last executing test programs: 20m31.005830201s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x37, 0x17, 0x1, {0x2e, './proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode'}}, 0x37) 20m30.522133849s ago: executing program 2 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x24c1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 20m28.489046384s ago: executing program 2 (id=11): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf3}}}}}]}}]}}, 0x0) syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2008060000000606f56419b9"], 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) 20m26.3076898s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x11050ca, 0x0) 20m26.235574389s ago: executing program 2 (id=23): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x15) 20m25.451826103s ago: executing program 2 (id=28): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x10, 0x9, 0xfb, 0x40, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0xffff1000, 0x54000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x7, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x7, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0x4}, {0x11f6593269eab9dc, 0x126000, 0xf, 0x3, 0x19, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0xeeee0000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf4, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x7, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xe4000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2460, 0xd, 0x8000, 0x8000c00, [0x6800000000000000, 0x3, 0x61, 0x4]}) close_range(r0, 0xffffffffffffffff, 0x0) 20m25.099897424s ago: executing program 32 (id=28): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x10, 0x9, 0xfb, 0x40, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0xffff1000, 0x54000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x7, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x7, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0x4}, {0x11f6593269eab9dc, 0x126000, 0xf, 0x3, 0x19, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0xeeee0000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf4, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x7, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xe4000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2460, 0xd, 0x8000, 0x8000c00, [0x6800000000000000, 0x3, 0x61, 0x4]}) close_range(r0, 0xffffffffffffffff, 0x0) 20m11.936404936s ago: executing program 3 (id=65): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003ad000000ad03"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e", @ANYRES8=r0, @ANYRESOCT=r0]}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00') 20m10.029842706s ago: executing program 3 (id=73): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x4f, 0x87, 0xb6, 0x10, 0x7fd, 0x4, 0x4a5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x90, 0x4, "", [{{0x9, 0x4, 0x8f, 0x5, 0x0, 0xff, 0x88, 0xd5, 0x9}}]}}]}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200"], 0xb8}}, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) setns(0xffffffffffffffff, 0x2000000) 20m8.091854868s ago: executing program 3 (id=80): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000082c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x82340, 0x10) 20m7.646467286s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 20m7.58274986s ago: executing program 3 (id=83): bind$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8, 0x4, 0x8, 0x15d, 0x1a, "41e5f1012e8a5c00"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 20m6.308661913s ago: executing program 3 (id=87): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e1d, 0x7f, @remote, 0x1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="8000e8596689bc13", 0x8}], 0x1}, 0x8050) 20m6.080732412s ago: executing program 33 (id=87): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e1d, 0x7f, @remote, 0x1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="8000e8596689bc13", 0x8}], 0x1}, 0x8050) 19m25.300197667s ago: executing program 0 (id=216): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x840c, 0x40000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x3, 0xe3]) 19m25.208792247s ago: executing program 0 (id=217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010b40000102030109025f0003010380f40904000000010100000a24010000000002010209040100000102000009040101010102000009050109000000000000250100000000090402000001020000090402010101020000090582"], 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000002080)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x9, 0x2, 0xd, 0x20, 0x8}, 0x21, &(0x7f0000000980)={0x5, 0xf, 0x21, 0x1, [@generic={0x1c, 0x10, 0x3, "403a83e81627eee66f2e5dd0f726f9534e417310835544cc6d"}]}, 0x8, [{0x2a, &(0x7f00000009c0)=@string={0x2a, 0x3, "fbb4f0806f1a98d054944ae520559a419e98ebafbc8dfcbc10d63ff5bdceb0d2915b3bd766db54d8"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x40e}}, {0x0, 0x0}, {0x4c, &(0x7f0000000dc0)=@string={0x4c, 0x3, "ade1a1571cfb14e660dffc38c6b028d658f977ac7517662eb32535fa34c69e4799ce61178f67020b3f6216a596900fc5bf6bd368e3f6ad106b3f5d879122a8625f043c46cad8dbc5df8d"}}, {0x0, 0x0}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xc0c}}, {0xa0, &(0x7f0000001f80)=@string={0xa0, 0x3, "7ec033ae2464fe234f4c6678be04f279e83fa286ee835481b214836bfc0ce1c81fefe380aaad79b7321db04598c381c58302eae2817c367ff5d21db6013829d750102016b588fc62a92658893131f9f03175e3dce29505b1e26e53ea472cc53da9e7ac1f86e09317d678f38d25276349b930b32202cea42be26e65d660d6305a77fed902b6ada84a7174d2d6409cc930ecbd858d3959bb581d2b70e41abb"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x430}}]}) r1 = syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000140)={{0x12, 0x1, 0x400, 0x0, 0x0, 0x0, 0x10, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x0, 0x20, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0xc5, 0x2, {0x7, 0x25, 0x1, 0x0, 0x2c, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x4, 0x0, 0xe}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x3, 0x0, {0x6, 0x25, 0x1, 0xc, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffa7, 0x0}) syz_open_dev$hiddev(&(0x7f00000002c0), 0x5, 0x30000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x30, 0xc, {0xc, 0xc, "fcc66c8f97efbbf7eaec"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f0000000380)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x38, 0x3, 0xc9, 0x800, 0xf9}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x3, 0x0, 0x9000, [0xf0, 0x3f3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9da7c34713a097bf2df694723f76842a"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0xaa, 0x8, "71c67e72", "7a029f75"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x84, 0x8, 0x80, 0x80, 0xb86a}}}, &(0x7f00000023c0)={0x84, &(0x7f0000000600)={0x0, 0xa, 0x26, "6c3024bbc79eb11e9ea3ab11b982aa74479f77cc66f0d9b52bcea9e62156e881a14566e6a364"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x0, 0x6}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000002100)={0x40, 0x7, 0x2, 0x57bd}, &(0x7f0000002140)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000002180)={0x40, 0xb, 0x2, "a142"}, 0x0, &(0x7f0000002200)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002240)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000002280)={0x40, 0x19, 0x2, "7703"}, &(0x7f00000022c0)={0x40, 0x1a, 0x2, 0xbf2}, &(0x7f0000002300)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000002340)={0x40, 0x1e, 0x1, 0x50}, &(0x7f0000002380)={0x40, 0x21, 0x1, 0xca}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009", @ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac2(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000b00)={0x14, &(0x7f0000000a00)={0x0, 0x4, 0x7c, {0x7c, 0x1, "9dd6285504cb7ec74fab250a1d4e913697319955ecb918d64fe70606b899521d6d89d79977560a12641461bd6bd85d4c6d7d2dc2033a8fc51d01b1267c6041ddec6d32369511ab36f7e1b21acb1e76f0f912623043e609a36730d3045194f41a7d4b49261ffb34a5751374bcdd9cd5c97bd7d44e98323c1610eb"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000b40)={0x20, 0xd, 0x5, "8cd562fee5"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f0000000c00)={0x20, 0x0, 0x65, {0x63, "ee3e67921b34703fdb9b90b8c913d665c92df623d1304c9732d10ede3f437c7252d759b0bd2c6a1809b8feebac81810eec586b04ac11678522ebde1b01485b07b2cfc059c17ff473529fe923789f802a6fafcf429dc444f91c5746ec38219cf858762f"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x80}}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_usb_connect$uac2(0x5, 0x98, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f07080000002a"], 0x0}, 0x0) 19m22.630523727s ago: executing program 0 (id=224): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r1, &(0x7f0000000300)=""/172, 0xdc) 19m22.398971083s ago: executing program 0 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 19m22.274324246s ago: executing program 0 (id=227): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000004600)=ANY=[@ANYBLOB], 0xfea) 19m21.419098395s ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d5304825) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) 19m21.288687908s ago: executing program 34 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d5304825) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) 4m10.451746317s ago: executing program 1 (id=4624): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="41000000f20caa14433de250f7f14a2be06781c69b1b442d6dd1d46ab10bbfcd194e7626ef6cd47b58b5d4fd6524bc057925bd7f06e4363fa899a24dcfbea1e7a6eafa9338c06077ba47c061eb9eb31c5a2ce786864adaf4a2a9377b53b98ec7459394507654571428834016d2d67c1e217f56060dec2b67caa099103ac28e6516d08e2024247213b6168313bdd99b912fbce642cc492bb3acc38d2df2c384c7c92fc489b600adbf0464fc00645042422547533291a456db831c368bdb9c1b1afe6a5d31899b97", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000500001802c00040014000100020000007f00000100000000000000001400020002000000e000002f00000000000000000d0001007564"], 0x64}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f00000007c0)=""/96, 0x60}], 0x2, 0x1001, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) 4m5.740086378s ago: executing program 1 (id=4631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292e254c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4m4.383781291s ago: executing program 1 (id=4633): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x403, r7) keyctl$revoke(0x3, r8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r8, 0x1f}, &(0x7f00000007c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613232340000000000000000fffffff0000000000000000000000000000000000000000000e70577f354dd010a00"/79], 0x0, 0x0) 4m3.102074078s ago: executing program 1 (id=4634): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket(0x40000000015, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 4m1.947479213s ago: executing program 1 (id=4636): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e978020000000000", @ANYRES32=r0], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x68, 0x1407, 0x300, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x68}}, 0x20000000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x6733, 0x4) r7 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x2800) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a45321, &(0x7f0000000500)={{0x0, 0xcc}, 'port0\x00', 0x8, 0x8, 0xa1, 0xfffffffa, 0x80, 0xc, 0x78e, 0x0, 0x4, 0x53}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) sendmmsg(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce", 0x64}], 0x1}}], 0x1, 0x24044015) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0) read$dsp(r10, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r9, &(0x7f0000002000)='`', 0x88020) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3m58.590934134s ago: executing program 1 (id=4644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r5}, 0x8) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000002c0)={0x18}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) r10 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r10, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r11, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4006990) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r13, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r13, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0xfffe}], 0x2}, 0x8000) 3m41.79430509s ago: executing program 35 (id=4644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r5}, 0x8) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000002c0)={0x18}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) r10 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r10, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r11, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4006990) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r13, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r13, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0xfffe}], 0x2}, 0x8000) 19.125458128s ago: executing program 5 (id=4875): openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) (async) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf028408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a3200000000140000000c0a01040000000000000000070000011400000011000100000000000000f7ff0000000a"], 0xac}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000008010401040000000000000000070000000600064000040000e6ff000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x24004844) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000001240)="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", 0x1000}], 0x2}}], 0x1, 0x41) connect$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x1, 0xf0}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xe, 0xfff0}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0xc0, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xa, 0x7}, {0xffff, 0xd}, {0x10, 0x1}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x176f]}}, {{0x1c, 0x1, {0x8, 0x5, 0x0, 0x4, 0x0, 0x8001, 0x4, 0x2}}, {0x8, 0x2, [0x9, 0xe]}}, {{0x1c, 0x1, {0xa2, 0x1, 0x3ff, 0x5, 0x2, 0x8000, 0x1000, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7, 0x8, 0xff, 0xf, 0x3, 0x6, 0x26f, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x8, 0x91, 0x46, 0x80]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4014) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) 18.084140646s ago: executing program 5 (id=4878): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 16.112663456s ago: executing program 5 (id=4883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000005c80)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/54, 0x36}], 0x3}, 0x7b0c}, {{&(0x7f0000000380)=@l2tp6, 0x80, &(0x7f0000000440), 0x0, &(0x7f00000005c0)=""/173, 0xad}, 0x300000}, {{&(0x7f0000000680)=@nfc, 0x80, &(0x7f0000004980)=[{&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/135, 0x87}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/110, 0x6e}, {&(0x7f0000003940)=""/1, 0x1}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x9, &(0x7f0000004a00)=""/94, 0x5e}, 0xf}, {{&(0x7f0000004a80), 0x80, &(0x7f0000005bc0)=[{&(0x7f0000004b00)=""/181, 0xb5}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000005c00)=""/123, 0x7b}, 0x81}], 0x4, 0x2000, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 14.881065528s ago: executing program 5 (id=4886): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000000004750a00db9911f7f1e03000071112400000000008510000002000000850000000e0000009500000000000000ed4b71ebab0b9374fff79685fe041a87e50ad56a0fa2b131222a71f8e4bd284f0ca95c36ca6f499b393d9f30d420259c77bd"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0xe) 10.816212076s ago: executing program 7 (id=4896): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 9.52849907s ago: executing program 7 (id=4899): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x59) openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x0, 0x4) 9.012047133s ago: executing program 5 (id=4900): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 8.452459722s ago: executing program 4 (id=4903): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x800) syz_ublk_setup_queues(r7, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4, 0x0, r2}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r8, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000a40), 0x0, 0xfffffffffffffffb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="f7ffff603800df0000951d32120434739d2e35637f21d827fa0000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r7, 0x0, 0x2d, 0x1e, @val=@kprobe_multi=@syms={0x1, 0x7, &(0x7f0000000d80)=[&(0x7f0000000740)='\x00', &(0x7f0000000780)='\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='user\x00', &(0x7f0000000c80)='syzkaller0\x00', &(0x7f0000000200)='*9\x03\x00\x00\x00\xfa\x17\x1d.