last executing test programs: 21m8.237764266s ago: executing program 32 (id=127): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x2, "7bab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 20m39.65664573s ago: executing program 33 (id=177): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20m29.309744249s ago: executing program 34 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000002200)={0x14}, 0x14) 19m59.011422806s ago: executing program 35 (id=254): mkdir(0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 19m6.641278205s ago: executing program 5 (id=356): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0x75e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)='e', 0x1}], 0x1}}], 0x3, 0x4008000) 19m5.249283403s ago: executing program 36 (id=342): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18m57.258407456s ago: executing program 37 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 18m51.220504011s ago: executing program 38 (id=356): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0x75e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)='e', 0x1}], 0x1}}], 0x3, 0x4008000) 18m48.591516339s ago: executing program 39 (id=360): fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x2880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x83) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new dez 00000000000000004093\x00'/42], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0xcc}}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000017c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x3d8, 0x3d8, 0xd0, 0xd0, 0x2e8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {0x11}, {0xfffc}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @empty, [0x0, 0xff], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'virt_wifi0\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close_range(r2, 0xffffffffffffffff, 0x0) 18m24.120461091s ago: executing program 40 (id=372): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 17m49.506271985s ago: executing program 41 (id=389): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000001040)=0x401, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1f580}], 0x18}], 0x1, 0x20040800) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfc, {0x80, 0x14, 0x10, 0x8e, 0xfe, 0x3, 0x0, 0xf, 0x1a00}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001980), 0x2080, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd06, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0x80) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000001ac0)={0x20, 0x2, 0x0, 0x5, 0xffffffff}) 16m49.467857119s ago: executing program 42 (id=398): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) 16m42.841677652s ago: executing program 9 (id=415): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) 16m40.34897766s ago: executing program 43 (id=402): memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) 16m39.635480543s ago: executing program 9 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 16m38.861227512s ago: executing program 44 (id=406): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x7e}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3) 16m28.187038866s ago: executing program 9 (id=421): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 16m21.389845434s ago: executing program 9 (id=425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff3, 0x6}, {0x9, 0xffff}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa7, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x6, 0x3a, 0x0, 0x8, 0x0, 0xb9f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x401]}}]}}]}, 0x8c}}, 0x0) 16m16.192182206s ago: executing program 9 (id=427): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 16m14.466640486s ago: executing program 9 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 15m59.005745021s ago: executing program 45 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 15m28.428565675s ago: executing program 46 (id=438): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 14m29.69793284s ago: executing program 47 (id=446): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40d02) writev(r0, &(0x7f0000001b80)=[{0x0}, {&(0x7f00000000c0)="94", 0x1}, {&(0x7f0000001800)="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", 0x17c}, {&(0x7f0000000080)="8f8fb79fd26b66656f03d1121d22915f9d1571c750c47eebfcf11b96b9ab5538a11c7497e7249ead72f9ab10cde5e6677c3f97ca4bcab39666982c", 0x3b}, {&(0x7f0000000880)="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", 0xe49}], 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xd) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x0, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x10, 0x2, 0xbba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb6c, 0x0, 0x0, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4f, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m24.792852681s ago: executing program 48 (id=488): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)}, {&(0x7f0000000640)}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}], 0x3}}], 0x1, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="7961fdffffff000000007e3200"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 13m20.210709948s ago: executing program 8 (id=501): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) 13m16.796295265s ago: executing program 8 (id=502): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 13m15.984537395s ago: executing program 8 (id=503): r0 = fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="610306", @ANYRES32=r0, @ANYRES64=r2], 0x10) 13m15.6066994s ago: executing program 8 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf87000000000000070800", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m13.211454005s ago: executing program 8 (id=505): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 13m10.563023127s ago: executing program 8 (id=506): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="f00700001000010400"/20, @ANYBLOB="3f000000000000002c0012800b0001006970"], 0x7f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x92, "f5467198832b1af0be6316131b72dc527690af243a3c4a2dc11c50b0e55c5df8e5bf0e7013427006fb51b96dc4a115c29fc7a515dfe5d22aa118ec7216fe13fb479e91d18de39484170ba239d76b837308577361ab0a197b3db104c9aba5c2bab9e1054015c1e6e0e1a7b847fd8415d87cffb4518385c7459b81d1ffb1cf0c81ea0cebb9ce90185b0f60ee8fc1626448f437"}, &(0x7f0000000500)=0x9a) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r3, 0x4) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5cb99b6581dcc643ffb37da948929805c898bf7c96f6b672068b61cd708198d14b42d52a2d94db3f719dc2028ffdaf3731d278418be0b82d399e1443dc5c81a2ce9977e9a55259086d43413ae4103ab95ed085200c5bdc8ce826d55efcce0f660d47bbaf5cd743ae64b7b71707f987ce08ccc3a8fea4dc8013da", @ANYRES32=r0, @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x45) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000a40)={0xfffffffc, 0x3, 0x3ff, 0x8001, 0x1, "62e69771e2f6666094b4f6a9e7b32d4559f753"}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0xffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000580)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000600)="10fc0bde179750ec1e62949637580022a462caf5e65b46ed", 0x18}, {&(0x7f0000000640)="4c2efccfa0a562ee9654ac4f28839d9ad8677369e2254a29163306985663ec9020a9bd0e1fd5c3253a9dd4786b0911c994dc0e371d3246029ca1325f7d2cee26fa171f57a3165be05f718f24665147d548a9ba591a86ddafc34b47992a4128582921167aef28dd1d7c569d7e6bdff0f59d428e042f774e331f12a20914ce01e83a1c2005230849f34cac382b635e5ab2c778de37444ffcecfb5f8858b783b3c35ca75d63cdcb7d80bacd60f71461156a50b695d03d9f85ea118ba201463af26a4439e2c27b52a7d8edb6530a", 0xcc}, {&(0x7f0000000740)="cd8c5fa4485c37df27be5cc118cb610e64709dbda69d5a8289544115ceaefa45176212c357ffce8447823532235b16d467c64f69fd4e6a5a5604af43c335581b15639600cad2606c1160d8ad3e51c943e35a9a316b01bdf88b994501f1d458cc61e7a9f6", 0x64}, {&(0x7f00000007c0)="9977a0df754ef9a915e3e620fc104c1c1c1650cd867a980913aa18666916198eb95d3bfed78dd6460f5f61cd2a25c3bb83affc3eeddac5277179a3f9d1d35ab07f1c949f486ee12ac8e683f2a9365cb0c52a5575bf9a4e79935e2c2317ec2767bd4951b80387e2f9e43a911f890bf652398fcf7edc57f83456d55da3db09f6441877de930d6b49", 0x87}, {&(0x7f0000000880)="65ae6408a2a2c4365562273ee18e403b73775f7a3d6e1892cbf73145945eb2d8d46574703e3f974f7ffcd4b531cbc319eb08272cda7be21e94d11871a8040f4364a56d3af3fc236122753b2a92572364b4a5c37d58549daebe52e1e94c9f562c1649994fc75e33c810e221b41b224873dd24bc847d1003cd6a0bae7bc8b41e40d496590fd6b292778e3830616c5b3eac1b3f201fb5afe611fdab14732800d660d8143509bb7b7d4fb1e84d001073", 0xae}, {&(0x7f0000000940)="d5370d4b0ee49ae202d7443eb2b892226107f1a91ed6baba6817b378f2f35cc29129c669a3b262cc87d43dc73d9f8e754b7abb0283471dbae0dc6ad82acf2de34c79a491d402fdda16180698218c80f7741eca32d46195cd7c11794b3ae14bf0f4b39380f0d6e348f76b3b0ce2767a57937c83838661653f032395a3ef117950b39db9c03b2c93af08548c38e58f1fc1486cf5f858fc9decf5c92dd3bd6f5ffaf975abda79e635ecc476816585c1679d96683fcfff2c8a65125cefc8b16de38bba91f686a685", 0xc6}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="2987b8109bca5adeff99570e80d95d760dcb805298", 0x15}], 0x8, &(0x7f0000000b40)=[{0x98, 0x119, 0x1, "3c6e8a0f06ebc1416f4acc43163af6d9df086a288cdd275f269fc953573c82f84039ca44997edfe4f3ac9c0b14a03b1926bd78429577992fb6105c8ed6da7cbfa276e385ba023052026d46dbe7b7f4de629449bbe0831b926db2b1e88931fb0e713c601483fe3cc8f1dd2e0a9a3079c848787bb1f0f63415eaf3a31420653d9a2b104346"}, {0xb8, 0x3a, 0x7, "9e6f80a4eb40cfb21d438b068f8829a299dabe930bfacafc128b604dc08ebbecc39c52623910cfdb30fa60121a816bd50e5e02184e9eaf3c9714035710a6c035dffd11a5ade892f7829657f14e7a894249002bd0361ef605edf8862bb8d84372c138c7a5d5c11e2e2827f1816185513025c0d3e15501bc1c89e8ecede39ba577aabf0294c327bdc43da32bbbea226f2c839028a7669df09dbf491341c212c734603f7c"}], 0x150}, 0x80) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="90b9561bc1ccaa545ed1a28c5680"], 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vIQV3glBQtAradKriwkUfog9gSWMtpv40AW0pNu58ArfduvQRfIu8gigu6sqNRCZzM47ZKwjJIueee7ln7k3gzLF34ZUAfMwnNloAA5DHAl4YAwewKBMA2iWF70WFB8SfuMJlyt8TPhN6o/FJx3Wd4Q8Gv3FGFmRBFvy14Is2b3J4jb0snE9sMjX9dAGY9XyqtsSlK0a6Lk1PknUAdX9wXvdG463+oNNzes6pEM09a8eydkX9qO86lnozQz5H0hI3AEgv/WfUC8bx/1OjJqNfk/GafdJzD6leW/neJ8+KoiiCgQyPupf8HHL1NtZQBnAZMCNbjVU44nVaYMgTafDUbDmU48K2feZ2p2BgSdsMXGs0QhQ0ESZpVoJkjVuuVO/oPtkPkoWmhFXCFuGMMCRMbrAHUuCxwhuxWgAUcdXx/WFDplSkc0LnRCUwP+Uq6L8Za28S/wwAAP//8cRVEw==") ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000080)=0x2b5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d00)={'#! ', './file0', [], 0xa, "2a92f96e4d0fb260e16784369ba59d574273"}, 0x1d) 12m55.034163357s ago: executing program 49 (id=506): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="f00700001000010400"/20, @ANYBLOB="3f000000000000002c0012800b0001006970"], 0x7f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x92, "f5467198832b1af0be6316131b72dc527690af243a3c4a2dc11c50b0e55c5df8e5bf0e7013427006fb51b96dc4a115c29fc7a515dfe5d22aa118ec7216fe13fb479e91d18de39484170ba239d76b837308577361ab0a197b3db104c9aba5c2bab9e1054015c1e6e0e1a7b847fd8415d87cffb4518385c7459b81d1ffb1cf0c81ea0cebb9ce90185b0f60ee8fc1626448f437"}, &(0x7f0000000500)=0x9a) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r3, 0x4) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5cb99b6581dcc643ffb37da948929805c898bf7c96f6b672068b61cd708198d14b42d52a2d94db3f719dc2028ffdaf3731d278418be0b82d399e1443dc5c81a2ce9977e9a55259086d43413ae4103ab95ed085200c5bdc8ce826d55efcce0f660d47bbaf5cd743ae64b7b71707f987ce08ccc3a8fea4dc8013da", @ANYRES32=r0, @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x45) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000a40)={0xfffffffc, 0x3, 0x3ff, 0x8001, 0x1, "62e69771e2f6666094b4f6a9e7b32d4559f753"}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0xffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000580)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000600)="10fc0bde179750ec1e62949637580022a462caf5e65b46ed", 0x18}, {&(0x7f0000000640)="4c2efccfa0a562ee9654ac4f28839d9ad8677369e2254a29163306985663ec9020a9bd0e1fd5c3253a9dd4786b0911c994dc0e371d3246029ca1325f7d2cee26fa171f57a3165be05f718f24665147d548a9ba591a86ddafc34b47992a4128582921167aef28dd1d7c569d7e6bdff0f59d428e042f774e331f12a20914ce01e83a1c2005230849f34cac382b635e5ab2c778de37444ffcecfb5f8858b783b3c35ca75d63cdcb7d80bacd60f71461156a50b695d03d9f85ea118ba201463af26a4439e2c27b52a7d8edb6530a", 0xcc}, {&(0x7f0000000740)="cd8c5fa4485c37df27be5cc118cb610e64709dbda69d5a8289544115ceaefa45176212c357ffce8447823532235b16d467c64f69fd4e6a5a5604af43c335581b15639600cad2606c1160d8ad3e51c943e35a9a316b01bdf88b994501f1d458cc61e7a9f6", 0x64}, {&(0x7f00000007c0)="9977a0df754ef9a915e3e620fc104c1c1c1650cd867a980913aa18666916198eb95d3bfed78dd6460f5f61cd2a25c3bb83affc3eeddac5277179a3f9d1d35ab07f1c949f486ee12ac8e683f2a9365cb0c52a5575bf9a4e79935e2c2317ec2767bd4951b80387e2f9e43a911f890bf652398fcf7edc57f83456d55da3db09f6441877de930d6b49", 0x87}, {&(0x7f0000000880)="65ae6408a2a2c4365562273ee18e403b73775f7a3d6e1892cbf73145945eb2d8d46574703e3f974f7ffcd4b531cbc319eb08272cda7be21e94d11871a8040f4364a56d3af3fc236122753b2a92572364b4a5c37d58549daebe52e1e94c9f562c1649994fc75e33c810e221b41b224873dd24bc847d1003cd6a0bae7bc8b41e40d496590fd6b292778e3830616c5b3eac1b3f201fb5afe611fdab14732800d660d8143509bb7b7d4fb1e84d001073", 0xae}, {&(0x7f0000000940)="d5370d4b0ee49ae202d7443eb2b892226107f1a91ed6baba6817b378f2f35cc29129c669a3b262cc87d43dc73d9f8e754b7abb0283471dbae0dc6ad82acf2de34c79a491d402fdda16180698218c80f7741eca32d46195cd7c11794b3ae14bf0f4b39380f0d6e348f76b3b0ce2767a57937c83838661653f032395a3ef117950b39db9c03b2c93af08548c38e58f1fc1486cf5f858fc9decf5c92dd3bd6f5ffaf975abda79e635ecc476816585c1679d96683fcfff2c8a65125cefc8b16de38bba91f686a685", 0xc6}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="2987b8109bca5adeff99570e80d95d760dcb805298", 0x15}], 0x8, &(0x7f0000000b40)=[{0x98, 0x119, 0x1, "3c6e8a0f06ebc1416f4acc43163af6d9df086a288cdd275f269fc953573c82f84039ca44997edfe4f3ac9c0b14a03b1926bd78429577992fb6105c8ed6da7cbfa276e385ba023052026d46dbe7b7f4de629449bbe0831b926db2b1e88931fb0e713c601483fe3cc8f1dd2e0a9a3079c848787bb1f0f63415eaf3a31420653d9a2b104346"}, {0xb8, 0x3a, 0x7, "9e6f80a4eb40cfb21d438b068f8829a299dabe930bfacafc128b604dc08ebbecc39c52623910cfdb30fa60121a816bd50e5e02184e9eaf3c9714035710a6c035dffd11a5ade892f7829657f14e7a894249002bd0361ef605edf8862bb8d84372c138c7a5d5c11e2e2827f1816185513025c0d3e15501bc1c89e8ecede39ba577aabf0294c327bdc43da32bbbea226f2c839028a7669df09dbf491341c212c734603f7c"}], 0x150}, 0x80) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="90b9561bc1ccaa545ed1a28c5680"], 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vIQV3glBQtAradKriwkUfog9gSWMtpv40AW0pNu58ArfduvQRfIu8gigu6sqNRCZzM47ZKwjJIueee7ln7k3gzLF34ZUAfMwnNloAA5DHAl4YAwewKBMA2iWF70WFB8SfuMJlyt8TPhN6o/FJx3Wd4Q8Gv3FGFmRBFvy14Is2b3J4jb0snE9sMjX9dAGY9XyqtsSlK0a6Lk1PknUAdX9wXvdG463+oNNzes6pEM09a8eydkX9qO86lnozQz5H0hI3AEgv/WfUC8bx/1OjJqNfk/GafdJzD6leW/neJ8+KoiiCgQyPupf8HHL1NtZQBnAZMCNbjVU44nVaYMgTafDUbDmU48K2feZ2p2BgSdsMXGs0QhQ0ESZpVoJkjVuuVO/oPtkPkoWmhFXCFuGMMCRMbrAHUuCxwhuxWgAUcdXx/WFDplSkc0LnRCUwP+Uq6L8Za28S/wwAAP//8cRVEw==") ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000080)=0x2b5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d00)={'#! ', './file0', [], 0xa, "2a92f96e4d0fb260e16784369ba59d574273"}, 0x1d) 12m51.599257363s ago: executing program 5 (id=410): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='(') pread64(r1, 0x0, 0x0, 0xd000) 12m48.005681201s ago: executing program 5 (id=510): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 12m44.054015571s ago: executing program 5 (id=512): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000380), 0x200bc, 0x400303) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) 12m43.157548393s ago: executing program 5 (id=513): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 12m41.718093716s ago: executing program 5 (id=515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3cc, 0xffff, 0x4, 0xd, 0x7ff, 0x9, 0x58ce4b29, 0x1, 0x81, 0x9, 0xe, 0x10, 0x7, 0x4, 0x2, 0x9}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x78) 12m24.534403668s ago: executing program 50 (id=515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3cc, 0xffff, 0x4, 0xd, 0x7ff, 0x9, 0x58ce4b29, 0x1, 0x81, 0x9, 0xe, 0x10, 0x7, 0x4, 0x2, 0x9}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x78) 11m49.97061979s ago: executing program 51 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff000000070581031000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) 11m41.818983295s ago: executing program 1 (id=548): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000380), 0x200bc, 0x400303) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) 11m41.170698164s ago: executing program 1 (id=549): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301701) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 11m39.162316898s ago: executing program 1 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='0\n', 0x2) close(r1) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r2) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 11m38.259851475s ago: executing program 1 (id=551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3cc, 0xffff, 0x4, 0xd, 0x7ff, 0x9, 0x58ce4b29, 0x1, 0x81, 0x9, 0xe, 0x10, 0x7, 0x4, 0x2, 0x9}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x78) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6(0xa, 0x1, 0x0) 11m34.794120289s ago: executing program 1 (id=552): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f000000000000"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 11m33.839015946s ago: executing program 1 (id=553): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)}, {&(0x7f0000000640)}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}], 0x3}}], 0x1, 0x4000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e3200"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) 11m18.360880458s ago: executing program 52 (id=553): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)}, {&(0x7f0000000640)}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}], 0x3}}], 0x1, 0x4000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e3200"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) 10m43.953024924s ago: executing program 7 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m40.916105683s ago: executing program 7 (id=557): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) 10m38.505710392s ago: executing program 7 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='0\n', 0x2) close(r1) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r2) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 10m37.696568529s ago: executing program 7 (id=559): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f00000009c0)={0x10, 0x0, "6c99df9579b4fd0343e1894f944911e9"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 10m34.39096075s ago: executing program 7 (id=560): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f000000000000"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 10m33.269874324s ago: executing program 7 (id=561): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000000}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 10m21.26210367s ago: executing program 4 (id=567): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000880), 0x644082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) syz_open_dev$vim2m(0x0, 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) listen(0xffffffffffffffff, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) 10m18.532272369s ago: executing program 4 (id=569): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) syz_usb_connect(0x2, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 10m17.084451134s ago: executing program 53 (id=561): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000000}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 10m11.967184875s ago: executing program 4 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='slave-24c02 0x1', 0xf) 10m10.36655777s ago: executing program 4 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno', 0xa) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 10m4.696600599s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r3, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) 10m2.59017627s ago: executing program 4 (id=581): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f00000000000000000000000000070018003d70324000000000050017002b8000000a004e2400000000fc0200"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 9m45.251067126s ago: executing program 54 (id=581): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f00000000000000000000000000070018003d70324000000000050017002b8000000a004e2400000000fc0200"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 8m42.630809503s ago: executing program 2 (id=642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfd, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1, 0x6}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmmsg$alg(r3, 0x0, 0x0, 