last executing test programs: 4m23.741207603s ago: executing program 3 (id=737): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000740)=""/146, 0x92}, {0x0}, {&(0x7f0000002200)=""/89, 0x59}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000002080)=""/196, 0xc4}], 0x6, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) write(r1, &(0x7f0000000540)='\n', 0x1) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "4495904101bc080c"}}}}, 0x0) 4m22.450415652s ago: executing program 3 (id=742): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) 4m22.274835927s ago: executing program 3 (id=743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4m21.959369644s ago: executing program 3 (id=747): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) close(0x3) 4m20.781767557s ago: executing program 3 (id=753): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0, 0x300}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) 4m20.131088392s ago: executing program 3 (id=754): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) 4m5.036410924s ago: executing program 32 (id=754): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) 3m55.391927181s ago: executing program 0 (id=878): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000100)="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") 3m55.141520414s ago: executing program 0 (id=879): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 3m54.70211082s ago: executing program 0 (id=881): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m54.452344297s ago: executing program 0 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x2, 0x0) 3m49.861815318s ago: executing program 1 (id=907): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x8, @void}, 0x10) r3 = socket$inet(0x2, 0x3, 0x81) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x388}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_uring_setup(0x66c2, &(0x7f00000000c0)={0x0, 0xc8a1, 0xc000, 0x2, 0x86}) 3m48.216733809s ago: executing program 0 (id=914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGLED(r5, 0x80284511, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r7 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r6) keyctl$setperm(0x5, r7, 0x1000) 3m46.922035995s ago: executing program 4 (id=918): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x39, 0x11, 0xa, 0x17, 0x1, 0xa1df, 0x1, 0xf1, 0xffffffffffffffff}) 3m46.850219683s ago: executing program 4 (id=919): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m46.197826869s ago: executing program 1 (id=922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0xfbdddd8f923c1faa, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3m45.961626735s ago: executing program 1 (id=923): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m45.960956321s ago: executing program 1 (id=924): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3m45.603945283s ago: executing program 1 (id=928): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) close(0x3) 3m45.590731926s ago: executing program 4 (id=929): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone3(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x0, 0x0, 0x2) 3m45.390186365s ago: executing program 4 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f8, 0x4) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/106, 0x6a}, 0x7fffffff}], 0x1, 0x2000, 0x0) 3m44.696777192s ago: executing program 2 (id=932): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fd4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1045, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0x400c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m44.619242384s ago: executing program 1 (id=933): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd9d00000000, 0x8, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffc, 0x201, 0x7, 0xa, 0x6, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0xffffffffffffffff, 0x8, 0x2000000000, 0x0, 0x0, 0x3}) 3m44.31276364s ago: executing program 2 (id=934): r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x3}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3m44.138554678s ago: executing program 2 (id=935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r2, 0x0, 0x0, 0xffffffbf, 0x0) 3m44.051388445s ago: executing program 0 (id=936): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3m43.930426796s ago: executing program 4 (id=937): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x1, 0x1, @any, 0x0, "", 0x3}]}}}}, 0xf) 3m43.6883178s ago: executing program 4 (id=938): syz_usb_connect$uac3(0x5, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x80, 0x1, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2f, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x400, 0x4, 0x6, 0x8, 0x8, 0xe, 0x1, 0x8000}, @cluster_info_segment={0x6, 0x20, 0x6, 0x8d, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x2, 0xc6, 0x9, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9d, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0x5}, {0xc8, 0x101}, {0xc8, 0x5}]}}}, 0x10) 3m43.56622172s ago: executing program 2 (id=939): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 3m43.471659539s ago: executing program 2 (id=940): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x7, 0x9, 0x7, 0x5, 0xd2}}, 0x118) 3m43.223161287s ago: executing program 2 (id=941): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) close(0x3) 2m41.292465205s ago: executing program 33 (id=936): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m41.098787187s ago: executing program 34 (id=933): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd9d00000000, 0x8, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffc, 0x201, 0x7, 0xa, 0x6, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0xffffffffffffffff, 0x8, 0x2000000000, 0x0, 0x0, 0x3}) 2m40.944061702s ago: executing program 35 (id=941): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) close(0x3) 2m40.899221095s ago: executing program 36 (id=938): syz_usb_connect$uac3(0x5, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x80, 0x1, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2f, 0x5}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x400, 0x4, 0x6, 0x8, 0x8, 0xe, 0x1, 0x8000}, @cluster_info_segment={0x6, 0x20, 0x6, 0x8d, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x2, 0xc6, 0x9, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9d, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0x5}, {0xc8, 0x101}, {0xc8, 0x5}]}}}, 0x10) 1m46.45576011s ago: executing program 7 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x141a82, 0x4) sendfile(r0, r0, 0x0, 0x4) 1m46.455340722s ago: executing program 7 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m45.7634154s ago: executing program 7 (id=1053): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x4a}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m43.511424369s ago: executing program 7 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m43.140995268s ago: executing program 7 (id=1056): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x61c040, 0x10) 1m42.330645616s ago: executing program 7 (id=1057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x28042014) syz_open_dev$hidraw(0x0, 0x7, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fanotify_init(0x200, 0x48803) io_uring_setup(0x1191, &(0x7f0000000140)={0x0, 0xadb6, 0x2, 0x3, 0xc4}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x4, 0x4, 0x6bc, 0xffffffff, 0x470, 0x0, 0x470, 0xfeffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x304, 0x344, 0x0, {}, [@common=@unspec=@bpf1={{0x21f}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7ffb]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) tkill(r2, 0x12) tkill(r2, 0x14) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 1m41.769227926s ago: executing program 37 (id=1057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x28042014) syz_open_dev$hidraw(0x0, 0x7, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fanotify_init(0x200, 0x48803) io_uring_setup(0x1191, &(0x7f0000000140)={0x0, 0xadb6, 0x2, 0x3, 0xc4}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x4, 0x4, 0x6bc, 0xffffffff, 0x470, 0x0, 0x470, 0xfeffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x304, 0x344, 0x0, {}, [@common=@unspec=@bpf1={{0x21f}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7ffb]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) tkill(r2, 0x12) tkill(r2, 0x14) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 11.199144077s ago: executing program 5 (id=1398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x300, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000001780)=0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) listen(r9, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) close_range(r6, 0xffffffffffffffff, 0x0) 10.823995785s ago: executing program 5 (id=1400): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000058c0)={0x2020}, 0x2020) 10.600061788s ago: executing program 5 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xb5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000a80)={0x3, @raw_data="be33107ff474a777f81ad423c1bd1b8cfd35527df07704783f06e927e518776b0324ca2a61c7656c7a099c4006c5b7331e500fa7ab5c0d65a23f6335f8348eb54fe659dee3f00804b2ebf9b4494ab1a372e18579ee3ba50f44e9c186f945399d8ad8da3cac17e5f12f2dedfc6b1af83bb82e047d19295f5c03944d48b07f3cf57adb1e0b8f61beb511324a6e2c30a1ac9ae8cc18bc3bf8a18b520ce083c300b7475053dc6cb1b06b04ce0fb4e5296db5a043cb69a84473af5d7aa082602dba68cba2ff653c1ef6b7"}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000031f28fe70bd34f0c75c9f78a45561434cbcfd1345f72c80ef4afe1cea9116dba73b9d68b7f563fe7d97ddd28e90eed2b884bac62ee92c82492a858ad0d35f2f21ff309df4eea06ab37daab507b07c82b9b3ea46bb4ad67a6fb4100c3c760262456b371ca33659a853ea2dc8dce7672ae62a0b78469410d5d226a6ec6adcd6babf5bef28917454b987beefc890c97116794cc1b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="85100000f8ffffff18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000184a00000400000000000000000000002454a4abdfab2d4699d1a2716bb64198830c2bc423de7d8952b3ecd18f98638d3b28b8d847a346de514480c54983c0e386a0f8b4f1105d0ddab1b846955a2b3a9bf5f021d968c5da9036337644ec31db4fe6f82cebfe90711e89360e13027fe79f82560661a1de06c44972239fbfd6dbfef33db251eaed78873f5d65fb7f67219665a2143726e8d05a700b5baf7b8b0a40fa20237765f5"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r5 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.150233783s ago: executing program 8 (id=1409): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xf, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}]}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$hidraw(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) socket(0x840000000002, 0x3, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20088000}, 0x90) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x34b7, &(0x7f0000000540)={0x0, 0x7299, 0x40, 0x3, 0x82, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000100)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 6.465159525s ago: executing program 6 (id=1413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="dbbbb30835b2c1919763e1"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 5.418655319s ago: executing program 8 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x300, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000001780)=0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) listen(r9, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) close_range(r6, 0xffffffffffffffff, 0x0) 5.089983665s ago: executing program 5 (id=1416): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 4.990016377s ago: executing program 8 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335, 0x0, 0x1}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x477f, 0x22140) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r8, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000080)={&(0x7f0000006100)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x2d, 0xfffffff9, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_usb_connect$uac3(0x0, 0xb5, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x2, 0x80, 0x9, {0x8, 0xb, 0xff, 0xfd, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x3f, 0x10}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6, 0x4, 0x7, 0x2378, 0xfffb, 0x8}, @extension_unit={0x9, 0x24, 0xa, 0x1, 0x3, [0x3]}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x200, 0x3, 0x5, 0xe, 0xf04, 0xd, 0xff, 0x4d7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x10, 0x4e, {0xa, 0x25, 0x25, 0x3, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x1e00, 0xac, 0x2}}}}}}}}]}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000800)=@urb_type_iso={0x0, {0x6, 0x1}, 0x8, 0xa1, &(0x7f0000000140)="dad41b7926b767fb35f84465386c1438340cebf759d7771cfccf4cd6dbbe635c4a4817328a65e60989de2a71ca001779687b43384eca93617ffa2786c1a847aef74db7c67cf1ba9e67d149a806e6a7996da8ff5f8a8827b1a971cd3d9075722e372b6646954c0ff75058f648d8ea1ada63e9b0eed1d7922e5c245c10006c11d6fffadbdb1a63b3fe499ffaf6bb6ae5a192c8192c12b87f51b4b4c2d79fd3048a504bdaa9f4c3ff1a4b81ebef3689bc857b2e2eaffca02f10b526e4e757ae9cfafcbc1a6ba1443752e88245bc40f02c2202bbfe8749d70cad873a8597a225e5dff268c001c0fa1936f6", 0xe9, 0x1, 0x3, 0x74, 0x101, 0x2, &(0x7f0000000240)="214c2e8e42a8e13cae277e8467b32d75aeafafca8d212a45a96fd8ff4e4fd636480bf27736f523e3d48cabf55e8ee67e50c0640936ac8a91e76b9acb19866efb", [{0x101, 0x9, 0x6}, {0x4, 0x305}, {0x0, 0x8, 0x4}, {0x610, 0x5, 0x163}, {0x9, 0xff, 0xa96}, {0x4, 0xe9d1, 0xffffffff}, {0x0, 0x80b4, 0x5}, {0x400, 0x91, 0x7}, {0x7, 0x518, 0xf}, {0x4, 0x8, 0x8000}, {0x7, 0x9, 0x7}, {0xffffffff, 0xfffff000, 0x6}, {0xde, 0x1, 0x3}, {0x9740, 0x92, 0x9}, {0x7fffffff, 0x7, 0x4}, {0xfffffcb5, 0x3, 0xfff}, {0x4, 0x8, 0x10000}, {0x7fffffff, 0x7f, 0x9}, {0x20000000, 0x4, 0x1}, {0x7ff, 0x4, 0x8}, {0x6, 0x0, 0xa0000000}, {0x2, 0xfffff12d, 0x7}, {0x6da, 0x3, 0x7}, {0x327, 0x8000000, 0x1ad}, {0x1a, 0xfff, 0x4}, {0x5, 0x2, 0x4}, {0x9, 0x5, 0x5}, {0x3, 0x2, 0xd}, {0x2636, 0x7, 0x2}, {0x4, 0xcd, 0x1}, {0x8c, 0x909, 0x9}, {0x3, 0x0, 0xfffffff9}, {0x8, 0xffff, 0x82a}, {0x8, 0x1, 0x2}, {0x7ff, 0x401, 0xc}, {0x0, 0x7, 0x1}, {0x3, 0x40, 0x3}, {0x4, 0x8, 0x8}, {0x1, 0x37, 0x80000000}, {0x3, 0x4b, 0x6}, {0x8, 0x5, 0x6}, {0x1, 0xa4, 0x3}, {0xffffff80, 0x3, 0x70}, {0x6, 0x4, 0x6}, {0x5, 0x8d, 0x40}, {0x1b91, 0x6, 0x3}, {0xfff, 0x80, 0x28}, {0x3, 0x7fffffff, 0x4}, {0x2, 0x4, 0x4}, {0x6, 0x0, 0x9b}, {0x0, 0x7, 0x3}, {0x4, 0xd48, 0x32}, {0x0, 0x7f, 0x4}, {0x1, 0x9, 0x4}, {0x800, 0x3, 0x3}, {0x3, 0x401, 0x8}, {0x9, 0x8, 0x6}, {0x3, 0x200, 0xd0}, {0x10000, 0x7f, 0x86}, {0x0, 0xfffffffa, 0x7}, {0x2, 0x0, 0x8}, {0x0, 0x0, 0xb06}, {0x0, 0x3, 0x8}, {0xc7f6, 0x19, 0x6}, {0xa, 0xc}, {0x8, 0x6, 0xfffffff8}, {0x5e97, 0x7, 0x6}, {0x8, 0x3, 0x71b}, {0x3, 0x4, 0xe00}, {0x8, 0xff, 0x80}, {0x1, 0x2, 0x7}, {0x2, 0x100, 0x4}, {0xa, 0x9, 0x9}, {0x100, 0x3, 0x800}, {0xa, 0x100, 0x1}, {0x5, 0x8, 0x8}, {0x0, 0x3}, {0xff, 0x7fff, 0xffffffff}, {0x0, 0x9, 0x8}, {0x4, 0x5, 0x2}, {0x1, 0x9, 0xb}, {0x10001, 0x8, 0xffffffff}, {0xbe6f, 0xd37, 0x4df}, {0x80000001, 0x401, 0x6}, {0x4, 0x6, 0x7}, {0x0, 0x9, 0x4}, {0x9, 0xe79}, {0xf, 0x4, 0x9}, {0x7, 0x8dd, 0x90000000}, {0x2, 0x800, 0x4}, {0x885, 0x401, 0xffffff01}, {0x9, 0x4, 0x5}, {0x2, 0xb5e6, 0x4}, {0x81, 0x4, 0x3}, {0x8, 0x9, 0x5}, {0x1ff, 0x1, 0x10001}, {0xff, 0xa7f4, 0x3}, {0x7fff, 0xa7e, 0xf9c}, {0x9, 0x8, 0x5}, {0x4, 0x3, 0xb}, {0x4, 0x2, 0x2c56}, {0x5, 0x4000b4c, 0x3ff}, {0x6f, 0x5, 0x9}, {0x8a1b, 0x0, 0x6}, {0x1, 0x7, 0x1}, {0xfffff000, 0x3ff, 0x9}, {0xa56c, 0x5, 0x6}, {0x7fffffff, 0x6, 0x43}, {0x8, 0xffff, 0x1ff}, {0x1, 0x5, 0x3}, {0x6, 0x300000, 0x8}, {0x8, 0xfffffffe, 0x9}, {0x0, 0x7, 0x2}, {0xc02, 0x4, 0x10000}, {0x4, 0x6, 0x10001}, {0x8e2, 0x8, 0x8}]}) 4.736426573s ago: executing program 5 (id=1419): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000300)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @private2, 0xa4e}}, 0x24) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0xeffffffffffffc04, 0x0, 0x1, 0xffffffffffffffff, 0x11}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/1, 0x20000, 0x1000, 0xbb}, 0x1c) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000280), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r10, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080) bind$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) bind$netlink(r6, &(0x7f0000002c00)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$NILFS_IOCTL_GET_SUSTAT(r6, 