\x05\xba\x02\x19fN\xea\x98W\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='\x00'], 0x0, 0x7}}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10}, 0x3e8) 7.073131729s ago: executing program 4 (id=4905): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 6.786174688s ago: executing program 7 (id=4907): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4000, 0x22e800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) unshare(0x68040200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_int(r2, 0x11e, 0x6, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) fgetxattr(r3, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x8, 0xb, 0x101, 0x1000004}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, r3, r3, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x5, 0xc, 0x7}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x5, 0x4, 0x7, 0x6}, {0x2, 0x21, 0xa, 0x6}], 0x10, 0x80}, 0x94) connect$rxrpc(r2, &(0x7f0000000580)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7bb}}, 0x24) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000540)) r5 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r5}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'rmd160-generic\x00'}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2d}, @in6={0xa, 0x4e22, 0x5, @empty, 0x40}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={r8}, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(&(0x7f0000000500), 0x8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'tunl0\x00', @ifru_names='nr0\x00'}) 6.425836472s ago: executing program 5 (id=4909): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/125, 0x7d}], 0x3, &(0x7f0000000500)=""/88, 0x58}, 0x4}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0xbbc5e000) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r4, &(0x7f00000002c0)="041168c250ce4f2c277cd86fb252be40925df7bc97618564b1afc8b34b1f3d9343034c32cf66b46519982d09cba8a489019645d6c69166088d8bfbbf13521361aea671f4ad89a438e104f2bdb06cbbf7bde0b76882b69c555fbdc3fe333ae715e12c4ab23e9b", 0x66, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r6, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) 6.015921077s ago: executing program 4 (id=4910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x40, 0x0, 0x0) 4.887974526s ago: executing program 6 (id=4911): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="c0000000190001000000000008000000ac1414bb0000000000000000000000000000000000000000000000000000000080000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000002000a0010000100000000000000506d765f04fa15d8145d8bab44d6c5400ae593111a11846d90c18b415fdab1fbe5a258c364794593"], 0xc0}}, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/4, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4060, 0x0, 0x0, 0x4ab}, 0x30, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000180)={0x4000, r6}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x21) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(0xffffffffffffffff, 0x1) ftruncate(r6, 0x1) ftruncate(0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000001d000100f9ffffff000000000a0010000100000000000000"], 0x1c}}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$netlink(0x10, 0x3, 0xb) r8 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 4.627234954s ago: executing program 7 (id=4912): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="c0000000190001000000000008000000ac1414bb0000000000000000000000000000000000000000000000000000000080000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000002000a0010000100000000000000506d765f04fa15d8145d8bab44d6c5400ae593111a11846d90c18b415fdab1fbe5a258c364794593"], 0xc0}}, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/4, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4060, 0x0, 0x0, 0x4ab}, 0x30, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000180)={0x4000, r6}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x21) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(0xffffffffffffffff, 0x1) ftruncate(r6, 0x1) ftruncate(0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000001d000100f9ffffff000000000a0010000100000000000000"], 0x1c}}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$netlink(0x10, 0x3, 0xb) r8 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 4.566151594s ago: executing program 4 (id=4913): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) 4.04659746s ago: executing program 4 (id=4914): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xbd31, 0x40000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001140)=[0xfffffffc, 0xfff]) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r2, 0x4008c002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000040ef17ee6040000102030109022400010109b0070904000d010301030c09210500080122ab04090581030004030902810674cd133899f15bd44d3c0514c31fe93d51efc6caffa0b857e3d9dc1238b4f81999"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffcaf, 0x0}]}) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESDEC=r1, @ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r5, &(0x7f0000000580)="37ef", 0x2) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x9, 0x7]) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x80400) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f00000000c0)=""/14) r7 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffed5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0xfffffffffffffe6b}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x8c, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000100)=0x1) 3.952398543s ago: executing program 7 (id=4915): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0xc000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1e, 0x4000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cgroup\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1, 0x25, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r7) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) r12 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r12}}) getsockopt$inet6_udp_int(r6, 0x11, 0x66, 0x0, &(0x7f00000000c0)) write$binfmt_aout(r3, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r3, &(0x7f0000000140), 0xff79) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) 3.6519925s ago: executing program 6 (id=4916): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = syz_io_uring_setup(0x28a0, &(0x7f0000000800)={0x0, 0xcf6d, 0x80, 0x0, 0x3c7}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000a80)={0x1, 0xf, 0x7}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={r2, 0x3}) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) r5 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) 2.430016822s ago: executing program 6 (id=4917): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0xd4, 0xfffb, {0x2, 0x1}, {0x48, 0x2}, @cond=[{0x0, 0x9, 0x6725, 0x7fff, 0x2, 0x12}, {0x0, 0x3, 0x6, 0x5, 0x8, 0x9}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x40000060) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$key(0xf, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xd}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000007c0)=@newtaction={0x258, 0x58, 0x284f, 0x0, 0x2000, {}, [{0x244, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x20c, 0x0, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x10000, 0xffffffffffffffff, 0x7, 0x511a}, @multicast2, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x2, 0x3, 0x5b}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x4, 0x80000000, 0x3}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x2, 0x5, 0x6}, @loopback, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x6, 0x1, 0xffffff00}, @local, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x0, 0x800, 0x3}, @remote, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc000000, 0xa05, 0x20000000, 0x2, 0x400}, @rand_addr=0x64010101, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x1, 0x6, 0x2, 0x2}, @broadcast, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff, 0x2, 0xd93, 0x8}, @multicast1, @private=0xa010101, 0x0, 0x1}}]}, {0x7c, 0x6, "83237c80b3bb5a1c8fcfe10f4e43da55ba5300341a000f89b66d582e41dfa6348ad477fc3a8725c4546ff684a9240ba77379c5973ae996832cfa128e128aff0a24f5972f5e8f14f47476662db42eafaf98e270e811c183ab22325fdf28c727bd076a712024eae57b0a54b2e468bf209cd8f9de42da63df31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x258}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000100001002bbd7000fadbdf2500050000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2.337107974s ago: executing program 7 (id=4918): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80000}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ipvlan1\x00', 0x10) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r7, 0x6a98047402e98331, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000000480)=@xdp, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)=""/245}, 0x8}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000001d00)=[{&(0x7f00000008c0)=""/247}, {&(0x7f00000009c0)=""/99}, {&(0x7f0000000c00)=""/4094}, {&(0x7f0000001c00)=""/88}, {&(0x7f0000001c80)=""/21}], 0x0, &(0x7f0000001d40)=""/49}, 0x800}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @local}, 0x0, &(0x7f0000003540)=[{&(0x7f0000001e00)=""/38}, {&(0x7f00000021c0)=""/4096}, {&(0x7f00000031c0)=""/123}, {&(0x7f0000003240)=""/194}, {&(0x7f0000003340)=""/234}, {&(0x7f0000003440)=""/165}, {&(0x7f0000003500)=""/59}], 0x0, &(0x7f0000003580)=""/180}, 0x6}, {{&(0x7f0000003640)=@l2, 0x0, &(0x7f0000004700)=[{&(0x7f00000036c0)=""/52}, {&(0x7f0000003700)=""/4096}]}, 0x2}, {{&(0x7f0000004740)=@nfc, 0x0, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/177}, {&(0x7f0000004880)}]}, 0x9}], 0x10133, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() socket(0x2, 0x3, 0x6) 784.311873ms ago: executing program 4 (id=4919): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x1fc, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x1e8, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x1a0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0xe61, 0x2f8, 0x4, 0x7}, 0x3}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x995, 0x58a1, 0x8, 0x59e, 0x7}, 0x8}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xfffffffe, 0x7607202f, 0x10000000, 0x4, 0x1000}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="30e987d317cc"}]}, {0xf3, 0x6, "278a02d2d81f747b72eeb2968e02f3f3d818fc4a3eeff0affb6023033958e75ed621d786fa7a9e29f6b277685029012c32829d8d9d65e5303afd1ec8d298a11874b2c4635e2d42820b7d2e145fed1c26c0f448eaa5f3ebc8e4a6e7a8eae36eb34e61b1c93ece9acf73623612594c06207f0d42390eeb8e6f95e400ba3305e462e131575d2d5f77d46d5c99fb2ce4a1168cbd16094e834de83f59b7cfd20db1790257718ef72c171ee60de094a73259ae68a23a8afcac4b4ad85bb37b86a757708ab577510a279db2f7a450f44182b8e284ccd153a93fdd8e0101e0dd6aa5ee893de862fa0e9f9ad0c2ab432694d40e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbd671b7f072df253d000000060001006e657464657673696d0000000f0002006e657464657673696d3000001c735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r7 = gettid() r8 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r8, &(0x7f0000000bc0), 0x0, 0x20000804) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES64], 0x14c}}, 0x20044894) tkill(r7, 0xb) 683.402069ms ago: executing program 6 (id=4920): r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @remote, 0x80}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000700)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @local, @empty}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r1}, "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"}) write$FUSE_WRITE(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0xa, &(0x7f0000001200)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x7, 0x69, 0x10, 0x30}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000180)='./file1/file0\x00', 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bind$unix(r5, &(0x7f00000003c0)=@file={0x1, 'mtd0\x00'}, 0x6e) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) stat(&(0x7f0000001280)='mtd0\x00', &(0x7f00000012c0)) 178.0784ms ago: executing program 6 (id=4921): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 0s ago: executing program 6 (id=4922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 4.159427][ T29] usblp0: removed [ 1004.568477][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1007.930999][ T1955] Process accounting resumed [ 1008.021151][T19065] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4353'. [ 1008.377870][T19069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.422437][T19069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.154603][T19085] 9p: Bad value for 'rfdno' [ 1010.180290][ T52] usb 11-1: new high-speed USB device number 100 using dummy_hcd [ 1010.439779][ T52] usb 11-1: Using ep0 maxpacket: 8 [ 1010.444423][ T52] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1010.448384][ T52] usb 11-1: config 0 has no interface number 0 [ 1010.452767][ T52] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.456197][ T52] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1010.467248][ T52] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.756975][T19088] syzkaller0: entered promiscuous mode [ 1010.767203][T19088] syzkaller0: entered allmulticast mode [ 1010.937573][ T52] usb 11-1: config 0 descriptor?? [ 1010.999839][ T52] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1011.291904][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.308157][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.388695][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.413025][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.632147][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.635431][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.182723][T19103] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1012.287135][ T52] usb 11-1: USB disconnect, device number 100 [ 1012.921703][T19115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.978695][T19115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.638130][T19129] net_ratelimit: 673 callbacks suppressed [ 1014.638150][T19129] netlink: zone id is out of range [ 1014.649731][T19129] netlink: zone id is out of range [ 1014.651885][T19129] netlink: zone id is out of range [ 1014.686292][T19129] netlink: zone id is out of range [ 1014.693135][T19129] netlink: zone id is out of range [ 1014.699062][T19129] netlink: zone id is out of range [ 1014.719786][T19129] netlink: zone id is out of range [ 1014.737066][T19129] netlink: zone id is out of range [ 1014.755406][T19129] netlink: zone id is out of range [ 1014.760043][T19129] netlink: zone id is out of range [ 1015.213247][ T1955] Process accounting resumed [ 1015.713167][T19145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4378'. [ 1016.230649][ T5872] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1016.380286][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 1016.397643][ T5872] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1016.406459][ T5872] usb 6-1: config 0 has no interface number 0 [ 1016.418637][ T5872] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.435173][ T5872] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1016.488595][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.562293][ T5872] usb 6-1: config 0 descriptor?? [ 1016.653915][ T5872] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1017.088099][T19153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.482984][T19153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.867608][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.917775][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.167143][T19147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.195890][T19147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.250424][T17382] usb 6-1: USB disconnect, device number 119 [ 1018.277819][T19164] syzkaller0: entered promiscuous mode [ 1018.284477][T19164] syzkaller0: entered allmulticast mode [ 1018.750524][T17850] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 1019.168619][T19174] syzkaller0: entered promiscuous mode [ 1019.187531][T19174] syzkaller0: entered allmulticast mode [ 1019.276718][T17850] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1019.287893][T17850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.303557][T17850] usb 9-1: Product: syz [ 1019.311498][T17850] usb 9-1: Manufacturer: syz [ 1019.319310][T17850] usb 9-1: SerialNumber: syz [ 1019.775619][T17850] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1021.266685][T19204] net_ratelimit: 1984 callbacks suppressed [ 1021.266705][T19204] netlink: zone id is out of range [ 1021.279815][T19204] netlink: zone id is out of range [ 1021.289643][T19204] netlink: zone id is out of range [ 1021.291739][T19204] netlink: zone id is out of range [ 1021.294811][T19204] netlink: zone id is out of range [ 1021.296962][T19204] netlink: zone id is out of range [ 1021.305523][T19204] netlink: zone id is out of range [ 1021.307142][T19204] netlink: zone id is out of range [ 1021.315012][T19204] netlink: zone id is out of range [ 1021.316887][T19204] netlink: zone id is out of range [ 1022.696997][T19193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.699685][T19193] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1022.702614][T19193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1022.705224][T19193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.748791][T17382] usb 9-1: USB disconnect, device number 84 [ 1022.755788][T17382] usblp0: removed [ 1022.923321][T19225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4399'. [ 1023.039695][ T5776] Bluetooth: hci2: command 0x0405 tx timeout [ 1023.102258][T19231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1023.481523][T19236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4401'. [ 1023.561601][T19240] Cannot find set identified by id 0 to match [ 1023.692671][T19244] syzkaller0: entered promiscuous mode [ 1023.700392][T19244] syzkaller0: entered allmulticast mode [ 1024.799872][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 1024.802443][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 1024.804615][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 1025.535852][T19258] tipc: Enabled bearer , priority 0 [ 1025.546031][T19258] syzkaller0: entered promiscuous mode [ 1025.557799][T19258] syzkaller0: entered allmulticast mode [ 1025.643336][T19258] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1025.812430][T19261] tipc: Resetting bearer [ 1025.862743][T19256] tipc: Resetting bearer [ 1025.905420][T19256] tipc: Disabling bearer [ 1026.009832][T17382] usb 10-1: new full-speed USB device number 105 using dummy_hcd [ 1026.175614][T17382] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1026.187121][T17382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.218997][T17382] usb 10-1: Product: syz [ 1026.222824][T17382] usb 10-1: Manufacturer: syz [ 1026.224835][T17382] usb 10-1: SerialNumber: syz [ 1026.465195][T19268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1026.701899][T19273] syzkaller0: entered promiscuous mode [ 1026.709681][T19273] syzkaller0: entered allmulticast mode [ 1026.820995][T19273] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1026.827840][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4417'. [ 1027.020242][T17382] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1028.693830][T19280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.697487][T19280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1028.701019][T19280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1028.704988][T19280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1029.285859][ T1955] usb 10-1: USB disconnect, device number 105 [ 1029.360988][ T1955] usblp0: removed [ 1029.600078][ T5771] Bluetooth: hci2: command 0x0405 tx timeout [ 1029.930528][T19312] syzkaller0: entered promiscuous mode [ 1029.940115][T19312] syzkaller0: entered allmulticast mode [ 1029.985773][T19312] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1030.053257][T19315] syzkaller0: entered promiscuous mode [ 1030.056310][T19315] syzkaller0: entered allmulticast mode [ 1030.418068][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1030.710252][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 1030.710533][ T5771] Bluetooth: hci1: command 0x0c1a tx timeout [ 1030.712940][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 1031.922365][T19332] net_ratelimit: 2032 callbacks suppressed [ 1031.922384][T19332] netlink: zone id is out of range [ 1031.926391][T19332] netlink: zone id is out of range [ 1031.928172][T19332] netlink: zone id is out of range [ 1031.941464][T19332] netlink: zone id is out of range [ 1031.943757][T19332] netlink: zone id is out of range [ 1031.959690][T19332] netlink: zone id is out of range [ 1031.961649][T19332] netlink: zone id is out of range [ 1031.963468][T19332] netlink: zone id is out of range [ 1031.965081][T19332] netlink: zone id is out of range [ 1031.966780][T19332] netlink: zone id is out of range [ 1032.279850][ T1955] usb 11-1: new full-speed USB device