0xd0 [ 702.251321][ T27] ret_from_fork+0x1f/0x30 [ 702.255767][ T27] [ 702.259035][ T27] Kernel Offset: disabled [ 702.263366][ T27] Rebooting in 86400 seconds..