0x80306e85, &(0x7f0000000040)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x1020082, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x20000000}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="580040002f0009002abd7000000000000400000043001180e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af68eb7e22475186e591e23ad38a08862df02baf33ef00"], 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000082f1734000000000000010902240001000000000904001009030006000921000004012229000905810300000009fcc510d74c01ddeb491a00884a06db05d4aa794c4fc3758e91bd07f3b08a20d8928e6f482995f0c60383ba50d06313ca8caa3443741aeb2d30338642b9abfe5b88074b667ee458db9e9f5ef1051bdd951c2961a884757b144748525e97ce7c2ea7e1fc03d9d52876b7ef2a05e9c455d570"], 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0xc0000) 4.16038751s ago: executing program 9 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4292}}, './file1/file0\x00'}) mincore(&(0x7f0000c1f000/0x3000)=nil, 0x3000, 0x0) 3.774021511s ago: executing program 9 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="34cadd6ba00c40f174e24348d048fb2b1aad4d7aaf4031c755bfff1d4c7b6a2312037de36ddc175cd69a9d47b7123b03e49bff25c38c53aa9d99", 0x3a) 3.447462709s ago: executing program 9 (id=1423): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x33, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0xc000) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0) open_by_handle_at(r3, &(0x7f0000000280)=@raw={0x4, 0x0, {"fe"}}, 0x2200) 3.291554904s ago: executing program 6 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) (fail_nth: 5) 3.01870447s ago: executing program 9 (id=1425): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = userfaultfd(0x80001) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FITHAW(r1, 0xc0045878) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00002f2000/0x1000)=nil, 0x1000}, 0x3}) 2.877331415s ago: executing program 6 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x300, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000001780)=0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) listen(r9, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) close_range(r6, 0xffffffffffffffff, 0x0) 2.579271576s ago: executing program 9 (id=1427): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000300)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x4, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40187014, &(0x7f0000000000)={0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000700)={{r3}, "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"}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000090401026ccbf200fedbdf250300000089ba020133124dac036fc7f3dc3b550c5f4575f2250d08d8fe3efe6243a24c7dd478ccc04c2d4a478bf5af6cb376b44fffb008f1f0a05adf7ccf406f0adf2a390537c57c0777f8c4c975f6af71296ad84bd446d10265bfa0dab637a3d96b4d442ae10d7c78eca23f15034af7c884179b71894f66f186b5ee784a968a20be858a0abb422dfab6e953a7e81257c34b0656b82e1f5ea70e21117837ef5dd8969ce13b4be53806365d76176a4a060627528f71de02edff34874c0af03852afdc3137001763ba0a790649"], 0xdc}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0x2}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) sendmsg$IPSET_CMD_GET_BYINDEX(r7, 0x0, 0x4008004) 1.943859175s ago: executing program 8 (id=1428): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe51) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4003) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x450c03, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='a,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x8007, 0x5, 0x5}, 0x3e, [0xfffffff3, 0x20005, 0x8, 0x2, 0x533b, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x7, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x1, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0xc, 0x800, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x3, 0xfffffff9, 0x0, 0x7, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x5, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x11, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x0, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2008, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x81, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0xfffffe01, 0x3a, 0x3, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x132, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.909369373s ago: executing program 6 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x400000000005, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e23, 0x0, @local, 0x2}, r2, 0x1}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x22, &(0x7f0000000a00)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x3f, 0x14, 0x64, 0x0, 0x2, 0x33, 0x0, @local, @rand_addr=0x64010100}}}}}, 0x0) 756.006549ms ago: executing program 5 (id=1429): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x3}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 755.758532ms ago: executing program 6 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4292}}, './file1/file0\x00'}) mincore(&(0x7f0000c1f000/0x3000)=nil, 0x3000, 0x0) 633.629126ms ago: executing program 6 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8768932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x300, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) listen(r9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 329.112902ms ago: executing program 8 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2, r1}, 0xc) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/interval\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 186.165137ms ago: executing program 9 (id=1433): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x4}}, {@stats}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '!'}}, {@fsname={'fsname', 0x3d, '$,'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user}, {@fowner_gt}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioprio_get$pid(0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(0xffffffffffffffff, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 0s ago: executing program 8 (id=1434): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x1, 0x8, 0x6, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x53, 0x0, [{0x1, 0x12, "0518106fbd99a1be96a197819547cd52"}, {0x7, 0x11, "a168b00851a077ec7c0bd92ca3edcb"}, {0x6, 0x11, "da12085de00233d3f6fc9488aaef08"}, {0x0, 0x8, "ec4c77f2b462"}, {0x6, 0x4, "e703"}, {0x2, 0x2}, {0x2, 0xb, "0b8e3ba847597ea88d"}]}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0xf, [{@rand_addr=0x64010102, 0x1}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x9080}, 0x885) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendto$packet(r4, &(0x7f0000000740)="3f304bd9c229822bd9407c47e4aa08e1e9c8c7a37b0f3880bf6211f1c5e2bb10684cbbaa258564387d85e00d84ac8f0e55705b625ca31e199adeaba96a256cb3b76d140cb4e033619fa32f7b50d62c4ae118716f5512264addd9839db8c9ca33f044f591ede469e5154b8451154e6a3f4a", 0x71, 0x4008800, &(0x7f0000000940)={0x11, 0x11, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_PMK={0x14, 0xfe, "8e4abe99e2cf0a993ed5b1f16454bb43"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf43}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000) fsmount(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 052:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.4.897" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 191.182140][ T42] audit: type=1326 audit(1785242595.052:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.4.897" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 191.193107][ T42] audit: type=1326 audit(1785242595.052:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.4.897" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71b72eb code=0x7ffc0000 [ 191.854439][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 191.867891][ T8379] dummy0: left promiscuous mode [ 191.883907][ T8379] netlink: 'syz.4.902': attribute type 10 has an invalid length. [ 191.889145][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.902'. [ 191.900312][ T8379] dummy0: entered promiscuous mode [ 193.905415][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 193.924068][ T8418] dummy0: left promiscuous mode [ 193.940767][ T8418] bridge1: port 1(dummy0) entered blocking state [ 193.944159][ T8418] bridge1: port 1(dummy0) entered disabled state [ 193.947259][ T8418] dummy0: entered allmulticast mode [ 193.951417][ T8418] dummy0: entered promiscuous mode [ 193.970594][ T8418] netlink: 'syz.4.911': attribute type 10 has an invalid length. [ 193.979471][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 193.986385][ T8418] bridge1: port 1(dummy0) entered blocking state [ 193.988472][ T8418] bridge1: port 1(dummy0) entered forwarding state [ 193.991098][ T8418] dummy0: left allmulticast mode [ 193.992774][ T8418] bridge1: port 1(dummy0) entered disabled state [ 194.157689][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160493][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244487][ T846] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 194.477538][ T846] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 194.483154][ T846] usb 7-1: config 0 interface 0 has no altsetting 0 [ 194.507675][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 194.507692][ T42] audit: type=1326 audit(1785242598.442:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.519516][ T846] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.525902][ T846] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.530395][ T846] usb 7-1: Product: syz [ 194.532456][ T846] usb 7-1: Manufacturer: syz [ 194.533873][ T42] audit: type=1326 audit(1785242598.442:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.541844][ T846] usb 7-1: SerialNumber: syz [ 194.547860][ T42] audit: type=1326 audit(1785242598.462:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.557023][ T42] audit: type=1326 audit(1785242598.472:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.567300][ T42] audit: type=1326 audit(1785242598.472:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.577633][ T42] audit: type=1326 audit(1785242598.482:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.589838][ T42] audit: type=1326 audit(1785242598.482:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.590422][ T846] usb 7-1: config 0 descriptor?? [ 194.602085][ T42] audit: type=1326 audit(1785242598.482:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71772eb code=0x7ffc0000 [ 194.609760][ T42] audit: type=1326 audit(1785242598.482:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.617937][ T42] audit: type=1326 audit(1785242598.482:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.673537][ T1482] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 194.678866][ T846] usb 7-1: selecting invalid altsetting 0 [ 194.825449][ T1482] usb 9-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 194.829229][ T1482] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.831851][ T1482] usb 9-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 194.835689][ T1482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.839869][ T1482] usb 9-1: config 0 descriptor?? [ 194.845018][ T8435] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.999873][ T846] usb 7-1: USB disconnect, device number 18 [ 195.266055][ T1482] hid-generic 0003:18D1:5050.0009: item fetching failed at offset 2/40 [ 195.273301][ T1482] hid-generic 0003:18D1:5050.0009: probe with driver hid-generic failed with error -22 [ 195.471332][ T34] usb 9-1: USB disconnect, device number 2 [ 195.578280][ T8241] syz.0.850 (8241) used greatest stack depth: 19432 bytes left [ 195.762478][ T8439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.471617][ T1482] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 196.635172][ T1482] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 196.637837][ T1482] usb 9-1: config 0 has no interface number 0 [ 196.640458][ T1482] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 196.646336][ T1482] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.650461][ T1482] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 196.655114][ T1482] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.662887][ T1482] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 196.666956][ T1482] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 196.670235][ T1482] usb 9-1: Product: syz [ 196.671987][ T1482] usb 9-1: Manufacturer: syz [ 196.673820][ T1482] usb 9-1: SerialNumber: syz [ 196.676654][ T1482] usb 9-1: config 0 descriptor?? [ 196.681591][ T1482] xpad 9-1:0.237: probe with driver xpad failed with error -5 [ 196.889122][ T1482] usb 9-1: USB disconnect, device number 3 [ 197.179524][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 197.222544][ T8460] dummy0: left promiscuous mode [ 197.229420][ T8460] bridge2: port 1(dummy0) entered blocking state [ 197.238700][ T8460] bridge2: port 1(dummy0) entered disabled state [ 197.241454][ T8460] dummy0: entered allmulticast mode [ 197.245664][ T8460] dummy0: entered promiscuous mode [ 197.252614][ T8460] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 197.256541][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.924'. [ 197.261593][ T8460] bridge2: port 1(dummy0) entered blocking state [ 197.263578][ T8460] bridge2: port 1(dummy0) entered forwarding state [ 197.266967][ T8460] dummy0: left allmulticast mode [ 197.268928][ T8460] bridge2: port 1(dummy0) entered disabled state [ 197.349597][ T8465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.196343][ T8486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.507811][ T8495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.699172][ T5896] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 199.758463][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 199.883657][ T8499] dummy0: left promiscuous mode [ 199.990685][ T8499] bridge3: port 1(dummy0) entered blocking state [ 200.002312][ T8499] bridge3: port 1(dummy0) entered disabled state [ 200.006413][ T8499] dummy0: entered allmulticast mode [ 200.010997][ T8499] dummy0: entered promiscuous mode [ 200.208649][ T8500] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 200.214842][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.936'. [ 200.226905][ T8500] bridge3: port 1(dummy0) entered blocking state [ 200.232299][ T8500] bridge3: port 1(dummy0) entered forwarding state [ 200.238659][ T8500] dummy0: left allmulticast mode [ 200.241217][ T8500] bridge3: port 1(dummy0) entered disabled state [ 261.371634][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.375256][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.694600][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 261.784447][ T5896] usb 9-1: device descriptor read/all, error -71 [ 262.531787][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.589015][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.614597][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.673070][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.676961][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.843207][ T5758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.928491][ T5752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.962427][ T5752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.975021][ T5752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.979975][ T5752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.422692][ T65] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.451101][ T5763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.486532][ T5763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.494760][ T5763] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.501981][ T5758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.538475][ T5758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.547852][ T5758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.552779][ T5763] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.557123][ T5763] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.601853][ T65] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.963338][ T5758] Bluetooth: hci4: command tx timeout [ 265.103627][ T5758] Bluetooth: hci5: command tx timeout [ 265.528378][ T5825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.753587][ T5758] Bluetooth: hci7: command tx timeout [ 265.993594][ T5758] Bluetooth: hci6: command tx timeout [ 266.047722][ T5825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.498226][ T5825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.037534][ T5825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.105741][ T5758] Bluetooth: hci4: command tx timeout [ 267.187659][ T5758] Bluetooth: hci5: command tx timeout [ 267.681290][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.685554][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.689081][ T8515] bridge_slave_0: entered allmulticast mode [ 267.693976][ T8515] bridge_slave_0: entered promiscuous mode [ 267.833656][ T5758] Bluetooth: hci7: command tx timeout [ 267.926901][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.930965][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.934712][ T8515] bridge_slave_1: entered allmulticast mode [ 267.947888][ T8515] bridge_slave_1: entered promiscuous mode [ 268.082958][ T5758] Bluetooth: hci6: command tx timeout [ 268.191676][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.199567][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.207045][ T8525] bridge_slave_0: entered allmulticast mode [ 268.241202][ T8525] bridge_slave_0: entered promiscuous mode [ 268.316272][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.324914][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.435267][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.440612][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.445721][ T8525] bridge_slave_1: entered allmulticast mode [ 268.466612][ T8525] bridge_slave_1: entered promiscuous mode [ 268.576452][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.587528][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.590394][ T8516] bridge_slave_0: entered allmulticast mode [ 268.594700][ T8516] bridge_slave_0: entered promiscuous mode [ 268.616742][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.627843][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.649408][ T8516] bridge_slave_1: entered allmulticast mode [ 268.660175][ T8516] bridge_slave_1: entered promiscuous mode [ 268.714624][ T8525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.746306][ T8515] team0: Port device team_slave_0 added [ 268.822053][ T8525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.849072][ T8515] team0: Port device team_slave_1 added [ 268.976832][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.029266][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.069135][ T8525] team0: Port device team_slave_0 added [ 269.087183][ T8525] team0: Port device team_slave_1 added [ 269.100845][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.105034][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.135704][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.145656][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.158884][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.162191][ T8521] bridge_slave_0: entered allmulticast mode [ 269.223598][ T8521] bridge_slave_0: entered promiscuous mode [ 269.235075][ T5758] Bluetooth: hci4: command tx timeout [ 269.292713][ T5758] Bluetooth: hci5: command tx timeout [ 269.418891][ T5825] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.441750][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.453741][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.474285][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.479728][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.485648][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.488824][ T8521] bridge_slave_1: entered allmulticast mode [ 269.492972][ T8521] bridge_slave_1: entered promiscuous mode [ 269.537769][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.544525][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.561410][ T8525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.571762][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.582615][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.601913][ T8525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.624506][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.632487][ T8516] team0: Port device team_slave_0 added [ 269.678573][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.686319][ T8516] team0: Port device team_slave_1 added [ 269.730753][ T5825] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.909891][ T8515] hsr_slave_0: entered promiscuous mode [ 269.927732][ T8515] hsr_slave_1: entered promiscuous mode [ 269.929924][ T5758] Bluetooth: hci7: command tx timeout [ 269.961146][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 269.961207][ T8515] Cannot create hsr debugfs directory [ 270.006748][ T8525] hsr_slave_0: entered promiscuous mode [ 270.011238][ T8525] hsr_slave_1: entered promiscuous mode [ 270.039300][ T8525] debugfs: 'hsr0' already exists in 'hsr' [ 270.042963][ T8525] Cannot create hsr debugfs directory [ 270.051406][ T8521] team0: Port device team_slave_0 added [ 270.057481][ T8521] team0: Port device team_slave_1 added [ 270.121038][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.128674][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.159781][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.160685][ T5758] Bluetooth: hci6: command tx timeout [ 270.177067][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.189250][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.232742][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.335671][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.340728][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.357839][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.483797][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.501156][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.533356][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.827896][ T5459] 8021q: adding VLAN 0 to HW filter on device eth6 [ 270.886032][ T8516] hsr_slave_0: entered promiscuous mode [ 270.926316][ T8516] hsr_slave_1: entered promiscuous mode [ 270.932073][ T8516] debugfs: 'hsr0' already exists in 'hsr' [ 270.948009][ T8516] Cannot create hsr debugfs directory [ 271.081364][ T8521] hsr_slave_0: entered promiscuous mode [ 271.087697][ T8521] hsr_slave_1: entered promiscuous mode [ 271.105561][ T8521] debugfs: 'hsr0' already exists in 'hsr' [ 271.108320][ T8521] Cannot create hsr debugfs directory [ 271.263776][ T5758] Bluetooth: hci4: command tx timeout [ 271.350188][ T5758] Bluetooth: hci5: command tx timeout [ 271.781231][ T5825] bond0 (unregistering): Released all slaves [ 272.064175][ T5758] Bluetooth: hci7: command tx timeout [ 272.237218][ T5758] Bluetooth: hci6: command tx timeout [ 272.812553][ T5459] 8021q: adding VLAN 0 to HW filter on device eth7 [ 272.909257][ T8515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.986994][ T8515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.001740][ T8515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.112289][ T8515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.447972][ T8515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.480326][ T8515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.494835][ T8515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.551215][ T8515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.715852][ T5459] 8021q: adding VLAN 0 to HW filter on device eth8 [ 273.915308][ T5825] hsr_slave_0: left promiscuous mode [ 273.919269][ T5825] hsr_slave_1: left promiscuous mode [ 273.950353][ T5825] veth1_macvtap: left promiscuous mode [ 273.955162][ T5825] veth0_macvtap: left promiscuous mode [ 273.959123][ T5825] veth1_vlan: left promiscuous mode [ 273.962118][ T5825] veth0_vlan: left promiscuous mode [ 275.040585][ T8525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.090509][ T8525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.161368][ T8525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.295087][ T8525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.299881][ T8525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.326269][ T8525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.492205][ T8525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.578468][ T8525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.806056][ T5459] 8021q: adding VLAN 0 to HW filter on device eth9 [ 276.004294][ T8516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.162518][ T8516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.209682][ T8516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.276863][ T8516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.351329][ T8516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.361787][ T8516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.369783][ T8516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 276.411833][ T8516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.460780][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.503356][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.561209][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.578891][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.602421][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.606347][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.734942][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10 [ 276.820581][ T8521] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.867318][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.892503][ T5825] IPVS: stop unused estimator thread 0... [ 276.897463][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.980843][ T8521] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.030569][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.110166][ T8521] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.151626][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.178244][ T8521] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.235345][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.442636][ T5825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.560694][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.616737][ T8525] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.748660][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.752341][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.771212][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.776133][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.968841][ T5825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.027311][ T5459] 8021q: adding VLAN 0 to HW filter on device eth11 [ 278.061918][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.222424][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.226202][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.232138][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.236651][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.394873][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.554485][ T5825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.648217][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.790457][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.793280][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.813142][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.858548][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.864377][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.448608][ T5825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.599110][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.919022][ T8525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.170677][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.652251][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.147847][ T5825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.612974][ T8525] veth0_vlan: entered promiscuous mode [ 281.644927][ T5459] 8021q: adding VLAN 0 to HW filter on device eth13 [ 281.979919][ T5825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.031964][ T8516] veth0_vlan: entered promiscuous mode [ 282.049727][ T8525] veth1_vlan: entered promiscuous mode [ 282.091447][ T8515] veth0_vlan: entered promiscuous mode [ 282.186176][ T8515] veth1_vlan: entered promiscuous mode [ 282.199828][ T8516] veth1_vlan: entered promiscuous mode [ 282.228603][ T8521] veth0_vlan: entered promiscuous mode [ 282.311391][ T8521] veth1_vlan: entered promiscuous mode [ 282.329522][ T8525] veth0_macvtap: entered promiscuous mode [ 282.381069][ T8525] veth1_macvtap: entered promiscuous mode [ 282.487603][ T5825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.596758][ T8516] veth0_macvtap: entered promiscuous mode [ 282.629598][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.643067][ T8516] veth1_macvtap: entered promiscuous mode [ 282.649717][ T5459] 8021q: adding VLAN 0 to HW filter on device eth12 [ 282.664707][ T8515] veth0_macvtap: entered promiscuous mode [ 282.686369][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.700074][ T8521] veth0_macvtap: entered promiscuous mode [ 282.735345][ T8521] veth1_macvtap: entered promiscuous mode [ 282.796098][ T8515] veth1_macvtap: entered promiscuous mode [ 282.896235][ T5825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.940761][ T5824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.946774][ T5617] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.025244][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.046559][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.053947][ T5617] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.076565][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.086018][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.098780][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.168367][ T5617] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.181055][ T5617] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.219205][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.286492][ T5617] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.306682][ T5617] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.316346][ T5617] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.492471][ T5617] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.497618][ T5617] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.665378][ T5459] 8021q: adding VLAN 0 to HW filter on device eth14 [ 283.701948][ T5617] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.705385][ T5617] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.019746][ T5617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.025143][ T5617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.140381][ T5617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.147623][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.151696][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.157681][ T5617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.239709][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.249659][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.310715][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.315533][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.556101][ T5825] bridge_slave_1: left allmulticast mode [ 284.558936][ T5825] bridge_slave_1: left promiscuous mode [ 284.563958][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.618506][ T5825] bridge_slave_0: left allmulticast mode [ 284.620540][ T5825] bridge_slave_0: left promiscuous mode [ 284.623284][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.089124][ T5825] bond0 (unregistering): Released all slaves [ 285.371063][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.438477][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.470637][ T5825] bond0 (unregistering): Released all slaves [ 285.532587][ T5459] 8021q: adding VLAN 0 to HW filter on device eth15 [ 285.696881][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.751384][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.806833][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.837941][ T5825] tipc: Left network mode [ 285.849253][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.911449][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.914305][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.922892][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.958595][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.057399][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.068008][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.816427][ T5459] 8021q: adding VLAN 0 to HW filter on device eth16 [ 287.723163][ T5459] 8021q: adding VLAN 0 to HW filter on device eth17 [ 287.985959][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 288.724635][ T5459] 8021q: adding VLAN 0 to HW filter on device eth18 [ 289.999870][ T5825] hsr_slave_0: left promiscuous mode [ 290.008048][ T5825] hsr_slave_1: left promiscuous mode [ 290.415954][ T5825] hsr_slave_0: left promiscuous mode [ 290.441050][ T5825] hsr_slave_1: left promiscuous mode [ 290.445200][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.452553][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.482701][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.515148][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.790238][ T5825] veth1_macvtap: left promiscuous mode [ 290.845797][ T5825] veth0_macvtap: left promiscuous mode [ 290.887887][ T5825] veth1_vlan: left promiscuous mode [ 290.898440][ T5825] veth0_vlan: left promiscuous mode [ 290.927874][ T5825] veth1_macvtap: left promiscuous mode [ 290.933678][ T5825] veth0_macvtap: left promiscuous mode [ 290.936431][ T5825] veth1_vlan: left promiscuous mode [ 290.949132][ T5825] veth0_vlan: left promiscuous mode [ 291.054686][ T8717] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 291.230923][ T8717] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.238742][ T8717] usb 13-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 291.245306][ T8717] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.361981][ T8717] usb 13-1: Manufacturer: syz [ 291.368969][ T8717] usb 13-1: config 0 descriptor?? [ 291.375746][ T8717] rndis_host 13-1:0.0: rndis: master #0/ffff88805016f000 slave #1/0000000000000000 [ 291.582201][ T8717] usb 13-1: USB disconnect, device number 2 [ 295.524300][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.977'. [ 295.837146][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 295.906208][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 296.139609][ T5459] 8021q: adding VLAN 0 to HW filter on device eth19 [ 296.353295][ T8665] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 296.515121][ T8665] usb 12-1: device descriptor read/64, error -71 [ 296.822974][ T8665] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 297.079702][ T8665] usb 12-1: device descriptor read/64, error -71 [ 297.205572][ T8665] usb usb12-port1: attempt power cycle [ 297.530699][ T8665] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 297.611129][ T8665] usb 12-1: device descriptor read/8, error -71 [ 297.954149][ T8665] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 297.974250][ T8665] usb 12-1: device descriptor read/8, error -71 [ 298.125853][ T8665] usb usb12-port1: unable to enumerate USB device [ 298.541649][ T8521] FAULT_INJECTION: forcing a failure. [ 298.541649][ T8521] name failslab, interval 1, probability 1, space 0, times 1 [ 298.554971][ T8965] FAULT_INJECTION: forcing a failure. [ 298.554971][ T8965] name failslab, interval 1, probability 1, space 0, times 1 [ 298.555073][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 298.555098][ T8965] Tainted: [L]=SOFTLOCKUP [ 298.555105][ T8965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.555116][ T8965] Call Trace: [ 298.555121][ T8965] [ 298.555128][ T8965] dump_stack_lvl+0x100/0x190 [ 298.555155][ T8965] should_fail_ex.cold+0x5/0xa [ 298.555181][ T8965] should_failslab+0xc2/0x120 [ 298.555206][ T8965] kmem_cache_alloc_noprof+0x91/0x6a0 [ 298.555227][ T8965] ? stack_trace_save+0x8e/0xc0 [ 298.555252][ T8965] ? alloc_empty_file+0x5b/0x1c0 [ 298.555279][ T8965] alloc_empty_file+0x5b/0x1c0 [ 298.555302][ T8965] path_openat+0xe7/0x4280 [ 298.555318][ T8965] ? __kasan_slab_alloc+0x89/0x90 [ 298.555340][ T8965] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 298.555360][ T8965] ? do_getname+0x35/0x390 [ 298.555380][ T8965] ? do_sys_openat2+0xc7/0x1e0 [ 298.555401][ T8965] ? __x64_sys_openat+0x12d/0x210 [ 298.555422][ T8965] ? do_syscall_64+0x115/0x840 [ 298.555443][ T8965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.555469][ T8965] ? __pfx_path_openat+0x10/0x10 [ 298.555494][ T8965] do_file_open+0x20e/0x430 [ 298.555514][ T8965] ? __pfx_do_file_open+0x10/0x10 [ 298.555549][ T8965] ? alloc_fd+0x471/0x7a0 [ 298.555569][ T8965] ? do_getname+0x191/0x390 [ 298.555593][ T8965] do_sys_openat2+0x10f/0x1e0 [ 298.555612][ T8965] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.555642][ T8965] __x64_sys_openat+0x12d/0x210 [ 298.555662][ T8965] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.555693][ T8965] do_syscall_64+0x115/0x840 [ 298.555712][ T8965] ? clear_bhb_loop+0x40/0x90 [ 298.555733][ T8965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.555749][ T8965] RIP: 0033:0x7feb7e35b407 [ 298.555762][ T8965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.555775][ T8965] RSP: 002b:00007ffdc41b5460 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 298.555791][ T8965] RAX: ffffffffffffffda RBX: 00007feb7e20bc80 RCX: 00007feb7e35b407 [ 298.555800][ T8965] RDX: 0000000000000241 RSI: 000055ce5977b260 RDI: ffffffffffffff9c [ 298.555810][ T8965] RBP: 000055ce597732e0 R08: 0000000000000000 R09: 0000000000000000 [ 298.555821][ T8965] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055ce5976e558 [ 298.555831][ T8965] R13: 000055ce5977b260 R14: 0000000000000001 R15: 0000000000000000 [ 298.555854][ T8965] [ 298.833642][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 298.833672][ T8521] Tainted: [L]=SOFTLOCKUP [ 298.833677][ T8521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.833686][ T8521] Call Trace: [ 298.833692][ T8521] [ 298.833699][ T8521] dump_stack_lvl+0x100/0x190 [ 298.833723][ T8521] should_fail_ex.cold+0x5/0xa [ 298.833743][ T8521] should_failslab+0xc2/0x120 [ 298.833766][ T8521] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 298.833786][ T8521] ? tcp_assign_congestion_control+0x18c/0x860 [ 298.833803][ T8521] ? __d_alloc+0x35/0xa50 [ 298.833825][ T8521] __d_alloc+0x35/0xa50 [ 298.833845][ T8521] d_alloc_pseudo+0x1c/0xc0 [ 298.833868][ T8521] alloc_file_pseudo+0x118/0x290 [ 298.833891][ T8521] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 298.833911][ T8521] ? alloc_fd+0x471/0x7a0 [ 298.833929][ T8521] sock_alloc_file+0x50/0x210 [ 298.833956][ T8521] __sys_socket+0x1c0/0x260 [ 298.833973][ T8521] ? __pfx___sys_socket+0x10/0x10 [ 298.833997][ T8521] __ia32_compat_sys_socketcall+0x65b/0x770 [ 298.834026][ T8521] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 298.834059][ T8521] ? __pfx_fput_close_sync+0x10/0x10 [ 298.834083][ T8521] __do_fast_syscall_32+0xe7/0x970 [ 298.834105][ T8521] ? lockdep_hardirqs_on+0x78/0x100 [ 298.834125][ T8521] do_fast_syscall_32+0x32/0x70 [ 298.834146][ T8521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.834168][ T8521] RIP: 0023:0xf7f14fec [ 298.834183][ T8521] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 298.834198][ T8521] RSP: 002b:00000000ffd91b50 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 298.834215][ T8521] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffd91b60 [ 298.834225][ T8521] RDX: 00000000f73a6ff4 RSI: 0000000000000003 RDI: 00000000ffd92304 [ 298.834234][ T8521] RBP: 00000000f73a8c40 R08: 0000000000000000 R09: 0000000000000000 [ 298.834243][ T8521] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 298.834252][ T8521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.834273][ T8521] [ 300.415245][ T5825] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.733550][ T42] kauditd_printk_skb: 113 callbacks suppressed [ 300.733571][ T42] audit: type=1326 audit(1785243217.648:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.1008" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 300.931449][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.952016][ T5825] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.973557][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.991837][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.023699][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.027722][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.526965][ T5825] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.077263][ T5825] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.160263][ T5825] bridge_slave_1: left allmulticast mode [ 303.162753][ T5825] bridge_slave_1: left promiscuous mode [ 303.167755][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.197219][ T5758] Bluetooth: hci0: command tx timeout [ 303.207708][ T5825] bridge_slave_0: left allmulticast mode [ 303.211652][ T5825] bridge_slave_0: left promiscuous mode [ 303.233906][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.613590][ T6036] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 303.836333][ T6036] usb 12-1: config 128 has an invalid interface number: 190 but max is 0 [ 303.839630][ T6036] usb 12-1: config 128 has no interface number 0 [ 303.845513][ T6036] usb 12-1: New USB device found, idVendor=13d3, idProduct=3359, bcdDevice=bf.81 [ 303.870740][ T6036] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.883298][ T6036] usb 12-1: Product: syz [ 303.949509][ T6036] usb 12-1: Manufacturer: syz [ 303.952112][ T6036] usb 12-1: SerialNumber: syz [ 304.223245][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.250864][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.293803][ T5825] bond0 (unregistering): Released all slaves [ 305.211502][ T6036] usb 12-1: USB disconnect, device number 6 [ 305.304232][ T5758] Bluetooth: hci0: command tx timeout [ 305.664965][ T8661] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 305.913563][ T8661] usb 13-1: Using ep0 maxpacket: 32 [ 305.948485][ T8661] usb 13-1: unable to get BOS descriptor or descriptor too short [ 305.978880][ T8661] usb 13-1: config 6 has an invalid interface number: 195 but max is 0 [ 305.993126][ T8661] usb 13-1: config 6 has no interface number 0 [ 306.013976][ T8661] usb 13-1: config 6 interface 195 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 306.030740][ T8661] usb 13-1: config 6 interface 195 has no altsetting 0 [ 306.050810][ T8661] usb 13-1: New USB device found, idVendor=0df6, idProduct=0052, bcdDevice=b2.9f [ 306.053916][ T5825] hsr_slave_0: left promiscuous mode [ 306.060404][ T8661] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.060430][ T8661] usb 13-1: Product: syz [ 306.060440][ T8661] usb 13-1: Manufacturer: syz [ 306.060450][ T8661] usb 13-1: SerialNumber: syz [ 306.090423][ T5825] hsr_slave_1: left promiscuous mode [ 306.096127][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.100485][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.148153][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.157663][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.183039][ T5825] veth1_macvtap: left promiscuous mode [ 306.188300][ T5825] veth0_macvtap: left promiscuous mode [ 306.192324][ T5825] veth1_vlan: left promiscuous mode [ 306.203059][ T5825] veth0_vlan: left promiscuous mode [ 306.388474][ T8661] usb 13-1: USB disconnect, device number 3 [ 307.083821][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 307.107062][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 307.349493][ T5758] Bluetooth: hci0: command tx timeout [ 307.591179][ T5459] 8021q: adding VLAN 0 to HW filter on device eth20 [ 307.624737][ T9085] bridge1: entered promiscuous mode [ 307.726637][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.741978][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.745650][ T9014] bridge_slave_0: entered allmulticast mode [ 307.753041][ T9014] bridge_slave_0: entered promiscuous mode [ 307.769986][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.772750][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.795870][ T9014] bridge_slave_1: entered allmulticast mode [ 307.818602][ T9014] bridge_slave_1: entered promiscuous mode [ 307.948629][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.995614][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.102523][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1032'. [ 308.111314][ T9014] team0: Port device team_slave_0 added [ 308.116066][ T9014] team0: Port device team_slave_1 added [ 308.157986][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.175406][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.208842][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.221195][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.241101][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.285531][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.549171][ T9014] hsr_slave_0: entered promiscuous mode [ 308.553270][ T9014] hsr_slave_1: entered promiscuous mode [ 308.801616][ T5459] 8021q: adding VLAN 0 to HW filter on device eth21 [ 309.029130][ T42] audit: type=1800 audit(1785243225.958:226): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1036" name="UDC" dev="configfs" ino=24285 res=0 errno=0 [ 309.425835][ T5758] Bluetooth: hci0: command tx timeout [ 309.445900][ T5459] 8021q: adding VLAN 0 to HW filter on device eth22 [ 309.447556][ T9153] zero sized request [ 309.570668][ T9155] input: syz1 as /devices/virtual/input/input10 [ 310.810119][ T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 311.013595][ T10] usb 12-1: Using ep0 maxpacket: 8 [ 311.019217][ T10] usb 12-1: unable to get BOS descriptor or descriptor too short [ 311.041518][ T10] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.084574][ T10] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.127272][ T10] usb 12-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 311.132334][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.165887][ T10] usb 12-1: Product: syz [ 311.167943][ T10] usb 12-1: Manufacturer: syz [ 311.192036][ T10] usb 12-1: SerialNumber: syz [ 311.215901][ T9014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.252731][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.272090][ T9014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 311.300043][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.318084][ T9014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 311.345535][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.365694][ T9014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 311.407767][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.496726][ T10] usb 12-1: 0:1 : does not exist [ 311.499753][ T10] usb 12-1: unit 0 not found! [ 311.502310][ T10] usb 12-1: unit 5 not found! [ 311.505564][ T10] usb 12-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 311.555800][ T10] usb 12-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 311.675933][ T10] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 311.691709][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.708039][ T10] usb 12-1: USB disconnect, device number 7 [ 311.755563][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.766900][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.773125][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.807624][ T8708] udevd[8708]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.876500][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.896678][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.334265][ T1357] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 313.378434][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.529081][ T1357] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 313.534203][ T1357] usb 12-1: can't read configurations, error -61 [ 313.761160][ T1357] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 313.910696][ T9014] veth0_vlan: entered promiscuous mode [ 313.939644][ T9014] veth1_vlan: entered promiscuous mode [ 313.946996][ T1357] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 313.951637][ T1357] usb 12-1: can't read configurations, error -61 [ 313.962761][ T1357] usb usb12-port1: attempt power cycle [ 313.973539][ T9014] veth0_macvtap: entered promiscuous mode [ 313.996896][ T9014] veth1_macvtap: entered promiscuous mode [ 314.012454][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.072131][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.147897][ T5825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.153616][ T5825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.211620][ T5825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.254535][ T5825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.335378][ T1357] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 314.372461][ T1357] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 314.392673][ T1357] usb 12-1: can't read configurations, error -61 [ 314.484498][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.488973][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.547592][ T1357] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 314.567128][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.570741][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.577959][ T1357] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 314.588959][ T1357] usb 12-1: can't read configurations, error -61 [ 