0x8855) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@test_dummy_encryption}, {@init_itable_val}, {@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nojournal_checksum}, {@minixdf}, {@nouid32}, {@errors_remount}, {@lazytime}, {@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce6", 0x2}], 0x1}}], 0x1, 0x4001) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8m40.022506008s ago: executing program 2 (id=645): write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0xf73, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014"], 0x60}}, 0x200040c0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 8m36.841806712s ago: executing program 2 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='slave-24c02 0x1', 0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) 8m35.77167354s ago: executing program 2 (id=647): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x931766f6319aedc0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x2, 0x2003) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x7d, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0xfffffffc, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 8m32.458922313s ago: executing program 2 (id=648): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f00000000000000000000000000070018003d70324000000000050017002b8000000a004e2400000000fc020000000000000000000000000000001000000000000002001300080000002dbd700007350000"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000850000002a000000181c00008fa6e7e634485e949f59c3e11bd65271d020ca46da526ffd80c1dc910d9c0e991cb1ff67d5a6341a9eed76633b74f402d8bb0000000000b002ff06b7740724e6e3111cbdaf360bd4efaed74250604c61032ae7b4ed70f9a42badb0", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 8m30.53455936s ago: executing program 2 (id=651): setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000340)={{0x2, 0x1, 0x2, 0x7fffffff, 0x7f, 0x5}, 0x182, [0x1, 0x3, 0x3, 0x7, 0x8, 0x100, 0xfffffffd, 0xf, 0x8000, 0x10000, 0x5, 0x8000, 0xfff, 0x0, 0xb, 0x81, 0x10, 0x0, 0xfffffff7, 0x6, 0x80, 0x39, 0x3c9d5fb2, 0x773f1fd, 0xddbf, 0x80, 0x9, 0x1, 0x1, 0x4855, 0xffffffff, 0x5, 0x8001, 0x8, 0x0, 0x3ff, 0x7fff, 0x5, 0xfffffff8, 0x3, 0x8, 0x80000001, 0x4, 0x400, 0x0, 0x1, 0x0, 0x4, 0x5d2e62d8, 0x1, 0x1000, 0x9, 0xe14, 0x6, 0x8, 0x2, 0x2, 0xa, 0x96f, 0x2, 0x4, 0x7, 0x89, 0x0, 0x7fffffff, 0x6, 0xbb12, 0x200, 0x7, 0x4, 0xda3, 0x2, 0x7, 0x7, 0xffff, 0x8, 0x8, 0x1, 0x9, 0x0, 0xa, 0x6, 0x4, 0x2, 0xb3, 0x7, 0x643ab98e, 0x1, 0x0, 0x9, 0x7ff, 0x8, 0x800, 0x5, 0x3, 0x3, 0x8, 0x9af0, 0x80, 0x4000, 0x4, 0x9, 0xfff, 0x4, 0x9, 0x4, 0x10c1, 0x3, 0xfffffffc, 0x1, 0x8, 0x9, 0xff, 0x1, 0x0, 0xfffff801, 0x3, 0x86b6, 0x1, 0x6, 0x860e, 0x10001, 0xfffffffe, 0x5, 0x4de83fc2, 0x2, 0x3ff, 0x8, 0x8, 0x6, 0x89c1, 0x9, 0x0, 0x10001, 0xe, 0x9, 0x6, 0x7, 0x2, 0x3, 0x9, 0x1, 0xff, 0xeb, 0x9, 0x8001, 0x9, 0x0, 0x63a, 0x2, 0x5, 0xfffff800, 0x6, 0x800, 0xffffff00, 0x1c, 0x3, 0x9, 0x81, 0x1, 0x5, 0x7ff, 0x2, 0x6, 0x0, 0x2, 0x7, 0xfffffaa6, 0xffff, 0x4, 0x1, 0x265c3bdc, 0x81, 0xf, 0x8, 0x101, 0xffffffff, 0x8, 0x4, 0x100, 0x0, 0x5, 0x90, 0xf, 0xb59, 0x3ff, 0xa6b, 0x1, 0x101, 0x0, 0x74, 0x4, 0xa467, 0x6, 0x1cd0, 0x2, 0x4, 0x6, 0x3, 0xffffffff, 0x3, 0x8001, 0x391, 0x4, 0x43d, 0x5, 0xfffffffd, 0x7, 0x3d, 0x8001, 0x8, 0xfffffffb, 0x1, 0x5, 0xffff, 0x9, 0x6bea, 0x8001, 0x75, 0x4, 0x4, 0x7, 0x3, 0x8, 0x1, 0x7, 0x0, 0x0, 0x7ff, 0x5, 0xb, 0x5, 0x0, 0x3, 0x27, 0xffff49f3, 0x1, 0x1, 0x5, 0x6, 0x8001, 0x8, 0x8, 0x443f, 0x0, 0xffff2d0b, 0x1, 0x0, 0x40, 0xc4, 0x13ba628b, 0xfff, 0x5, 0x6, 0x1b, 0xfffffffd, 0x60, 0x8, 0x8, 0x701b, 0xc85, 0x1, 0x5, 0x68c3a10b, 0xffffff8e, 0xe04, 0x40000000, 0xfffffffa, 0xffffff7f, 0x4, 0x4, 0x401, 0x0, 0x1ff, 0x9, 0xb64, 0x9, 0x2, 0xff, 0x6, 0x6, 0x8, 0xffffff01, 0xc4, 0x50000000, 0x401, 0xe0, 0xc9de, 0x80000000, 0x9, 0x7, 0x17f, 0x0, 0x8, 0x3, 0xe, 0xfffffff9, 0x35848093, 0x6, 0x10, 0x2, 0x8, 0x1, 0x101, 0x0, 0x1, 0xfff, 0xa9, 0x2, 0x65b, 0xfffffeff, 0x6, 0x7, 0x4, 0xd, 0xa657, 0x6, 0x62c6, 0x0, 0x9, 0xb9a9, 0x23, 0x5000000, 0x3, 0x9, 0x8, 0x7, 0xe3, 0xfffffff8, 0xc5c7, 0x3ec, 0x8, 0x8, 0x5, 0x6, 0x5, 0x4a, 0x2, 0x7, 0x100, 0x3, 0x0, 0x7, 0x7a87c08c, 0x5, 0x1ff, 0x10000, 0x6, 0x9, 0x3, 0xc8, 0x2, 0x5, 0x2, 0x1d400, 0x5, 0x2, 0x5, 0x4, 0x8000, 0x40, 0x270ee925, 0x8000, 0x2, 0x7, 0x1000, 0x1, 0x9, 0xa3, 0x400, 0x9, 0x36, 0xaca, 0x6, 0xf29, 0x400, 0x200, 0x80000001, 0x64c, 0x32, 0x2277, 0x40, 0x3, 0xbf3, 0xf51, 0xf, 0x101, 0x10001, 0x8, 0x1, 0x2000000, 0x3, 0x52c514b7, 0x0, 0x877d, 0x7f, 0x5, 0x9, 0x3, 0x3, 0x5, 0x0, 0x5887, 0x2, 0x80000000, 0x1, 0xd, 0x1000, 0x3749, 0x8001, 0xfffffff8, 0x8, 0x3, 0x7ff, 0x5, 0x4, 0xff, 0x2, 0x1b94, 0x7, 0x31cc, 0x4, 0x5, 0x100, 0x3, 0x1ff, 0x9, 0x7ff, 0x8, 0x4, 0x7, 0x80000001, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0xfffffd38, 0x400, 0x4a65, 0x3ff, 0x8, 0x521, 0x3, 0x0, 0xb, 0x800, 0x1c00000, 0xc0000000, 0x923, 0x7fffffff, 0x1416, 0xdc52, 0x2872, 0x4, 0x4c906eda, 0x4, 0xb4e, 0x8, 0xf, 0x4, 0x2, 0xfffffffd, 0xff, 0x4, 0x9, 0x2, 0x2, 0xfffffffc, 0x2, 0x4, 0xa7, 0x4, 0x7, 0x3ff, 0x4, 0x4, 0x6, 0x7, 0x8, 0x10, 0x80, 0x1, 0x8000, 0x2, 0xf5, 0x80000001, 0x10001, 0xffff, 0x2, 0x2, 0x0, 0x1000, 0x14, 0xde8a, 0x3, 0x3, 0x101, 0x58, 0x209, 0x3, 0x7ff, 0xfffffff4, 0x839c, 0x7a000000, 0x9, 0x9, 0x2, 0xc65, 0x3, 0x8, 0x7c8b, 0x3, 0x151d, 0xad5, 0x1000, 0x7fffffff, 0x1000, 0x0, 0x7, 0x84f, 0x7, 0x75a6, 0x7fffffff, 0x97, 0x0, 0x3, 0x5, 0x5, 0x1, 0x3, 0x8001, 0x9, 0xc, 0xfffffffd, 0xfff, 0x9, 0x89, 0x1, 0x9, 0xe, 0xfffffff8, 0x4, 0x0, 0x2, 0x5, 0x34, 0x4e, 0x1, 0x400, 0x8, 0x10001, 0x9, 0x7, 0x7, 0x0, 0x1, 0x10001, 0xeb6, 0x0, 0x1, 0x8, 0x8001, 0x7ff, 0xffffff85, 0x0, 0x4, 0x7, 0x1, 0x6, 0xffff8001, 0xffffffe2, 0xffff, 0x6, 0x9, 0x1d, 0x2, 0x3, 0x0, 0x3c3e, 0xc366, 0x3, 0x400, 0x3ff, 0x0, 0xfffffff5, 0x1d, 0xde43, 0x7fffffff, 0x61c, 0xef9, 0x8, 0x4, 0x0, 0x5, 0xde4, 0x3, 0xf099, 0x1, 0x4, 0x100, 0x10, 0x8, 0x8, 0x3, 0x81, 0x5, 0x7, 0x80000000, 0x7fffffff, 0x33db, 0x4, 0x1, 0xf0, 0x2, 0x2a, 0x5, 0x4, 0x22b6, 0x4000, 0xa, 0x8, 0x5, 0x6, 0x8000, 0x6f0, 0x0, 0x6, 0xfffffffd, 0x8, 0x3, 0x8, 0x4, 0x4, 0x5f473edb, 0x3, 0x10001, 0x2, 0xffff, 0x3, 0x2a4, 0x3, 0xb, 0x7, 0x8, 0xfff, 0x115, 0xf9c, 0x9, 0x8, 0x9, 0x80000000, 0x5, 0x3, 0x947, 0x2, 0x2, 0x8, 0x2, 0x1, 0x5c, 0x8, 0x6, 0xfa6, 0xe, 0x10f, 0xffff7fff, 0xdc0c, 0x3, 0x49f8898d, 0x2, 0x8, 0x10, 0x80000000, 0xfff, 0x9, 0x1, 0x6, 0xbc, 0xa, 0xfffff800, 0x7, 0x5, 0x7, 0x7, 0x7a58, 0x4, 0x7fff, 0xb, 0x7, 0x6, 0x9, 0x6, 0x4, 0x5b, 0x9, 0x7, 0x80000000, 0x1, 0x0, 0x8, 0x56c, 0x200, 0x7, 0x90, 0xf, 0x80, 0x2400000, 0x6, 0x6, 0x7ff, 0x5, 0x5, 0x7, 0x6, 0x8, 0xf, 0x2, 0x400, 0x1, 0x2, 0x4, 0x6, 0x8, 0x8, 0xde, 0x9, 0xffff4799, 0x653, 0x7, 0x1000, 0x5, 0x9, 0x4, 0x1, 0xf29, 0x2, 0xb19, 0x7, 0x89a0, 0xea1, 0x6, 0xd6, 0xba3, 0x9, 0x9, 0x5, 0x37e10a96, 0x1, 0x80000000, 0x9, 0xf3ba, 0x3, 0xfffff4ce, 0xfffff9b0, 0x80, 0x80, 0x5, 0x4, 0x9, 0x7f, 0x0, 0x2, 0xffff, 0x1ff, 0x6, 0x10, 0x4, 0x3fe00, 0xffffffff, 0x7fff, 0x0, 0x1, 0x5, 0xfffffff4, 0x3ff, 0x66, 0x3, 0x3ff, 0x200, 0xb, 0x8, 0x8001, 0xfffffffb, 0x9a, 0x1, 0x1, 0x101, 0x53d, 0x977, 0xb, 0x1187, 0x3, 0x9, 0x6, 0x7, 0xa, 0x7, 0x80000000, 0x2, 0x8e4, 0x3, 0x9, 0x1, 0x7f, 0x6, 0x3ff, 0xfffffffa, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0xc8, 0x4, 0x5, 0xb, 0x8, 0x8, 0x10001, 0x0, 0x3, 0x6, 0x6, 0x2, 0x4, 0x7, 0x3, 0x2, 0x9, 0xfffffffd, 0x835, 0x1, 0x2, 0xa3, 0x5, 0x3ff, 0x9, 0x0, 0xf, 0x7ff, 0x200, 0x30, 0x8, 0x3, 0x4, 0x4, 0x6, 0x2, 0xb0, 0xfffffff7, 0x7, 0x6, 0x8000, 0xe1, 0x9, 0x2, 0x5, 0x4, 0x0, 0x7f, 0xbe6, 0x7f, 0x1, 0x8, 0xffffffff, 0x10, 0x9cf6, 0x3, 0x387000, 0xa6e, 0x3ff, 0xfffffffc, 0x800, 0x3, 0x81, 0xfffffaf9, 0x5, 0xffffffff, 0xa, 0x3, 0x7, 0x3, 0x9c8, 0x8, 0x40, 0x6, 0x2, 0x32ed, 0x4, 0x3, 0x1, 0xf4, 0xe91a, 0x8, 0x5d31, 0x1, 0x401, 0xe2a6, 0x3ff, 0x40, 0x0, 0x5, 0x6, 0x4, 0xa, 0xa81, 0x5300, 0xddf3, 0x80000000, 0xc, 0x4, 0x10000, 0x10000, 0x8, 0x97e, 0x7, 0x8000, 0x800, 0xff, 0x6, 0x9, 0xa, 0x40, 0x4, 0x5, 0x4, 0x9, 0x7, 0xe7f2, 0x0, 0x2, 0x7, 0x7, 0xfd, 0x8, 0x6, 0x10001, 0xffff, 0x8, 0x1, 0x0, 0x21cf, 0x0, 0x1, 0x7, 0x3, 0x4ce3, 0x6, 0x6, 0xffff, 0x4, 0xda, 0x5, 0x800, 0x3a, 0xe, 0x4, 0x0, 0x6, 0x580000, 0x101, 0x59, 0x0, 0xfffffffe, 0x3, 0x4, 0x9, 0xfef, 0x9, 0xffffffff, 0x6, 0x7, 0x4, 0x10000, 0x101, 0x100, 0x80000000, 0x8, 0x2, 0x40, 0x8, 0x3, 0x6, 0xb6, 0x7, 0xd66e, 0xc9, 0x1, 0xff, 0x1, 0x7, 0x6, 0x9, 0xd5, 0x2, 0xba9, 0x2, 0x1b, 0x6, 0x5, 0x4, 0x4, 0xc, 0xfffffff9, 0x8, 0x4, 0x4, 0xc, 0x8, 0x81, 0x1, 0xff, 0x6, 0x1ff, 0x6, 0x0, 0xb, 0x1, 0x2, 0xdfc, 0x9, 0x5, 0x3]}) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) read(r0, &(0x7f0000000100), 0x1000) 8m15.054938063s ago: executing program 55 (id=651): setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000340)={{0x2, 0x1, 0x2, 0x7fffffff, 0x7f, 0x5}, 0x182, [0x1, 0x3, 0x3, 0x7, 0x8, 0x100, 0xfffffffd, 0xf, 0x8000, 0x10000, 0x5, 0x8000, 0xfff, 0x0, 0xb, 0x81, 0x10, 0x0, 0xfffffff7, 0x6, 0x80, 0x39, 0x3c9d5fb2, 0x773f1fd, 0xddbf, 0x80, 0x9, 0x1, 0x1, 0x4855, 0xffffffff, 0x5, 0x8001, 0x8, 0x0, 0x3ff, 0x7fff, 0x5, 0xfffffff8, 0x3, 0x8, 0x80000001, 0x4, 0x400, 0x0, 0x1, 0x0, 0x4, 0x5d2e62d8, 0x1, 0x1000, 0x9, 0xe14, 0x6, 0x8, 0x2, 0x2, 0xa, 0x96f, 0x2, 0x4, 0x7, 0x89, 0x0, 0x7fffffff, 0x6, 0xbb12, 0x200, 0x7, 0x4, 0xda3, 0x2, 0x7, 0x7, 0xffff, 0x8, 0x8, 0x1, 0x9, 0x0, 0xa, 0x6, 0x4, 0x2, 0xb3, 0x7, 0x643ab98e, 0x1, 0x0, 0x9, 0x7ff, 0x8, 0x800, 0x5, 0x3, 0x3, 0x8, 0x9af0, 0x80, 0x4000, 0x4, 0x9, 0xfff, 0x4, 0x9, 0x4, 0x10c1, 0x3, 0xfffffffc, 0x1, 0x8, 0x9, 0xff, 0x1, 0x0, 0xfffff801, 0x3, 0x86b6, 0x1, 0x6, 0x860e, 0x10001, 0xfffffffe, 0x5, 0x4de83fc2, 0x2, 0x3ff, 0x8, 0x8, 0x6, 0x89c1, 0x9, 0x0, 0x10001, 0xe, 0x9, 0x6, 0x7, 0x2, 0x3, 0x9, 0x1, 0xff, 0xeb, 0x9, 0x8001, 0x9, 0x0, 0x63a, 0x2, 0x5, 0xfffff800, 0x6, 0x800, 0xffffff00, 0x1c, 0x3, 0x9, 0x81, 0x1, 0x5, 0x7ff, 0x2, 0x6, 0x0, 0x2, 0x7, 0xfffffaa6, 0xffff, 0x4, 0x1, 0x265c3bdc, 0x81, 0xf, 0x8, 0x101, 0xffffffff, 0x8, 0x4, 0x100, 0x0, 0x5, 0x90, 0xf, 0xb59, 0x3ff, 0xa6b, 0x1, 0x101, 0x0, 0x74, 0x4, 0xa467, 0x6, 0x1cd0, 0x2, 0x4, 0x6, 0x3, 0xffffffff, 0x3, 0x8001, 0x391, 0x4, 0x43d, 0x5, 0xfffffffd, 0x7, 0x3d, 0x8001, 0x8, 0xfffffffb, 0x1, 0x5, 0xffff, 0x9, 0x6bea, 0x8001, 0x75, 0x4, 0x4, 0x7, 0x3, 0x8, 0x1, 0x7, 0x0, 0x0, 0x7ff, 0x5, 0xb, 0x5, 0x0, 0x3, 0x27, 0xffff49f3, 0x1, 0x1, 0x5, 0x6, 0x8001, 0x8, 0x8, 0x443f, 0x0, 0xffff2d0b, 0x1, 0x0, 0x40, 0xc4, 0x13ba628b, 0xfff, 0x5, 0x6, 0x1b, 0xfffffffd, 0x60, 0x8, 0x8, 0x701b, 0xc85, 0x1, 0x5, 0x68c3a10b, 0xffffff8e, 0xe04, 0x40000000, 0xfffffffa, 0xffffff7f, 0x4, 0x4, 0x401, 0x0, 0x1ff, 0x9, 0xb64, 0x9, 0x2, 0xff, 0x6, 0x6, 0x8, 0xffffff01, 0xc4, 0x50000000, 0x401, 0xe0, 0xc9de, 0x80000000, 0x9, 0x7, 0x17f, 0x0, 0x8, 0x3, 0xe, 0xfffffff9, 0x35848093, 0x6, 0x10, 0x2, 0x8, 0x1, 0x101, 0x0, 0x1, 0xfff, 0xa9, 0x2, 0x65b, 0xfffffeff, 0x6, 0x7, 0x4, 0xd, 0xa657, 0x6, 0x62c6, 0x0, 0x9, 0xb9a9, 0x23, 0x5000000, 0x3, 0x9, 0x8, 0x7, 0xe3, 0xfffffff8, 0xc5c7, 0x3ec, 0x8, 0x8, 0x5, 0x6, 0x5, 0x4a, 0x2, 0x7, 0x100, 0x3, 0x0, 0x7, 0x7a87c08c, 0x5, 0x1ff, 0x10000, 0x6, 0x9, 0x3, 0xc8, 0x2, 0x5, 0x2, 0x1d400, 0x5, 0x2, 0x5, 0x4, 0x8000, 0x40, 0x270ee925, 0x8000, 0x2, 0x7, 0x1000, 0x1, 0x9, 0xa3, 0x400, 0x9, 0x36, 0xaca, 0x6, 0xf29, 0x400, 0x200, 0x80000001, 0x64c, 0x32, 0x2277, 0x40, 0x3, 0xbf3, 0xf51, 0xf, 0x101, 0x10001, 0x8, 0x1, 0x2000000, 0x3, 0x52c514b7, 0x0, 0x877d, 0x7f, 0x5, 0x9, 0x3, 0x3, 0x5, 0x0, 0x5887, 0x2, 0x80000000, 0x1, 0xd, 0x1000, 0x3749, 0x8001, 0xfffffff8, 0x8, 0x3, 0x7ff, 0x5, 0x4, 0xff, 0x2, 0x1b94, 0x7, 0x31cc, 0x4, 0x5, 0x100, 0x3, 0x1ff, 0x9, 0x7ff, 0x8, 0x4, 0x7, 0x80000001, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0xfffffd38, 0x400, 0x4a65, 0x3ff, 0x8, 0x521, 0x3, 0x0, 0xb, 0x800, 0x1c00000, 0xc0000000, 0x923, 0x7fffffff, 0x1416, 0xdc52, 0x2872, 0x4, 0x4c906eda, 0x4, 0xb4e, 0x8, 0xf, 0x4, 0x2, 0xfffffffd, 0xff, 0x4, 0x9, 0x2, 0x2, 0xfffffffc, 0x2, 0x4, 0xa7, 0x4, 0x7, 0x3ff, 0x4, 0x4, 0x6, 0x7, 0x8, 0x10, 0x80, 0x1, 0x8000, 0x2, 0xf5, 0x80000001, 0x10001, 0xffff, 0x2, 0x2, 0x0, 0x1000, 0x14, 0xde8a, 0x3, 0x3, 0x101, 0x58, 0x209, 0x3, 0x7ff, 0xfffffff4, 0x839c, 0x7a000000, 0x9, 0x9, 0x2, 0xc65, 0x3, 0x8, 0x7c8b, 0x3, 0x151d, 0xad5, 0x1000, 0x7fffffff, 0x1000, 0x0, 0x7, 0x84f, 0x7, 0x75a6, 0x7fffffff, 0x97, 0x0, 0x3, 0x5, 0x5, 0x1, 0x3, 0x8001, 0x9, 0xc, 0xfffffffd, 0xfff, 0x9, 0x89, 0x1, 0x9, 0xe, 0xfffffff8, 0x4, 0x0, 0x2, 0x5, 0x34, 0x4e, 0x1, 0x400, 0x8, 0x10001, 0x9, 0x7, 0x7, 0x0, 0x1, 0x10001, 0xeb6, 0x0, 0x1, 0x8, 0x8001, 0x7ff, 0xffffff85, 0x0, 0x4, 0x7, 0x1, 0x6, 0xffff8001, 0xffffffe2, 0xffff, 0x6, 0x9, 0x1d, 0x2, 0x3, 0x0, 0x3c3e, 0xc366, 0x3, 0x400, 0x3ff, 0x0, 0xfffffff5, 0x1d, 0xde43, 0x7fffffff, 0x61c, 0xef9, 0x8, 0x4, 0x0, 0x5, 0xde4, 0x3, 0xf099, 0x1, 0x4, 0x100, 0x10, 0x8, 0x8, 0x3, 0x81, 0x5, 0x7, 0x80000000, 0x7fffffff, 0x33db, 0x4, 0x1, 0xf0, 0x2, 0x2a, 0x5, 0x4, 0x22b6, 0x4000, 0xa, 0x8, 0x5, 0x6, 0x8000, 0x6f0, 0x0, 0x6, 0xfffffffd, 0x8, 0x3, 0x8, 0x4, 0x4, 0x5f473edb, 0x3, 0x10001, 0x2, 0xffff, 0x3, 0x2a4, 0x3, 0xb, 0x7, 0x8, 0xfff, 0x115, 0xf9c, 0x9, 0x8, 0x9, 0x80000000, 0x5, 0x3, 0x947, 0x2, 0x2, 0x8, 0x2, 0x1, 0x5c, 0x8, 0x6, 0xfa6, 0xe, 0x10f, 0xffff7fff, 0xdc0c, 0x3, 0x49f8898d, 0x2, 0x8, 0x10, 0x80000000, 0xfff, 0x9, 0x1, 0x6, 0xbc, 0xa, 0xfffff800, 0x7, 0x5, 0x7, 0x7, 0x7a58, 0x4, 0x7fff, 0xb, 0x7, 0x6, 0x9, 0x6, 0x4, 0x5b, 0x9, 0x7, 0x80000000, 0x1, 0x0, 0x8, 0x56c, 0x200, 0x7, 0x90, 0xf, 0x80, 0x2400000, 0x6, 0x6, 0x7ff, 0x5, 0x5, 0x7, 0x6, 0x8, 0xf, 0x2, 0x400, 0x1, 0x2, 0x4, 0x6, 0x8, 0x8, 0xde, 0x9, 0xffff4799, 0x653, 0x7, 0x1000, 0x5, 0x9, 0x4, 0x1, 0xf29, 0x2, 0xb19, 0x7, 0x89a0, 0xea1, 0x6, 0xd6, 0xba3, 0x9, 0x9, 0x5, 0x37e10a96, 0x1, 0x80000000, 0x9, 0xf3ba, 0x3, 0xfffff4ce, 0xfffff9b0, 0x80, 0x80, 0x5, 0x4, 0x9, 0x7f, 0x0, 0x2, 0xffff, 0x1ff, 0x6, 0x10, 0x4, 0x3fe00, 0xffffffff, 0x7fff, 0x0, 0x1, 0x5, 0xfffffff4, 0x3ff, 0x66, 0x3, 0x3ff, 0x200, 0xb, 0x8, 0x8001, 0xfffffffb, 0x9a, 0x1, 0x1, 0x101, 0x53d, 0x977, 0xb, 0x1187, 0x3, 0x9, 0x6, 0x7, 0xa, 0x7, 0x80000000, 0x2, 0x8e4, 0x3, 0x9, 0x1, 0x7f, 0x6, 0x3ff, 0xfffffffa, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0xc8, 0x4, 0x5, 0xb, 0x8, 0x8, 0x10001, 0x0, 0x3, 0x6, 0x6, 0x2, 0x4, 0x7, 0x3, 0x2, 0x9, 0xfffffffd, 0x835, 0x1, 0x2, 0xa3, 0x5, 0x3ff, 0x9, 0x0, 0xf, 0x7ff, 0x200, 0x30, 0x8, 0x3, 0x4, 0x4, 0x6, 0x2, 0xb0, 0xfffffff7, 0x7, 0x6, 0x8000, 0xe1, 0x9, 0x2, 0x5, 0x4, 0x0, 0x7f, 0xbe6, 0x7f, 0x1, 0x8, 0xffffffff, 0x10, 0x9cf6, 0x3, 0x387000, 0xa6e, 0x3ff, 0xfffffffc, 0x800, 0x3, 0x81, 0xfffffaf9, 0x5, 0xffffffff, 0xa, 0x3, 0x7, 0x3, 0x9c8, 0x8, 0x40, 0x6, 0x2, 0x32ed, 0x4, 0x3, 0x1, 0xf4, 0xe91a, 0x8, 0x5d31, 0x1, 0x401, 0xe2a6, 0x3ff, 0x40, 0x0, 0x5, 0x6, 0x4, 0xa, 0xa81, 0x5300, 0xddf3, 0x80000000, 0xc, 0x4, 0x10000, 0x10000, 0x8, 0x97e, 0x7, 0x8000, 0x800, 0xff, 0x6, 0x9, 0xa, 0x40, 0x4, 0x5, 0x4, 0x9, 0x7, 0xe7f2, 0x0, 0x2, 0x7, 0x7, 0xfd, 0x8, 0x6, 0x10001, 0xffff, 0x8, 0x1, 0x0, 0x21cf, 0x0, 0x1, 0x7, 0x3, 0x4ce3, 0x6, 0x6, 0xffff, 0x4, 0xda, 0x5, 0x800, 0x3a, 0xe, 0x4, 0x0, 0x6, 0x580000, 0x101, 0x59, 0x0, 0xfffffffe, 0x3, 0x4, 0x9, 0xfef, 0x9, 0xffffffff, 0x6, 0x7, 0x4, 0x10000, 0x101, 0x100, 0x80000000, 0x8, 0x2, 0x40, 0x8, 0x3, 0x6, 0xb6, 0x7, 0xd66e, 0xc9, 0x1, 0xff, 0x1, 0x7, 0x6, 0x9, 0xd5, 0x2, 0xba9, 0x2, 0x1b, 0x6, 0x5, 0x4, 0x4, 0xc, 0xfffffff9, 0x8, 0x4, 0x4, 0xc, 0x8, 0x81, 0x1, 0xff, 0x6, 0x1ff, 0x6, 0x0, 0xb, 0x1, 0x2, 0xdfc, 0x9, 0x5, 0x3]}) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) read(r0, &(0x7f0000000100), 0x1000) 6m51.324696403s ago: executing program 3 (id=725): setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1f4750895ab09308102c0c0"], 0x0}, 0x0) read(r0, &(0x7f0000000100), 0x1000) 6m48.351918769s ago: executing program 3 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m44.803940908s ago: executing program 3 (id=729): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, 0x0, 0x830600) 6m43.855423588s ago: executing program 3 (id=731): syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x4402, &(0x7f0000000080)={[{@fat=@errors_remount}, {@fat=@errors_continue}, {@fat=@debug}, {}, {@fat=@flush}, {@fat=@usefree}, {@nodots}, {@fat=@check_normal}, {@fat=@showexec}, {@fat=@tz_utc}, {@dots}]}, 0x1, 0x165, &(0x7f0000019280)="$eJzs28HKElEYBuDPfi3/avGvo8VAm1ZSXUERBtFAUcyiVgXWRkPIzdQmL6UbDMKVuxM2kmIJaU4T+jwbX3g98I2ghyOc1zffDwfjybvxs1l0W61o348s5q24iEtxFpVpAADHZJ5SfEsppSvTOP8SKaVf3vK5kcEAgNr8wf4PABwZ+z8AnB77PwCcnhcvXz15kOf951nWjfg6LYuyqF4XbScePc77d7IfLlarZmfXl2nR3636bK0vy6ITV5f9vd/2l+P2rapfdA+f5hv9tRhExHn9HwEAAAAcvV720/r5viyL6vZfr7etr9La/wMb5/d23Gj/s8cAAHYw+fhp+GY0evthpxCxz6q/CN29Rz106ETEfzCGINQbmv5lAuq2+tI3PQkAAAAAAAAAAAAAALDNoW7gzdP25U0/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGz6HgAA//8CqEx7") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_clone(0x4000100, &(0x7f0000000400), 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0) ptrace$setopts(0x4206, r1, 0x40, 0x24) sendmmsg$unix(r0, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9080}}], 0x1, 0x40008c4) 6m42.222719613s ago: executing program 3 (id=734): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x80000010}) 6m40.373862527s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)}, 0x10020) 6m38.745535762s ago: executing program 56 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)}, 0x10020) 17.7677189s ago: executing program 6 (id=962): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.386218295s ago: executing program 6 (id=964): mkdir(0x0, 0x65) inotify_init1(0x80800) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13.9215676s ago: executing program 6 (id=966): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x7, {0x0, 0x2710}, {0x2, 0x0, 0xd3, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x8, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3af5}, &(0x7f00000002c0)=0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12.707337018s ago: executing program 0 (id=968): syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mkdir(&(0x7f0000000140)='./control\x00', 0x10a) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000c60) rmdir(&(0x7f0000000100)='./control\x00') mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 11.829864187s ago: executing program 0 (id=969): r0 = syz_io_uring_setup(0x6aed, &(0x7f0000000200)={0x0, 0x595f, 0x10100, 0x4, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000001700), &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x900002, &(0x7f0000001880)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache}, {@access_any}, {@directio}, {@directio}], [{@uid_gt={'uid>', r2}}]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000268000/0x2000)=nil, &(0x7f0000153000/0x2000)=nil, &(0x7f00002fb000/0x2000)=nil, &(0x7f00000e5000/0x1000)=nil, &(0x7f0000334000/0x1000)=nil, &(0x7f00001f0000/0x4000)=nil, &(0x7f00000a5000/0x1000)=nil, &(0x7f0000278000/0x2000)=nil, &(0x7f000024b000/0x4000)=nil, &(0x7f00003f6000/0x4000)=nil, &(0x7f00003ef000/0x4000)=nil, &(0x7f00000003c0)="c482a354164f8ef8bf5ae0b8f43efde2fbd68e8b4be71e2cf3e71797061fbf625ad7d6f4077cbdb4e2617adec58b2334e41a4faa4b20870126da", 0x3a, r0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000280)={0x70, 0x5, 0x0, 0x6, "b0062d2dbf7b3db11173e53afa671d22e03266be722ff7cc7178d824f8e228bd070b5556ac04d6b1b29e18a288c009bc39f02999ee80a9541a1531b4000263a4c19ac353105de35d3f920ddfb38187512bb27ddccdbb6e20"}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f00000000c0)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x20, 0x7f, {0x8, 0xb, 0x2, 0x0, 0x1, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x4, 0x9, 0x30}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x7, 0x7, 0x7, {0x8, 0x25, 0x1, 0x2, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0xfb, {0x8, 0x25, 0x1, 0x82, 0x0, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc10}}, {0x16, &(0x7f0000000940)=@string={0x16, 0x3, "ea952e63642d775ab208328387b9d4f61dd85bdd"}}]}) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r7, &(0x7f0000000000)=@random={'security.', '\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000001040)='./proc_mnt\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) 10.085929599s ago: executing program 0 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000002200)={0x14}, 0x14) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000040004093\x00'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002100)={'vxcan1\x00'}) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 7.961181126s ago: executing program 6 (id=971): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x931766f6319aedc0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e25, 0x3, @empty, 0x3}}, 0x8002, 0x402}, &(0x7f0000000480)=0x90) ioctl$UI_DEV_CREATE(r0, 0x5501) 7.833137697s ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a010800000000000200000a0000010900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) r7 = socket$netlink(0x10, 0x3, 0x0) sendto(r7, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 2.709512789s ago: executing program 0 (id=973): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="010f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.189966917s ago: executing program 6 (id=974): mkdir(0x0, 0x65) inotify_init1(0x80800) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 29.703468ms ago: executing program 6 (id=975): memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) 0s ago: executing program 0 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x240001, 