number 101 using dummy_hcd [ 1032.917060][ T1955] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1032.930193][ T1955] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.934140][ T1955] usb 11-1: Product: syz [ 1032.936099][ T1955] usb 11-1: Manufacturer: syz [ 1032.938566][ T1955] usb 11-1: SerialNumber: syz [ 1033.434305][ T1955] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1033.627399][T19357] syzkaller0: entered promiscuous mode [ 1033.631389][T19357] syzkaller0: entered allmulticast mode [ 1035.272861][T19369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1035.277986][T19369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.282445][T19369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.286285][T19369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1035.328592][T19378] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1035.351390][ T5962] usb 11-1: USB disconnect, device number 101 [ 1035.409867][ T5962] usblp0: removed [ 1035.829974][T17382] usb 10-1: new full-speed USB device number 106 using dummy_hcd [ 1036.080326][T17382] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1036.091758][T17382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.147495][T17382] usb 10-1: Product: syz [ 1036.170549][T17382] usb 10-1: Manufacturer: syz [ 1036.204222][T17382] usb 10-1: SerialNumber: syz [ 1036.229885][ T65] Bluetooth: hci2: command 0x0405 tx timeout [ 1036.539397][T19389] tipc: Enabled bearer , priority 0 [ 1036.598091][T19393] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1036.949519][T19393] tipc: Resetting bearer [ 1037.009926][T17382] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1037.156333][T19388] tipc: Disabling bearer [ 1037.367180][T19322] Bluetooth: hci4: command 0x0c1a tx timeout [ 1037.367295][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 1037.372415][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 1039.721882][T19435] net_ratelimit: 2092 callbacks suppressed [ 1039.721896][T19435] netlink: zone id is out of range [ 1039.745890][T19435] netlink: zone id is out of range [ 1039.748346][T19435] netlink: zone id is out of range [ 1039.750445][T19435] netlink: zone id is out of range [ 1039.773448][T19435] netlink: zone id is out of range [ 1039.775080][T19435] netlink: zone id is out of range [ 1039.776688][T19435] netlink: zone id is out of range [ 1039.789631][T19435] netlink: zone id is out of range [ 1039.791677][T19435] netlink: zone id is out of range [ 1039.793487][T19435] netlink: zone id is out of range [ 1040.208246][T19410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1040.220987][T19410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.232350][T19410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1040.241960][T19410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.455891][ T8106] usb 10-1: USB disconnect, device number 106 [ 1040.506725][ T8106] usblp0: removed [ 1040.644873][ T65] Bluetooth: hci2: command 0x0405 tx timeout [ 1041.137832][ T5962] Process accounting resumed [ 1041.230020][T19451] wireguard: wg0: Could not create IPv4 socket [ 1042.233486][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.311111][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 1042.314264][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 1043.299763][T19476] syzkaller0: entered promiscuous mode [ 1043.310441][T19476] syzkaller0: entered allmulticast mode [ 1043.559868][ T8106] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1043.717859][ T8106] usb 10-1: config 0 has no interfaces? [ 1043.729003][ T8106] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1043.935880][ T8106] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1043.946498][ T8106] usb 10-1: Product: syz [ 1043.970298][ T8106] usb 10-1: Manufacturer: syz [ 1043.988713][ T8106] usb 10-1: SerialNumber: syz [ 1044.064249][ T8106] usb 10-1: config 0 descriptor?? [ 1046.444508][ T8106] usb 10-1: USB disconnect, device number 107 [ 1048.630400][ T1955] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1048.647076][T19530] tipc: Enabled bearer , priority 0 [ 1048.664404][T19530] syzkaller0: entered promiscuous mode [ 1048.724786][T19530] syzkaller0: entered allmulticast mode [ 1048.843493][ T1955] usb 10-1: config 0 has no interfaces? [ 1048.849891][T19531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1048.852931][ T1955] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1048.866632][ T1955] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1048.876931][ T1955] usb 10-1: Product: syz [ 1048.905188][ T1955] usb 10-1: Manufacturer: syz [ 1048.907238][ T1955] usb 10-1: SerialNumber: syz [ 1048.927763][ T1955] usb 10-1: config 0 descriptor?? [ 1049.226264][T19530] tipc: Resetting bearer [ 1049.388219][T19528] tipc: Resetting bearer [ 1049.527268][T19528] tipc: Disabling bearer [ 1050.059742][ T8106] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1050.304123][ T8106] usb 9-1: config 0 has no interfaces? [ 1050.324607][ T8106] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1050.474335][ T8106] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1050.510441][ T8106] usb 9-1: Product: syz [ 1050.527317][ T8106] usb 9-1: Manufacturer: syz [ 1050.546301][ T8106] usb 9-1: SerialNumber: syz [ 1050.665692][ T8106] usb 9-1: config 0 descriptor?? [ 1051.098007][ T29] usb 10-1: USB disconnect, device number 108 [ 1051.725181][ T29] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1051.925114][ T29] usb 10-1: config 0 has no interfaces? [ 1051.934800][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1051.943513][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1051.949689][ T29] usb 10-1: Product: syz [ 1051.951983][ T29] usb 10-1: Manufacturer: syz [ 1051.959716][ T29] usb 10-1: SerialNumber: syz [ 1051.970224][ T29] usb 10-1: config 0 descriptor?? [ 1052.099820][T17850] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1052.203318][T19562] tipc: Enabled bearer , priority 0 [ 1052.214029][T19562] syzkaller0: entered promiscuous mode [ 1052.219684][T19562] syzkaller0: entered allmulticast mode [ 1052.270669][T17850] usb 6-1: Using ep0 maxpacket: 8 [ 1052.275157][T17850] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.278458][T17850] usb 6-1: config 0 has no interface number 0 [ 1052.341268][T17850] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.397459][T19562] tipc: Resetting bearer [ 1052.404845][T17850] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1052.419042][T17850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.462581][T17850] usb 6-1: config 0 descriptor?? [ 1052.470164][T19561] tipc: Resetting bearer [ 1052.474649][T17850] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1052.547545][T19561] tipc: Disabling bearer [ 1052.698073][T19559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.724793][T19559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.771393][T17850] usb 9-1: USB disconnect, device number 85 [ 1052.779096][T19559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.819793][T19559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.880092][T19559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.907571][T19559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.259869][ T29] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1053.329693][T17850] usb 6-1: USB disconnect, device number 120 [ 1053.419290][ T8106] Process accounting resumed [ 1053.472146][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 1053.575791][ T29] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1053.579198][ T29] usb 9-1: config 0 has no interface number 0 [ 1053.590422][ T29] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.606500][ T29] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1053.615139][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.636314][ T29] usb 9-1: config 0 descriptor?? [ 1053.702069][T19567] wireguard: wg0: Could not create IPv4 socket [ 1053.707139][ T29] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1053.936180][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.953118][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.993570][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.009737][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.030676][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.039722][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.294981][T17382] usb 9-1: USB disconnect, device number 86 [ 1054.374523][T17850] usb 10-1: USB disconnect, device number 109 [ 1056.740408][ T52] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1056.924959][T19599] tipc: Enabled bearer , priority 0 [ 1056.980051][ T52] usb 9-1: Using ep0 maxpacket: 8 [ 1057.018965][T19599] syzkaller0: entered promiscuous mode [ 1057.046902][T19599] syzkaller0: entered allmulticast mode [ 1057.190031][T19599] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1057.211211][ T52] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1057.214139][ T52] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1057.219690][ T52] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1057.223759][ T52] usb 9-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1057.238609][ T52] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1057.248000][ T52] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1057.254438][ T52] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1057.262276][ T52] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1057.272866][ T52] usb 9-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1057.289689][ T52] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1057.294609][ T52] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1057.299895][ T52] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1057.311129][ T52] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1057.319658][ T52] usb 9-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1057.339667][ T52] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1057.345585][ T52] usb 9-1: string descriptor 0 read error: -22 [ 1057.348537][ T52] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1057.358377][ T52] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.380529][ T52] adutux 9-1:168.0: interrupt endpoints not found [ 1057.441435][T19599] tipc: Resetting bearer [ 1057.586827][T19598] tipc: Resetting bearer [ 1057.664426][ T52] usb 9-1: USB disconnect, device number 87 [ 1057.710077][T19603] net_ratelimit: 1047 callbacks suppressed [ 1057.710102][T19603] netlink: zone id is out of range [ 1057.720973][T19603] netlink: zone id is out of range [ 1057.723729][T19603] netlink: zone id is out of range [ 1057.736610][T19603] netlink: zone id is out of range [ 1057.738847][T19603] netlink: zone id is out of range [ 1057.750559][T19603] netlink: zone id is out of range [ 1057.752799][T19603] netlink: zone id is out of range [ 1057.761823][T19603] netlink: zone id is out of range [ 1057.764148][T19603] netlink: zone id is out of range [ 1057.780431][T19603] netlink: zone id is out of range [ 1057.789395][T19598] tipc: Disabling bearer [ 1058.141132][ T29] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1058.361229][ T29] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1058.413637][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.458841][ T29] usb 6-1: Product: syz [ 1058.488497][ T29] usb 6-1: Manufacturer: syz [ 1058.540101][ T29] usb 6-1: SerialNumber: syz [ 1058.758787][ T8106] Process accounting resumed [ 1058.891076][T19616] wireguard: wg0: Could not create IPv4 socket [ 1059.678684][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1061.221836][T17850] Process accounting resumed [ 1061.332184][T19628] wireguard: wg0: Could not create IPv4 socket [ 1061.712471][T19633] tipc: Enabling of bearer rejected, failed to enable media [ 1062.336798][ T29] Process accounting resumed [ 1062.428356][T19646] wireguard: wg0: Could not create IPv4 socket [ 1062.693175][T19625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1062.696545][T19625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.699668][T19625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1062.704027][T19625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1063.331210][ T65] Bluetooth: hci2: command 0x0405 tx timeout [ 1064.410756][ T5872] usb 6-1: USB disconnect, device number 121 [ 1064.418972][ T5872] usblp0: removed [ 1064.791851][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 1064.791880][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 1064.794992][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 1064.898044][T19663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1066.007434][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.029797][ T5872] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1066.430136][ T5872] usb 10-1: Using ep0 maxpacket: 8 [ 1066.556135][ T5872] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1066.559353][ T5872] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1066.629680][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1066.634572][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.639343][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1066.655194][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1066.664144][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1066.679658][ T5872] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1066.683757][ T5872] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1066.687445][ T5872] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1066.699681][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1066.746037][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.776314][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1066.787489][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1066.803341][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1067.034009][ T5872] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1067.043575][ T5872] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1067.049033][ T5872] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1067.059690][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1067.097531][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1067.163549][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1067.179182][ T5872] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1067.199644][ T5872] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1067.218911][ T5872] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1067.300191][ T5872] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1067.304143][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.324240][ T5872] usb 10-1: Product: syz [ 1067.326147][ T5872] usb 10-1: Manufacturer: syz [ 1067.330542][ T5872] usb 10-1: SerialNumber: syz [ 1067.588506][ T5872] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1067.608709][ T5872] usb 10-1: USB disconnect, device number 110 [ 1069.099751][T13778] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1069.138669][T19711] tipc: Enabled bearer , priority 0 [ 1069.164319][T19711] syzkaller0: entered promiscuous mode [ 1069.170069][T19711] syzkaller0: entered allmulticast mode [ 1069.212947][T19711] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1069.251223][T13778] usb 10-1: config 0 has no interfaces? [ 1069.257416][T13778] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1069.269660][T13778] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1069.277025][T13778] usb 10-1: Product: syz [ 1069.279385][T13778] usb 10-1: Manufacturer: syz [ 1069.288320][T13778] usb 10-1: SerialNumber: syz [ 1069.300277][T13778] usb 10-1: config 0 descriptor?? [ 1069.960158][T19712] tipc: Resetting bearer [ 1070.029029][T19710] tipc: Resetting bearer [ 1070.148066][T19710] tipc: Disabling bearer [ 1071.802481][ T29] usb 10-1: USB disconnect, device number 111 [ 1072.816883][T19734] syzkaller0: entered promiscuous mode [ 1072.869683][T19734] syzkaller0: entered allmulticast mode [ 1075.883299][ T29] Process accounting resumed [ 1075.959961][T17382] usb 9-1: new full-speed USB device number 88 using dummy_hcd [ 1076.959128][T17382] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1076.969502][T17382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.981308][T17382] usb 9-1: Product: syz [ 1076.983141][T17382] usb 9-1: Manufacturer: syz [ 1076.993473][T17382] usb 9-1: SerialNumber: syz [ 1077.263191][T19777] Cannot find set identified by id 0 to match [ 1077.291306][T18490] Process accounting resumed [ 1077.500004][T17382] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1078.052373][T19784] tipc: Enabled bearer , priority 0 [ 1078.077994][T19781] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1078.307734][T19781] tipc: Resetting bearer [ 1078.630418][T19785] syzkaller0: entered promiscuous mode [ 1078.658454][T19785] syzkaller0: entered allmulticast mode [ 1078.673355][T19780] tipc: Resetting bearer [ 1078.822431][T19780] tipc: Disabling bearer [ 1079.636312][T18490] Process accounting resumed [ 1079.731646][T19788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.736066][T19788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1079.739723][T19788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.743544][T19788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1079.826721][T18490] usb 9-1: USB disconnect, device number 88 [ 1079.942523][T18490] usblp0: removed [ 1080.240225][T19322] Bluetooth: hci2: command 0x0405 tx timeout [ 1080.700399][T18490] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1081.409754][ T29] usb 11-1: new high-speed USB device number 102 using dummy_hcd [ 1081.610963][ T29] usb 11-1: config 0 has no interfaces? [ 1081.617748][ T29] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1081.624893][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1081.631869][ T29] usb 11-1: Product: syz [ 1081.634110][ T29] usb 11-1: Manufacturer: syz [ 1081.639646][ T29] usb 11-1: SerialNumber: syz [ 1081.651179][ T29] usb 11-1: config 0 descriptor?? [ 1081.759858][T19322] Bluetooth: hci1: command 0x0c1a tx timeout [ 1081.762151][T19322] Bluetooth: hci3: command 0x0c1a tx timeout [ 1081.764149][T19322] Bluetooth: hci4: command 0x0c1a tx timeout [ 1082.120614][T18490] usb 9-1: config 0 has no interfaces? [ 1082.124956][T18490] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1082.128562][T18490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1082.132076][T18490] usb 9-1: Product: syz [ 1082.134327][T18490] usb 9-1: Manufacturer: syz [ 1082.136251][T18490] usb 9-1: SerialNumber: syz [ 1082.144241][T18490] usb 9-1: config 0 descriptor?? [ 1083.568237][T18490] usb 9-1: USB disconnect, device number 89 [ 1083.727788][T19831] tipc: Enabled bearer , priority 0 [ 1083.749137][T19831] syzkaller0: entered promiscuous mode [ 1083.765697][T19831] syzkaller0: entered allmulticast mode [ 1083.809213][T19833] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1084.115928][T19831] tipc: Resetting bearer [ 1084.149728][T17382] usb 11-1: USB disconnect, device number 102 [ 1084.300477][T19830] tipc: Resetting bearer [ 1084.461101][T19830] tipc: Disabling bearer [ 1084.528545][T19839] syzkaller0: entered promiscuous mode [ 1084.537613][T19839] syzkaller0: entered allmulticast mode [ 1084.732158][ T29] Process accounting resumed [ 1085.090955][T19851] Cannot find set identified by id 0 to match [ 1088.479701][T19873] net_ratelimit: 1056 callbacks suppressed [ 1088.479744][T19873] netlink: zone id is out of range [ 1088.609840][T19873] netlink: zone id is out of range [ 1088.612622][T19873] netlink: zone id is out of range [ 1088.614780][T19873] netlink: zone id is out of range [ 1088.645525][T19873] netlink: zone id is out of range [ 1088.647702][T19873] netlink: zone id is out of range [ 1088.659772][T19873] netlink: zone id is out of range [ 1088.661986][T19873] netlink: zone id is out of range [ 1088.726512][T19873] netlink: zone id is out of range [ 1088.728662][T19873] netlink: zone id is out of range [ 1089.250254][T18490] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1090.399768][T18490] usb 9-1: Using ep0 maxpacket: 8 [ 1090.476590][T18490] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.489677][T18490] usb 9-1: config 0 has no interface number 0 [ 1090.492432][T18490] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1090.496864][T18490] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1090.509672][T18490] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.523362][T18490] usb 9-1: config 0 descriptor?? [ 1090.553996][T18490] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1090.883317][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.887628][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.928067][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.950403][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.115112][T19897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.293439][T19897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.318235][ T29] usb 9-1: USB disconnect, device number 90 [ 1092.588028][T19898] Process accounting resumed [ 1094.329635][T19923] syzkaller0: entered promiscuous mode [ 1094.332329][T19923] syzkaller0: entered allmulticast mode [ 1094.577892][ T29] Process accounting resumed [ 1096.970154][T19934] tipc: Enabling of bearer rejected, failed to enable media [ 1098.770405][ T1955] usb 11-1: new full-speed USB device number 103 using dummy_hcd [ 1099.013032][ T1955] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1099.018055][ T1955] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.027627][ T1955] usb 11-1: Product: syz [ 1099.029462][ T1955] usb 11-1: Manufacturer: syz [ 1099.041202][ T1955] usb 11-1: SerialNumber: syz [ 1099.249846][ T4279] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1099.522569][ T4279] usb 9-1: config 0 has no interfaces? [ 1099.532469][ T4279] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1099.536726][ T4279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1099.549641][ T4279] usb 9-1: Product: syz [ 1099.551983][ T4279] usb 9-1: Manufacturer: syz [ 1099.557412][ T4279] usb 9-1: SerialNumber: syz [ 1099.570762][ T4279] usb 9-1: config 0 descriptor?? [ 1099.652870][ T1955] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1102.296404][T19981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1102.299222][T19981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1102.302500][T19981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1102.305154][T19981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1102.324654][ T4279] usb 9-1: USB disconnect, device number 91 [ 1102.768321][ T29] usb 11-1: USB disconnect, device number 103 [ 1102.849885][ T29] usblp0: removed [ 1103.212781][T20004] Cannot find set identified by id 0 to match [ 1103.269760][ T5776] Bluetooth: hci2: command 0x0405 tx timeout [ 1104.309774][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 1104.312297][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 1104.319749][T19322] Bluetooth: hci3: command 0x0c1a tx timeout [ 1105.929955][ T4279] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1106.120893][ T4279] usb 5-1: Dual-Role OTG device on HNP port [ 1106.132581][ T4279] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1106.136190][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.363325][ T4279] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1106.366481][ T4279] gspca_spca501: reg write: error -32 [ 1106.368798][ T4279] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1106.376289][ T4279] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1106.410293][ T4279] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.046759][T20038] net_ratelimit: 1057 callbacks suppressed [ 1107.046776][T20038] netlink: zone id is out of range [ 1107.059698][T20038] netlink: zone id is out of range [ 1107.061855][T20038] netlink: zone id is out of range [ 1107.073077][T20038] netlink: zone id is out of range [ 1107.078059][T20038] netlink: zone id is out of range [ 1107.085673][T20038] netlink: zone id is out of range [ 1107.087852][T20038] netlink: zone id is out of range [ 1107.096308][T20038] netlink: zone id is out of range [ 1107.101216][T20038] netlink: zone id is out of range [ 1107.103405][T20038] netlink: zone id is out of range [ 1107.129782][ T4279] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1107.320491][ T4279] usb 10-1: Using ep0 maxpacket: 32 [ 1107.341658][ T4279] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.345360][ T4279] usb 10-1: config 0 has no interface number 0 [ 1107.372062][ T4279] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1107.383377][ T4279] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.398618][ T4279] usb 10-1: Product: syz [ 1107.400673][ T4279] usb 10-1: Manufacturer: syz [ 1107.407657][ T4279] usb 10-1: SerialNumber: syz [ 1107.416721][ T4279] usb 10-1: config 0 descriptor?? [ 1107.425849][ T4279] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1107.434733][ T4279] usb 10-1: selecting invalid altsetting 1 [ 1107.440412][ T4279] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1107.453490][ T4279] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.468822][ T4279] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1107.473725][ T4279] usb 10-1: media controller created [ 1107.505798][ T4279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.642224][T20040] FAULT_INJECTION: forcing a failure. [ 1107.642224][T20040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1107.646969][T20040] CPU: 2 UID: 0 PID: 20040 Comm: syz.6.4609 Not tainted syzkaller #0 PREEMPT(full) [ 1107.646986][T20040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1107.646993][T20040] Call Trace: [ 1107.647022][T20040] [ 1107.647028][T20040] dump_stack_lvl+0x100/0x190 [ 1107.647054][T20040] should_fail_ex.cold+0x5/0xa [ 1107.647071][T20040] _copy_to_user+0x32/0xd0 [ 1107.647094][T20040] simple_read_from_buffer+0xcb/0x170 [ 1107.647117][T20040] proc_fail_nth_read+0x1af/0x230 [ 1107.647135][T20040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1107.647151][T20040] ? rw_verify_area+0xce/0x6d0 [ 1107.647169][T20040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1107.647184][T20040] vfs_read+0x1e4/0xb40 [ 1107.647197][T20040] ? __pfx_vfs_read+0x10/0x10 [ 1107.647206][T20040] ? find_held_lock+0x2b/0x80 [ 1107.647224][T20040] ? __fget_files+0x215/0x3d0 [ 1107.647238][T20040] ? __fget_files+0x21f/0x3d0 [ 1107.647252][T20040] ksys_read+0x12a/0x250 [ 1107.647262][T20040] ? __pfx_ksys_read+0x10/0x10 [ 1107.647276][T20040] do_int80_emulation+0x14b/0x720 [ 1107.647298][T20040] asm_int80_emulation+0x1a/0x20 [ 1107.647310][T20040] RIP: 0023:0xf71974eb [ 1107.647321][T20040] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1107.647335][T20040] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1107.647347][T20040] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 1107.647354][T20040] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.647361][T20040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.647367][T20040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1107.647374][T20040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.647388][T20040] [ 1108.109696][ T4279] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1108.112196][ T4279] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1108.508616][ T4279] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1108.614050][ T4279] usb 10-1: USB disconnect, device number 112 [ 1109.366500][T20065] netlink: 774 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1109.375450][T20065] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1109.389664][T20065] netlink: 512 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1110.349571][T20077] syzkaller0: entered promiscuous mode [ 1110.358950][T20077] syzkaller0: entered allmulticast mode [ 1110.919813][T18490] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1111.188385][T18490] usb 10-1: config 0 has no interfaces? [ 1111.192344][T18490] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1111.195375][T18490] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1111.319659][T18490] usb 10-1: Product: syz [ 1111.321003][T18490] usb 10-1: Manufacturer: syz [ 1111.322454][T18490] usb 10-1: SerialNumber: syz [ 1111.333733][T18490] usb 10-1: config 0 descriptor?? [ 1111.576443][T20086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4621'. [ 1111.719753][T13778] usb 11-1: new high-speed USB device number 104 using dummy_hcd [ 1111.881559][T13778] usb 11-1: config 0 has no interfaces? [ 1111.886346][T13778] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1111.891749][T13778] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1111.900338][T13778] usb 11-1: Product: syz [ 1111.905316][T13778] usb 11-1: Manufacturer: syz [ 1111.909663][T13778] usb 11-1: SerialNumber: syz [ 1111.919009][T13778] usb 11-1: config 0 descriptor?? [ 1113.336066][T20100] FAULT_INJECTION: forcing a failure. [ 1113.336066][T20100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.359672][T20100] CPU: 1 UID: 0 PID: 20100 Comm: syz.4.4626 Not tainted syzkaller #0 PREEMPT(full) [ 1113.359690][T20100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1113.359698][T20100] Call Trace: [ 1113.359703][T20100] [ 1113.359708][T20100] dump_stack_lvl+0x100/0x190 [ 1113.359728][T20100] should_fail_ex.cold+0x5/0xa [ 1113.359742][T20100] _copy_from_user+0x2e/0xd0 [ 1113.359761][T20100] __sys_bpf+0x2f5/0x4e80 [ 1113.359781][T20100] ? __pfx___sys_bpf+0x10/0x10 [ 1113.359794][T20100] ? find_held_lock+0x2b/0x80 [ 1113.359809][T20100] ? get_pid_task+0xfc/0x250 [ 1113.359824][T20100] ? get_pid_task+0xfc/0x250 [ 1113.359842][T20100] ? proc_fail_nth_write+0x9f/0x220 [ 1113.359859][T20100] ? find_held_lock+0x2b/0x80 [ 1113.359876][T20100] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1113.359896][T20100] ? find_held_lock+0x2b/0x80 [ 1113.359909][T20100] ? ksys_write+0x190/0x250 [ 1113.359921][T20100] ? ksys_write+0x190/0x250 [ 1113.359941][T20100] ? fput+0x79/0x100 [ 1113.359955][T20100] ? __ia32_sys_bpf+0xcc/0x170 [ 1113.359967][T20100] __ia32_sys_bpf+0xcc/0x170 [ 1113.359983][T20100] ? __do_fast_syscall_32+0x98/0x970 [ 1113.360009][T20100] __do_fast_syscall_32+0xe7/0x970 [ 1113.360025][T20100] ? lockdep_hardirqs_on+0x78/0x100 [ 1113.360047][T20100] do_fast_syscall_32+0x32/0x70 [ 1113.360067][T20100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1113.360082][T20100] RIP: 0023:0xf70befec [ 1113.360097][T20100] Code: Unable to access opcode bytes at 0xf70befc2. [ 1113.360102][T20100] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1113.360116][T20100] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000300 [ 1113.360127][T20100] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1113.360136][T20100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1113.360146][T20100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1113.360156][T20100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1113.360170][T20100] [ 1113.800990][ T52] usb 10-1: USB disconnect, device number 113 [ 1113.882211][T20107] net_ratelimit: 2110 callbacks suppressed [ 1113.882224][T20107] netlink: zone id is out of range [ 1113.910116][T20107] netlink: zone id is out of range [ 1113.911865][T20107] netlink: zone id is out of range [ 1113.913462][T20107] netlink: zone id is out of range [ 1113.915154][T20107] netlink: zone id is out of range [ 1113.917163][T20107] netlink: zone id is out of range [ 1113.919174][T20107] netlink: zone id is out of range [ 1113.924242][T20107] netlink: zone id is out of range [ 1113.926646][T20107] netlink: zone id is out of range [ 1113.939687][T20107] netlink: zone id is out of range [ 1114.406821][T13778] usb 11-1: USB disconnect, device number 104 [ 1118.143102][T20121] syzkaller0: entered promiscuous mode [ 1118.226129][T20121] syzkaller0: entered allmulticast mode [ 1118.519792][T13778] usb 9-1: new full-speed USB device number 92 using dummy_hcd [ 1118.765222][T13778] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1118.769021][T13778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.793743][T13778] usb 9-1: Product: syz [ 1118.795549][T13778] usb 9-1: Manufacturer: syz [ 1118.808675][T13778] usb 9-1: SerialNumber: syz [ 1119.267519][T13778] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1122.179907][T13778] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1122.409798][T13778] usb 6-1: config 0 has no interfaces? [ 1122.440518][T13778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1122.440552][T13778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1122.440573][T13778] usb 6-1: Product: syz [ 1122.440589][T13778] usb 6-1: Manufacturer: syz [ 1122.440605][T13778] usb 6-1: SerialNumber: syz [ 1122.506231][T13778] usb 6-1: config 0 descriptor?? [ 1122.602859][ T4279] usb 9-1: USB disconnect, device number 92 [ 1122.605153][ T4279] usblp0: removed [ 1122.667358][T20170] net_ratelimit: 1050 callbacks suppressed [ 1122.667377][T20170] netlink: zone id is out of range [ 1122.667387][T20170] netlink: zone id is out of range [ 1122.667394][T20170] netlink: zone id is out of range [ 1122.667401][T20170] netlink: zone id is out of range [ 1122.667410][T20170] netlink: zone id is out of range [ 1122.667417][T20170] netlink: zone id is out of range [ 1122.667431][T20170] netlink: zone id is out of range [ 1122.667439][T20170] netlink: zone id is out of range [ 1122.667447][T20170] netlink: zone id is out of range [ 1122.667453][T20170] netlink: zone id is out of range [ 1123.004342][ T42] audit: type=1800 audit(1786033132.630:242): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4639" name="memory_backed" dev="configfs" ino=74148 res=0 errno=0 [ 1123.037030][ T42] audit: type=1800 audit(1786033132.670:243): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4639" name="zoned" dev="configfs" ino=74149 res=0 errno=0 [ 1123.188130][T20177] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 1123.195188][T20174] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 1123.195202][T20174] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1123.195211][T20174] netlink: 'syz.4.4639': attribute type 2 has an invalid length. [ 1123.195218][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1123.283681][T20177] block2mtd: error: cannot open device /dev/loop0 [ 1123.326999][T20181] syzkaller0: entered promiscuous mode [ 1123.327372][T20181] syzkaller0: entered allmulticast mode [ 1123.552798][T20183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4642'. [ 1124.683223][T13488] usb 6-1: USB disconnect, device number 122 [ 1126.743845][T20205] smpboot: CPU 1 is now offline [ 1127.436992][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.569618][ C3] sched: DL replenish lagged too much [ 1137.081452][T20221] net_ratelimit: 1050 callbacks suppressed [ 1137.081474][T20221] netlink: zone id is out of range [ 1137.081485][T20221] netlink: zone id is out of range [ 1137.081492][T20221] netlink: zone id is out of range [ 1137.081499][T20221] netlink: zone id is out of range [ 1137.081508][T20221] netlink: zone id is out of range [ 1137.081515][T20221] netlink: zone id is out of range [ 1137.081529][T20221] netlink: zone id is out of range [ 1137.081539][T20221] netlink: zone id is out of range [ 1137.081547][T20221] netlink: zone id is out of range [ 1137.081556][T20221] netlink: zone id is out of range [ 1137.414695][T20224] syzkaller0: entered promiscuous mode [ 1137.415170][T20224] syzkaller0: entered allmulticast mode [ 1142.053461][T20239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1142.224749][T20238] input: syz1 as /devices/virtual/input/input49 [ 1142.422804][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1142.445166][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1142.465202][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1142.484069][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1142.491151][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1144.555906][T19322] Bluetooth: hci0: command tx timeout [ 1146.629782][T19322] Bluetooth: hci0: command tx timeout [ 1147.744203][T20255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1148.709843][T19322] Bluetooth: hci0: command tx timeout [ 1150.852942][T19322] Bluetooth: hci0: command tx timeout [ 1151.669973][T17850] usb 9-1: new full-speed USB device number 93 using dummy_hcd [ 1151.905357][T17850] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1151.952350][T17850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.963925][T17850] usb 9-1: Product: syz [ 1151.965677][T17850] usb 9-1: Manufacturer: syz [ 1151.983204][T17850] usb 9-1: SerialNumber: syz [ 1152.100258][T20188] bond0: (slave syz_tun): Releasing backup interface [ 1152.454085][T17850] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1153.271575][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.815261][T20291] input: syz1 as /devices/virtual/input/input50 [ 1157.023325][T20298] ocfs2: Unknown parameter 'ƒeartbvav' [ 1157.843718][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.494081][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.803493][T20310] Cannot find set identified by id 0 to match [ 1158.974395][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.287414][T20243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.342767][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.345576][T20243] bridge_slave_0: entered allmulticast mode [ 1159.891104][T20243] bridge_slave_0: entered promiscuous mode [ 1160.480815][T20243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.484036][T20243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.496722][T20243] bridge_slave_1: entered allmulticast mode [ 1160.512379][T20243] bridge_slave_1: entered promiscuous mode [ 1160.792823][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.838590][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.919852][ T1955] usb 9-1: USB disconnect, device number 93 [ 1160.983119][ T1955] usblp0: removed [ 1161.165238][T20327] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1161.169503][T20327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1161.173159][T20327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1161.234442][T20243] team0: Port device team_slave_0 added [ 1161.258395][T20327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1161.348709][T20243] team0: Port device team_slave_1 added [ 1161.790618][T20327] bridge_slave_1: left allmulticast mode [ 1161.794549][T20327] bridge_slave_1: left promiscuous mode [ 1161.800188][T20327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.916896][T20330] efs: cannot read volume header [ 1161.937686][T20327] bridge_slave_0: left allmulticast mode [ 1161.941843][T20327] bridge_slave_0: left promiscuous mode [ 1161.946533][T20327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.079912][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.089696][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.119776][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.287546][ T12] bridge_slave_1: left allmulticast mode [ 1163.295554][ T12] bridge_slave_1: left promiscuous mode [ 1163.299436][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.318648][ T12] bridge_slave_0: left allmulticast mode [ 1163.327342][ T12] bridge_slave_0: left promiscuous mode [ 1163.340141][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.570255][ T5963] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1163.723578][ T5963] usb 10-1: config 0 has no interfaces? [ 1163.727714][ T5963] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1163.739265][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1163.749713][ T5963] usb 10-1: Product: syz [ 1163.751859][ T5963] usb 10-1: Manufacturer: syz [ 1164.679707][ T5963] usb 10-1: SerialNumber: syz [ 1164.692218][ T5963] usb 10-1: config 0 descriptor?? [ 1168.321433][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.503532][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.111497][ T12] bond0 (unregistering): Released all slaves [ 1169.245051][T20362] Bluetooth: MGMT ver 1.23 [ 1169.328120][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.352410][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.599658][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.561102][ T12] tipc: Left network mode [ 1171.010082][ T1955] usb 10-1: USB disconnect, device number 114 [ 1171.062973][T20243] hsr_slave_0: entered promiscuous mode [ 1171.087865][T20243] hsr_slave_1: entered promiscuous mode [ 1171.107673][T20243] debugfs: 'hsr0' already exists in 'hsr' [ 1171.116854][T20243] Cannot create hsr debugfs directory [ 1171.251267][T20373] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4684'. [ 1171.481118][T20377] Cannot find set identified by id 0 to match [ 1172.049944][T13488] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 1172.360682][T13488] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1172.364344][T13488] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.367048][T13488] usb 10-1: Product: syz [ 1172.368387][T13488] usb 10-1: Manufacturer: syz [ 1172.413431][T13488] usb 10-1: SerialNumber: syz [ 1172.525084][ T5459] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1172.891260][T13488] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 115 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1174.907169][ T12] hsr_slave_0: left promiscuous mode [ 1175.591704][T20397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1175.744522][T20397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1175.751198][ T12] hsr_slave_1: left promiscuous mode [ 1175.770825][T20397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1175.784217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.787617][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.841976][T20397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1175.873608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.881114][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.885789][T20397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1175.921117][T20397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1176.052639][ T12] veth1_macvtap: left promiscuous mode [ 1176.055562][ T12] veth0_macvtap: left promiscuous mode [ 1176.058943][ T12] veth1_vlan: left promiscuous mode [ 1176.072263][ T12] veth0_vlan: left promiscuous mode [ 1176.377000][T20407] dyndbg: expected <4096 bytes into control [ 1176.439076][T20408] 9p: Bad value for 'rfdno' [ 1176.486075][T20407] dyndbg: bad flag-op f, at start of fil [ 1176.488437][T20407] dyndbg: flags parse failed [ 1176.789826][T19322] Bluetooth: hci4: command 0x0c1a tx timeout [ 1177.534918][ T42] audit: type=1800 audit(1786033187.120:244): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4688" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1177.769767][T19322] Bluetooth: hci3: command 0x0c1a tx timeout [ 1177.839769][T19322] Bluetooth: hci1: command 0x0c1a tx timeout [ 1177.861106][T20411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1177.909810][T19322] Bluetooth: hci0: command 0x0c1a tx timeout [ 1179.186260][T20415] input: syz1 as /devices/virtual/input/input51 [ 1179.828209][T20418] netlink: 'syz.6.4690': attribute type 16 has an invalid length. [ 1179.836050][T20418] netlink: 'syz.6.4690': attribute type 17 has an invalid length. [ 1179.838882][T20418] netlink: 'syz.6.4690': attribute type 27 has an invalid length. [ 1180.015955][T19322] Bluetooth: hci0: command 0x0c1a tx timeout [ 1182.079732][T19322] Bluetooth: hci0: command 0x0c1a tx timeout [ 1182.463774][ T5963] usb 10-1: USB disconnect, device number 115 [ 1182.949352][ T5963] usblp0: removed [ 1183.689773][ T5963] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1184.069852][ T5963] usb 10-1: Using ep0 maxpacket: 8 [ 1184.102050][ T5963] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1184.105475][ T5963] usb 10-1: config 0 has no interface number 0 [ 1184.108091][ T5963] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.269742][ T5963] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1184.272466][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.521929][ T5963] usb 10-1: config 0 descriptor?? [ 1184.650346][ T5963] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1184.855599][T20431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.900864][T20431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.931207][T20431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.934144][T20431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.171068][T20432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.195006][T20432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.372853][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1185.674283][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1185.766550][ T4279] usb 10-1: USB disconnect, device number 116 [ 1187.405233][T20434] input: syz1 as /devices/virtual/input/input52 [ 1188.594128][T20243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1188.621088][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.634777][ T5459] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1188.683125][T20243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1188.723130][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.739039][T20243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1188.838823][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.852256][T20243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1188.875767][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.927239][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1189.286948][T20452] Cannot find set identified by id 0 to match [ 1189.649656][ T4279] usb 11-1: new high-speed USB device number 105 using dummy_hcd [ 1190.053287][T20243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.089711][ T4279] usb 11-1: Using ep0 maxpacket: 8 [ 1190.093285][ T4279] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1190.096155][ T4279] usb 11-1: config 0 has no interface number 0 [ 1190.101893][ T4279] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.116189][ T4279] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1190.119629][ T4279] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.867848][ T4279] usb 11-1: config 0 descriptor?? [ 1191.419738][ T4279] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1191.529707][T20243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.617297][ T12] IPVS: stop unused estimator thread 0... [ 1191.686770][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.689724][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.773735][T20468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.797597][T20468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.852989][ T5459] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1191.908191][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.910703][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.964638][T20471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.198927][T20471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.450561][T20451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.775315][T20451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.845794][ T5962] usb 11-1: USB disconnect, device number 105 [ 1194.619770][T20243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.636751][T20243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.808055][T20486] overlayfs: missing 'lowerdir' [ 1195.842628][T20486] netlink: 'syz.4.4700': attribute type 1 has an invalid length. [ 1197.061876][T20499] Cannot find set identified by id 0 to match [ 1197.339692][ T4279] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1197.509687][ T4279] usb 10-1: Using ep0 maxpacket: 8 [ 1197.512950][ T4279] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1197.517631][ T4279] usb 10-1: config 0 has no interface number 0 [ 1197.520009][ T4279] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1197.528662][ T4279] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1197.536296][ T4279] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.552231][ T4279] usb 10-1: config 0 descriptor?? [ 1197.586261][ T4279] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1197.660287][T20486] syz_tun: left promiscuous mode [ 1198.140535][T20503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.330898][T20503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.963168][T20503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.020412][T20503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.031785][T20500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.041883][T20500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.285258][ T5963] usb 10-1: USB disconnect, device number 117 [ 1200.091883][T20509] program syz.5.4705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.099317][T20509] ata1.00: invalid command format 31 [ 1201.624633][T20486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.602037][T20486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.328313][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1204.353986][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1204.370281][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1204.439396][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1204.449255][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1204.961680][T20524] input: syz1 as /devices/virtual/input/input53 [ 1205.054747][T20486] macvlan1: left promiscuous mode [ 1205.057146][T20486] macvlan1: left allmulticast mode [ 1206.592811][T19322] Bluetooth: hci2: command tx timeout [ 1206.600455][T20532] Cannot find set identified by id 0 to match [ 1207.289858][ T5459] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1207.334098][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.361495][T12242] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.387081][T12242] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.459844][T12242] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.634022][T19322] Bluetooth: hci2: command tx timeout [ 1209.449968][T20554] dyndbg: expected <4096 bytes into control [ 1210.208453][T20561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1210.709738][T19322] Bluetooth: hci2: command tx timeout [ 1212.829715][T19322] Bluetooth: hci2: command tx timeout [ 1214.445832][ T42] audit: type=1800 audit(1786033224.030:245): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4717" name="bus" dev="ramfs" ino=75067 res=0 errno=0 [ 1214.789359][T20519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.796271][T20519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.797940][T20593] input: syz1 as /devices/virtual/input/input54 [ 1214.798870][T20519] bridge_slave_0: entered allmulticast mode [ 1214.812977][T20519] bridge_slave_0: entered promiscuous mode [ 1214.833981][T20519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.846586][T20519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.849429][T20519] bridge_slave_1: entered allmulticast mode [ 1214.857170][T20519] bridge_slave_1: entered promiscuous mode [ 1215.323055][T20519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.452171][T20519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.001530][T20519] team0: Port device team_slave_0 added [ 1216.020048][T20519] team0: Port device team_slave_1 added [ 1216.262407][T20519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.264533][T20519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.319713][T20519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.403189][T20610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1216.406100][T20610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1216.418939][T20610] vhci_hcd vhci_hcd.0: Device attached [ 1216.440817][T20519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.443005][T20519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.495516][T20519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.596845][ T42] audit: type=1804 audit(1786033226.230:246): pid=20609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4724" name="bus" dev="ramfs" ino=75212 res=1 errno=0 [ 1216.625668][T20613] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1216.628722][T20613] net_ratelimit: 1050 callbacks suppressed [ 1216.628731][T20613] openvswitch: netlink: ufid size 21752 bytes exceeds the range (1, 16) [ 1216.647078][T20613] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1216.648893][ T42] audit: type=1804 audit(1786033226.280:247): pid=20609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4724" name="bus" dev="ramfs" ino=75212 res=1 errno=0 [ 1216.692024][T13488] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1216.742024][T20611] vhci_hcd: connection reset by peer [ 1216.750850][T12242] vhci_hcd vhci_hcd.4: stop threads [ 1216.752950][T12242] vhci_hcd vhci_hcd.4: release socket [ 1216.777380][T12242] vhci_hcd vhci_hcd.4: disconnect device [ 1216.792391][T20618] syzkaller0: entered promiscuous mode [ 1216.794497][T20618] syzkaller0: entered allmulticast mode [ 1216.859640][ T12] bridge_slave_1: left allmulticast mode [ 1216.862289][ T12] bridge_slave_1: left promiscuous mode [ 1216.865513][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.003403][ T12] bridge_slave_0: left allmulticast mode [ 1217.012397][ T12] bridge_slave_0: left promiscuous mode [ 1217.019673][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.528703][T20627] input: syz1 as /devices/virtual/input/input55 [ 1218.201521][T20630] binder: 20629:20630 ioctl c0306201 80002580 returned -14 [ 1220.162027][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.266718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.374564][ T12] bond0 (unregistering): Released all slaves [ 1220.393116][T20519] hsr_slave_0: entered promiscuous mode [ 1220.398674][T20519] hsr_slave_1: entered promiscuous mode [ 1221.593901][ T5459] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1221.631241][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 1221.822274][ T12] hsr_slave_0: left promiscuous mode [ 1221.871017][ T12] hsr_slave_1: left promiscuous mode [ 1221.902774][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.919925][T13488] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1221.924566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.226038][T20642] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 1222.659828][ T1955] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1222.962776][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4731'. [ 1223.401827][ T1955] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1223.419796][ T5962] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1223.430127][ T1955] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1223.433128][ T1955] usb 10-1: can't read configurations, error -71 [ 1223.583269][ T5962] usb 9-1: config 0 has no interfaces? [ 1223.586864][ T5962] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1223.609643][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1223.623005][ T5962] usb 9-1: Product: syz [ 1223.624437][ T5962] usb 9-1: Manufacturer: syz [ 1223.632842][ T5962] usb 9-1: SerialNumber: syz [ 1223.660328][ T5962] usb 9-1: config 0 descriptor?? [ 1225.764862][T20669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.276989][T20668] tmpfs: Unknown parameter 'usrquota' [ 1227.488680][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1227.697044][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1231.041112][ T1955] usb 9-1: USB disconnect, device number 94 [ 1231.420273][T20683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1231.740147][ T1955] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1232.416903][ T1955] usb 9-1: config 0 has no interfaces? [ 1232.469981][ T1955] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1232.472862][ T1955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1232.599757][ T1955] usb 9-1: Product: syz [ 1232.601116][ T1955] usb 9-1: Manufacturer: syz [ 1232.602573][ T1955] usb 9-1: SerialNumber: syz [ 1232.617357][ T1955] usb 9-1: config 0 descriptor?? [ 1234.362415][T20519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1234.410186][T20519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.449804][ T1955] usb 11-1: new high-speed USB device number 106 using dummy_hcd [ 1234.479761][T13488] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 1234.649812][T13488] usb 10-1: Using ep0 maxpacket: 32 [ 1234.656169][T13488] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1234.666185][T13488] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.682314][T13488] usb 10-1: config 0 descriptor?? [ 1234.699822][T13488] as10x_usb: device has been detected [ 1234.712607][T13488] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1234.744335][T13488] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1234.844727][T13488] as10x_usb: error during firmware upload part1 [ 1234.847377][T13488] Registered device nBox DVB-T Dongle [ 1234.928838][T13488] usb 10-1: USB disconnect, device number 120 [ 1234.939677][T20519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1234.975846][ T1955] usb 11-1: config 0 has no interfaces? [ 1234.985857][ T1955] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1234.988768][ T1955] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1235.002358][ T1955] usb 11-1: Product: syz [ 1235.003751][ T1955] usb 11-1: Manufacturer: syz [ 1235.017347][T20519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.035707][ T1955] usb 11-1: SerialNumber: syz [ 1235.096289][T20519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1235.103487][T17382] usb 9-1: USB disconnect, device number 95 [ 1235.125038][T20519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.134554][T20519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1235.156445][ T1955] usb 11-1: config 0 descriptor?? [ 1235.216611][T20707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.261387][T20519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.362672][T13488] Unregistered device nBox DVB-T Dongle [ 1235.423604][T13488] as10x_usb: device has been disconnected [ 1235.588034][T20720] input: syz1 as /devices/virtual/input/input56 [ 1237.726273][T20519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.763037][T20742] syzkaller0: entered promiscuous mode [ 1237.765644][T20742] syzkaller0: entered allmulticast mode [ 1237.778986][ T5963] usb 11-1: USB disconnect, device number 106 [ 1237.953778][T20519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.035187][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.038037][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.046221][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1238.136292][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.138452][T14002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.372679][ T42] audit: type=1326 audit(1786033247.960:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.401542][ T42] audit: type=1326 audit(1786033247.960:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.436697][ T42] audit: type=1326 audit(1786033247.960:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.453292][ T42] audit: type=1326 audit(1786033247.960:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.559693][ T42] audit: type=1326 audit(1786033247.960:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.579558][ T42] audit: type=1326 audit(1786033247.970:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.657328][ T42] audit: type=1326 audit(1786033247.970:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.741561][ T42] audit: type=1326 audit(1786033247.970:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.763086][ T42] audit: type=1326 audit(1786033247.970:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1238.784269][ T42] audit: type=1326 audit(1786033247.970:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.6.4747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 1239.229985][ T1955] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1239.342925][T20763] netlink: 'syz.5.4749': attribute type 1 has an invalid length. [ 1239.440617][ T1955] usb 9-1: Using ep0 maxpacket: 16 [ 1239.443974][ T1955] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1239.447251][ T1955] usb 9-1: config 5 has an invalid interface number: 35 but max is 0 [ 1239.454000][ T1955] usb 9-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1239.456552][ T1955] usb 9-1: config 5 has no interface number 0 [ 1239.458369][ T1955] usb 9-1: config 5 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1239.486785][ T1955] usb 9-1: config 5 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1239.508725][ T1955] usb 9-1: config 5 interface 35 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1239.540180][ T1955] usb 9-1: config 5 interface 35 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1239.556917][ T1955] usb 9-1: config 5 interface 35 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1239.574379][T20763] bond1: entered promiscuous mode [ 1239.576185][ T1955] usb 9-1: config 5 interface 35 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1239.657070][T20763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1239.659897][ T1955] usb 9-1: config 5 interface 35 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1239.664204][ T1955] usb 9-1: config 5 interface 35 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1239.677223][ T1955] usb 9-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=9b.d0 [ 1239.680942][ T1955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.689685][ T1955] usb 9-1: Product: syz [ 1239.706318][ T1955] usb 9-1: Manufacturer: syz [ 1239.774847][ T1955] usb 9-1: SerialNumber: syz [ 1239.902096][T20770] overlayfs: missing 'lowerdir' [ 1239.917438][T20770] netlink: 'syz.6.4750': attribute type 1 has an invalid length. [ 1239.918168][T20765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1239.932222][T20765] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1239.948658][T20765] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1239.978703][T20765] bond1: (slave ip6gre1): making interface the new active one [ 1239.986996][T20765] ip6gre1: entered promiscuous mode [ 1240.017027][T20765] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1240.103020][ T1955] option 9-1:5.35: GSM modem (1-port) converter detected [ 1240.120730][ T1955] usb 9-1: USB disconnect, device number 96 [ 1240.131648][ T1955] option 9-1:5.35: device disconnected [ 1241.099718][T20346] usb 10-1: new full-speed USB device number 121 using dummy_hcd [ 1241.284949][T20346] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1241.301832][T20346] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1241.310551][T20346] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1241.314599][T20346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.320987][T20346] usb 10-1: Product: syz [ 1241.324621][T20346] usb 10-1: Manufacturer: syz [ 1241.327301][T20346] usb 10-1: SerialNumber: syz [ 1241.335191][T20346] usb 10-1: config 0 descriptor?? [ 1241.341249][T20346] hub 10-1:0.0: bad descriptor, ignoring hub [ 1241.344357][T20346] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1241.361647][T20346] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input57 [ 1241.408537][T20771] syz_tun: left promiscuous mode [ 1241.566863][T20771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.570170][T20771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.642464][T20771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.858399][T20771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.306580][T20771] macvlan1: left promiscuous mode [ 1246.308550][T20771] macvlan1: left allmulticast mode [ 1247.814714][T20771] ip6erspan0: left allmulticast mode [ 1247.840136][T20320] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.843396][T20320] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.941237][T20320] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.944000][T20320] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.399697][T20478] usb 11-1: new high-speed USB device number 107 using dummy_hcd [ 1248.449998][T18490] usb 10-1: USB disconnect, device number 121 [ 1248.554132][T20478] usb 11-1: Using ep0 maxpacket: 8 [ 1248.573295][T20478] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.575862][T20478] usb 11-1: config 0 has no interface number 0 [ 1248.623165][T20478] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1248.626880][T20478] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1248.678342][T20478] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.690553][T20478] usb 11-1: config 0 descriptor?? [ 1248.746398][T20797] Cannot find set identified by id 0 to match [ 1248.750256][T20478] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1248.840251][T20550] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1249.042906][T20803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.049893][T20550] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1249.058524][T20550] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1249.099254][T20803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.129738][T20803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.133414][T20803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.135532][T20550] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1249.138629][T20550] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1249.174076][T20550] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1249.190337][T20550] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1249.198694][T20550] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1249.256727][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.259861][T20550] usb 9-1: Product: syz [ 1249.259878][T20550] usb 9-1: Manufacturer: syz [ 1249.279143][T20550] cdc_wdm 9-1:1.0: skipping garbage [ 1249.289902][T20550] cdc_wdm 9-1:1.0: skipping garbage [ 1249.341036][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.518643][T20519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.030798][T20550] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 1250.032724][T20550] cdc_wdm 9-1:1.0: Unknown control protocol [ 1250.044304][T20478] usb 11-1: USB disconnect, device number 107 [ 1250.068260][T20550] usb 9-1: USB disconnect, device number 97 [ 1250.314230][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.500835][T20519] veth0_vlan: entered promiscuous mode [ 1250.565833][T20519] veth1_vlan: entered promiscuous mode [ 1250.783929][T20829] jffs2: notice: (20829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1250.797644][T20519] veth0_macvtap: entered promiscuous mode [ 1250.851958][T20519] veth1_macvtap: entered promiscuous mode [ 1251.093539][T20519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.215050][T20519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.469690][T12242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.479698][T12242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.975651][T20840] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4758'. [ 1252.040726][T12242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.054769][T12242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.085336][T20840] gretap0: entered promiscuous mode [ 1252.306699][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.339279][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.605391][ T365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.607888][ T365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.613318][T20841] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4758'. [ 1253.109614][T20841] 0ªî{X¹¦: renamed from gretap0 [ 1253.153518][T20841] 0ªî{X¹¦: left promiscuous mode [ 1253.155364][T20841] 0ªî{X¹¦: entered allmulticast mode [ 1253.183288][T20841] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1255.474852][T20874] netlink: 'syz.4.4764': attribute type 1 has an invalid length. [ 1256.090771][T20874] bond1: entered promiscuous mode [ 1256.223707][T20874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1258.040694][T20876] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1258.043561][T20876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1258.046452][T20876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1258.091111][T20876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1258.094018][T20876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1258.296885][T20880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1258.311971][T20880] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1258.339672][T20880] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1258.435426][T20880] bond1: (slave ip6gre1): making interface the new active one [ 1258.457078][T20876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1258.469197][T20880] ip6gre1: entered promiscuous mode [ 1258.556778][T20880] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1260.069842][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 1260.069886][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 1260.069909][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 1260.151087][T19322] Bluetooth: hci2: command 0x0c1a tx timeout [ 1262.229773][T19322] Bluetooth: hci2: command 0x0c1a tx timeout [ 1263.256869][T20918] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1264.309723][T19322] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.127202][T20932] netlink: 4064 bytes leftover after parsing attributes in process `syz.4.4773'. [ 1265.602941][T20937] jffs2: notice: (20937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1267.347711][T20951] jffs2: notice: (20951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1267.464078][T20957] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 1267.499915][ T1955] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1267.595746][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 1267.595758][ T42] audit: type=1800 audit(1786033277.230:265): pid=20954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4778" name="enable" dev="configfs" ino=77268 res=0 errno=0 [ 1268.001685][ T1955] usb 9-1: config 0 has no interfaces? [ 1268.005042][ T1955] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1268.007812][ T1955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1268.017768][ T1955] usb 9-1: Product: syz [ 1268.019136][ T1955] usb 9-1: Manufacturer: syz [ 1268.029380][ T1955] usb 9-1: SerialNumber: syz [ 1268.033617][ T1955] usb 9-1: config 0 descriptor?? [ 1268.124302][ T4279] hid_parser_main: 470 callbacks suppressed [ 1268.124318][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.135957][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.149669][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.152417][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.154800][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.157043][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.159335][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.169654][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.179670][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.182253][ T4279] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 1268.277805][ T4279] hid-generic 0006:0008:0001.001A: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1268.365140][T20970] fido_id[20970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1268.708352][T20979] set match dimension is over the limit! [ 1270.323433][ T1955] usb 9-1: USB disconnect, device number 98 [ 1270.976598][T20996] jffs2: notice: (20996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1272.124271][T20989] pim6reg: entered allmulticast mode [ 1272.180841][T20989] pim6reg: left allmulticast mode [ 1272.809957][ T4279] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 1273.009889][ T4279] usb 10-1: Using ep0 maxpacket: 32 [ 1273.034024][ T4279] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1273.037021][ T4279] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1273.077723][ T4279] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1273.107176][ T4279] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1273.145186][ T4279] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1273.170440][ T4279] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1273.190711][ T4279] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1273.242177][ T4279] usb 10-1: Product: syz [ 1273.244186][ T4279] usb 10-1: Manufacturer: syz [ 1273.249755][ T5872] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1273.264342][ T4279] usb 10-1: SerialNumber: syz [ 1273.269319][T21011] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 1273.276820][T21012] orangefs_devreq_open: device cannot be opened in blocking mode [ 1273.287030][ T4279] usb 10-1: config 0 descriptor?? [ 1273.317020][T21011] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1273.326791][ T4279] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1273.350811][ T4279] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1273.396957][T21011] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1273.400058][ T5872] usb 12-1: device descriptor read/64, error -71 [ 1273.463861][T21011] pcieport 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1273.666092][ T5872] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1273.962216][ T5872] usb 12-1: device descriptor read/64, error -71 [ 1273.980116][T21004] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1273.991452][T18490] usb 10-1: USB disconnect, device number 122 [ 1273.991970][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 1274.019760][T21019] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1274.034513][T18490] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1274.072361][ T5872] usb usb12-port1: attempt power cycle [ 1274.157738][T19322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1274.172436][T19322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1274.181268][T19322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1274.189723][T19322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1274.195279][T19322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1274.474867][ T5872] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1274.509964][ T5872] usb 12-1: device descriptor read/8, error -71 [ 1274.799819][ T5872] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1274.850776][ T5872] usb 12-1: device descriptor read/8, error -71 [ 1275.020178][ T5872] usb usb12-port1: unable to enumerate USB device [ 1276.230376][T19322] Bluetooth: hci0: command tx timeout [ 1278.309730][T19322] Bluetooth: hci0: command tx timeout [ 1280.060261][T13295] bond0: (slave syz_tun): Releasing backup interface [ 1280.390406][ T5776] Bluetooth: hci0: command tx timeout [ 1280.560927][T21046] netlink: 'syz.4.4796': attribute type 1 has an invalid length. [ 1280.659705][T21046] bond2: entered promiscuous mode [ 1280.672019][T21046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.846562][T21055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4799'. [ 1282.072431][T21055] ip6gre2: entered promiscuous mode [ 1282.074534][T21055] ip6gre2: entered allmulticast mode [ 1282.469873][ T5776] Bluetooth: hci0: command tx timeout [ 1283.414364][T21057] netlink: 'syz.4.4799': attribute type 6 has an invalid length. [ 1283.417052][T21057] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4799'. [ 1284.380677][T21062] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1284.384212][T21069] syzkaller0: entered promiscuous mode [ 1284.386602][T21069] syzkaller0: entered allmulticast mode [ 1284.530005][T21062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1284.652493][T21062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1285.709648][T21071] kAFS: unable to lookup cell 'ÿ' [ 1285.773102][T21074] FAULT_INJECTION: forcing a failure. [ 1285.773102][T21074] name failslab, interval 1, probability 0, space 0, times 1 [ 1285.789637][T21074] CPU: 0 UID: 0 PID: 21074 Comm: syz.4.4802 Not tainted syzkaller #0 PREEMPT(full) [ 1285.789654][T21074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1285.789661][T21074] Call Trace: [ 1285.789667][T21074] [ 1285.789673][T21074] dump_stack_lvl+0x100/0x190 [ 1285.789697][T21074] should_fail_ex.cold+0x5/0xa [ 1285.789714][T21074] should_failslab+0xc2/0x120 [ 1285.789735][T21074] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1285.789749][T21074] ? rcu_is_watching+0x12/0xc0 [ 1285.789767][T21074] ? anon_vma_clone+0x2ba/0xcd0 [ 1285.789787][T21074] anon_vma_clone+0x2ba/0xcd0 [ 1285.789808][T21074] copy_vma+0x6ed/0xac0 [ 1285.789822][T21074] ? __pfx_copy_vma+0x10/0x10 [ 1285.789847][T21074] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1285.789862][T21074] copy_vma_and_data+0x1cf/0x7c0 [ 1285.789877][T21074] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1285.789893][T21074] ? rcu_is_watching+0x12/0xc0 [ 1285.789906][T21074] ? percpu_counter_add_batch+0xb9/0x230 [ 1285.789930][T21074] ? __vm_enough_memory+0x184/0x390 [ 1285.789950][T21074] move_vma+0x574/0x1920 [ 1285.789965][T21074] ? __pfx_move_vma+0x10/0x10 [ 1285.789978][T21074] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1285.789996][T21074] ? cap_mmap_addr+0x4b/0x120 [ 1285.790010][T21074] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1285.790022][T21074] ? security_mmap_addr+0x71/0x1e0 [ 1285.790038][T21074] ? __get_unmapped_area+0x255/0x3e0 [ 1285.790056][T21074] ? vrm_set_new_addr+0x204/0x290 [ 1285.790069][T21074] mremap_to+0x234/0x4c0 [ 1285.790085][T21074] ? mas_walk+0x6ef/0x9b0 [ 1285.790103][T21074] ? __pfx_mremap_to+0x10/0x10 [ 1285.790118][T21074] __do_sys_mremap+0x88c/0x1850 [ 1285.790135][T21074] ? __pfx___do_sys_mremap+0x10/0x10 [ 1285.790147][T21074] ? find_held_lock+0x2b/0x80 [ 1285.790162][T21074] ? ksys_write+0x190/0x250 [ 1285.790175][T21074] ? ksys_write+0x190/0x250 [ 1285.790191][T21074] ? __fget_files+0x21f/0x3d0 [ 1285.790208][T21074] ? __pfx_ksys_write+0x10/0x10 [ 1285.790221][T21074] __do_fast_syscall_32+0xe7/0x970 [ 1285.790238][T21074] ? lockdep_hardirqs_on+0x78/0x100 [ 1285.790254][T21074] do_fast_syscall_32+0x32/0x70 [ 1285.790270][T21074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.790286][T21074] RIP: 0023:0xf70befec [ 1285.790302][T21074] Code: Unable to access opcode bytes at 0xf70befc2. [ 1285.790308][T21074] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3 [ 1285.790319][T21074] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 1285.790326][T21074] RDX: 0000000000600002 RSI: 0000000000000007 RDI: 0000000080a00000 [ 1285.790333][T21074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.790340][T21074] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.790346][T21074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.790360][T21074] [ 1286.002907][T21076] netlink: 'syz.5.4800': attribute type 10 has an invalid length. [ 1286.381158][T21080] jffs2: notice: (21080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1289.826749][T21076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1290.570715][T21076] team0: Port device netdevsim1 added [ 1290.658984][T21088] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1290.679997][T21088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1290.699744][T21088] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1291.019754][T21094] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1291.022404][T21094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1291.140036][T21094] vhci_hcd vhci_hcd.0: Device attached [ 1291.427854][T21099] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 1291.529680][ T13] bridge_slave_1: left allmulticast mode [ 1291.549473][ T13] bridge_slave_1: left promiscuous mode [ 1291.571363][ T5857] usb 46-1: SetAddress Request (2) to port 0 [ 1291.571736][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.574019][ T5857] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1291.662388][ T13] bridge_slave_0: left allmulticast mode [ 1291.667463][ T13] bridge_slave_0: left promiscuous mode [ 1291.692019][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.484813][T21120] netlink: 'syz.7.4810': attribute type 21 has an invalid length. [ 1294.487810][T21120] netlink: 'syz.7.4810': attribute type 20 has an invalid length. [ 1295.435846][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.635312][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.642983][ T13] bond0 (unregistering): Released all slaves [ 1296.325628][ T257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.328855][ T257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.730098][T21095] vhci_hcd: connection reset by peer [ 1296.759982][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1296.761753][ T12] vhci_hcd vhci_hcd.4: release socket [ 1296.763575][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1297.250082][ T5857] usb 46-1: device descriptor read/8, error -110 [ 1297.253794][ T13] tipc: Left network mode [ 1297.910980][ T5857] usb usb46-port1: attempt power cycle [ 1298.938622][ T5857] usb usb46-port1: unable to enumerate USB device [ 1299.720407][T21022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.739612][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.750431][T21022] bridge_slave_0: entered allmulticast mode [ 1299.766825][T21022] bridge_slave_0: entered promiscuous mode [ 1299.797189][T21022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.809609][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.820919][T21022] bridge_slave_1: entered allmulticast mode [ 1299.850529][T21022] bridge_slave_1: entered promiscuous mode [ 1300.265059][T21022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.297344][T21022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.850750][ T5459] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1302.051498][T21022] team0: Port device team_slave_0 added [ 1302.181606][T21022] team0: Port device team_slave_1 added [ 1303.474353][T21022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.482650][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.516605][T21022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.528221][T21022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.533966][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.557256][T21022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.700888][T21022] hsr_slave_0: entered promiscuous mode [ 1303.710992][T21022] hsr_slave_1: entered promiscuous mode [ 1303.719140][T21022] debugfs: 'hsr0' already exists in 'hsr' [ 1303.722074][T21022] Cannot create hsr debugfs directory [ 1304.013479][ T13] hsr_slave_0: left promiscuous mode [ 1304.028127][ T13] hsr_slave_1: left promiscuous mode [ 1304.038087][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.047842][T21186] 9p: Bad value for 'rfdno' [ 1304.051770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.870326][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1307.088204][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1310.556465][T21183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1310.599918][T21183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1310.604217][T21183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1310.648705][T21183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1310.725053][T21183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1310.786000][T21183] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1311.790590][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.994458][T21205] jffs2: notice: (21205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1312.887203][ T5776] Bluetooth: hci4: command 0x0c1a tx timeout [ 1312.889758][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 1312.896250][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 1312.898858][T19322] Bluetooth: hci2: command 0x0c1a tx timeout [ 1313.576489][T21214] program syz.4.4826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.759548][ T5459] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1313.874242][ T13] IPVS: stop unused estimator thread 0... [ 1314.111610][T21217] syzkaller0: entered promiscuous mode [ 1314.113440][T21217] syzkaller0: entered allmulticast mode [ 1314.717272][T21022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1314.736907][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1314.741783][T21022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1314.752364][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1314.758341][T21022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1314.769170][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1314.778728][T21022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1314.799395][T21022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.949748][ T5771] Bluetooth: hci0: command 0x0c1a tx timeout [ 1315.002688][T21022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.046681][T21022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.095747][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.098414][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.124058][T14003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.127050][T14003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.390021][T20478] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 1315.565655][T20478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1315.574458][T20478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1315.589138][T20478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1315.601778][T20478] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1315.623260][T20478] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1315.632248][T20478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.644874][T20478] usb 10-1: Product: syz [ 1315.646479][T20478] usb 10-1: Manufacturer: syz [ 1315.654806][T20478] usb 10-1: SerialNumber: syz [ 1315.703141][T20478] usb 10-1: config 0 descriptor?? [ 1315.711352][T21228] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1315.938338][T20478] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1316.190490][T21271] binder: 21262:21271 ioctl 401c7012 0 returned -22 [ 1316.363716][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1317.029898][ T5771] Bluetooth: hci0: command 0x0c1a tx timeout [ 1317.865293][ T1955] usb 10-1: USB disconnect, device number 123 [ 1323.350089][T21300] syzkaller0: entered promiscuous mode [ 1323.352138][T21300] syzkaller0: entered allmulticast mode [ 1323.433524][T21312] input: syz1 as /devices/virtual/input/input58 [ 1323.596443][T21317] jffs2: notice: (21317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1323.680913][T21022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.184459][T21336] No source specified [ 1324.268003][T21022] veth0_vlan: entered promiscuous mode [ 1324.295550][T21022] veth1_vlan: entered promiscuous mode [ 1324.344028][T21022] veth0_macvtap: entered promiscuous mode [ 1324.415456][T21022] veth1_macvtap: entered promiscuous mode [ 1324.751499][T21022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.835503][T21022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.961865][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.974525][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.996738][T21341] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4844'. [ 1325.020007][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.049245][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.156852][T16200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.175458][T16200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.224937][T21341] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1325.291041][T16200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.301029][T16200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.199236][T21357] ipvlan2: entered allmulticast mode [ 1326.201384][T21357] batadv_slave_1: entered allmulticast mode [ 1331.252544][T21384] vlan2: entered allmulticast mode [ 1331.325681][T21384] bond0: entered allmulticast mode [ 1331.498308][T21384] bond_slave_0: entered allmulticast mode [ 1331.896108][T21384] bond_slave_1: entered allmulticast mode [ 1332.145038][T21381] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1332.181387][T21381] bond0: (slave lo): Error: Device can not be enslaved while up [ 1333.902180][T21402] netlink: 'syz.5.4855': attribute type 4 has an invalid length. [ 1334.216190][T21402] netlink: 'syz.5.4855': attribute type 4 has an invalid length. [ 1334.616434][T21406] jffs2: notice: (21406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1335.761830][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4860'. [ 1335.767073][T21426] Invalid ELF header magic: != ELF [ 1335.789168][T21426] overlayfs: overlapping lowerdir path [ 1338.023551][T21433] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 1338.383707][T21434] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 1338.630610][T21443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4864'. [ 1338.788220][T21442] input: syz1 as /devices/virtual/input/input59 [ 1339.118459][T21437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1339.243783][T21434] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 1339.576029][T21449] overlayfs: missing 'lowerdir' [ 1339.628728][T21449] netlink: 'syz.5.4866': attribute type 1 has an invalid length. [ 1340.787163][T21456] overlayfs: missing 'lowerdir' [ 1340.843067][T21457] netlink: 'syz.6.4869': attribute type 1 has an invalid length. [ 1340.980981][T21449] syz_tun: left promiscuous mode [ 1340.991641][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.994965][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.091470][ T4279] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1341.279817][ T4279] usb 9-1: Using ep0 maxpacket: 8 [ 1341.298466][ T4279] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1341.304592][ T4279] usb 9-1: config 0 has no interface number 0 [ 1341.311919][ T4279] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.323670][ T4279] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1341.329519][ T4279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.345784][ T4279] usb 9-1: config 0 descriptor?? [ 1341.378271][ T4279] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1341.680173][T21464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.698181][T21464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.715793][T21464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.732045][T21464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.889723][T21466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.926031][T21466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.390146][T21449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.422671][T21449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.503182][T21449] macvlan1: left promiscuous mode [ 1342.505979][T21449] macvlan1: left allmulticast mode [ 1342.622274][T21449] ip6erspan0: left allmulticast mode [ 1342.626891][T21449] bond1: left promiscuous mode [ 1342.638424][ T5962] usb 9-1: USB disconnect, device number 99 [ 1342.657885][T21449] ip6gre1: left promiscuous mode [ 1342.670869][T21449] ipvlan2: left allmulticast mode [ 1342.674560][T21449] batadv_slave_1: left allmulticast mode [ 1342.965694][T21469] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1343.374493][T21457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.377830][T21457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.562373][T21457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.575182][T21457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.161582][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.170159][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.182218][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.193543][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.204688][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.218716][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.243433][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.274635][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.562998][T21494] jffs2: notice: (21494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1347.540267][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4883'. [ 1349.306220][T21524] input: syz1 as /devices/virtual/input/input60 [ 1349.452074][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4887'. [ 1350.145777][ T5771] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1350.700608][T21525] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1350.706832][T21525] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1350.719541][T21525] vhci_hcd vhci_hcd.0: Device attached [ 1351.000653][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.014128][ T5962] usb 48-1: SetAddress Request (2) to port 0 [ 1351.016259][ T5962] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1351.019160][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.113838][T21542] syzkaller0: entered promiscuous mode [ 1351.118729][T21542] syzkaller0: entered allmulticast mode [ 1351.153889][T21544] bond3: entered promiscuous mode [ 1351.157838][T21544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1351.567801][T21525] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1353.685616][T21578] lo speed is unknown, defaulting to 1000 [ 1353.688992][T21578] lo speed is unknown, defaulting to 1000 [ 1353.779550][T21574] hpfs: Bad magic ... probably not HPFS [ 1353.827962][T21578] lo speed is unknown, defaulting to 1000 [ 1353.852271][T21578] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1353.898117][T21578] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1353.965133][T21578] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1354.049124][T21578] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1354.125069][T21537] vhci_hcd: connection reset by peer [ 1354.136368][T20320] vhci_hcd vhci_hcd.5: stop threads [ 1354.141759][T20320] vhci_hcd vhci_hcd.5: release socket [ 1354.157641][T21578] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1354.158967][T20320] vhci_hcd vhci_hcd.5: disconnect device [ 1354.273984][T21578] lo speed is unknown, defaulting to 1000 [ 1354.278138][T21578] lo speed is unknown, defaulting to 1000 [ 1354.291780][T21578] lo speed is unknown, defaulting to 1000 [ 1354.309889][T20346] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1354.331391][T21578] lo speed is unknown, defaulting to 1000 [ 