314.593916][ T1357] usb usb12-port1: unable to enumerate USB device [ 317.035748][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.042835][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.711226][ T10] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 317.899244][ T10] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.964364][ T10] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.977256][ T10] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.033837][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.113476][ T10] usb 12-1: Product: syz [ 318.119150][ T10] usb 12-1: Manufacturer: syz [ 318.134061][ T10] usb 12-1: SerialNumber: syz [ 318.723912][ T10] cdc_ncm 12-1:1.0: CDC Union missing and no IAD found [ 319.007151][ T10] cdc_ncm 12-1:1.0: bind() failure [ 319.022378][ T10] usb 12-1: USB disconnect, device number 12 [ 321.239570][ T5825] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.581365][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.594394][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.606740][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.633108][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.642813][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.644437][ T9301] netlink: 'syz.8.1060': attribute type 10 has an invalid length. [ 321.668679][ T9301] team0: Port device dummy0 added [ 322.691357][ T5825] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.390119][ T5825] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.763908][ T5752] Bluetooth: hci1: command tx timeout [ 324.102053][ T9325] netlink: 'syz.8.1063': attribute type 10 has an invalid length. [ 324.387324][ T1482] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 324.550931][ T1482] usb 11-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 324.564653][ T1482] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.587734][ T1482] i2c-tiny-usb 11-1:1.0: version 1.00 found at bus 011 address 002 [ 325.002189][ T1482] (null): failure reading functionality [ 325.224095][ T1482] i2c i2c-2: failure reading functionality [ 325.404965][ T9327] i2c i2c-2: failure reading status [ 325.409906][ T9327] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 325.439405][ T1482] i2c i2c-2: connected i2c-tiny-usb device [ 325.471757][ T9327] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 325.484336][ T9327] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 325.511487][ T8729] usb 11-1: USB disconnect, device number 2 [ 325.667685][ T5825] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.837272][ T5752] Bluetooth: hci1: command tx timeout [ 326.705092][ T1482] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 326.865087][ T1482] usb 13-1: Using ep0 maxpacket: 16 [ 326.900164][ T1482] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 326.934670][ T1482] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.962640][ T1482] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.988442][ T1482] usb 13-1: Product: syz [ 326.988978][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.996376][ T1482] usb 13-1: Manufacturer: syz [ 326.996396][ T1482] usb 13-1: SerialNumber: syz [ 327.005954][ T1482] usb 13-1: config 0 descriptor?? [ 327.029015][ T1482] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.036557][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.036800][ T9299] bridge_slave_0: entered allmulticast mode [ 327.059373][ T9299] bridge_slave_0: entered promiscuous mode [ 327.078161][ T1482] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 327.141702][ T9299] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.146606][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.151196][ T9299] bridge_slave_1: entered allmulticast mode [ 327.173305][ T9299] bridge_slave_1: entered promiscuous mode [ 327.223078][ T5825] bridge_slave_1: left allmulticast mode [ 327.231187][ T5825] bridge_slave_1: left promiscuous mode [ 327.246640][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.307012][ T5825] bridge_slave_0: left allmulticast mode [ 327.309963][ T5825] bridge_slave_0: left promiscuous mode [ 327.313729][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.725682][ T1482] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 327.730323][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1065'. [ 327.914023][ T5752] Bluetooth: hci1: command tx timeout [ 328.006083][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.048448][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.059148][ T5825] bond0 (unregistering): Released all slaves [ 328.134531][ T9299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.157657][ T9299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.185412][ T5459] 8021q: adding VLAN 0 to HW filter on device eth20 [ 328.233610][ T1482] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 328.254444][ T1482] em28xx 13-1:0.0: board has no eeprom [ 328.396234][ T9346] em28xx 13-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 328.428833][ T9299] team0: Port device team_slave_0 added [ 328.461565][ T9299] team0: Port device team_slave_1 added [ 328.513920][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.520122][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.554740][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.555118][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.644029][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.753630][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.823586][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.842738][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.857105][ T8669] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 329.093181][ T8669] usb 10-1: Using ep0 maxpacket: 8 [ 329.111014][ T8669] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.120078][ T8669] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.162292][ T8669] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.209171][ T8669] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.219056][ T8669] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.270553][ T8669] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.277744][ T1482] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 329.332161][ T1482] em28xx 13-1:0.0: dvb set to bulk mode. [ 329.438451][ T8677] em28xx 13-1:0.0: Binding DVB extension [ 329.495850][ T1482] usb 13-1: USB disconnect, device number 4 [ 329.501341][ T1482] em28xx 13-1:0.0: Disconnecting em28xx [ 329.578811][ T9299] hsr_slave_0: entered promiscuous mode [ 329.582929][ T9299] hsr_slave_1: entered promiscuous mode [ 329.586436][ T9299] debugfs: 'hsr0' already exists in 'hsr' [ 329.588930][ T9299] Cannot create hsr debugfs directory [ 329.644418][ T8669] usb 10-1: GET_CAPABILITIES returned 0 [ 329.663208][ T8669] usbtmc 10-1:16.0: can't read capabilities [ 329.735896][ T8677] em28xx 13-1:0.0: Registering input extension [ 329.742944][ T1482] em28xx 13-1:0.0: Closing input extension [ 330.007915][ T5752] Bluetooth: hci1: command tx timeout [ 330.148437][ T1482] em28xx 13-1:0.0: Freeing device [ 330.387404][ T5825] hsr_slave_0: left promiscuous mode [ 330.392573][ T5825] hsr_slave_1: left promiscuous mode [ 330.398412][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.403169][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.425806][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.445020][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.450484][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.453622][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.594941][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.599600][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.618720][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.623535][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.627221][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.833802][ T5825] veth1_macvtap: left promiscuous mode [ 330.836143][ T5825] veth0_macvtap: left promiscuous mode [ 330.838829][ T5825] veth1_vlan: left promiscuous mode [ 330.841204][ T5825] veth0_vlan: left promiscuous mode [ 331.180535][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.184494][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.209061][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.212881][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.225955][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.311398][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.329128][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.332427][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.350165][ C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 331.863658][ T50] hid-generic 0000:0004:261D.000A: item fetching failed at offset 0/14 [ 331.934306][ T50] hid-generic 0000:0004:261D.000A: probe with driver hid-generic failed with error -22 [ 332.481399][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 332.530169][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 332.538524][ T1482] usb 10-1: USB disconnect, device number 2 [ 332.780178][ T5459] 8021q: adding VLAN 0 to HW filter on device eth21 [ 333.771476][ T9299] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 333.905710][ T9299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.927546][ T9299] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 333.934954][ T9299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.947439][ T5459] 8021q: adding VLAN 0 to HW filter on device eth22 [ 333.958083][ T9299] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.013725][ T9299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.019888][ T9299] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.145407][ T5859] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 334.326269][ T5859] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 334.332368][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.346696][ T9299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.405633][ T5859] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 003 [ 334.916384][ T9299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.953491][ T5859] (null): failure reading functionality [ 334.959812][ T5859] i2c i2c-2: failure reading functionality [ 335.009610][ T9299] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.066733][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.089318][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.129829][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.132773][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.155595][ T5859] i2c i2c-2: connected i2c-tiny-usb device [ 335.915444][ T5459] 8021q: adding VLAN 0 to HW filter on device eth23 [ 336.637750][ T9299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.775514][ T9469] netlink: 'syz.6.1083': attribute type 10 has an invalid length. [ 336.850712][ T9469] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1083'. [ 336.856794][ T9469] dummy0: entered promiscuous mode [ 336.916761][ T8717] usb 10-1: USB disconnect, device number 3 [ 337.722135][ T9299] veth0_vlan: entered promiscuous mode [ 337.746783][ T9299] veth1_vlan: entered promiscuous mode [ 337.820271][ T9299] veth0_macvtap: entered promiscuous mode [ 337.829387][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 337.832831][ T9299] veth1_macvtap: entered promiscuous mode [ 338.073208][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 338.105547][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.110531][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.128866][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.134878][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.140336][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.147757][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.390642][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.414998][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.483887][ T9] usb 11-1: GET_CAPABILITIES returned 0 [ 338.512082][ T5617] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.516627][ T5617] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.524485][ T5617] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.533631][ T9] usbtmc 11-1:16.0: can't read capabilities [ 338.538789][ T5617] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.950112][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.978347][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.034462][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.037918][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.518517][ T8669] hid-generic 0000:0004:261D.000B: item fetching failed at offset 0/14 [ 339.522852][ T8669] hid-generic 0000:0004:261D.000B: probe with driver hid-generic failed with error -22 [ 339.672354][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.681326][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.694295][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.701499][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.715163][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.728672][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.741975][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.749697][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.780552][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.804891][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.809082][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.812781][ C1] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 339.846983][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 340.103962][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 340.108808][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 340.137492][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 340.143079][ C0] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 340.178377][ T9508] netlink: 'syz.9.1058': attribute type 1 has an invalid length. [ 340.183826][ T9508] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1058'. [ 340.197473][ T9] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 340.283256][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 340.314716][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.319526][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.348042][ T9] usb 10-1: Product: syz [ 340.401744][ T9] usb 10-1: Manufacturer: syz [ 340.439318][ T9] usb 10-1: SerialNumber: syz [ 340.489685][ T9] usb 10-1: config 0 descriptor?? [ 340.534697][ T9501] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 340.554935][ T9] usb 10-1: selecting invalid altsetting 0 [ 342.839626][ T8669] usb 10-1: USB disconnect, device number 4 [ 343.119124][ T1482] usb 11-1: USB disconnect, device number 3 [ 343.134035][ T8677] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 343.495193][ T8677] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 343.499483][ T8677] usb 13-1: config 0 interface 0 has no altsetting 0 [ 343.521830][ T8677] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.527898][ T8677] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 343.531007][ T8677] usb 13-1: Product: syz [ 343.532566][ T8677] usb 13-1: Manufacturer: syz [ 343.561582][ T8677] usb 13-1: SerialNumber: syz [ 343.628140][ T8677] usb 13-1: config 0 descriptor?? [ 343.654994][ T9520] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 343.662509][ T8677] usb 13-1: selecting invalid altsetting 0 [ 343.875638][ T8677] usb 13-1: USB disconnect, device number 5 [ 345.390215][ T9552] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1103'. [ 345.394743][ T9552] openvswitch: netlink: Message has 512 unknown bytes. [ 346.123573][ T8669] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 346.410088][ T8669] usb 13-1: Using ep0 maxpacket: 8 [ 346.465567][ T8669] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.471615][ T8669] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.502112][ T8669] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.624940][ T8669] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.642143][ T8669] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.742489][ T8669] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.190108][ T8669] usb 13-1: GET_CAPABILITIES returned 0 [ 347.192723][ T8669] usbtmc 13-1:16.0: can't read capabilities [ 347.886307][ T846] hid-generic 0000:0004:261D.000C: item fetching failed at offset 0/14 [ 347.892403][ T846] hid-generic 0000:0004:261D.000C: probe with driver hid-generic failed with error -22 [ 