0x0) pwritev(r0, 0x0, 0x0, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a008d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES64=r1], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): 1205.100064][ T5734] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.100146][ T5734] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.100191][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1205.100231][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.163527][ T5734] usb 7-1: config 0 descriptor?? [ 1205.407568][T13149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.420179][T13149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.563147][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.679174][ T5734] usbhid 7-1:0.0: can't add hid device: -71 [ 1205.679335][ T5734] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1205.716025][ T5734] usb 7-1: USB disconnect, device number 18 [ 1206.113209][ T1372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.113340][ T1372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.262739][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.262863][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.854726][ T5734] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1207.014683][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 1207.026438][ T5734] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1207.036051][ T5633] Bluetooth: hci4: command tx timeout [ 1207.042698][ T5734] usb 7-1: config 0 has no interfaces? [ 1207.061763][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.061820][ T5734] usb 7-1: Product: syz [ 1207.061922][ T5734] usb 7-1: Manufacturer: syz [ 1207.061958][ T5734] usb 7-1: SerialNumber: syz [ 1207.088617][ T5734] usb 7-1: config 0 descriptor?? [ 1207.373659][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.101648][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.111651][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.120880][T13056] bridge_slave_0: entered allmulticast mode [ 1208.134461][T13056] bridge_slave_0: entered promiscuous mode [ 1208.257025][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.266649][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.275000][T13056] bridge_slave_1: entered allmulticast mode [ 1208.290203][T13056] bridge_slave_1: entered promiscuous mode [ 1208.699266][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.790042][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.921573][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.921818][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.922357][T13070] bridge_slave_0: entered allmulticast mode [ 1208.958597][T13070] bridge_slave_0: entered promiscuous mode [ 1209.056715][T13056] team0: Port device team_slave_0 added [ 1209.062618][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.062773][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.062977][T13070] bridge_slave_1: entered allmulticast mode [ 1209.092803][T13070] bridge_slave_1: entered promiscuous mode [ 1209.116578][ T5633] Bluetooth: hci4: command tx timeout [ 1209.180562][T13056] team0: Port device team_slave_1 added [ 1209.241804][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.273802][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.678401][ T5926] usb 7-1: USB disconnect, device number 19 [ 1209.860349][T13070] team0: Port device team_slave_0 added [ 1210.596687][T13217] process 'syz.6.845' launched './file0' with NULL argv: empty string added [ 1210.883954][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.891380][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.919357][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.103133][T13070] team0: Port device team_slave_1 added [ 1213.229441][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.229521][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.229581][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.299221][T12830] veth0_vlan: entered promiscuous mode [ 1213.413647][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.425647][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.425708][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.678635][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.678719][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.678770][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.786114][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.793485][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.801163][T13116] bridge_slave_0: entered allmulticast mode [ 1213.812150][T13116] bridge_slave_0: entered promiscuous mode [ 1214.005054][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.005191][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.005381][T13116] bridge_slave_1: entered allmulticast mode [ 1214.032072][T13116] bridge_slave_1: entered promiscuous mode [ 1214.143144][T12830] veth1_vlan: entered promiscuous mode [ 1214.225338][T13056] hsr_slave_0: entered promiscuous mode [ 1214.232341][T13056] hsr_slave_1: entered promiscuous mode [ 1214.243810][T13056] debugfs: 'hsr0' already exists in 'hsr' [ 1214.249989][T13056] Cannot create hsr debugfs directory [ 1214.365538][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.593607][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.899097][T13070] hsr_slave_0: entered promiscuous mode [ 1214.910612][T13070] hsr_slave_1: entered promiscuous mode [ 1214.920457][T13070] debugfs: 'hsr0' already exists in 'hsr' [ 1214.926716][T13070] Cannot create hsr debugfs directory [ 1215.330479][T13116] team0: Port device team_slave_0 added [ 1215.352968][T13116] team0: Port device team_slave_1 added [ 1216.001506][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.010751][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.010849][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.073412][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.831923][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.840179][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.867868][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.138332][T12830] veth0_macvtap: entered promiscuous mode [ 1219.791868][ T6107] bridge_slave_1: left allmulticast mode [ 1219.791914][ T6107] bridge_slave_1: left promiscuous mode [ 1219.792163][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.832757][ T6107] bridge_slave_0: left allmulticast mode [ 1219.840564][ T6107] bridge_slave_0: left promiscuous mode [ 1219.840992][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.918502][ T6107] bridge_slave_1: left allmulticast mode [ 1219.918553][ T6107] bridge_slave_1: left promiscuous mode [ 1219.918818][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.958535][ T6107] bridge_slave_0: left allmulticast mode [ 1219.968106][ T6107] bridge_slave_0: left promiscuous mode [ 1219.968379][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.703271][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.740701][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.753695][ T6107] bond0 (unregistering): Released all slaves [ 1221.090085][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.105675][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.118589][ T6107] bond0 (unregistering): Released all slaves [ 1221.450726][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1221.519536][ T6107] hsr_slave_0: left promiscuous mode [ 1221.535026][ T6107] hsr_slave_1: left promiscuous mode [ 1221.536172][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.581049][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.673403][ T6107] hsr_slave_0: left promiscuous mode [ 1221.688710][ T6107] hsr_slave_1: left promiscuous mode [ 1221.689747][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.710872][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.831351][ T6107] veth1_vlan: left promiscuous mode [ 1221.831534][ T6107] veth0_vlan: left promiscuous mode [ 1222.531255][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 1222.558879][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 1222.715571][ T5734] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1222.884315][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 1222.890731][ T5734] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1222.903339][ T5734] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.903431][ T5734] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1222.903486][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1222.903538][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.963626][ T5734] usb 7-1: config 0 descriptor?? [ 1223.110724][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 1223.139477][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 1223.367824][T12830] veth1_macvtap: entered promiscuous mode [ 1223.392495][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1223.411073][ T5734] usbhid 7-1:0.0: can't add hid device: -71 [ 1223.411219][ T5734] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1223.443516][ T5734] usb 7-1: USB disconnect, device number 20 [ 1223.552510][T13116] hsr_slave_0: entered promiscuous mode [ 1223.563953][T13116] hsr_slave_1: entered promiscuous mode [ 1223.577360][T13116] debugfs: 'hsr0' already exists in 'hsr' [ 1223.583465][T13116] Cannot create hsr debugfs directory [ 1224.363177][T12875] veth0_vlan: entered promiscuous mode [ 1224.491644][T12875] veth1_vlan: entered promiscuous mode [ 1225.345180][T13058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1225.362704][T13058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1225.370941][T13058] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1225.397075][T13058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1225.405362][T13058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1226.096820][ T8047] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1226.259481][ T8047] usb 7-1: Using ep0 maxpacket: 16 [ 1226.270519][ T8047] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1226.287240][ T8047] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.287342][ T8047] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.287398][ T8047] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1226.287491][ T8047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.346567][ T8047] usb 7-1: config 0 descriptor?? [ 1226.569488][T13289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.589703][T13289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.703000][T13056] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1226.729978][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.740887][T13056] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1226.763632][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.808631][T13056] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1226.834548][ T8047] usbhid 7-1:0.0: can't add hid device: -71 [ 1226.834725][ T8047] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1226.867280][ T8047] usb 7-1: USB disconnect, device number 21 [ 1226.875169][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.886702][T13056] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1226.953833][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.977125][T12875] veth0_macvtap: entered promiscuous mode [ 1227.291032][T12875] veth1_macvtap: entered promiscuous mode [ 1227.595499][T13058] Bluetooth: hci0: command tx timeout [ 1227.817674][ T31] audit: type=1326 audit(1787907325.310:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.6.852" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253ef9e159 code=0x0 [ 1227.857801][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1227.890083][T13314] xt_bpf: check failed: parse error [ 1229.132396][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1229.147118][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1229.159911][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1229.169031][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1229.179014][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.558304][ T6107] bridge_slave_1: left allmulticast mode [ 1229.558397][ T6107] bridge_slave_1: left promiscuous mode [ 1229.558634][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.586162][ T6107] bridge_slave_0: left allmulticast mode [ 1229.586241][ T6107] bridge_slave_0: left promiscuous mode [ 1229.586523][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.680052][ T5633] Bluetooth: hci0: command tx timeout [ 1230.354084][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.375830][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.393214][ T6107] bond0 (unregistering): Released all slaves [ 1230.663118][ T6107] hsr_slave_0: left promiscuous mode [ 1230.673784][ T6107] hsr_slave_1: left promiscuous mode [ 1230.675343][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.697080][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.170072][ T6107] veth1_macvtap: left promiscuous mode [ 1231.179330][ T6107] veth0_macvtap: left promiscuous mode [ 1231.237660][ T6107] veth1_vlan: left promiscuous mode [ 1231.237860][ T6107] veth0_vlan: left promiscuous mode [ 1231.300607][ T5633] Bluetooth: hci1: command tx timeout [ 1231.757650][ T5633] Bluetooth: hci0: command tx timeout [ 1233.754112][ T5633] Bluetooth: hci1: command tx timeout [ 1233.878175][T13058] Bluetooth: hci0: command tx timeout [ 1233.987274][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 1234.032408][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 1234.677895][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.678321][T13070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1234.735627][T13070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.736778][T13070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1234.765564][T13070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1234.782059][T13070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1234.798056][T13070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1234.901534][T13070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1234.972844][T13070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.332302][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.666202][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.666313][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.835862][T13058] Bluetooth: hci1: command tx timeout [ 1236.179512][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.179672][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.961052][T13285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.974445][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.974680][T13285] bridge_slave_0: entered allmulticast mode [ 1237.406983][T13285] bridge_slave_0: entered promiscuous mode [ 1237.471871][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.479901][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.480203][T13285] bridge_slave_1: entered allmulticast mode [ 1237.500591][T13285] bridge_slave_1: entered promiscuous mode [ 1237.914346][T13058] Bluetooth: hci1: command tx timeout [ 1237.956158][T13285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.160891][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.161012][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.249171][T13285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.445731][ T5734] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1238.605075][ T5734] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1238.615991][ T5734] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1238.616037][ T5734] usb 7-1: config 0 has no interface number 0 [ 1238.638868][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.638964][ T5734] usb 7-1: Product: syz [ 1238.639006][ T5734] usb 7-1: Manufacturer: syz [ 1238.639037][ T5734] usb 7-1: SerialNumber: syz [ 1238.679682][ T5734] usb 7-1: config 0 descriptor?? [ 1238.776593][T13285] team0: Port device team_slave_0 added [ 1238.801416][T13285] team0: Port device team_slave_1 added [ 1238.919334][ T5734] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1238.943242][ T5734] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1238.956684][ T5734] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1238.976317][ T5734] usb 7-1: media controller created [ 1239.053753][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1239.179493][T13285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.187468][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.217210][T13285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.313004][T13285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.321262][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.321358][T13285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.394038][T13391] netlink: 'syz.6.857': attribute type 10 has an invalid length. [ 1239.542476][T13116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1239.567150][T13116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.582023][T13116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1239.615855][T13116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1239.680040][T13391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.706434][T13391] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1239.882611][T13116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1239.908847][T13116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1239.923147][T13116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1239.951104][T13116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1240.319745][ T5734] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1240.600553][T13285] hsr_slave_0: entered promiscuous mode [ 1240.629417][T13285] hsr_slave_1: entered promiscuous mode [ 1240.682712][ T5734] usb 7-1: USB disconnect, device number 22 [ 1240.775211][ T6107] bridge_slave_1: left allmulticast mode [ 1240.775259][ T6107] bridge_slave_1: left promiscuous mode [ 1240.775557][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.812595][ T6107] bridge_slave_0: left allmulticast mode [ 1240.823037][ T6107] bridge_slave_0: left promiscuous mode [ 1240.829044][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.295516][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.310024][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.322218][ T6107] bond0 (unregistering): Released all slaves [ 1241.442987][ T6107] hsr_slave_0: left promiscuous mode [ 1241.452325][ T6107] hsr_slave_1: left promiscuous mode [ 1241.459037][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.471785][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.539699][ T6107] veth1_macvtap: left promiscuous mode [ 1241.550680][ T6107] veth0_macvtap: left promiscuous mode [ 1241.550873][ T6107] veth1_vlan: left promiscuous mode [ 1241.551005][ T6107] veth0_vlan: left promiscuous mode [ 1242.200610][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 1242.228925][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 1242.864085][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.205628][ T1214] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1243.376105][ T1214] usb 7-1: Using ep0 maxpacket: 16 [ 1243.383563][ T1214] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1243.396716][ T1214] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.396766][ T1214] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.396844][ T1214] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1243.396886][ T1214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.453853][ T1214] usb 7-1: config 0 descriptor?? [ 1243.592599][T13070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.690970][T13430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.708811][T13430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.800287][T13323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.800454][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.800644][T13323] bridge_slave_0: entered allmulticast mode [ 1243.825276][T13323] bridge_slave_0: entered promiscuous mode [ 1243.848499][T13323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.850533][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.872832][T13323] bridge_slave_1: entered allmulticast mode [ 1243.892848][T13323] bridge_slave_1: entered promiscuous mode [ 1243.941623][ T1214] usbhid 7-1:0.0: can't add hid device: -71 [ 1243.941803][ T1214] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1243.979779][ T1214] usb 7-1: USB disconnect, device number 23 [ 1244.183687][ T1372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.183825][ T1372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.443609][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.481362][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.481495][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.539912][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.901078][T13323] team0: Port device team_slave_0 added [ 1244.953923][T13323] team0: Port device team_slave_1 added [ 