1354.515057][T20346] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1354.524643][T20346] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1354.532713][T20346] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1354.539701][T20346] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1354.549449][T20346] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1354.563453][T20346] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1354.569252][T20346] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1354.574907][T20346] usb 12-1: Product: syz [ 1354.576590][T20346] usb 12-1: Manufacturer: syz [ 1354.596847][T20346] cdc_wdm 12-1:1.0: skipping garbage [ 1354.600598][T20346] cdc_wdm 12-1:1.0: skipping garbage [ 1354.611815][T20346] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1354.614972][T20346] cdc_wdm 12-1:1.0: Unknown control protocol [ 1354.679772][ T4279] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1354.797990][T21591] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 1354.801187][T20346] usb 12-1: USB disconnect, device number 6 [ 1354.841370][ T4279] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1354.843126][T21591] bond4: entered promiscuous mode [ 1354.846833][ T4279] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1354.847877][T21591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1354.859644][ T4279] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1354.866314][ T4279] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1354.877433][ T4279] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1354.890811][ T4279] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1354.912259][ T4279] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1354.923878][ T4279] usb 10-1: Product: syz [ 1354.925427][ T4279] usb 10-1: Manufacturer: syz [ 1354.948879][ T4279] cdc_wdm 10-1:1.0: skipping garbage [ 1354.953975][ T4279] cdc_wdm 10-1:1.0: skipping garbage [ 1354.968868][ T4279] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1354.974890][ T4279] cdc_wdm 10-1:1.0: Unknown control protocol [ 1355.151917][T20550] usb 10-1: USB disconnect, device number 124 [ 1355.510935][ T1955] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1355.681939][ T1955] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1355.685537][ T1955] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1355.689669][ T1955] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1355.693556][ T1955] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1355.698325][ T1955] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1355.787174][ T1955] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1355.791570][ T1955] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1355.799700][ T1955] usb 12-1: Product: syz [ 1355.801749][ T1955] usb 12-1: Manufacturer: syz [ 1355.820657][ T1955] cdc_wdm 12-1:1.0: skipping garbage [ 1355.831230][ T1955] cdc_wdm 12-1:1.0: skipping garbage [ 1355.850604][ T1955] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1355.854015][ T1955] cdc_wdm 12-1:1.0: Unknown control protocol [ 1355.909804][T20478] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 1356.017708][ T1955] usb 12-1: USB disconnect, device number 7 [ 1356.065628][T20478] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1356.073886][T20478] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1356.084651][T20478] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1356.093710][T20478] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1356.107246][T20478] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1356.119279][T20478] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1356.128037][T20478] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1356.138924][T20478] usb 10-1: Product: syz [ 1356.144296][T20478] usb 10-1: Manufacturer: syz [ 1356.168924][T20478] cdc_wdm 10-1:1.0: skipping garbage [ 1356.173855][T20478] cdc_wdm 10-1:1.0: skipping garbage [ 1356.187732][T20478] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1356.196152][T20478] cdc_wdm 10-1:1.0: Unknown control protocol [ 1356.251026][ T5962] usb 48-1: device descriptor read/8, error -110 [ 1356.376848][ T1955] usb 10-1: USB disconnect, device number 125 [ 1356.671266][ T5962] usb usb48-port1: attempt power cycle [ 1356.763381][T21607] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1356.968693][T21610] lo speed is unknown, defaulting to 1000 [ 1357.273363][ T5962] usb usb48-port1: unable to enumerate USB device [ 1357.775261][T21623] syzkaller0: entered promiscuous mode [ 1357.796912][T21623] syzkaller0: entered allmulticast mode [ 1359.949753][ T5962] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1360.112034][ T5962] usb 9-1: Using ep0 maxpacket: 8 [ 1360.136399][ T5962] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1360.139912][ T5962] usb 9-1: config 0 has no interface number 0 [ 1360.147526][ T5962] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.171606][ T5962] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1360.188314][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.212142][ T5962] usb 9-1: config 0 descriptor?? [ 1360.263841][ T5962] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1360.625284][T21650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.640657][T21650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.660955][T21650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.672437][T21650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.766889][T21651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.774103][T21651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.580548][T21624] lo speed is unknown, defaulting to 1000 [ 1361.599740][T13488] usb 9-1: USB disconnect, device number 100 [ 1361.777829][T21655] overlayfs: missing 'lowerdir' [ 1361.839692][T21656] netlink: 'syz.6.4917': attribute type 1 has an invalid length. [ 1363.020754][T21663] jffs2: notice: (21663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1363.286372][ T5771] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1363.436975][T20478] [ 1363.441175][T20478] ============================================ [ 1363.443699][T20478] WARNING: possible recursive locking detected [ 1363.446263][T20478] syzkaller #0 Tainted: G L [ 1363.448819][T20478] -------------------------------------------- [ 1363.451350][T20478] kworker/3:2/20478 is trying to acquire lock: [ 1363.453810][T20478] ffff88804a4d5928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1363.457403][T20478] [ 1363.457403][T20478] but task is already holding lock: [ 1363.460427][T20478] ffff88806f743928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1363.464353][T20478] [ 1363.464353][T20478] other info that might help us debug this: [ 1363.467627][T20478] Possible unsafe locking scenario: [ 1363.467627][T20478] [ 1363.470698][T20478] CPU0 [ 1363.472063][T20478] ---- [ 1363.473462][T20478] lock(&grp->list_lock); [ 1363.475238][T20478] lock(&grp->list_lock); [ 1363.476991][T20478] [ 1363.476991][T20478] *** DEADLOCK *** [ 1363.476991][T20478] [ 1363.480148][T20478] May be due to missing lock nesting notation [ 1363.480148][T20478] [ 1363.483298][T20478] 3 locks held by kworker/3:2/20478: [ 1363.485484][T20478] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1363.489777][T20478] #1: ffffc90003447d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1363.494582][T20478] #2: ffff88806f743928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1363.498422][T20478] [ 1363.498422][T20478] stack backtrace: [ 1363.500717][T20478] CPU: 3 UID: 0 PID: 20478 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.500743][T20478] Tainted: [L]=SOFTLOCKUP [ 1363.500749][T20478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1363.500762][T20478] Workqueue: events snd_rawmidi_input_event_work [ 1363.500787][T20478] Call Trace: [ 1363.500797][T20478] [ 1363.500806][T20478] dump_stack_lvl+0x100/0x190 [ 1363.500828][T20478] print_deadlock_bug.cold+0xbd/0xca [ 1363.500856][T20478] __lock_acquire+0x1256/0x1a40 [ 1363.500888][T20478] lock_acquire+0x1b9/0x370 [ 1363.500912][T20478] ? snd_seq_deliver_event+0x230/0x860 [ 1363.500930][T20478] ? do_raw_read_unlock+0x3f/0x70 [ 1363.500950][T20478] _raw_read_lock+0x5f/0x70 [ 1363.500971][T20478] ? snd_seq_deliver_event+0x230/0x860 [ 1363.500988][T20478] snd_seq_deliver_event+0x230/0x860 [ 1363.501005][T20478] ? do_raw_spin_lock+0x128/0x260 [ 1363.501023][T20478] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1363.501040][T20478] ? mark_held_locks+0x40/0x70 [ 1363.501065][T20478] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.501088][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.501107][T20478] ? client_use_ptr+0x107/0x4b0 [ 1363.501134][T20478] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1363.501154][T20478] queue_broadcast_event.isra.0+0x143/0x1b0 [ 1363.501181][T20478] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 1363.501203][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.501224][T20478] ? snd_seq_timer_start+0x1f0/0x2a0 [ 1363.501248][T20478] snd_seq_control_queue+0x709/0xb70 [ 1363.501270][T20478] ? __pfx_event_input_timer+0x10/0x10 [ 1363.501295][T20478] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1363.501312][T20478] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1363.501331][T20478] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1363.501347][T20478] ? __lock_acquire+0x49f/0x1a40 [ 1363.501373][T20478] snd_seq_deliver_event+0x44b/0x860 [ 1363.501389][T20478] ? do_raw_spin_lock+0x128/0x260 [ 1363.501407][T20478] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1363.501424][T20478] ? mark_held_locks+0x40/0x70 [ 1363.501447][T20478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1363.501466][T20478] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.501487][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.501506][T20478] ? client_use_ptr+0x107/0x4b0 [ 1363.501532][T20478] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1363.501551][T20478] send_timer_event.isra.0+0x130/0x190 [ 1363.501570][T20478] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 1363.501588][T20478] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.501610][T20478] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 1363.501634][T20478] snd_seq_oss_timer_start+0x1db/0x320 [ 1363.501652][T20478] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 1363.501670][T20478] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 1363.501696][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.501715][T20478] ? find_slot+0x166/0x1b0 [ 1363.501737][T20478] snd_seq_oss_midi_input+0x467/0xa30 [ 1363.501759][T20478] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 1363.501783][T20478] ? find_held_lock+0x2b/0x80 [ 1363.501804][T20478] ? snd_seq_port_use_ptr+0x128/0x190 [ 1363.501831][T20478] snd_seq_oss_event_input+0x194/0x250 [ 1363.501851][T20478] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1363.501871][T20478] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1363.501890][T20478] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1363.501909][T20478] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1363.501927][T20478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1363.501946][T20478] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.501967][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.501987][T20478] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 1363.502012][T20478] snd_seq_deliver_event+0x2c1/0x860 [ 1363.502032][T20478] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1363.502049][T20478] ? mark_held_locks+0x40/0x70 [ 1363.502073][T20478] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.502094][T20478] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.502115][T20478] ? client_use_ptr+0x107/0x4b0 [ 1363.502141][T20478] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1363.502160][T20478] snd_midi_input_event+0x32f/0x470 [ 1363.502193][T20478] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1363.502221][T20478] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1363.502247][T20478] snd_rawmidi_input_event_work+0x61/0x80 [ 1363.502267][T20478] process_one_work+0xa23/0x1940 [ 1363.502296][T20478] ? __pfx_process_one_work+0x10/0x10 [ 1363.502324][T20478] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 1363.502344][T20478] worker_thread+0x5ef/0xe50 [ 1363.502371][T20478] ? __pfx_worker_thread+0x10/0x10 [ 1363.502395][T20478] ? kthread+0x13a/0x450 [ 1363.502417][T20478] ? __pfx_worker_thread+0x10/0x10 [ 1363.502440][T20478] kthread+0x370/0x450 [ 1363.502461][T20478] ? __pfx_kthread+0x10/0x10 [ 1363.502513][T20478] ret_from_fork+0x72b/0xd50 [ 1363.502538][T20478] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.502557][T20478] ? __switch_to+0x800/0x10f0 [ 1363.502583][T20478] ? __pfx_kthread+0x10/0x10 [ 1363.502605][T20478] ret_from_fork_asm+0x1a/0x30 [ 1363.502633][T20478] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1365.524140][T13682] bond0: (slave syz_tun): Releasing backup interface [ 1366.130297][T21624] bond0: (slave syz_tun): Releasing backup interface [ 1367.332127][ T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1367.334978][ T12] ip6gre1 (unregistering): left promiscuous mode [ 1367.458740][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.472926][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.487334][ T12] bond0 (unregistering): Released all slaves [ 1367.492316][ T12] bond1 (unregistering): Released all slaves [ 1367.497946][ T12] bond2 (unregistering): Released all slaves [ 1367.505417][ T12] bond3 (unregistering): Released all slaves [ 1367.512765][ T12] bond4 (unregistering): Released all slaves [ 1367.519307][ T5459] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1367.627989][ T12] tipc: Left network mode [ 1367.805774][ T5459] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1367.994356][ T5459] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1368.129509][ T12] hsr_slave_0: left promiscuous mode [ 1368.133486][ T12] hsr_slave_1: left promiscuous mode [ 1368.136139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.139548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.237390][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1368.243742][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1368.288932][ T5459] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1368.635636][ T12] IPVS: stop unused estimator thread 0... [ 1368.977570][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.034400][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.096061][ T5459] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1369.116977][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.197451][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.208159][ T5459] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1369.375101][ T5459] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1369.430985][ T12] team0: Port device netdevsim1 removed [ 1369.554599][ T5459] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1369.576487][ T12] bridge_slave_1: left allmulticast mode [ 1369.578966][ T12] bridge_slave_1: left promiscuous mode [ 1369.582092][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.593905][ T12] bridge_slave_0: left allmulticast mode [ 1369.599941][ T12] bridge_slave_0: left promiscuous mode [ 1369.607552][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.619776][ T12] bridge_slave_1: left allmulticast mode [ 1369.624223][ T12] bridge_slave_1: left promiscuous mode [ 1369.628900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.634691][ T12] bridge_slave_0: left allmulticast mode [ 1369.636856][ T12] bridge_slave_0: left promiscuous mode [ 1369.638903][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.645848][ T12] bridge_slave_1: left allmulticast mode [ 1369.648042][ T12] bridge_slave_1: left promiscuous mode [ 1369.650880][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.654373][ T12] bridge_slave_0: left allmulticast mode [ 1369.656411][ T12] bridge_slave_0: left promiscuous mode [ 1369.658488][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.768219][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.774004][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.777671][ T12] bond0 (unregistering): Released all slaves [ 1369.805501][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.809099][ T12] bond_slave_0: left allmulticast mode [ 1369.815043][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.818613][ T12] bond_slave_1: left allmulticast mode [ 1369.821652][ T12] bond0 (unregistering): Released all slaves [ 1369.864388][ T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1369.916814][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.921982][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.925621][ T12] bond0 (unregistering): Released all slaves [ 1369.929455][ T12] bond1 (unregistering): Released all slaves [ 1369.938982][ T5459] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1370.053212][ T12] tipc: Left network mode [ 1370.121221][ T5459] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1370.278505][ T5459] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1370.418904][ T5459] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1370.544550][ T5459] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1370.656797][ T5459] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1370.746835][ T12] hsr_slave_0: left promiscuous mode [ 1370.749723][ T12] hsr_slave_1: left promiscuous mode [ 1370.760246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.769292][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.777005][ T12] hsr_slave_0: left promiscuous mode [ 1370.779849][ T12] hsr_slave_1: left promiscuous mode [ 1370.782619][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.785611][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.792091][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.795047][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.802260][ T12] hsr_slave_0: left promiscuous mode [ 1370.804915][ T12] hsr_slave_1: left promiscuous mode [ 1370.806960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.809540][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.813945][ T12] veth1_macvtap: left promiscuous mode [ 1370.815755][ T12] veth0_macvtap: left promiscuous mode [ 1370.817520][ T12] veth1_vlan: left promiscuous mode [ 1370.819184][ T12] veth0_vlan: left promiscuous mode [ 1370.909516][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1370.919716][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1370.964526][ T365] smbdirect: ib_dev[syz2] removed [ 1371.007321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1371.013007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1371.144518][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1371.156472][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1371.220705][ T5459] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1371.400523][ T5459] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1372.211585][ T12] IPVS: stop unused estimator thread 0... [ 1373.190941][ T1433] ieee802154 phy1 wpan1: encryption failed: -22