348.187749][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.192440][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.197352][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.201375][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.205304][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.209435][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.214599][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.218636][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.236277][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.240104][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.245997][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.251451][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.256525][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.262858][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.267275][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.271521][ C2] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.547386][ T846] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 350.257006][ T846] usb 14-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config [ 350.270717][ T846] usb 14-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.278332][ T846] usb 14-1: config 0 interface 0 has no altsetting 0 [ 350.307050][ T41] usb 13-1: USB disconnect, device number 6 [ 351.732025][ T846] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.757608][ T846] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.761063][ T846] usb 14-1: Product: syz [ 351.901230][ T846] usb 14-1: config 0 descriptor?? [ 351.987035][ T846] usb 14-1: can't set config #0, error -71 [ 352.048972][ T846] usb 14-1: USB disconnect, device number 2 [ 352.533936][ T8669] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 352.920424][ T8669] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 352.952165][ T8669] usb 11-1: config 0 interface 0 has no altsetting 0 [ 353.171959][ T8669] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.197361][ T8669] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 353.205824][ T8669] usb 11-1: Product: syz [ 353.213729][ T8669] usb 11-1: Manufacturer: syz [ 353.317019][ T8669] usb 11-1: SerialNumber: syz [ 353.320749][ T8669] usb 11-1: config 0 descriptor?? [ 353.324564][ T9636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 353.333981][ T8669] usb 11-1: selecting invalid altsetting 0 [ 353.582377][ T8661] usb 11-1: USB disconnect, device number 4 [ 353.696297][ T8669] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 353.976661][ T8669] usb 10-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config [ 353.981576][ T8669] usb 10-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.999422][ T8669] usb 10-1: config 0 interface 0 has no altsetting 0 [ 354.020457][ T8669] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 354.029656][ T8669] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 354.035052][ T8669] usb 10-1: Product: syz [ 354.041508][ T8669] usb 10-1: Manufacturer: syz [ 354.057216][ T8669] usb 10-1: SerialNumber: syz [ 354.065724][ T8669] usb 10-1: config 0 descriptor?? [ 354.369600][ T8669] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 354.406307][ T8669] usb 10-1: USB disconnect, device number 5 [ 354.445658][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.705222][ T9059] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 357.007208][ T9059] usb 10-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 357.013876][ T9059] usb 10-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.030537][ T9059] usb 10-1: config 0 interface 0 has no altsetting 0 [ 357.040392][ T9059] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.047427][ T9059] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.053296][ T9059] usb 10-1: Product: syz [ 357.057586][ T9059] usb 10-1: Manufacturer: syz [ 357.094648][ T9059] usb 10-1: SerialNumber: syz [ 357.104031][ T9059] usb 10-1: config 0 descriptor?? [ 357.694700][ T9059] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 357.703479][ T9059] usb 10-1: USB disconnect, device number 6 [ 357.818317][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.515651][ T8669] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 362.751257][ T8669] usb 11-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 362.760282][ T8669] usb 11-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.767965][ T8669] usb 11-1: config 0 interface 0 has no altsetting 0 [ 362.775586][ T8669] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 362.799298][ T8669] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 362.803974][ T8669] usb 11-1: Product: syz [ 362.810158][ T8669] usb 11-1: Manufacturer: syz [ 362.811934][ T8669] usb 11-1: SerialNumber: syz [ 362.834469][ T8669] usb 11-1: config 0 descriptor?? [ 363.737189][ T8669] snd-usb-audio 11-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 363.756518][ T8669] usb 11-1: USB disconnect, device number 5 [ 363.881704][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.253550][ T8717] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 366.421906][ T9790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.427200][ T9790] IPv6: NLM_F_CREATE should be set when creating new route [ 366.431018][ T9790] IPv6: NLM_F_CREATE should be set when creating new route [ 366.436239][ T9790] IPv6: NLM_F_CREATE should be set when creating new route [ 366.485915][ T8717] usb 14-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 366.490026][ T8717] usb 14-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.508052][ T8717] usb 14-1: config 0 interface 0 has no altsetting 0 [ 366.517243][ T8717] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.522970][ T8717] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.529508][ T8717] usb 14-1: Product: syz [ 366.532550][ T8717] usb 14-1: Manufacturer: syz [ 366.535572][ T8717] usb 14-1: SerialNumber: syz [ 366.549535][ T8717] usb 14-1: config 0 descriptor?? [ 366.694913][ T8717] snd-usb-audio 14-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 366.760469][ T8717] usb 14-1: USB disconnect, device number 3 [ 366.997141][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.356933][ T9797] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1181'. [ 367.364383][ T9797] openvswitch: netlink: Message has 512 unknown bytes. [ 369.290969][ T9829] No control pipe specified [ 369.997985][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1194'. [ 370.112548][ T9837] netlink: 'syz.9.1194': attribute type 10 has an invalid length. [ 370.117625][ T9837] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1194'. [ 370.187729][ T9837] dummy0: entered promiscuous mode [ 370.600695][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1202'. [ 370.666637][ T9852] netlink: 'syz.5.1202': attribute type 10 has an invalid length. [ 370.670810][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1202'. [ 370.687147][ T9852] dummy0: entered promiscuous mode [ 371.129396][ T9859] No control pipe specified [ 372.874017][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1214'. [ 372.926303][ T9890] dummy0: left promiscuous mode [ 372.991316][ T9890] netlink: 'syz.6.1214': attribute type 10 has an invalid length. [ 372.995268][ T9890] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1214'. [ 373.006134][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1217'. [ 373.043940][ T9890] dummy0: entered promiscuous mode [ 373.171713][ T9894] netlink: 'syz.8.1217': attribute type 10 has an invalid length. [ 373.171738][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1217'. [ 373.202163][ T9893] team0: Port device dummy0 removed [ 373.265595][ T9894] dummy0: entered promiscuous mode [ 373.266457][ T9896] No control pipe specified [ 375.337772][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1232'. [ 375.417032][ T9930] dummy0: left promiscuous mode [ 375.455311][ T9930] netlink: 'syz.9.1232': attribute type 10 has an invalid length. [ 375.470445][ T9930] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1232'. [ 375.476995][ T9930] dummy0: entered promiscuous mode [ 376.396736][ T50] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 376.635098][ T50] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 376.645455][ T50] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.657015][ T50] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.682735][ T50] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 376.732964][ T50] usb 14-1: Product: syz [ 376.735441][ T50] usb 14-1: Manufacturer: syz [ 376.738037][ T50] usb 14-1: SerialNumber: syz [ 376.766913][ T9949] fuse: Bad value for 'fd' [ 376.772938][ T50] usb 14-1: config 0 descriptor?? [ 376.794760][ T50] usb 14-1: selecting invalid altsetting 0 [ 377.041048][ T50] usb 14-1: USB disconnect, device number 4 [ 378.573576][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576783][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.077272][ T9975] input: syz1 as /devices/virtual/input/input14 [ 379.742032][ T9995] fuse: Bad value for 'fd' [ 380.555641][T10000] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1255'. [ 380.644144][T10000] openvswitch: netlink: Message has 512 unknown bytes. [ 380.953097][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1259'. [ 381.041072][T10012] dummy0: left promiscuous mode [ 381.217115][T10008] netlink: 'syz.9.1259': attribute type 10 has an invalid length. [ 381.233923][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1259'. [ 381.717815][T10020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.723542][T10020] IPv6: NLM_F_CREATE should be set when creating new route [ 381.729041][T10020] IPv6: NLM_F_CREATE should be set when creating new route [ 381.735047][T10020] IPv6: NLM_F_CREATE should be set when creating new route [ 382.033533][T10008] dummy0: entered promiscuous mode [ 382.354685][T10022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.505438][T10025] fuse: Invalid rootmode [ 382.673342][T10029] input: syz1 as /devices/virtual/input/input15 [ 383.595103][ T5826] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 383.793891][ T34] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 384.094043][ T34] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 384.112246][ T34] usb 14-1: config 0 interface 0 has no altsetting 0 [ 384.143581][ T34] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 384.148362][ T34] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 384.153189][ T34] usb 14-1: Product: syz [ 384.158711][ T34] usb 14-1: Manufacturer: syz [ 384.160872][ T34] usb 14-1: SerialNumber: syz [ 384.172865][ T34] usb 14-1: config 0 descriptor?? [ 384.197385][T10039] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 384.210113][ T34] usb 14-1: selecting invalid altsetting 0 [ 384.557467][ T34] usb 14-1: USB disconnect, device number 5 [ 385.279005][ T5826] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 385.292806][ T5826] usb 11-1: config 0 interface 0 has no altsetting 0 [ 385.673587][ T5763] Bluetooth: hci4: command 0x0406 tx timeout [ 385.676300][ T5763] Bluetooth: hci5: command 0x0406 tx timeout [ 386.123726][ T8661] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 386.336536][ T5826] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.340365][ T5826] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.344153][ T5826] usb 11-1: Product: syz [ 386.346596][ T5826] usb 11-1: Manufacturer: syz [ 386.347012][ T8661] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 386.352042][ T5826] usb 11-1: config 0 descriptor?? [ 386.354492][ T8661] usb 14-1: config 0 interface 0 has no altsetting 0 [ 386.357389][ T8661] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.357619][ T8661] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.357813][ T8661] usb 14-1: Product: syz [ 386.357828][ T8661] usb 14-1: Manufacturer: syz [ 386.357841][ T8661] usb 14-1: SerialNumber: syz [ 386.360314][ T8661] usb 14-1: config 0 descriptor?? [ 386.420811][T10066] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 386.437610][ T8661] usb 14-1: selecting invalid altsetting 0 [ 386.447666][ T5826] usb 11-1: can't set config #0, error -71 [ 386.452850][ T5826] usb 11-1: USB disconnect, device number 6 [ 386.484863][ T8730] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 386.690945][ T8717] usb 14-1: USB disconnect, device number 6 [ 386.690989][ C1] usb 14-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 386.696824][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 387.256267][ T5826] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 387.471479][T10076] fuse: Bad value for 'fd' [ 387.817136][T10081] fuse: Invalid rootmode [ 388.097950][ T8730] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 388.106842][ T8730] usb 10-1: config 0 interface 0 has no altsetting 0 [ 388.432275][ T8717] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 388.649923][ T8717] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 388.657084][ T8717] usb 14-1: config 0 interface 0 has no altsetting 0 [ 388.687802][ T8717] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.704550][ T8717] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.710001][ T8717] usb 14-1: Product: syz [ 388.728694][ T8717] usb 14-1: Manufacturer: syz [ 388.730995][ T8717] usb 14-1: SerialNumber: syz [ 388.736512][ T8717] usb 14-1: config 0 descriptor?? [ 388.764240][T10089] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 388.771087][ T8717] usb 14-1: selecting invalid altsetting 0 [ 388.918459][ T5826] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 388.922850][ T5826] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid maxpacket 2227, setting to 64 [ 388.966600][ T5826] usb 11-1: config 0 interface 0 has no altsetting 0 [ 389.075936][ C1] usb 14-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 389.075942][ T34] usb 14-1: USB disconnect, device number 7 [ 389.076335][T10089] usb 14-1: cannot submit urb 0, error -19: no device [ 389.353847][ T8730] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.357999][ T8730] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.361980][ T8730] usb 10-1: Product: syz [ 389.364282][ T8730] usb 10-1: Manufacturer: syz [ 389.369313][ T5826] usb 11-1: string descriptor 0 read error: -71 [ 389.373721][ T5826] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.379758][T10107] fuse: Bad value for 'rootmode' [ 389.383677][ T5826] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.393535][ T8730] usb 10-1: config 0 descriptor?? [ 389.410465][ T5826] usb 11-1: config 0 descriptor?? [ 389.471337][ T5826] usb 11-1: can't set config #0, error -71 [ 389.482151][ T5826] usb 11-1: USB disconnect, device number 7 [ 389.486762][ T8730] usb 10-1: can't set config #0, error -71 [ 389.520198][ T8730] usb 10-1: USB disconnect, device number 7 [ 390.648295][T10110] orangefs_mount: mount request failed with -4 [ 390.878914][T10139] fuse: Bad value for 'rootmode' [ 391.341777][ T9059] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 391.359307][ T34] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 391.609250][ T9059] usb 14-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 391.621455][ T34] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 391.632232][ T9059] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid maxpacket 2227, setting to 64 [ 391.638119][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 391.641289][ T9059] usb 14-1: config 0 interface 0 has no altsetting 0 [ 391.653692][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.665115][ T9059] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.669971][ T9059] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.673774][ T34] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.682260][ T9059] usb 14-1: Product: syz [ 391.684582][ T9059] usb 14-1: Manufacturer: syz [ 391.686937][ T9059] usb 14-1: SerialNumber: syz [ 391.700195][ T34] usb 10-1: Product: syz [ 391.702279][ T34] usb 10-1: Manufacturer: syz [ 391.738224][ T34] usb 10-1: SerialNumber: syz [ 391.805746][ T34] usb 10-1: config 0 descriptor?? [ 391.810710][ T9059] usb 14-1: config 0 descriptor?? [ 391.814183][T10146] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.832131][T10144] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 391.841653][ T9059] usb 14-1: selecting invalid altsetting 0 [ 392.059472][ T34] usb 10-1: selecting invalid altsetting 0 [ 