1245.275524][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.292807][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.300415][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.300442][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.369593][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.468408][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.477496][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.503792][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.849483][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.991172][T13323] hsr_slave_0: entered promiscuous mode [ 1248.013486][T13323] hsr_slave_1: entered promiscuous mode [ 1248.024621][T13323] debugfs: 'hsr0' already exists in 'hsr' [ 1248.030473][T13323] Cannot create hsr debugfs directory [ 1248.069159][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.069274][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.536257][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.536378][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.618046][T13285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1249.660902][T13285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1249.820547][T13285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1249.846360][T13285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1249.847296][T13285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1249.893157][T13285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1249.967384][T13285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1249.998399][T13285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.988830][T13056] veth0_vlan: entered promiscuous mode [ 1251.919333][T13285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.779622][T13285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.825003][T13070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.946715][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.946822][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.347934][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.348049][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.396005][T13323] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1253.482594][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.564746][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1253.577045][T13323] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1253.588579][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1253.598434][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1253.613968][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1253.638402][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1253.810945][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.850516][T13323] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1254.000524][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1254.117173][T13323] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1254.378390][T13323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.754718][ T5633] Bluetooth: hci2: command tx timeout [ 1256.849320][T13058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.867875][T13058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.876562][T13058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.887870][T13058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.896315][T13058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1257.964267][ T5633] Bluetooth: hci2: command tx timeout [ 1258.433924][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.954926][ T5633] Bluetooth: hci3: command tx timeout [ 1259.455134][ T2232] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1259.597325][T13323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.616536][ T2232] usb 7-1: Using ep0 maxpacket: 16 [ 1259.627405][ T2232] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1259.644630][ T2232] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.644691][ T2232] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1259.644789][ T2232] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1259.644840][ T2232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.720080][ T2232] usb 7-1: config 0 descriptor?? [ 1259.967818][T13595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.994423][ T5633] Bluetooth: hci2: command tx timeout [ 1260.004884][T13595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.302593][ T2232] usbhid 7-1:0.0: can't add hid device: -71 [ 1260.302754][ T2232] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1260.342483][ T2232] usb 7-1: USB disconnect, device number 24 [ 1260.552653][T13323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.900708][T13058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1260.912512][T13058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1260.921835][T13058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1260.935451][T13058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1260.956146][T13058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.034766][T13058] Bluetooth: hci3: command tx timeout [ 1261.053073][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.053185][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.152448][T13536] bridge_slave_1: left allmulticast mode [ 1261.152556][T13536] bridge_slave_1: left promiscuous mode [ 1261.152824][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.209716][T13536] bridge_slave_0: left allmulticast mode [ 1261.217160][T13536] bridge_slave_0: left promiscuous mode [ 1261.225206][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.012600][T13536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.031647][T13536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.044659][T13536] bond0 (unregistering): Released all slaves [ 1262.074484][T13058] Bluetooth: hci2: command tx timeout [ 1262.183265][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.183397][T13530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.355701][T13618] ip6erspan0: entered allmulticast mode [ 1262.486442][T13536] hsr_slave_0: left promiscuous mode [ 1262.502381][T13536] hsr_slave_1: left promiscuous mode [ 1262.510550][T13536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.533209][T13536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.607607][T13536] veth0_vlan: left promiscuous mode [ 1263.036269][T13058] Bluetooth: hci5: command tx timeout [ 1263.085202][ T5819] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1263.116555][T13058] Bluetooth: hci3: command tx timeout [ 1263.210030][T13536] team0 (unregistering): Port device team_slave_1 removed [ 1263.233537][T13536] team0 (unregistering): Port device team_slave_0 removed [ 1263.251885][ T5819] usb 7-1: not running at top speed; connect to a high speed hub [ 1263.251949][ T5819] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1263.270489][ T5819] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.270593][ T5819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1263.270636][ T5819] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1263.270724][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.339550][ T5819] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 1263.358312][ T5819] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1263.368818][ T5819] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1263.393554][ T5819] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1263.410481][ T5819] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1263.422410][ T5819] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1263.465081][ T5819] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1263.560920][ T5819] usb 7-1: USB disconnect, device number 25 [ 1263.613817][ T5819] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1263.648623][ T5819] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1263.669602][ T5819] keyspan 7-1:1.0: device disconnected [ 1264.389594][T13323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1265.556771][T13058] Bluetooth: hci5: command tx timeout [ 1265.556836][T13058] Bluetooth: hci3: command tx timeout [ 1267.598083][ T5633] Bluetooth: hci5: command tx timeout [ 1267.891935][T13285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.062055][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.076661][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.085706][T13516] bridge_slave_0: entered allmulticast mode [ 1269.104324][T13516] bridge_slave_0: entered promiscuous mode [ 1269.113308][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.113483][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.113659][T13516] bridge_slave_1: entered allmulticast mode [ 1269.140001][T13516] bridge_slave_1: entered promiscuous mode [ 1269.676757][ T5633] Bluetooth: hci5: command tx timeout [ 1269.766494][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.953449][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.086550][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.871'. [ 1270.368999][T13516] team0: Port device team_slave_0 added [ 1270.391039][T13516] team0: Port device team_slave_1 added [ 1270.466077][ T2232] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1270.661712][ T2232] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1270.670505][ T2232] usb 7-1: not running at top speed; connect to a high speed hub [ 1270.670581][ T2232] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1270.689946][ T2232] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1023 [ 1270.712035][ T2232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.712079][ T2232] usb 7-1: Product: syz [ 1270.712112][ T2232] usb 7-1: Manufacturer: 闪挮ⵤ婷ࢲ茲릇𗕛 [ 1270.712167][ T2232] usb 7-1: SerialNumber: syz [ 1270.981945][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.981987][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.982035][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.173104][ T2232] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1271.281702][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.281748][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.281849][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.405750][ T2232] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1271.471172][ T2232] usb 7-1: USB disconnect, device number 26 [ 1271.579785][T13494] udevd[13494]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1271.599309][T13323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.608819][T13576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.608973][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.609174][T13576] bridge_slave_0: entered allmulticast mode [ 1271.658483][T13576] bridge_slave_0: entered promiscuous mode [ 1271.696183][T13576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.696337][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.696576][T13576] bridge_slave_1: entered allmulticast mode [ 1271.733946][T13576] bridge_slave_1: entered promiscuous mode [ 1271.831667][T13285] veth0_vlan: entered promiscuous mode [ 1272.311160][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.341640][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.951814][T13285] veth1_vlan: entered promiscuous mode [ 1273.006604][T13516] hsr_slave_0: entered promiscuous mode [ 1273.018105][T13516] hsr_slave_1: entered promiscuous mode [ 1273.029341][T13516] debugfs: 'hsr0' already exists in 'hsr' [ 1273.037336][T13516] Cannot create hsr debugfs directory [ 1273.259267][T13576] team0: Port device team_slave_0 added [ 1273.373400][T13576] team0: Port device team_slave_1 added [ 1275.044780][T13722] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1276.409771][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.417234][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.443765][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.739325][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.739368][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.739425][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.157761][T13610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.157927][T13610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.158178][T13610] bridge_slave_0: entered allmulticast mode [ 1279.185568][T13610] bridge_slave_0: entered promiscuous mode [ 1279.385389][T13610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.385549][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.385791][T13610] bridge_slave_1: entered allmulticast mode [ 1279.412681][T13610] bridge_slave_1: entered promiscuous mode [ 1279.589737][T13576] hsr_slave_0: entered promiscuous mode [ 1279.599155][T13576] hsr_slave_1: entered promiscuous mode [ 1279.609361][T13576] debugfs: 'hsr0' already exists in 'hsr' [ 1279.616188][T13576] Cannot create hsr debugfs directory [ 1279.762048][T13610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.795153][T13610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.918052][T13285] veth0_macvtap: entered promiscuous mode [ 1280.246444][T13285] veth1_macvtap: entered promiscuous mode [ 1280.288430][T13610] team0: Port device team_slave_0 added [ 1280.465591][T13610] team0: Port device team_slave_1 added [ 1281.059051][T13610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.067514][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.094332][T13610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.125083][T13610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.133346][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.159777][T13610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.322736][T13285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.403030][T13323] veth0_vlan: entered promiscuous mode [ 1281.414515][T13536] bridge_slave_1: left allmulticast mode [ 1281.414559][T13536] bridge_slave_1: left promiscuous mode [ 1281.414839][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.444594][T13536] bridge_slave_0: left allmulticast mode [ 1281.444641][T13536] bridge_slave_0: left promiscuous mode [ 1281.444937][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.506249][T13536] bridge_slave_1: left allmulticast mode [ 1281.512087][T13536] bridge_slave_1: left promiscuous mode [ 1281.521007][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.533796][T13536] bridge_slave_0: left allmulticast mode [ 1281.541257][T13536] bridge_slave_0: left promiscuous mode [ 1281.541510][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.057790][T13536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.072300][T13536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.087136][T13536] bond0 (unregistering): Released all slaves [ 1282.383902][T13536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.410567][T13536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.421513][T13536] bond0 (unregistering): Released all slaves [ 1282.508536][ T9730] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1282.613565][ T5276] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1282.654931][ T9730] usb 7-1: Using ep0 maxpacket: 16 [ 1282.661034][ T9730] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1282.684091][ T9730] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.684251][ T9730] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1282.684300][ T9730] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1282.684344][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.735322][ T9730] usb 7-1: config 0 descriptor?? [ 1282.857501][T13285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.886502][T13536] hsr_slave_0: left promiscuous mode [ 1282.892744][T13536] hsr_slave_1: left promiscuous mode [ 1282.900418][T13536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.912574][T13536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.937965][T13536] hsr_slave_0: left promiscuous mode [ 1282.946448][T13536] hsr_slave_1: left promiscuous mode [ 1282.956159][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.970653][T13536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.981178][T13536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.990034][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.212803][ T9730] usbhid 7-1:0.0: can't add hid device: -71 [ 1283.222563][ T9730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1283.249036][ T9730] usb 7-1: USB disconnect, device number 27 [ 1283.467033][T13536] team0 (unregistering): Port device team_slave_1 removed [ 1283.490288][T13536] team0 (unregistering): Port device team_slave_0 removed [ 1286.268267][T13536] team0 (unregistering): Port device team_slave_1 removed [ 1286.306449][T13536] team0 (unregistering): Port device team_slave_0 removed [ 1286.892797][T13610] hsr_slave_0: entered promiscuous mode [ 1286.910807][T13610] hsr_slave_1: entered promiscuous mode [ 1286.920957][T13610] debugfs: 'hsr0' already exists in 'hsr' [ 1286.928364][T13610] Cannot create hsr debugfs directory [ 1286.976030][T13323] veth1_vlan: entered promiscuous mode [ 1287.053756][T13058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.072301][T13058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.082784][T13058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.096604][T13058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.110896][T13058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1288.732672][T13323] veth0_macvtap: entered promiscuous mode [ 1289.014626][T13323] veth1_macvtap: entered promiscuous mode [ 1289.209218][T13058] Bluetooth: hci4: command tx timeout [ 1289.367940][T13516] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1289.401873][T13516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.411417][T13516] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1289.470883][T13516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.499396][T13516] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1289.549088][T13516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.572122][T13516] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1289.642231][T13516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.875840][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1290.885486][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1290.897150][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1290.907590][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1290.918487][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1291.276155][ T5633] Bluetooth: hci4: command tx timeout [ 1293.349575][ T5633] Bluetooth: hci0: command tx timeout [ 1293.356665][ T5633] Bluetooth: hci4: command tx timeout [ 1295.121854][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.354575][ T5633] Bluetooth: hci0: command tx timeout [ 1295.369282][T13536] bridge_slave_1: left allmulticast mode [ 1295.375280][T13536] bridge_slave_1: left promiscuous mode [ 1295.381539][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.403072][T13536] bridge_slave_0: left allmulticast mode [ 1295.413281][T13536] bridge_slave_0: left promiscuous mode [ 1295.422591][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.435115][ T5633] Bluetooth: hci4: command tx timeout [ 1295.896341][T13536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.910650][T13536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.924877][T13536] bond0 (unregistering): Released all slaves [ 1296.091231][T13536] hsr_slave_0: left promiscuous mode [ 1296.098746][T13536] hsr_slave_1: left promiscuous mode [ 1296.099942][T13536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.100055][T13536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.125086][T13536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.132829][T13536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.162411][T13536] veth1_macvtap: left promiscuous mode [ 1296.173791][T13536] veth0_macvtap: left promiscuous mode [ 1296.180141][T13536] veth1_vlan: left promiscuous mode [ 1296.186033][T13536] veth0_vlan: left promiscuous mode [ 1296.602279][T13536] team0 (unregistering): Port device team_slave_1 removed [ 1296.631988][T13536] team0 (unregistering): Port device team_slave_0 removed [ 1296.973124][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.074637][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.074753][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.125680][ T1214] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1297.284638][ T1214] usb 7-1: Using ep0 maxpacket: 16 [ 1297.290551][ T1214] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1297.302282][ T1214] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.302336][ T1214] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1297.302410][ T1214] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1297.302457][ T1214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.355518][ T1214] usb 7-1: config 0 descriptor?? [ 1297.438701][ T5633] Bluetooth: hci0: command tx timeout [ 1297.558948][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.559100][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.687292][T13753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.695417][T13753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.703260][T13753] bridge_slave_0: entered allmulticast mode [ 1297.717592][T13753] bridge_slave_0: entered promiscuous mode [ 1297.746756][T13753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.757126][T13753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.765142][T13753] bridge_slave_1: entered allmulticast mode [ 1297.788423][T13753] bridge_slave_1: entered promiscuous mode [ 1297.801807][T13811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.821934][T13811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.863350][T13610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1297.899675][ T1214] input: HID 05ac:0269 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:0269.0006/input/input23 [ 1297.917003][T13610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1297.917967][T13610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1297.949543][T13610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1298.090739][ T1214] magicmouse 0003:05AC:0269.0006: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.6-1/input0 [ 1298.134275][ T1214] usb 7-1: USB disconnect, device number 28 [ 1298.203064][T13610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1298.251024][T13610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1298.479165][T13818] fido_id[13818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1298.553707][T13610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1298.595553][T13610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1298.648788][T13753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.672834][T13753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.055874][T13753] team0: Port device team_slave_0 added [ 1299.100217][T13753] team0: Port device team_slave_1 added [ 1299.194415][ T9730] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1299.337933][T13753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.346360][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.377895][ T9730] usb 7-1: not running at top speed; connect to a high speed hub [ 1299.378017][ T9730] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1299.399059][ T9730] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.413311][ T9730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.413380][ T9730] usb 7-1: Product: syz [ 1299.413418][ T9730] usb 7-1: Manufacturer: syz [ 1299.413441][ T9730] usb 7-1: SerialNumber: syz [ 1299.441657][T13753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.500984][ T9730] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 1299.501318][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1299.517572][ T5633] Bluetooth: hci0: command tx timeout [ 1299.517718][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 1299.555884][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1299.588498][ T9730] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1299.601692][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.601739][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.623986][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1299.642703][ T9730] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1299.661052][T13753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.668192][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.668219][T13753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.717813][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 1299.743147][ T9730] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1299.766616][ T9730] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 1299.802957][ T9730] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1299.883280][T13576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1299.906825][T13576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.921357][T13576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1299.953330][T13576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.103280][T13576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1300.153259][T13576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1300.502853][T13576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1300.520112][ T9730] usb 7-1: USB disconnect, device number 29 [ 1300.535057][T13576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1300.560615][ T9730] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1300.590283][ T9730] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1300.629237][ T9730] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1300.683036][ T9730] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1300.704510][ T9730] keyspan 7-1:1.0: device disconnected [ 1300.988664][T13753] hsr_slave_0: entered promiscuous mode [ 1300.998156][T13753] hsr_slave_1: entered promiscuous mode [ 1301.043340][ T144] bridge_slave_1: left allmulticast mode [ 1301.043459][ T144] bridge_slave_1: left promiscuous mode [ 1301.043752][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.072616][ T144] bridge_slave_0: left allmulticast mode [ 1301.081832][ T144] bridge_slave_0: left promiscuous mode [ 1301.092477][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.664980][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.679150][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.691430][ T144] bond0 (unregistering): Released all slaves [ 1303.916320][ T144] hsr_slave_0: left promiscuous mode [ 1303.922590][ T144] hsr_slave_1: left promiscuous mode [ 1303.923689][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.938495][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.968184][ T144] veth1_macvtap: left promiscuous mode [ 1303.968278][ T144] veth0_macvtap: left promiscuous mode [ 1303.968437][ T144] veth1_vlan: left promiscuous mode [ 1303.968508][ T144] veth0_vlan: left promiscuous mode [ 1304.720717][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1304.771554][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1305.310428][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.320905][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.331425][T13789] bridge_slave_0: entered allmulticast mode [ 1305.347102][T13789] bridge_slave_0: entered promiscuous mode [ 1305.518453][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.518596][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.518759][T13789] bridge_slave_1: entered allmulticast mode [ 1305.567057][T13789] bridge_slave_1: entered promiscuous mode [ 1305.667653][ T9730] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1305.835729][ T9730] usb 7-1: Using ep0 maxpacket: 16 [ 1305.842520][ T9730] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1305.855428][ T9730] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.855482][ T9730] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.855578][ T9730] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1305.855625][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.911986][ T9730] usb 7-1: config 0 descriptor?? [ 1305.950953][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.080180][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.127032][T13848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.127584][T13848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.313926][T13789] team0: Port device team_slave_0 added [ 1306.342322][T13789] team0: Port device team_slave_1 added [ 1306.372420][ T9730] usbhid 7-1:0.0: can't add hid device: -71 [ 1306.372582][ T9730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1306.410942][ T9730] usb 7-1: USB disconnect, device number 30 [ 1306.640414][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.640489][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.640534][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.694794][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.702908][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.730089][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.907710][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.110133][T13789] hsr_slave_0: entered promiscuous mode [ 1307.120490][T13789] hsr_slave_1: entered promiscuous mode [ 1307.135741][T13789] debugfs: 'hsr0' already exists in 'hsr' [ 1307.143055][T13789] Cannot create hsr debugfs directory [ 1307.165049][T13610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.760962][T13610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.900451][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.900585][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.087084][T13576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.097691][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.097812][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.681268][T13576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.851334][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.851446][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.926793][ T1214] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1308.945561][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.945685][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.982177][T13753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1309.002378][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.085596][ T1214] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1309.097046][ T1214] usb 7-1: config 0 has no interfaces? [ 1309.107356][ T1214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.120793][ T1214] usb 7-1: Product: syz [ 1309.120841][ T1214] usb 7-1: Manufacturer: syz [ 1309.120867][ T1214] usb 7-1: SerialNumber: syz [ 1309.162397][ T1214] usb 7-1: config 0 descriptor?? [ 1309.222663][T13753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1309.258916][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1309.259951][T13753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1309.299350][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1309.369779][T13753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1309.399423][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.426107][ T9730] usb 7-1: USB disconnect, device number 31 [ 1309.734026][T13516] veth0_vlan: entered promiscuous mode [ 1309.997040][T13516] veth1_vlan: entered promiscuous mode [ 1310.126969][T13576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1311.203017][T13516] veth0_macvtap: entered promiscuous mode [ 1311.335931][T13516] veth1_macvtap: entered promiscuous mode [ 1311.466638][T13789] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1311.499847][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1311.512331][T13789] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1311.564801][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.639214][T13789] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1311.680812][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1311.697540][T13789] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1311.731248][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1311.830084][T13753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.898100][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.043682][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.268285][T13753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.277153][T13542] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.288469][T13536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.289473][T13536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.289566][T13536] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.439621][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.439752][T13536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.637603][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.637734][T13536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.533573][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.702281][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.793874][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.794031][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.912225][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.912366][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.058838][T13610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.890030][T13576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.977303][T13610] veth0_vlan: entered promiscuous mode [ 1315.132138][T13610] veth1_vlan: entered promiscuous mode [ 1315.302624][T13058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.315257][T13058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.326953][T13058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.339145][T13058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.348592][T13058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.046427][T13610] veth0_macvtap: entered promiscuous mode [ 1316.759365][T10904] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.941337][T13610] veth1_macvtap: entered promiscuous mode [ 1317.671774][T13058] Bluetooth: hci1: command tx timeout [ 1317.691633][T10904] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.676306][T13058] Bluetooth: hci1: command tx timeout [ 1320.641847][T13610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.160113][T10904] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.187179][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1321.200311][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1321.211541][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1321.233712][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1321.243924][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1321.755142][T13058] Bluetooth: hci1: command tx timeout [ 1322.093560][T10904] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.114317][ T9730] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1322.284259][ T9730] usb 7-1: Using ep0 maxpacket: 16 [ 1322.290758][ T9730] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1322.312006][ T9730] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.312059][ T9730] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.312144][ T9730] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1322.312186][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.383228][ T9730] usb 7-1: config 0 descriptor?? [ 1322.471154][T13753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.612558][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.654646][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.825800][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1322.845564][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1322.856319][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1322.876719][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1322.888841][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1322.977385][ T9730] usbhid 7-1:0.0: can't add hid device: -71 [ 1322.977561][ T9730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1323.027276][ T9730] usb 7-1: USB disconnect, device number 32 [ 1323.278734][T13058] Bluetooth: hci2: command tx timeout [ 1323.780200][T13753] veth0_vlan: entered promiscuous mode [ 1323.857766][T13058] Bluetooth: hci1: command tx timeout [ 1324.190670][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.699207][T13753] veth1_vlan: entered promiscuous mode [ 1324.858837][T10904] bridge_slave_1: left allmulticast mode [ 1324.858888][T10904] bridge_slave_1: left promiscuous mode [ 1324.859188][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.906479][T10904] bridge_slave_0: left allmulticast mode [ 1324.906531][T10904] bridge_slave_0: left promiscuous mode [ 1324.906810][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.954979][T13058] Bluetooth: hci3: command tx timeout [ 1325.356904][T13058] Bluetooth: hci2: command tx timeout [ 1325.748856][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.778626][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.791512][T10904] bond0 (unregistering): Released all slaves [ 1325.945345][T10904] hsr_slave_0: left promiscuous mode [ 1325.952311][T10904] hsr_slave_1: left promiscuous mode [ 1325.953447][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.953519][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.987669][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.987720][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.053403][T10904] veth1_macvtap: left promiscuous mode [ 1326.074305][T10904] veth0_macvtap: left promiscuous mode [ 1326.074493][T10904] veth1_vlan: left promiscuous mode [ 1326.074652][T10904] veth0_vlan: left promiscuous mode [ 1327.009616][T10904] team0 (unregistering): Port device team_slave_1 removed [ 1327.034574][T13058] Bluetooth: hci3: command tx timeout [ 1327.061228][T10904] team0 (unregistering): Port device team_slave_0 removed [ 1327.435061][T13058] Bluetooth: hci2: command tx timeout [ 1328.450276][T13753] veth0_macvtap: entered promiscuous mode [ 1328.689714][T13753] veth1_macvtap: entered promiscuous mode [ 1329.117017][T13058] Bluetooth: hci3: command tx timeout [ 1329.453957][T13753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.515031][T13058] Bluetooth: hci2: command tx timeout [ 1329.829370][T13753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.146010][ T9730] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1330.178453][T13789] veth0_vlan: entered promiscuous mode [ 1330.306256][ T9730] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1330.323789][ T9730] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.323928][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.353528][ T9730] usb 7-1: config 0 descriptor?? [ 1330.377599][ T9730] pwc: Askey VC010 type 2 USB webcam detected. [ 1330.593490][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.593640][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.593833][T13946] bridge_slave_0: entered allmulticast mode [ 1330.622843][T13946] bridge_slave_0: entered promiscuous mode [ 1330.793426][ T9730] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1330.806145][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.813893][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.821748][T13946] bridge_slave_1: entered allmulticast mode [ 1330.832266][ T9730] pwc: recv_control_msg error -32 req 02 val 2700 [ 1330.841833][ T9730] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1330.849800][ T9730] pwc: recv_control_msg error -32 req 04 val 1000 [ 1330.861349][T13946] bridge_slave_1: entered promiscuous mode [ 1330.868736][ T9730] pwc: recv_control_msg error -32 req 04 val 1300 [ 1330.880273][ T9730] pwc: recv_control_msg error -32 req 04 val 1400 [ 1330.889930][ T9730] pwc: recv_control_msg error -32 req 02 val 2000 [ 1330.905000][ T9730] pwc: recv_control_msg error -32 req 02 val 2100 [ 1330.912409][ T9730] pwc: recv_control_msg error -32 req 04 val 1500 [ 1330.926792][ T9730] pwc: recv_control_msg error -32 req 02 val 2500 [ 1330.941046][ T9730] pwc: recv_control_msg error -32 req 02 val 2400 [ 1330.952734][ T9730] pwc: recv_control_msg error -32 req 02 val 2600 [ 1330.973857][ T9730] pwc: recv_control_msg error -32 req 02 val 2900 [ 1330.986064][ T9730] pwc: recv_control_msg error -71 req 02 val 2800 [ 1330.995492][ T9730] pwc: recv_control_msg error -71 req 04 val 1100 [ 1331.002316][ T9730] pwc: recv_control_msg error -71 req 04 val 1200 [ 1331.063874][ T9730] pwc: Registered as video103. [ 1331.071714][ T7385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.083003][ T7385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.083888][ T7385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.083949][ T7385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.161357][ T9730] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 1331.194726][T13058] Bluetooth: hci3: command tx timeout [ 1331.225680][ T9730] usb 7-1: USB disconnect, device number 33 [ 1331.311883][T13789] veth1_vlan: entered promiscuous mode [ 1331.574684][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.949858][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.740864][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.751509][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.762452][T13977] bridge_slave_0: entered allmulticast mode [ 1332.777790][T13977] bridge_slave_0: entered promiscuous mode [ 1332.792869][T13946] team0: Port device team_slave_0 added [ 1332.818169][T13946] team0: Port device team_slave_1 added [ 1332.908144][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.918500][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.927168][T13977] bridge_slave_1: entered allmulticast mode [ 1332.948313][T13977] bridge_slave_1: entered promiscuous mode [ 1333.656510][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.664313][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.692314][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.722133][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1333.799996][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.815226][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.822535][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.850120][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.894636][T13530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.894745][T13530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.009487][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.287790][T13946] hsr_slave_0: entered promiscuous mode [ 1334.298286][T13946] hsr_slave_1: entered promiscuous mode [ 1334.311600][T13946] debugfs: 'hsr0' already exists in 'hsr' [ 1334.319827][T13946] Cannot create hsr debugfs directory [ 1334.332233][T13789] veth0_macvtap: entered promiscuous mode [ 1334.427828][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.436160][T13999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.443515][T13999] bridge_slave_0: entered allmulticast mode [ 1334.459772][T13999] bridge_slave_0: entered promiscuous mode [ 1334.479517][T13977] team0: Port device team_slave_0 added [ 1334.488075][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.488216][T13999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.488393][T13999] bridge_slave_1: entered allmulticast mode [ 1334.519993][T13999] bridge_slave_1: entered promiscuous mode [ 1334.544729][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.544778][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.577849][T13977] team0: Port device team_slave_1 added [ 1334.813488][T13789] veth1_macvtap: entered promiscuous mode [ 1334.922056][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.922114][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.922232][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.999470][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.125239][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.134559][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.161214][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.200133][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.545568][T13999] team0: Port device team_slave_0 added [ 1335.610723][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.635669][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.659877][T13999] team0: Port device team_slave_1 added [ 1335.669529][T14126] tmpfs: Bad value for 'mpol' [ 1336.124957][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.132242][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.160901][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.238715][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 1336.320786][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.329917][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.356741][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.429318][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.639307][T13977] hsr_slave_0: entered promiscuous mode [ 1336.650704][T13977] hsr_slave_1: entered promiscuous mode [ 1336.651634][T13977] debugfs: 'hsr0' already exists in 'hsr' [ 1336.651720][T13977] Cannot create hsr debugfs directory [ 1336.827937][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.213224][T13999] hsr_slave_0: entered promiscuous mode [ 1337.229057][T13999] hsr_slave_1: entered promiscuous mode [ 1337.229919][T13999] debugfs: 'hsr0' already exists in 'hsr' [ 1337.229963][T13999] Cannot create hsr debugfs directory [ 1337.369940][T14145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.389874][T14145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.456820][T13530] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.457007][T13530] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.457105][T13530] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.457162][T13530] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.672400][T10904] bridge_slave_1: left allmulticast mode [ 1337.672527][T10904] bridge_slave_1: left promiscuous mode [ 1337.672744][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.702345][T10904] bridge_slave_0: left allmulticast mode [ 1337.702469][T10904] bridge_slave_0: left promiscuous mode [ 1337.702706][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.761249][T10904] bridge_slave_1: left allmulticast mode [ 1337.767221][T10904] bridge_slave_1: left promiscuous mode [ 1337.767484][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.785529][T10904] bridge_slave_0: left allmulticast mode [ 1337.792881][T10904] bridge_slave_0: left promiscuous mode [ 1337.799584][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.128729][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.147578][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.162177][T10904] bond0 (unregistering): Released all slaves [ 1341.236471][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.252270][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.272763][T10904] bond0 (unregistering): Released all slaves [ 1341.482560][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1342.080354][T10904] hsr_slave_0: left promiscuous mode [ 1342.089879][T10904] hsr_slave_1: left promiscuous mode [ 1342.101499][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.111207][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.125353][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.150438][T10904] hsr_slave_0: left promiscuous mode [ 1342.170611][T10904] hsr_slave_1: left promiscuous mode [ 1342.178816][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.190671][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.248952][T10904] veth1_macvtap: left promiscuous mode [ 1342.254702][T10904] veth0_macvtap: left promiscuous mode [ 1342.260660][T10904] veth1_vlan: left promiscuous mode [ 1342.266473][T10904] veth0_vlan: left promiscuous mode [ 1345.396111][T14175] zram0: detected capacity change from 0 to 8 [ 1345.758365][T10904] team0 (unregistering): Port device team_slave_1 removed [ 1345.802695][T10904] team0 (unregistering): Port device team_slave_0 removed [ 1346.237219][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.237734][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.479791][T10904] team0 (unregistering): Port device team_slave_1 removed [ 1346.512235][T10904] team0 (unregistering): Port device team_slave_0 removed [ 1347.651446][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.682557][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.481549][ T7385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.481629][ T7385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.991163][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.991213][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.947826][T13946] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1354.010961][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1354.270506][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1354.281532][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1354.291014][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1354.302622][T13946] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1354.312507][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1354.332779][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1354.425809][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1354.426810][T13946] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1354.530652][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.551318][T13946] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1354.627634][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1356.380458][T10904] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.394763][T13058] Bluetooth: hci5: command tx timeout [ 1357.086887][T10904] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.146166][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1357.492330][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.647683][T10904] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.677395][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.691819][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.831984][T10904] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.847878][T14232] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 1357.864335][ T5819] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1357.905850][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.918717][T14232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1358.027448][ T5819] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1358.042372][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.051638][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.051708][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.083496][ T5819] usb 7-1: config 0 descriptor?? [ 1358.113912][ T5819] pwc: Askey VC010 type 2 USB webcam detected. [ 1358.152133][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.152238][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.228678][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.228821][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.475778][T13058] Bluetooth: hci5: command tx timeout [ 1358.545489][ T5819] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1358.553444][ T5819] pwc: recv_control_msg error -32 req 02 val 2700 [ 1358.566831][ T5819] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1358.579136][ T5819] pwc: recv_control_msg error -32 req 04 val 1000 [ 1358.593343][ T5819] pwc: recv_control_msg error -32 req 04 val 1300 [ 1358.602500][ T5819] pwc: recv_control_msg error -32 req 04 val 1400 [ 1358.613576][ T5819] pwc: recv_control_msg error -32 req 02 val 2000 [ 1358.628366][ T5819] pwc: recv_control_msg error -32 req 02 val 2100 [ 1358.638398][ T5819] pwc: recv_control_msg error -32 req 04 val 1500 [ 1358.658187][ T5819] pwc: recv_control_msg error -32 req 02 val 2500 [ 1358.667657][ T5819] pwc: recv_control_msg error -32 req 02 val 2400 [ 1358.675507][ T5819] pwc: recv_control_msg error -32 req 02 val 2600 [ 1358.688758][ T5819] pwc: recv_control_msg error -32 req 02 val 2900 [ 1358.695624][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1358.703490][ T5819] pwc: recv_control_msg error -32 req 02 val 2800 [ 1358.710467][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1358.725682][ T5819] pwc: recv_control_msg error -32 req 04 val 1100 [ 1358.735991][ T5819] pwc: recv_control_msg error -71 req 04 val 1200 [ 1358.781919][ T5819] pwc: Registered as video103. [ 1358.794987][ T5819] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 1358.846141][ T5819] usb 7-1: USB disconnect, device number 34 [ 1359.069616][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.098598][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.179303][T10904] bridge_slave_1: left allmulticast mode [ 1359.188815][T10904] bridge_slave_1: left promiscuous mode [ 1359.197267][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.219380][T10904] bridge_slave_0: left allmulticast mode [ 1359.219424][T10904] bridge_slave_0: left promiscuous mode [ 1359.219675][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.703750][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.738406][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.768041][T10904] bond0 (unregistering): Released all slaves [ 1360.002789][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.018651][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.144396][T13425] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1360.306054][T13425] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1360.319493][T13425] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.319613][T13425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.351715][T13425] usb 7-1: config 0 descriptor?? [ 1360.398887][T13425] pwc: Askey VC010 type 2 USB webcam detected. [ 1360.480916][T13999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1360.503123][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.565058][T13058] Bluetooth: hci5: command tx timeout [ 1360.618792][T13999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1360.647583][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1360.698892][T10904] hsr_slave_0: left promiscuous mode [ 1360.707272][T10904] hsr_slave_1: left promiscuous mode [ 1360.720596][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.730275][T10904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.741076][T10904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.748963][T10904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.765710][T10904] veth1_macvtap: left promiscuous mode [ 1360.771500][T10904] veth0_macvtap: left promiscuous mode [ 1360.778819][T10904] veth1_vlan: left promiscuous mode [ 1360.784669][T10904] veth0_vlan: left promiscuous mode [ 1360.841053][T13425] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1360.851353][T13425] pwc: recv_control_msg error -32 req 02 val 2700 [ 1360.859247][T13425] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1360.867061][T13425] pwc: recv_control_msg error -32 req 04 val 1000 [ 1360.877546][T13425] pwc: recv_control_msg error -32 req 04 val 1300 [ 1360.888002][T13425] pwc: recv_control_msg error -32 req 04 val 1400 [ 1360.896072][T13425] pwc: recv_control_msg error -32 req 02 val 2000 [ 1360.905669][T13425] pwc: recv_control_msg error -32 req 02 val 2100 [ 1360.913769][T13425] pwc: recv_control_msg error -32 req 04 val 1500 [ 1360.930009][T13425] pwc: recv_control_msg error -32 req 02 val 2500 [ 1360.941780][T13425] pwc: recv_control_msg error -32 req 02 val 2400 [ 1360.951423][T13425] pwc: recv_control_msg error -32 req 02 val 2600 [ 1360.965816][T13425] pwc: recv_control_msg error -32 req 02 val 2900 [ 1361.037278][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.037352][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.189080][T13425] pwc: recv_control_msg error -71 req 04 val 1100 [ 1361.198168][T13425] pwc: recv_control_msg error -71 req 04 val 1200 [ 1361.217234][T13425] pwc: Registered as video103. [ 1361.243961][T13425] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 1361.303107][T13425] usb 7-1: USB disconnect, device number 35 [ 1361.693350][T10904] team0 (unregistering): Port device team_slave_1 removed [ 1361.722307][T10904] team0 (unregistering): Port device team_slave_0 removed [ 1362.245000][T13999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1362.278555][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1362.279718][T13999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1362.341037][T13999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1362.452418][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 1362.607285][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.607816][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.634422][T13058] Bluetooth: hci5: command tx timeout [ 1363.350508][T14204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.350678][T14204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.350882][T14204] bridge_slave_0: entered allmulticast mode [ 1363.360341][ T9730] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1363.406884][T14204] bridge_slave_0: entered promiscuous mode [ 1363.437081][T14204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.455801][T14204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.456013][T14204] bridge_slave_1: entered allmulticast mode [ 1363.484480][T14204] bridge_slave_1: entered promiscuous mode [ 1363.523913][ T9730] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1363.536739][ T9730] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1363.536793][ T9730] usb 7-1: config 0 has no interface number 0 [ 1363.555547][ T9730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.555624][ T9730] usb 7-1: Product: syz [ 1363.555675][ T9730] usb 7-1: Manufacturer: syz [ 1363.555710][ T9730] usb 7-1: SerialNumber: syz [ 1363.613782][ T9730] usb 7-1: config 0 descriptor?? [ 1363.682778][T13977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1363.737589][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.851627][ T9730] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1363.877547][T14204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.897008][ T9730] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1363.909126][ T9730] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1363.920309][ T9730] usb 7-1: media controller created [ 1363.956202][T13977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1363.982603][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.983629][T13977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1364.031035][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1364.051768][ T9730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1364.073183][T14204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.122519][T13977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1364.157266][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1364.283516][T14289] netlink: 'syz.6.932': attribute type 10 has an invalid length. [ 1364.435608][T14204] team0: Port device team_slave_0 added [ 1364.504168][T14204] team0: Port device team_slave_1 added [ 1364.768154][T14204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.778942][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.806839][T14204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.896099][T14204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.903468][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.932761][T14204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.264966][T14204] hsr_slave_0: entered promiscuous mode [ 1365.273856][T14204] hsr_slave_1: entered promiscuous mode [ 1365.288444][ T9730] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1365.302206][T14204] debugfs: 'hsr0' already exists in 'hsr' [ 1365.302256][T14204] Cannot create hsr debugfs directory [ 1365.549947][ T9730] usb 7-1: USB disconnect, device number 36 [ 1366.013520][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.022853][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.230235][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.312217][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.453893][T14317] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1366.575607][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.678686][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.678830][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.009917][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.010064][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.156910][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.511191][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.705621][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.705754][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.827457][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.827595][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.529266][T13946] veth0_vlan: entered promiscuous mode [ 1369.667315][T14351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.941'. [ 1369.792215][T14354] netlink: 'syz.6.942': attribute type 13 has an invalid length. [ 1369.927253][T13946] veth1_vlan: entered promiscuous mode [ 1370.559689][T14204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1370.589846][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1370.606350][T14204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1370.637013][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1370.690723][T14204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1370.729866][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1370.781178][T14204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1370.831661][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1371.189644][T13946] veth0_macvtap: entered promiscuous mode [ 1371.295113][T13946] veth1_macvtap: entered promiscuous mode [ 1375.052784][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.672386][T14204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.807167][T14204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.856646][T10904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.856766][T10904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.931123][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.931265][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.012267][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.312251][T13999] veth0_vlan: entered promiscuous mode [ 1380.572100][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1380.583844][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1380.603839][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1380.616917][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1380.629177][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1381.106208][T13999] veth1_vlan: entered promiscuous mode [ 1381.179619][T14420] futex_wake_op: syz.6.947 tries to shift op by 144; fix this program [ 1381.862145][T13058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1381.874274][T13058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1381.883427][T13058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1381.904238][T13058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1381.920964][T13058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1382.689463][T13999] veth0_macvtap: entered promiscuous mode [ 1382.714673][T13058] Bluetooth: hci0: command tx timeout [ 1383.775889][T13753] ffs_data_put(): freeing [ 1383.995099][T13058] Bluetooth: hci1: command tx timeout [ 1384.367755][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1384.384613][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1384.395816][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1384.409653][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1384.417315][ T9730] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1384.441249][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1384.826505][T13058] Bluetooth: hci0: command tx timeout [ 1384.844324][ T9730] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1384.873836][ T9730] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.873908][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.916907][ T9730] usb 7-1: config 0 descriptor?? [ 1385.408590][ T9730] pwc: Askey VC010 type 2 USB webcam detected. [ 1385.628958][T13425] usb 1-1: USB disconnect, device number 17 [ 1386.061036][ T9730] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1386.074453][T13058] Bluetooth: hci1: command tx timeout [ 1386.084395][ T9730] pwc: recv_control_msg error -32 req 02 val 2700 [ 1386.123732][ T9730] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1386.137190][ T9730] pwc: recv_control_msg error -32 req 04 val 1000 [ 1386.168163][ T9730] pwc: recv_control_msg error -32 req 04 val 1300 [ 1386.190951][ T9730] pwc: recv_control_msg error -32 req 04 val 1400 [ 1386.217271][ T9730] pwc: recv_control_msg error -32 req 02 val 2000 [ 1386.245078][ T9730] pwc: recv_control_msg error -32 req 02 val 2100 [ 1386.279158][ T9730] pwc: recv_control_msg error -32 req 04 val 1500 [ 1386.295911][ T9730] pwc: recv_control_msg error -32 req 02 val 2500 [ 1386.307234][ T9730] pwc: recv_control_msg error -32 req 02 val 2400 [ 1386.382465][T14204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.546411][ T9730] pwc: recv_control_msg error -71 req 02 val 2900 [ 1386.554707][T13058] Bluetooth: hci2: command tx timeout [ 1386.566333][ T9730] pwc: recv_control_msg error -71 req 02 val 2800 [ 1386.577463][ T9730] pwc: recv_control_msg error -71 req 04 val 1100 [ 1386.589327][ T9730] pwc: recv_control_msg error -71 req 04 val 1200 [ 1386.681525][ T9730] pwc: Registered as video103. [ 1386.701622][ T9730] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 1386.766073][T14477] netlink: 168 bytes leftover after parsing attributes in process `syz.0.952'. [ 1386.985208][T13058] Bluetooth: hci0: command tx timeout [ 1387.018966][ T9730] usb 7-1: USB disconnect, device number 37 [ 1387.956910][ T1169] bridge_slave_1: left allmulticast mode [ 1387.956959][ T1169] bridge_slave_1: left promiscuous mode [ 1387.957161][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.997421][ T1169] bridge_slave_0: left allmulticast mode [ 1388.009998][ T1169] bridge_slave_0: left promiscuous mode [ 1388.017754][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.154823][T13058] Bluetooth: hci1: command tx timeout [ 1388.634445][T13058] Bluetooth: hci2: command tx timeout [ 1389.034164][T13058] Bluetooth: hci0: command tx timeout [ 1390.234450][T13058] Bluetooth: hci1: command tx timeout [ 1390.714859][T13058] Bluetooth: hci2: command tx timeout [ 1392.794840][T13058] Bluetooth: hci2: command tx timeout [ 1393.133249][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.158702][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.180638][ T1169] bond0 (unregistering): Released all slaves [ 1395.520994][ T1169] hsr_slave_0: left promiscuous mode [ 1395.532321][ T1169] hsr_slave_1: left promiscuous mode [ 1395.533152][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.533202][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.577025][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.608407][ T1169] veth1_macvtap: left promiscuous mode [ 1395.608522][ T1169] veth0_macvtap: left promiscuous mode [ 1395.608649][ T1169] veth1_vlan: left promiscuous mode [ 1395.608746][ T1169] veth0_vlan: left promiscuous mode [ 1395.696936][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 1396.176161][ T1214] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1396.341436][ T1214] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1396.350738][ T1214] usb 1-1: not running at top speed; connect to a high speed hub [ 1396.350805][ T1214] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1396.379284][ T1214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1023 [ 1396.408292][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.408352][ T1214] usb 1-1: Product: syz [ 1396.408396][ T1214] usb 1-1: Manufacturer: 闪挮ⵤ婷ࢲ茲릇𗕛 [ 1396.408485][ T1214] usb 1-1: SerialNumber: syz [ 1396.688344][ T1214] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1396.704035][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 1396.735513][T13425] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1396.745698][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 1396.819629][ T1214] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1396.849290][ T1214] usb 1-1: USB disconnect, device number 18 [ 1396.886899][T13425] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1396.902988][T13425] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.903057][T13425] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1396.903096][T13425] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1396.945781][T13425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.945838][T13425] usb 7-1: Product: syz [ 1396.945912][T13425] usb 7-1: Manufacturer: syz [ 1396.945947][T13425] usb 7-1: SerialNumber: syz [ 1396.991478][T13425] usb 7-1: config 0 descriptor?? [ 1397.011224][T14530] udevd[14530]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1397.039791][T13425] usb 7-1: ucan: probing device on interface #0 [ 1397.049578][T13425] usb 7-1: ucan: invalid EP count (0) [ 1397.055201][T13425] usb 7-1: ucan: probe failed; try to update the device firmware [ 1397.258239][ T1214] usb 7-1: USB disconnect, device number 38 [ 1398.287426][T13058] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1398.287486][T13058] CPU: 0 UID: 0 PID: 13058 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.287524][T13058] Tainted: [L]=SOFTLOCKUP [ 1398.287532][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1398.287545][T13058] Workqueue: hci4 hci_rx_work [ 1398.287572][T13058] Call Trace: [ 1398.287581][T13058] [ 1398.287590][T13058] dump_stack_lvl+0xe8/0x150 [ 1398.287622][T13058] sysfs_create_dir_ns+0x271/0x2a0 [ 1398.287655][T13058] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1398.287687][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.287710][T13058] ? do_raw_spin_unlock+0xf5/0x200 [ 1398.287742][T13058] kobject_add_internal+0x622/0xcd0 [ 1398.287770][T13058] kobject_add+0x163/0x240 [ 1398.287798][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.287827][T13058] ? __pfx_kobject_add+0x10/0x10 [ 1398.287855][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.287881][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.287907][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.287930][T13058] ? get_device_parent+0x366/0x3a0 [ 1398.287961][T13058] device_add+0x3fa/0xb80 [ 1398.287991][T13058] hci_conn_add_sysfs+0xd5/0x210 [ 1398.288018][T13058] le_conn_complete_evt+0xfe3/0x16d0 [ 1398.288055][T13058] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1398.288086][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288109][T13058] ? __mutex_unlock_slowpath+0x731/0x900 [ 1398.288141][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288164][T13058] ? skb_pull_data+0xf0/0x200 [ 1398.288191][T13058] hci_le_conn_complete_evt+0x187/0x470 [ 1398.288227][T13058] hci_event_packet+0x67a/0xf10 [ 1398.288258][T13058] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1398.288285][T13058] ? __pfx_hci_event_packet+0x10/0x10 [ 1398.288315][T13058] ? audit_init_watch+0xb0/0x170 [ 1398.288347][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288370][T13058] ? hci_send_to_monitor+0xe2/0x590 [ 1398.288393][T13058] hci_rx_work+0x3ee/0x1020 [ 1398.288440][T13058] ? process_scheduled_works+0x97a/0x1630 [ 1398.288472][T13058] process_scheduled_works+0xc3d/0x1630 [ 1398.288498][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288548][T13058] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.288580][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288603][T13058] ? assign_work+0x3cf/0x5d0 [ 1398.288633][T13058] worker_thread+0xa47/0xfb0 [ 1398.288663][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288695][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288718][T13058] ? __kthread_parkme+0x71/0x1f0 [ 1398.288756][T13058] kthread+0x38b/0x480 [ 1398.288776][T13058] ? __pfx_worker_thread+0x10/0x10 [ 1398.288802][T13058] ? __pfx_kthread+0x10/0x10 [ 1398.288822][T13058] ret_from_fork+0x514/0xb70 [ 1398.288857][T13058] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.288888][T13058] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1398.288911][T13058] ? __switch_to+0xc89/0x1420 [ 1398.288942][T13058] ? __pfx_kthread+0x10/0x10 [ 1398.288963][T13058] ret_from_fork_asm+0x1a/0x30 [ 1398.289009][T13058] [ 1398.289133][T13058] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1398.289185][T13058] Bluetooth: hci4: failed to register connection device [ 1398.574190][T13425] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1398.759934][T14204] veth0_vlan: entered promiscuous mode [ 1398.776371][T13425] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1398.792694][T13425] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.792783][T13425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.823449][T13425] usb 7-1: config 0 descriptor?? [ 1398.852777][T13425] pwc: Askey VC010 type 2 USB webcam detected. [ 1399.279585][T13425] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1399.291028][T13425] pwc: recv_control_msg error -32 req 02 val 2700 [ 1399.302604][T13425] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1399.319396][T13425] pwc: recv_control_msg error -32 req 04 val 1000 [ 1399.338917][T13425] pwc: recv_control_msg error -32 req 04 val 1300 [ 1399.354957][T13425] pwc: recv_control_msg error -32 req 04 val 1400 [ 1399.377277][T13425] pwc: recv_control_msg error -32 req 02 val 2000 [ 1399.389616][T13425] pwc: recv_control_msg error -32 req 02 val 2100 [ 1399.402705][T13425] pwc: recv_control_msg error -32 req 04 val 1500 [ 1399.414759][T13425] pwc: recv_control_msg error -32 req 02 val 2500 [ 1399.442897][T13425] pwc: recv_control_msg error -32 req 02 val 2400 [ 1399.641084][T14563] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.641124][T14563] binder: 14562:14563 ioctl 4018620d 2000000002c0 returned -16 [ 1399.657411][T13425] pwc: recv_control_msg error -71 req 02 val 2900 [ 1399.664209][T13425] pwc: recv_control_msg error -71 req 02 val 2800 [ 1399.666300][T13425] pwc: recv_control_msg error -71 req 04 val 1100 [ 1399.673013][T13425] pwc: recv_control_msg error -71 req 04 val 1200 [ 1399.705261][T13425] pwc: Registered as video103. [ 1399.722070][T13425] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 1399.753616][T13425] usb 7-1: USB disconnect, device number 39 [ 1399.824041][T14204] veth1_vlan: entered promiscuous mode [ 1401.076123][T14583] netlink: 168 bytes leftover after parsing attributes in process `syz.0.965'. [ 1401.926232][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1401.934373][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.934489][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.934629][T14410] bridge_slave_0: entered allmulticast mode [ 1401.969277][T14410] bridge_slave_0: entered promiscuous mode [ 1401.982429][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.987124][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.009400][T14410] bridge_slave_1: entered allmulticast mode [ 1402.023565][T14410] bridge_slave_1: entered promiscuous mode [ 1402.275653][T14410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.388966][T14204] veth0_macvtap: entered promiscuous mode [ 1402.411403][T14410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.568827][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.568977][T14426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.569124][T14426] bridge_slave_0: entered allmulticast mode [ 1402.596598][T14426] bridge_slave_0: entered promiscuous mode [ 1402.676070][T14410] team0: Port device team_slave_0 added [ 1402.752202][T14204] veth1_macvtap: entered promiscuous mode [ 1402.769312][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.769435][T14426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.769593][T14426] bridge_slave_1: entered allmulticast mode [ 1402.802402][T14426] bridge_slave_1: entered promiscuous mode [ 1402.828614][T14410] team0: Port device team_slave_1 added [ 1403.239636][T14410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.239682][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.239734][T14410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.400432][T14426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.417072][T14410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.429251][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.455496][T14410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.592138][T14426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.919989][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.920114][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.920263][T14461] bridge_slave_0: entered allmulticast mode [ 1403.956860][T14461] bridge_slave_0: entered promiscuous mode [ 1403.970155][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.980927][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.981075][T14461] bridge_slave_1: entered allmulticast mode [ 1403.999661][T14461] bridge_slave_1: entered promiscuous mode [ 1404.090557][T14204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.109983][T14426] team0: Port device team_slave_0 added [ 1404.128313][T14426] team0: Port device team_slave_1 added [ 1404.140889][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 1404.292894][T14410] hsr_slave_0: entered promiscuous mode [ 1404.308448][T14410] hsr_slave_1: entered promiscuous mode [ 1404.320319][T14410] debugfs: 'hsr0' already exists in 'hsr' [ 1404.320365][T14410] Cannot create hsr debugfs directory [ 1404.488568][T14461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.515382][ T9730] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1404.677352][ T9730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1404.685844][ T9730] usb 1-1: not running at top speed; connect to a high speed hub [ 1404.685906][ T9730] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1404.704508][ T9730] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1023 [ 1404.722168][ T9730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.722219][ T9730] usb 1-1: Product: syz [ 1404.722260][ T9730] usb 1-1: Manufacturer: 闪挮ⵤ婷ࢲ茲릇𗕛 [ 1404.722294][ T9730] usb 1-1: SerialNumber: syz [ 1404.785551][T14204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.837841][T14426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.837891][T14426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.837998][T14426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.899424][T14461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.997982][T14426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.005334][T14426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.031722][T14426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.058872][ T9730] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1405.218410][ T9730] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1405.258071][ T9730] usb 1-1: USB disconnect, device number 19 [ 1405.333278][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1405.363076][T14530] udevd[14530]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1405.498201][T14461] team0: Port device team_slave_0 added [ 1405.624782][T14461] team0: Port device team_slave_1 added [ 1407.895043][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.895183][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.895243][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.895285][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.960180][T14426] hsr_slave_0: entered promiscuous mode [ 1407.980354][T14426] hsr_slave_1: entered promiscuous mode [ 1407.981031][T14426] debugfs: 'hsr0' already exists in 'hsr' [ 1407.981085][T14426] Cannot create hsr debugfs directory [ 1408.218245][T14461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.218295][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.218348][T14461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.793953][T14461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.801358][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.832095][T14461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.344142][ T8047] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1413.507819][ T8047] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1413.525648][ T8047] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.526270][ T8047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.564409][ T8047] usb 1-1: config 0 descriptor?? [ 1413.593711][ T8047] pwc: Askey VC010 type 2 USB webcam detected. [ 1413.737300][T14461] hsr_slave_0: entered promiscuous mode [ 1413.746559][T14461] hsr_slave_1: entered promiscuous mode [ 1413.754965][T14461] debugfs: 'hsr0' already exists in 'hsr' [ 1413.755396][T14461] Cannot create hsr debugfs directory [ 1414.023272][ T8047] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1414.033374][ T8047] pwc: recv_control_msg error -32 req 02 val 2700 [ 1414.059324][ T8047] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1414.068201][ T8047] pwc: recv_control_msg error -32 req 04 val 1000 [ 1414.083523][ T8047] pwc: recv_control_msg error -32 req 04 val 1300 [ 1414.108814][ T8047] pwc: recv_control_msg error -32 req 04 val 1400 [ 1414.123136][ T8047] pwc: recv_control_msg error -32 req 02 val 2000 [ 1414.134583][ T8047] pwc: recv_control_msg error -32 req 02 val 2100 [ 1414.163908][ T8047] pwc: recv_control_msg error -32 req 04 val 1500 [ 1414.187983][ T8047] pwc: recv_control_msg error -32 req 02 val 2500 [ 1414.196288][ T8047] pwc: recv_control_msg error -32 req 02 val 2400 [ 1414.318328][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 1414.418414][ T8047] pwc: recv_control_msg error -71 req 02 val 2900 [ 1414.429171][ T8047] pwc: recv_control_msg error -71 req 02 val 2800 [ 1414.441360][ T8047] pwc: recv_control_msg error -71 req 04 val 1100 [ 1414.452382][ T8047] pwc: recv_control_msg error -71 req 04 val 1200 [ 1414.466801][ T8047] pwc: Registered as video103. [ 1414.493176][ T8047] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 1414.545919][ T8047] usb 1-1: USB disconnect, device number 20 [ 1415.887288][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1415.900059][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1415.909214][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1415.920457][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1415.932218][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1415.976309][T14660] netlink: 'syz.6.975': attribute type 13 has an invalid length. [ 1416.150513][ T1169] bridge_slave_1: left allmulticast mode [ 1416.150560][ T1169] bridge_slave_1: left promiscuous mode [ 1416.150753][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.186578][ T1169] bridge_slave_0: left allmulticast mode [ 1416.186631][ T1169] bridge_slave_0: left promiscuous mode [ 1416.186835][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.242717][ T1169] bridge_slave_1: left allmulticast mode [ 1416.242771][ T1169] bridge_slave_1: left promiscuous mode [ 1416.242957][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.277555][ T1169] bridge_slave_0: left allmulticast mode [ 1416.277613][ T1169] bridge_slave_0: left promiscuous mode [ 1416.291228][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.325796][ T5819] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1416.495084][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 1416.502332][ T5819] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1416.518812][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.518871][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1416.518912][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1416.518940][ T5819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1416.518969][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1416.580437][ T5819] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1416.580501][ T5819] usb 1-1: Manufacturer: syz [ 1416.601028][ T5819] usb 1-1: config 0 descriptor?? [ 1416.975185][ T5819] rc_core: IR keymap rc-hauppauge not found [ 1416.975230][ T5819] Registered IR keymap rc-empty [ 1416.975752][ T5819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1416.997087][ T5819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1417.015303][ T5819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1417.032386][ T5819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 1417.061946][ T5819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1417.062036][ C0] ================================================================== [ 1417.062067][ C0] BUG: KASAN: slab-use-after-free in dummy_timer+0xcdb/0x4cf0 [ 1417.062096][ C0] Read of size 1 at addr ffff8880535e70e8 by task kworker/0:6/5819 [ 1417.062112][ C0] [ 1417.062124][ C0] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1417.062150][ C0] Tainted: [L]=SOFTLOCKUP [ 1417.062158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1417.062171][ C0] Workqueue: usb_hub_wq hub_event [ 1417.062201][ C0] Call Trace: [ 1417.062210][ C0] [ 1417.062218][ C0] dump_stack_lvl+0xe8/0x150 [ 1417.062247][ C0] print_address_description+0x55/0x1e0 [ 1417.062275][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1417.062296][ C0] print_report+0x58/0x70 [ 1417.062320][ C0] kasan_report+0x117/0x150 [ 1417.062345][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1417.062370][ C0] dummy_timer+0xcdb/0x4cf0 [ 1417.062398][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1417.062425][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.062457][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1417.062494][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1417.062518][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1417.062543][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1417.062565][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1417.062602][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1417.062632][ C0] handle_softirqs+0x226/0x860 [ 1417.062660][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1417.062690][ C0] __irq_exit_rcu+0xcb/0x220 [ 1417.062715][ C0] irq_exit_rcu+0x9/0x30 [ 1417.062740][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1417.062766][ C0] [ 1417.062773][ C0] [ 1417.062781][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1417.062803][ C0] RIP: 0010:dev_printk_emit+0x125/0x140 [ 1417.062834][ C0] Code: f8 48 c7 03 0e 36 e0 45 4b c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 0d 1b cc 67 12 48 3b 8c 24 c0 00 00 00 <75> 14 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e1 0c e4 ff cc [ 1417.062851][ C0] RSP: 0018:ffffc90004cf67a0 EFLAGS: 00000246 [ 1417.062867][ C0] RAX: 0000000000000037 RBX: ffffc90004cf6800 RCX: ef9a85abe39ae600 [ 1417.062882][ C0] RDX: ffffc9001d266000 RSI: 0000000000018d7a RDI: 0000000000018d7b [ 1417.062897][ C0] RBP: ffffc90004cf68b0 R08: ffffc90004cf6527 R09: 1ffff9200099eca4 [ 1417.062912][ C0] R10: dffffc0000000000 R11: fffff5200099eca5 R12: ffffc90004cf6820 [ 1417.062927][ C0] R13: 1ffff9200099ed00 R14: ffffc90004cf67d0 R15: dffffc0000000000 [ 1417.062952][ C0] ? __device_attach_driver+0x270/0x410 [ 1417.062982][ C0] ? bus_for_each_drv+0x258/0x2f0 [ 1417.063004][ C0] ? __device_attach+0x2c4/0x450 [ 1417.063032][ C0] ? usb_new_device+0x9aa/0x1690 [ 1417.063060][ C0] ? hub_event+0x28e8/0x4d30 [ 1417.063088][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 1417.063115][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1417.063148][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063171][ C0] ? __dev_printk+0x131/0x190 [ 1417.063201][ C0] _dev_err+0x11e/0x180 [ 1417.063234][ C0] ? __pfx__dev_err+0x10/0x10 [ 1417.063262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063297][ C0] mce_write+0x723/0xae0 [ 1417.063322][ C0] ? __pfx_mce_write+0x10/0x10 [ 1417.063348][ C0] ? usb_hcd_submit_urb+0x343/0x1b60 [ 1417.063373][ C0] mce_command_out+0x89/0xd0 [ 1417.063395][ C0] mceusb_dev_probe+0x167e/0x20a0 [ 1417.063425][ C0] ? __pfx_mceusb_dev_probe+0x10/0x10 [ 1417.063448][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063504][ C0] ? __pm_runtime_set_status+0x994/0xc80 [ 1417.063538][ C0] usb_probe_interface+0x788/0xe50 [ 1417.063562][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1417.063581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063606][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063629][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1417.063659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063682][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 1417.063711][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1417.063730][ C0] really_probe+0x254/0xae0 [ 1417.063764][ C0] __driver_probe_device+0x1e8/0x360 [ 1417.063796][ C0] driver_probe_device+0x4f/0x240 [ 1417.063827][ C0] __device_attach_driver+0x270/0x410 [ 1417.063859][ C0] bus_for_each_drv+0x258/0x2f0 [ 1417.063882][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.063912][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.063935][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.063982][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1417.064013][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064038][ C0] __device_attach+0x2c4/0x450 [ 1417.064065][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064090][ C0] ? __pfx___device_attach+0x10/0x10 [ 1417.064117][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1417.064145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064168][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1417.064189][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064215][ C0] device_initial_probe+0xa1/0xd0 [ 1417.064245][ C0] bus_probe_device+0x12a/0x220 [ 1417.064269][ C0] device_add+0x7d7/0xb80 [ 1417.064296][ C0] usb_set_configuration+0x1ad8/0x2180 [ 1417.064340][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1417.064371][ C0] usb_probe_device+0x1c3/0x3b0 [ 1417.064392][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1417.064410][ C0] really_probe+0x254/0xae0 [ 1417.064442][ C0] __driver_probe_device+0x1e8/0x360 [ 1417.064476][ C0] driver_probe_device+0x4f/0x240 [ 1417.064508][ C0] __device_attach_driver+0x270/0x410 [ 1417.064540][ C0] bus_for_each_drv+0x258/0x2f0 [ 1417.064563][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.064593][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.064616][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064640][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064663][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1417.064686][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064711][ C0] __device_attach+0x2c4/0x450 [ 1417.064740][ C0] ? __pfx___device_attach+0x10/0x10 [ 1417.064769][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1417.064797][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064820][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1417.064840][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.064866][ C0] device_initial_probe+0xa1/0xd0 [ 1417.064895][ C0] bus_probe_device+0x12a/0x220 [ 1417.064920][ C0] device_add+0x7d7/0xb80 [ 1417.064947][ C0] usb_new_device+0x9aa/0x1690 [ 1417.064978][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1417.065005][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.065030][ C0] hub_event+0x28e8/0x4d30 [ 1417.065083][ C0] ? __pfx_hub_event+0x10/0x10 [ 1417.065112][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.065139][ C0] ? rcu_is_watching+0x16/0xb0 [ 1417.065161][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.065185][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1417.065211][ C0] process_scheduled_works+0xc3d/0x1630 [ 1417.065236][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.065274][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1417.065302][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.065325][ C0] ? assign_work+0x3cf/0x5d0 [ 1417.065352][ C0] worker_thread+0xa47/0xfb0 [ 1417.065392][ C0] kthread+0x38b/0x480 [ 1417.065411][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1417.065437][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.065458][ C0] ret_from_fork+0x514/0xb70 [ 1417.065495][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.065525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.065548][ C0] ? __switch_to+0xc89/0x1420 [ 1417.065576][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.065595][ C0] ret_from_fork_asm+0x1a/0x30 [ 1417.065633][ C0] [ 1417.065641][ C0] [ 1417.065646][ C0] Allocated by task 4981: [ 1417.065656][ C0] kasan_save_track+0x3e/0x80 [ 1417.065674][ C0] __kasan_kmalloc+0x93/0xb0 [ 1417.065692][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 1417.065721][ C0] kernfs_fop_open+0x3ac/0xce0 [ 1417.065741][ C0] do_dentry_open+0x816/0x1380 [ 1417.065760][ C0] vfs_open+0x3b/0x340 [ 1417.065778][ C0] path_openat+0x1443/0x1d60 [ 1417.065806][ C0] do_file_open+0x23e/0x4a0 [ 1417.065832][ C0] do_sys_openat2+0x115/0x200 [ 1417.065853][ C0] __x64_sys_openat+0x138/0x170 [ 1417.065873][ C0] do_syscall_64+0x166/0x520 [ 1417.065898][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.065917][ C0] [ 1417.065922][ C0] Freed by task 4981: [ 1417.065931][ C0] kasan_save_track+0x3e/0x80 [ 1417.065948][ C0] kasan_save_free_info+0x40/0x50 [ 1417.065974][ C0] __kasan_slab_free+0x5c/0x80 [ 1417.065992][ C0] kfree+0x1c5/0x650 [ 1417.066015][ C0] kernfs_fop_release+0x326/0x440 [ 1417.066036][ C0] __fput+0x418/0xa50 [ 1417.066057][ C0] fput_close_sync+0x11f/0x240 [ 1417.066078][ C0] __x64_sys_close+0x7e/0x110 [ 1417.066100][ C0] do_syscall_64+0x166/0x520 [ 1417.066124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.066142][ C0] [ 1417.066148][ C0] The buggy address belongs to the object at ffff8880535e7000 [ 1417.066148][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1417.066164][ C0] The buggy address is located 232 bytes inside of [ 1417.066164][ C0] freed 512-byte region [ffff8880535e7000, ffff8880535e7200) [ 1417.066183][ C0] [ 1417.066189][ C0] The buggy address belongs to the physical page: [ 1417.066198][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x535e4 [ 1417.066215][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1417.066231][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1417.066248][ C0] page_type: f5(slab) [ 1417.066266][ C0] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 1417.066283][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1417.066301][ C0] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 1417.066318][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1417.066336][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1417.066353][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1417.066364][ C0] page dumped because: kasan: bad access detected [ 1417.066373][ C0] page_owner tracks the page as allocated [ 1417.066380][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5634, tgid 5634 (syz-executor), ts 84459466093 [ 1417.066411][ C0] post_alloc_hook+0x1f9/0x250 [ 1417.066437][ C0] get_page_from_freelist+0x2209/0x2280 [ 1417.066455][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1417.066478][ C0] allocate_slab+0x7d/0x620 [ 1417.066500][ C0] refill_objects+0x2d5/0x350 [ 1417.066523][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1417.066545][ C0] __kmalloc_cache_noprof+0x39b/0x600 [ 1417.066573][ C0] __ipv6_dev_mc_inc+0x447/0xa40 [ 1417.066595][ C0] ipv6_add_dev+0xe36/0x13a0 [ 1417.066617][ C0] addrconf_notify+0x771/0x1050 [ 1417.066643][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1417.066671][ C0] register_netdevice+0x18a4/0x1eb0 [ 1417.066691][ C0] veth_newlink+0x4d7/0xdd0 [ 1417.066712][ C0] rtnl_newlink_create+0x305/0x7b0 [ 1417.066729][ C0] rtnl_newlink+0x166d/0x1c30 [ 1417.066756][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 1417.066782][ C0] page last free pid 5613 tgid 5613 ts 84445971398 stack trace: [ 1417.066795][ C0] __free_frozen_pages+0xc93/0xd90 [ 1417.066822][ C0] stack_depot_save_flags+0x41e/0x7f0 [ 1417.066849][ C0] kasan_save_track+0x4f/0x80 [ 1417.066866][ C0] __kasan_kmalloc+0x93/0xb0 [ 1417.066884][ C0] __kmalloc_noprof+0x36b/0x720 [ 1417.066911][ C0] udp_tunnel_nic_netdevice_event+0x662/0x1810 [ 1417.066936][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1417.066963][ C0] register_netdevice+0x18a4/0x1eb0 [ 1417.066981][ C0] nsim_create+0xbd7/0x1150 [ 1417.067005][ C0] __nsim_dev_port_add+0x7f8/0xcd0 [ 1417.067033][ C0] nsim_dev_port_add_all+0x37/0xf0 [ 1417.067061][ C0] nsim_drv_probe+0x8b0/0xbb0 [ 1417.067088][ C0] really_probe+0x254/0xae0 [ 1417.067115][ C0] __driver_probe_device+0x1e8/0x360 [ 1417.067142][ C0] driver_probe_device+0x4f/0x240 [ 1417.067169][ C0] __device_attach_driver+0x270/0x410 [ 1417.067197][ C0] [ 1417.067202][ C0] Memory state around the buggy address: [ 1417.067212][ C0] ffff8880535e6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1417.067226][ C0] ffff8880535e7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1417.067239][ C0] >ffff8880535e7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1417.067250][ C0] ^ [ 1417.067261][ C0] ffff8880535e7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1417.067275][ C0] ffff8880535e7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1417.067286][ C0] ================================================================== [ 1417.067297][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1418.330538][ C0] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1418.341461][ C0] Tainted: [L]=SOFTLOCKUP [ 1418.345764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1418.355885][ C0] Workqueue: usb_hub_wq hub_event [ 1418.360906][ C0] Call Trace: [ 1418.364178][ C0] [ 1418.367001][ C0] vpanic+0x56d/0xa60 [ 1418.371000][ C0] ? __pfx_vpanic+0x10/0x10 [ 1418.375504][ C0] panic+0xc5/0xd0 [ 1418.379213][ C0] ? __pfx_panic+0x10/0x10 [ 1418.383623][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.388374][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.393993][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.398688][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.404341][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.409002][ C0] check_panic_on_warn+0x89/0xb0 [ 1418.413924][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.418587][ C0] end_report+0x73/0x170 [ 1418.422819][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.427488][ C0] kasan_report+0x128/0x150 [ 1418.431978][ C0] ? dummy_timer+0xcdb/0x4cf0 [ 1418.436643][ C0] dummy_timer+0xcdb/0x4cf0 [ 1418.441143][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1418.446071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.451696][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1418.457077][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1418.462000][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1418.467793][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1418.472733][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1418.477952][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1418.483069][ C0] handle_softirqs+0x226/0x860 [ 1418.487822][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1418.492662][ C0] __irq_exit_rcu+0xcb/0x220 [ 1418.497242][ C0] irq_exit_rcu+0x9/0x30 [ 1418.501470][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1418.507092][ C0] [ 1418.509998][ C0] [ 1418.512908][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1418.518875][ C0] RIP: 0010:dev_printk_emit+0x125/0x140 [ 1418.524413][ C0] Code: f8 48 c7 03 0e 36 e0 45 4b c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 0d 1b cc 67 12 48 3b 8c 24 c0 00 00 00 <75> 14 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e1 0c e4 ff cc [ 1418.544015][ C0] RSP: 0018:ffffc90004cf67a0 EFLAGS: 00000246 [ 1418.550096][ C0] RAX: 0000000000000037 RBX: ffffc90004cf6800 RCX: ef9a85abe39ae600 [ 1418.558065][ C0] RDX: ffffc9001d266000 RSI: 0000000000018d7a RDI: 0000000000018d7b [ 1418.566019][ C0] RBP: ffffc90004cf68b0 R08: ffffc90004cf6527 R09: 1ffff9200099eca4 [ 1418.573973][ C0] R10: dffffc0000000000 R11: fffff5200099eca5 R12: ffffc90004cf6820 [ 1418.581953][ C0] R13: 1ffff9200099ed00 R14: ffffc90004cf67d0 R15: dffffc0000000000 [ 1418.589922][ C0] ? __device_attach_driver+0x270/0x410 [ 1418.595472][ C0] ? bus_for_each_drv+0x258/0x2f0 [ 1418.600505][ C0] ? __device_attach+0x2c4/0x450 [ 1418.605436][ C0] ? usb_new_device+0x9aa/0x1690 [ 1418.610382][ C0] ? hub_event+0x28e8/0x4d30 [ 1418.614961][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 1418.620679][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1418.625959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.631751][ C0] ? __dev_printk+0x131/0x190 [ 1418.636420][ C0] _dev_err+0x11e/0x180 [ 1418.640578][ C0] ? __pfx__dev_err+0x10/0x10 [ 1418.645248][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.650878][ C0] mce_write+0x723/0xae0 [ 1418.655113][ C0] ? __pfx_mce_write+0x10/0x10 [ 1418.659862][ C0] ? usb_hcd_submit_urb+0x343/0x1b60 [ 1418.665132][ C0] mce_command_out+0x89/0xd0 [ 1418.669706][ C0] mceusb_dev_probe+0x167e/0x20a0 [ 1418.674725][ C0] ? __pfx_mceusb_dev_probe+0x10/0x10 [ 1418.680079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.685703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.691510][ C0] ? __pm_runtime_set_status+0x994/0xc80 [ 1418.697139][ C0] usb_probe_interface+0x788/0xe50 [ 1418.702243][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1418.707852][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.713472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.719108][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1418.724646][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.730267][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 1418.735288][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1418.740912][ C0] really_probe+0x254/0xae0 [ 1418.745445][ C0] __driver_probe_device+0x1e8/0x360 [ 1418.750755][ C0] driver_probe_device+0x4f/0x240 [ 1418.755791][ C0] __device_attach_driver+0x270/0x410 [ 1418.761181][ C0] bus_for_each_drv+0x258/0x2f0 [ 1418.766020][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1418.771921][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1418.777304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.782920][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.788535][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1418.794328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.800057][ C0] __device_attach+0x2c4/0x450 [ 1418.804809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.810425][ C0] ? __pfx___device_attach+0x10/0x10 [ 1418.815703][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1418.820826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.826465][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1418.831395][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.837046][ C0] device_initial_probe+0xa1/0xd0 [ 1418.842066][ C0] bus_probe_device+0x12a/0x220 [ 1418.846907][ C0] device_add+0x7d7/0xb80 [ 1418.851226][ C0] usb_set_configuration+0x1ad8/0x2180 [ 1418.856690][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1418.862140][ C0] usb_probe_device+0x1c3/0x3b0 [ 1418.866993][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1418.872342][ C0] really_probe+0x254/0xae0 [ 1418.877014][ C0] __driver_probe_device+0x1e8/0x360 [ 1418.882302][ C0] driver_probe_device+0x4f/0x240 [ 1418.887366][ C0] __device_attach_driver+0x270/0x410 [ 1418.892736][ C0] bus_for_each_drv+0x258/0x2f0 [ 1418.897570][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1418.903449][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1418.908802][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.914416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.920119][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1418.925920][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.931651][ C0] __device_attach+0x2c4/0x450 [ 1418.936407][ C0] ? __pfx___device_attach+0x10/0x10 [ 1418.942288][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1418.947391][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.953007][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1418.957854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1418.963473][ C0] device_initial_probe+0xa1/0xd0 [ 1418.968503][ C0] bus_probe_device+0x12a/0x220 [ 1418.973343][ C0] device_add+0x7d7/0xb80 [ 1418.977686][ C0] usb_new_device+0x9aa/0x1690 [ 1418.982441][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1418.987629][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1418.992809][ C0] hub_event+0x28e8/0x4d30 [ 1418.997239][ C0] ? __pfx_hub_event+0x10/0x10 [ 1419.001991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1419.007613][ C0] ? rcu_is_watching+0x16/0xb0 [ 1419.012359][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1419.017977][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1419.023682][ C0] process_scheduled_works+0xc3d/0x1630 [ 1419.029227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1419.034857][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1419.040827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1419.046443][ C0] ? assign_work+0x3cf/0x5d0 [ 1419.051022][ C0] worker_thread+0xa47/0xfb0 [ 1419.055611][ C0] kthread+0x38b/0x480 [ 1419.059656][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1419.064750][ C0] ? __pfx_kthread+0x10/0x10 [ 1419.069335][ C0] ret_from_fork+0x514/0xb70 [ 1419.073918][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1419.079017][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1419.084640][ C0] ? __switch_to+0xc89/0x1420 [ 1419.089309][ C0] ? __pfx_kthread+0x10/0x10 [ 1419.093889][ C0] ret_from_fork_asm+0x1a/0x30 [ 1419.098654][ C0] [ 1419.101813][ C0] Kernel Offset: disabled [ 1419.106134][ C0] Rebooting in 86400 seconds..