392.100825][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.107077][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.114097][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.120228][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.132799][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.140725][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.205543][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.211520][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.218315][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.226056][ T34] usb 10-1: USB disconnect, device number 8 [ 392.229234][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.290261][T10144] usb 14-1: cannot submit urb 0, error -2: endpoint not enabled [ 392.304742][ T8717] usb 14-1: USB disconnect, device number 8 [ 392.325294][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.330044][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.348519][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.366489][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.369845][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.373135][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.376718][T10144] usb 14-1: cannot submit urb 0, error -19: no device [ 392.829831][T10177] fuse: Unknown parameter 'group_i00000000000000000000' [ 393.119375][ T5826] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 393.682714][T10176] orangefs_mount: mount request failed with -4 [ 394.909198][ T5826] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 394.920162][ T5826] usb 11-1: config 0 interface 0 has no altsetting 0 [ 395.508583][ T846] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 395.543616][ T8717] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 395.721360][ T8717] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 395.731093][ T8717] usb 13-1: config 0 interface 0 has no altsetting 0 [ 395.751167][ T8717] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 395.756541][ T8717] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 395.761008][ T8717] usb 13-1: Product: syz [ 395.762570][ T8717] usb 13-1: Manufacturer: syz [ 395.767917][ T8717] usb 13-1: SerialNumber: syz [ 395.771927][ T8717] usb 13-1: config 0 descriptor?? [ 395.786719][T10210] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 395.799283][ T8717] usb 13-1: selecting invalid altsetting 0 [ 395.851070][ T5826] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 395.857442][ T5826] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 395.872674][ T5826] usb 11-1: Product: syz [ 395.880124][ T5826] usb 11-1: Manufacturer: syz [ 395.942877][ T5826] usb 11-1: config 0 descriptor?? [ 395.998211][ T5826] usb 11-1: can't set config #0, error -71 [ 396.017191][ T5826] usb 11-1: USB disconnect, device number 8 [ 396.095695][ T9059] usb 13-1: USB disconnect, device number 7 [ 396.095787][ C0] usb 13-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 396.102276][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 396.102396][T10210] usb 13-1: cannot submit urb 0, error -19: no device [ 396.993810][ T846] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 397.000057][ T846] usb 10-1: config 0 interface 0 has no altsetting 0 [ 397.193814][ T5839] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 397.406632][ T5839] usb 13-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 397.411071][ T5839] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid maxpacket 2227, setting to 64 [ 397.415042][ T5839] usb 13-1: config 0 interface 0 has no altsetting 0 [ 397.424178][ T5839] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.434680][ T5839] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.439509][ T5839] usb 13-1: Product: syz [ 397.441119][ T5839] usb 13-1: Manufacturer: syz [ 397.442899][ T5839] usb 13-1: SerialNumber: syz [ 397.485121][ T5839] usb 13-1: config 0 descriptor?? [ 397.491552][T10214] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 397.569683][ T5839] usb 13-1: selecting invalid altsetting 0 [ 397.795454][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.798699][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.802184][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.806463][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.809828][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.814438][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.822089][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.857937][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.862506][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.870830][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.880050][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.884433][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.890192][T10214] usb 13-1: cannot submit urb 0, error -2: endpoint not enabled [ 397.897057][ T8717] usb 13-1: USB disconnect, device number 8 [ 398.101058][ T846] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.112771][ T846] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.120207][ T846] usb 10-1: Product: syz [ 398.124863][ T846] usb 10-1: Manufacturer: syz [ 398.126990][ T846] usb 10-1: SerialNumber: syz [ 398.132577][ T846] usb 10-1: config 0 descriptor?? [ 398.217070][ T846] usb 10-1: can't set config #0, error -71 [ 398.221678][ T846] usb 10-1: USB disconnect, device number 9 [ 400.879436][ T846] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 400.929044][T10278] FAULT_INJECTION: forcing a failure. [ 400.929044][T10278] name failslab, interval 1, probability 1, space 0, times 0 [ 400.942907][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.8.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.942937][T10278] Tainted: [L]=SOFTLOCKUP [ 400.942942][T10278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.942953][T10278] Call Trace: [ 400.942959][T10278] [ 400.942966][T10278] dump_stack_lvl+0x100/0x190 [ 400.942994][T10278] should_fail_ex.cold+0x5/0xa [ 400.943015][T10278] should_failslab+0xc2/0x120 [ 400.943040][T10278] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 400.943064][T10278] ? __alloc_skb+0x140/0x710 [ 400.943092][T10278] __alloc_skb+0x140/0x710 [ 400.943113][T10278] ? __alloc_skb+0x5b7/0x710 [ 400.943133][T10278] ? __pfx___alloc_skb+0x10/0x10 [ 400.943164][T10278] hci_sock_sendmsg+0x1b01/0x2620 [ 400.943191][T10278] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 400.943214][T10278] ? apparmor_socket_sendmsg+0x15b/0x270 [ 400.943238][T10278] sock_write_iter+0x53a/0x5b0 [ 400.943256][T10278] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 400.943277][T10278] ? __pfx_sock_write_iter+0x10/0x10 [ 400.943306][T10278] ? bpf_lsm_file_permission+0x9/0x10 [ 400.943324][T10278] ? security_file_permission+0x76/0x210 [ 400.943363][T10278] ? rw_verify_area+0xce/0x6d0 [ 400.943395][T10278] vfs_write+0x6ac/0x1050 [ 400.943413][T10278] ? __pfx_sock_write_iter+0x10/0x10 [ 400.943431][T10278] ? __pfx_vfs_write+0x10/0x10 [ 400.943445][T10278] ? find_held_lock+0x2b/0x80 [ 400.943483][T10278] ksys_write+0x1f8/0x250 [ 400.943497][T10278] ? __pfx_ksys_write+0x10/0x10 [ 400.943510][T10278] ? ksys_write+0x1ac/0x250 [ 400.943524][T10278] ? __pfx_ksys_write+0x10/0x10 [ 400.943544][T10278] __do_fast_syscall_32+0xe7/0x970 [ 400.943566][T10278] ? lockdep_hardirqs_on+0x78/0x100 [ 400.943589][T10278] do_fast_syscall_32+0x32/0x70 [ 400.943613][T10278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.943635][T10278] RIP: 0023:0xf705efec [ 400.943656][T10278] Code: Unable to access opcode bytes at 0xf705efc2. [ 400.943664][T10278] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 400.943681][T10278] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 400.943701][T10278] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 400.943710][T10278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.943720][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.943730][T10278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.943755][T10278] [ 401.204872][T10278] Bluetooth: MGMT ver 1.23 [ 402.510739][ T846] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 402.538723][ T846] usb 14-1: config 0 interface 0 has no altsetting 0 [ 403.744724][ T846] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.748948][ T846] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.769354][ T846] usb 14-1: Product: syz [ 403.771205][ T846] usb 14-1: Manufacturer: syz [ 403.776286][ T846] usb 14-1: config 0 descriptor?? [ 403.885010][ T846] usb 14-1: can't set config #0, error -71 [ 403.891235][ T846] usb 14-1: USB disconnect, device number 9 [ 406.537821][T10326] overlay: Unknown parameter '/' [ 406.593131][T10327] netlink: zone id is out of range [ 406.595543][T10327] netlink: zone id is out of range [ 406.598755][T10327] netlink: zone id is out of range [ 406.711501][T10326] input: syz0 as /devices/virtual/input/input16 [ 407.163764][ T5839] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 407.409585][ T5839] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 407.428641][ T5839] usb 10-1: config 0 interface 0 has no altsetting 0 [ 407.479383][ T5839] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 407.496979][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.501522][ T5839] usb 10-1: Product: syz [ 407.517165][ T5839] usb 10-1: Manufacturer: syz [ 407.523774][ T5839] usb 10-1: SerialNumber: syz [ 407.558217][ T5839] usb 10-1: config 0 descriptor?? [ 407.593599][T10333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 407.638874][ T5839] usb 10-1: selecting invalid altsetting 0 [ 407.697952][ T42] audit: type=1326 audit(1785243324.608:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.744648][ T42] audit: type=1326 audit(1785243324.658:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.797921][ T42] audit: type=1326 audit(1785243324.698:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.829481][ T42] audit: type=1326 audit(1785243324.698:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.845777][ T5839] usb 10-1: USB disconnect, device number 10 [ 407.849248][ T42] audit: type=1326 audit(1785243324.698:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.905846][ T8709] udevd[8709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.915744][T10343] fuse: Unknown parameter 'user_i00000000000000000000' [ 407.920703][ T42] audit: type=1326 audit(1785243324.698:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 407.940815][ T42] audit: type=1326 audit(1785243324.698:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 408.005501][ T42] audit: type=1326 audit(1785243324.698:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 408.034871][ T42] audit: type=1326 audit(1785243324.748:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 408.052388][ T42] audit: type=1326 audit(1785243324.748:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.6.1371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 408.830241][T10358] FAULT_INJECTION: forcing a failure. [ 408.830241][T10358] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 408.847224][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.8.1376 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.847259][T10358] Tainted: [L]=SOFTLOCKUP [ 408.847266][T10358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.847278][T10358] Call Trace: [ 408.847285][T10358] [ 408.847293][T10358] dump_stack_lvl+0x100/0x190 [ 408.847330][T10358] should_fail_ex.cold+0x5/0xa [ 408.847353][T10358] _copy_to_user+0x32/0xd0 [ 408.847386][T10358] simple_read_from_buffer+0xcb/0x170 [ 408.847421][T10358] proc_fail_nth_read+0x1af/0x230 [ 408.847450][T10358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.847480][T10358] ? rw_verify_area+0xce/0x6d0 [ 408.847510][T10358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.847537][T10358] vfs_read+0x1e4/0xb40 [ 408.847560][T10358] ? __pfx_vfs_read+0x10/0x10 [ 408.847590][T10358] ? find_held_lock+0x2b/0x80 [ 408.847615][T10358] ? __fget_files+0x215/0x3d0 [ 408.847640][T10358] ? __fget_files+0x21f/0x3d0 [ 408.847666][T10358] ksys_read+0x12a/0x250 [ 408.847685][T10358] ? __pfx_ksys_read+0x10/0x10 [ 408.847713][T10358] do_int80_emulation+0x14b/0x720 [ 408.847744][T10358] asm_int80_emulation+0x1a/0x20 [ 408.847765][T10358] RIP: 0023:0xf71972eb [ 408.847783][T10358] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 408.847801][T10358] RSP: 002b:00000000f542c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 408.847821][T10358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542c5d0 [ 408.847834][T10358] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 408.847846][T10358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.847858][T10358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 408.847869][T10358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.847897][T10358] [ 409.586657][T10379] fuse: Unknown parameter 'user_i00000000000000000000' [ 410.156709][T10396] mmap: syz.6.1388 (10396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 410.399941][ T5859] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 410.415856][ T846] usb 13-1: new full-speed USB device number 9 using dummy_hcd [ 410.650036][ T5859] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 410.657559][ T5859] usb 10-1: config 0 interface 0 has no altsetting 0 [ 410.660845][T10402] fuse: Unknown parameter 'user_i00000000000000000000' [ 410.680506][ T5859] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.686014][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 410.704409][ T5859] usb 10-1: Product: syz [ 410.706193][ T5859] usb 10-1: Manufacturer: syz [ 410.707987][ T5859] usb 10-1: SerialNumber: syz [ 410.714871][ T5859] usb 10-1: config 0 descriptor?? [ 410.726661][T10393] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 410.737506][ T5859] usb 10-1: selecting invalid altsetting 0 [ 411.073240][ T62] usb 10-1: USB disconnect, device number 11 [ 411.078113][ C1] usb 10-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 411.088742][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 411.461887][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1393'. [ 412.076317][ T846] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 412.098597][ T846] usb 13-1: config 0 interface 0 has no altsetting 0 [ 412.318717][T10429] fuse: Unknown parameter 'user_id00000000000000000000' [ 412.750404][ C2] hpet_rtc_timer_reinit: 37 callbacks suppressed [ 412.750424][ C2] hpet: Lost 3 RTC interrupts [ 412.836229][ C2] hpet: Lost 1 RTC interrupts [ 412.874611][ C2] hpet: Lost 1 RTC interrupts [ 413.002597][ C2] hpet: Lost 2 RTC interrupts [ 413.132649][ C2] hpet: Lost 1 RTC interrupts [ 413.380415][ C2] hpet: Lost 2 RTC interrupts [ 413.439180][ T846] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.445566][ T846] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 413.449805][ T846] usb 13-1: Product: syz [ 413.452498][ T846] usb 13-1: Manufacturer: syz [ 413.457917][ T846] usb 13-1: config 0 descriptor?? [ 413.516142][ T846] usb 13-1: can't set config #0, error -71 [ 413.526467][ T846] usb 13-1: USB disconnect, device number 9 [ 413.799619][ T5839] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 414.210974][T10461] random: crng reseeded on system resumption [ 414.404355][ T5752] Bluetooth: hci5: unexpected event for opcode 0x042c [ 414.517029][ T5839] usb 10-1: Using ep0 maxpacket: 32 [ 414.613198][ T5839] usb 10-1: unable to get BOS descriptor or descriptor too short [ 414.634695][ T5839] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 414.796910][T10465] fuse: Unknown parameter 'user_id00000000000000000000' [ 416.931641][ T5839] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 417.476000][ T5839] usb 10-1: config 14 has no interface number 0 [ 417.478462][ T5839] usb 10-1: config 14 has no interface number 1 [ 417.481051][ T5839] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 417.486980][ T5839] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 417.512543][ T5839] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 417.517256][ T5839] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 417.527478][ T5839] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 417.548556][ T5839] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 417.555002][ T5839] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 417.572695][ T846] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 417.588741][ T5839] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.624008][ T5839] usb 10-1: config 14 interface 57 has no altsetting 0 [ 417.627191][ T5839] usb 10-1: config 14 interface 228 has no altsetting 0 [ 417.634748][ T5839] usb 10-1: string descriptor 0 read error: -71 [ 417.639572][ T5839] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 417.649112][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.671538][ T5839] usb 10-1: can't set config #14, error -71 [ 417.689203][ T5839] usb 10-1: USB disconnect, device number 12 [ 418.670533][T10495] fuse: Unknown parameter 'user_id00000000000000000000' [ 418.824758][ T5839] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 418.967718][T10500] autofs: Bad value for 'fd' [ 419.024055][ T5839] usb 13-1: Using ep0 maxpacket: 32 [ 419.032612][ T5839] usb 13-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 419.040595][ T5839] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.051092][ T5839] usb 13-1: Product: syz [ 419.059593][ T5839] usb 13-1: Manufacturer: syz [ 419.065452][ T5839] usb 13-1: SerialNumber: syz [ 419.144876][ T8717] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 419.256428][ T846] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 419.279235][ T846] usb 11-1: config 0 interface 0 has no altsetting 0 [ 419.333234][ T8717] usb 10-1: device descriptor read/64, error -71 [ 419.623528][ T8717] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 419.786428][ T8717] usb 10-1: device descriptor read/64, error -71 [ 419.841776][T10508] FAULT_INJECTION: forcing a failure. [ 419.841776][T10508] name failslab, interval 1, probability 1, space 0, times 0 [ 419.853275][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.6.1424 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.853317][T10508] Tainted: [L]=SOFTLOCKUP [ 419.853323][T10508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.853333][T10508] Call Trace: [ 419.853339][T10508] [ 419.853346][T10508] dump_stack_lvl+0x100/0x190 [ 419.853372][T10508] should_fail_ex.cold+0x5/0xa [ 419.853389][T10508] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 419.853408][T10508] should_failslab+0xc2/0x120 [ 419.853436][T10508] kmem_cache_alloc_noprof+0x91/0x6a0 [ 419.853458][T10508] ? skb_clone+0x190/0x400 [ 419.853484][T10508] skb_clone+0x190/0x400 [ 419.853506][T10508] netlink_deliver_tap+0xaed/0xcc0 [ 419.853528][T10508] netlink_unicast+0x62b/0x850 [ 419.853550][T10508] ? __pfx_netlink_unicast+0x10/0x10 [ 419.853573][T10508] netlink_sendmsg+0x8b0/0xda0 [ 419.853600][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.853621][T10508] ? apparmor_socket_sendmsg+0x15b/0x270 [ 419.853644][T10508] ____sys_sendmsg+0xa4d/0xbe0 [ 419.853659][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.853679][T10508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.853706][T10508] ___sys_sendmsg+0x190/0x1e0 [ 419.853726][T10508] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.853756][T10508] ? find_held_lock+0x2b/0x80 [ 419.853792][T10508] __sys_sendmsg+0x160/0x210 [ 419.853814][T10508] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.853844][T10508] ? __pfx_ksys_write+0x10/0x10 [ 419.853865][T10508] __do_fast_syscall_32+0xe7/0x970 [ 419.853887][T10508] ? lockdep_hardirqs_on+0x78/0x100 [ 419.853908][T10508] do_fast_syscall_32+0x32/0x70 [ 419.853929][T10508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.853951][T10508] RIP: 0023:0xf7fc6fec [ 419.853971][T10508] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 419.853978][T10508] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 419.853993][T10508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 419.854004][T10508] RDX: 000000000004c880 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.854014][T10508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.854023][T10508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 419.854031][T10508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.854054][T10508] [ 419.976015][ T8717] usb usb10-port1: attempt power cycle [ 420.054194][ T5839] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.059611][ T5839] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 420.071811][ T5839] usb 13-1: USB disconnect, device number 10 [ 420.373722][ T8717] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 420.430088][ T8717] usb 10-1: device descriptor read/8, error -71 [ 420.521468][ T846] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.525800][ T846] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.546993][ T846] usb 11-1: config 0 descriptor?? [ 420.660137][ T846] usb 11-1: can't set config #0, error -71 [ 420.675191][ T846] usb 11-1: USB disconnect, device number 9 [ 420.713971][ T8717] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 420.766399][ T8717] usb 10-1: device descriptor read/8, error -71 [ 420.903570][ T8717] usb usb10-port1: unable to enumerate USB device [ 421.267108][T10521] overlay: Unknown parameter '/' [ 421.334397][T10523] netlink: zone id is out of range [ 421.436665][T10523] netlink: zone id is out of range [ 421.439695][T10523] netlink: zone id is out of range [ 421.509483][T10523] input: syz0 as /devices/virtual/input/input17 [ 422.260779][T10526] autofs: Bad value for 'fd' [ 422.464511][ T42] audit: type=1326 audit(1785243339.388:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.9.1427" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 422.757433][T10536] FAULT_INJECTION: forcing a failure. [ 422.757433][T10536] name failslab, interval 1, probability 10, space 0, times 1 [ 422.758277][ C3] FAULT_INJECTION: forcing a failure. [ 422.758277][ C3] name failslab, interval 1, probability 10, space 0, times 1 [ 422.775805][ T1044] FAULT_INJECTION: forcing a failure. [ 422.775805][ T1044] name failslab, interval 1, probability 10, space 0, times 1 [ 422.782922][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.782957][ C3] Tainted: [L]=SOFTLOCKUP [ 422.782967][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.782979][ C3] Call Trace: [ 422.782986][ C3] [ 422.782995][ C3] dump_stack_lvl+0x100/0x190 [ 422.783023][ C3] should_fail_ex.cold+0x5/0xa [ 422.783049][ C3] should_failslab+0xc2/0x120 [ 422.783077][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 422.783106][ C3] ? __alloc_skb+0x140/0x710 [ 422.783138][ C3] __alloc_skb+0x140/0x710 [ 422.783163][ C3] ? __alloc_skb+0x5b7/0x710 [ 422.783186][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 422.783213][ C3] ? do_raw_spin_lock+0x128/0x260 [ 422.783299][ C3] skb_copy+0x1ca/0x3a0 [ 422.784240][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 422.784342][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 422.784372][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 422.784404][ C3] ? __lock_acquire+0x49f/0x1a40 [ 422.784445][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 422.784481][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 422.784514][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 422.784553][ C3] __iterate_interfaces+0x2e6/0x650 [ 422.784576][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 422.784604][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 422.784632][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 422.784665][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 422.784688][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 422.784710][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 422.784746][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 422.784823][ C3] handle_softirqs+0x1ea/0x9b0 [ 422.784898][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 422.784925][ C3] ? _raw_spin_unlock+0x28/0x50 [ 422.784989][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 422.785019][ C3] __irq_exit_rcu+0x162/0x210 [ 422.785085][ C3] irq_exit_rcu+0x9/0x30 [ 422.785112][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 422.785184][ C3] [ 422.785193][ C3] [ 422.785202][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.785229][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 422.785309][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 422.785331][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202 [ 422.785396][ C3] RAX: 000000000038c825 RBX: ffff88801c3fa540 RCX: ffffffff8bb872d5 [ 422.785411][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 422.785424][ C3] RBP: ffffed100387f4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 422.785482][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 422.785495][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 422.785516][ C3] ? ct_kernel_exit+0x125/0x180 [ 422.785595][ C3] default_idle+0x9/0x10 [ 422.785664][ C3] default_idle_call+0x6c/0xb0 [ 422.785695][ C3] do_idle+0x3a7/0x5b0 [ 422.785765][ C3] ? __pfx_do_idle+0x10/0x10 [ 422.785797][ C3] cpu_startup_entry+0x4f/0x60 [ 422.785822][ C3] start_secondary+0x21d/0x2d0 [ 422.785846][ C3] ? __pfx_start_secondary+0x10/0x10 [ 422.785873][ C3] common_startup_64+0x13e/0x158 [ 422.785918][ C3] [ 422.885951][T10536] CPU: 1 UID: 0 PID: 10536 Comm: syz.8.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.885986][T10536] Tainted: [L]=SOFTLOCKUP [ 422.885993][T10536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.886005][T10536] Call Trace: [ 422.886012][T10536] [ 422.886021][T10536] dump_stack_lvl+0x100/0x190 [ 422.886050][T10536] should_fail_ex.cold+0x5/0xa [ 422.886072][T10536] should_failslab+0xc2/0x120 [ 422.886099][T10536] kmem_cache_alloc_noprof+0x91/0x6a0 [ 422.886123][T10536] ? vm_area_dup+0x27/0x8e0 [ 422.886145][T10536] vm_area_dup+0x27/0x8e0 [ 422.886164][T10536] __split_vma+0x18c/0xda0 [ 422.886186][T10536] ? __pfx___split_vma+0x10/0x10 [ 422.886209][T10536] ? __pfx_mas_prev+0x10/0x10 [ 422.886239][T10536] vms_gather_munmap_vmas+0x3a5/0x1720 [ 422.886265][T10536] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 422.886289][T10536] ? find_held_lock+0x2b/0x80 [ 422.886310][T10536] ? futex_unqueue+0x133/0x2c0 [ 422.886327][T10536] ? futex_unqueue+0x133/0x2c0 [ 422.886349][T10536] ? futex_unqueue+0x13d/0x2c0 [ 422.886371][T10536] do_vmi_align_munmap+0x287/0x5f0 [ 422.886393][T10536] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 422.886411][T10536] ? __pfx_futex_wake_mark+0x10/0x10 [ 422.886466][T10536] do_vmi_munmap+0x1f8/0x3e0 [ 422.886490][T10536] __vm_munmap+0x196/0x390 [ 422.886510][T10536] ? __pfx___vm_munmap+0x10/0x10 [ 422.886545][T10536] __ia32_sys_munmap+0x57/0x80 [ 422.886571][T10536] __do_fast_syscall_32+0xe7/0x970 [ 422.886597][T10536] do_fast_syscall_32+0x32/0x70 [ 422.886620][T10536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.886642][T10536] RIP: 0023:0xf705efec [ 422.886665][T10536] Code: Unable to access opcode bytes at 0xf705efc2. [ 422.886673][T10536] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000005b [ 422.886693][T10536] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 422.886705][T10536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.886716][T10536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.886739][T10536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.886750][T10536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.886776][T10536] [ 423.269066][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.269101][ T1044] Tainted: [L]=SOFTLOCKUP [ 423.269108][ T1044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.269120][ T1044] Workqueue: events vidtv_mux_tick [ 423.269216][ T1044] Call Trace: [ 423.269224][ T1044] [ 423.269231][ T1044] dump_stack_lvl+0x100/0x190 [ 423.269255][ T1044] should_fail_ex.cold+0x5/0xa [ 423.269277][ T1044] should_failslab+0xc2/0x120 [ 423.269302][ T1044] __kmalloc_cache_noprof+0x91/0x6c0 [ 423.269324][ T1044] ? vidtv_s302m_encode+0x1c3/0x1860 [ 423.269353][ T1044] vidtv_s302m_encode+0x1c3/0x1860 [ 423.269378][ T1044] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 423.269405][ T1044] ? vidtv_memset+0x50/0x90 [ 423.269426][ T1044] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 423.269448][ T1044] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 423.269478][ T1044] ? __asan_memset+0x23/0x50 [ 423.269500][ T1044] vidtv_mux_tick+0x4e4/0x1460 [ 423.269546][ T1044] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 423.269574][ T1044] ? __lock_acquire+0x49f/0x1a40 [ 423.269605][ T1044] ? debug_object_deactivate+0x2e4/0x3b0 [ 423.269642][ T1044] ? rcu_is_watching+0x12/0xc0 [ 423.269669][ T1044] process_one_work+0xa23/0x1940 [ 423.269708][ T1044] ? __pfx_process_one_work+0x10/0x10 [ 423.269741][ T1044] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 423.269769][ T1044] worker_thread+0x5ef/0xe50 [ 423.269802][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 423.269828][ T1044] ? kthread+0x13a/0x450 [ 423.269850][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 423.269874][ T1044] kthread+0x370/0x450 [ 423.269896][ T1044] ? __pfx_kthread+0x10/0x10 [ 423.269921][ T1044] ret_from_fork+0x72b/0xd50 [ 423.269944][ T1044] ? __pfx_ret_from_fork+0x10/0x10 [ 423.269967][ T1044] ? __switch_to+0x800/0x10f0 [ 423.269996][ T1044] ? __pfx_kthread+0x10/0x10 [ 423.270085][ T1044] ret_from_fork_asm+0x1a/0x30 [ 423.270124][ T1044] [ 423.270157][ T1044] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 423.393981][ T1044] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 423.398634][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.406365][ T1044] Tainted: [L]=SOFTLOCKUP [ 423.409029][ T1044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.414969][ T1044] Workqueue: events vidtv_mux_tick [ 423.417559][ T1044] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 423.421109][ T1044] Code: 03 ac f9 31 ff 89 de e8 75 fd ab f9 84 db 0f 85 37 0d 00 00 e8 58 03 ac f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 423.431572][ T1044] RSP: 0000:ffffc90004ef7830 EFLAGS: 00010246 [ 423.435170][ T1044] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 423.439788][ T1044] RDX: 0000000000000000 RSI: ffffffff885da908 RDI: ffff88801bc428c0 [ 423.444236][ T1044] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 423.449698][ T1044] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000 [ 423.453518][ T1044] R13: dffffc0000000000 R14: ffff888068cf4f00 R15: ffff88802804f000 [ 423.457668][ T1044] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 423.462131][ T1044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.465011][ T1044] CR2: 000000000c31f65b CR3: 000000006fdf9000 CR4: 0000000000352ef0 [ 423.468202][ T1044] Call Trace: [ 423.469792][ T1044] [ 423.471109][ T1044] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 423.473268][ T1044] ? vidtv_memset+0x50/0x90 [ 423.475751][ T1044] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 423.478339][ T1044] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 423.480679][ T1044] ? __asan_memset+0x23/0x50 [ 423.482769][ T1044] vidtv_mux_tick+0x4e4/0x1460 [ 423.485410][ T1044] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 423.488000][ T1044] ? __lock_acquire+0x49f/0x1a40 [ 423.490256][ T1044] ? debug_object_deactivate+0x2e4/0x3b0 [ 423.493308][ T1044] ? rcu_is_watching+0x12/0xc0 [ 423.495340][ T1044] process_one_work+0xa23/0x1940 [ 423.497701][ T1044] ? __pfx_process_one_work+0x10/0x10 [ 423.501627][ T1044] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 423.506285][ T1044] worker_thread+0x5ef/0xe50 [ 423.509255][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 423.511915][ T1044] ? kthread+0x13a/0x450 [ 423.514480][ T1044] ? __pfx_worker_thread+0x10/0x10 [ 423.516927][ T1044] kthread+0x370/0x450 [ 423.519173][ T1044] ? __pfx_kthread+0x10/0x10 [ 423.522389][ T1044] ret_from_fork+0x72b/0xd50 [ 423.526215][ T1044] ? __pfx_ret_from_fork+0x10/0x10 [ 423.529606][ T1044] ? __switch_to+0x800/0x10f0 [ 423.532522][ T1044] ? __pfx_kthread+0x10/0x10 [ 423.535369][ T1044] ret_from_fork_asm+0x1a/0x30 [ 423.538389][ T1044] [ 423.541437][ T1044] Modules linked in: [ 423.545128][ T1044] ---[ end trace 0000000000000000 ]--- [ 423.558011][ T1044] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 423.561408][ T1044] Code: 03 ac f9 31 ff 89 de e8 75 fd ab f9 84 db 0f 85 37 0d 00 00 e8 58 03 ac f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 423.575543][ T1044] RSP: 0000:ffffc90004ef7830 EFLAGS: 00010246 [ 423.590474][ T1044] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 423.595450][ T1044] RDX: 0000000000000000 RSI: ffffffff885da908 RDI: ffff88801bc428c0 [ 423.605674][ T1044] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 423.617174][ T1044] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000 [ 423.627809][ T1044] R13: dffffc0000000000 R14: ffff888068cf4f00 R15: ffff88802804f000 [ 423.638341][ T1044] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 423.655201][ T1044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.659633][ T1044] CR2: 000000000c3d6c1a CR3: 0000000028a16000 CR4: 0000000000352ef0 [ 423.809844][ T1044] Kernel panic - not syncing: Fatal exception [ 423.821073][ T1044] Kernel Offset: disabled [ 423.823079][ T1044] Rebooting in 86400 seconds..