last executing test programs: 23m53.683653082s ago: executing program 1 (id=2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0xa00, 0x86, 0x105, 0x100}}) 23m39.126531218s ago: executing program 0 (id=3): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e0000000130001002b", @ANYBLOB="9da5e3c086b7beff97fc25fb28a649d57b922e3e984e67c624f4b143c957fb7507099e313d7f544003ad9cba6adf4222b8ed440b5c2b63957eb4f8138ec3f4d61356b0275888cc"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) 23m36.214143545s ago: executing program 1 (id=4): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x7, 0xe238e, 0x267fac}) 23m30.54071853s ago: executing program 0 (id=5): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x10, 0x2, {0x3, 0xca, 0x5}}]}}]}, 0x48}}, 0x0) 23m27.961566446s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 23m22.91717224s ago: executing program 0 (id=7): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x4, 0xffffff7c) 23m14.313656794s ago: executing program 0 (id=8): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080), &(0x7f0000000000)=0x4) 23m7.176775083s ago: executing program 1 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000070000000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m4.871291641s ago: executing program 0 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) 22m56.145767612s ago: executing program 1 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000400)=@reiserfs_4={0x10, 0x4, {0x8000, 0x8, 0x4, 0x5}}, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 22m55.162012385s ago: executing program 0 (id=12): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 22m4.951523224s ago: executing program 32 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000400)=@reiserfs_4={0x10, 0x4, {0x8000, 0x8, 0x4, 0x5}}, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 21m58.94515875s ago: executing program 33 (id=12): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 13m32.050524951s ago: executing program 3 (id=20): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="5869ffea8061a5e1b3376ee54545482dc369", 0x12}, {&(0x7f0000000200)="633aff9f8369536c4fe0275e08c0ccb2a34969", 0x13}, {&(0x7f0000000380)="cda3b49d46cf722f947ebf359ec6ab293bc444a70608538c67e916d818d473b1bff863a9d4b4f422e4fce78d0ae54a36b2351d2180ea06b787aec296106835057befee7814bb39dac8f22861038a52a1a4cfd167686fe67dd19937fb10095893c8b91cf25eebfdd8af35caf41b85060873e02a7891b298ea1d74333b061e441c469e1411b995357ebd0de228025b13bb", 0x90}, {&(0x7f00000002c0)="9419e22af86cb0e920504b20988d4a74fc097b52280767bfda927079501c31cbfb8540ccddcc292029d6d5eb2969f1de70feb8bc58", 0x35}, {&(0x7f0000000440)="158498008f7759ed8179da4b2af87c7dbdf44db766c180b54bf8aad1bc02ff6758d749bda69ab9dfb777fc4f8840b27bcd036c77d258d5469a286170f6171e8c190a51398be16fb498f4137ce9b5fdc02dc2406b91b6dda4a9861150529c0e80fc955ca98de8ebf4c0a4ed4015421396741eb8be6c70bf14bfa8253895cd04de641abce1a853ebfebd637e5f874fedc7ebeb7b8d17f918a4d574de4f73f6a0c71d05ca9f7b7eb6", 0xa7}, {&(0x7f0000001840)="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", 0xfffffdb8}], 0x6}, 0x4048080) 13m20.083518611s ago: executing program 3 (id=22): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x40, 0x2e, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 13m1.920302759s ago: executing program 3 (id=24): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 12m50.85094122s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x49c002, 0x1) 12m36.334624194s ago: executing program 3 (id=27): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mlock(&(0x7f0000efa000/0x3000)=nil, 0x3000) 12m16.103169235s ago: executing program 3 (id=29): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc050000200000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000004540)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290b00000b00000000000009000000ec130000000000000029000000"], 0x30}}], 0x1, 0x4040011) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 11m23.654706567s ago: executing program 34 (id=29): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc050000200000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000004540)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290b00000b00000000000009000000ec130000000000000029000000"], 0x30}}], 0x1, 0x4040011) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1m58.070967119s ago: executing program 4 (id=72): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m52.573681817s ago: executing program 2 (id=73): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000dc0), 0x0, 0x4000000, &(0x7f0000000080)={0xa, 0x5e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 1m38.32897723s ago: executing program 4 (id=74): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 1m34.075571529s ago: executing program 2 (id=75): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x1000000000000d0) pipe2$watch_queue(&(0x7f0000000000), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 1m24.43087292s ago: executing program 4 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) setpgid(0x0, 0x0) ioprio_get$uid(0x3, 0x0) 1m16.515223812s ago: executing program 2 (id=77): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020e15000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 56.540607167s ago: executing program 4 (id=78): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ftruncate(r0, 0x2000009) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff004) 52.136823646s ago: executing program 2 (id=79): r0 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e9b4686bf241470500fbffffff9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000200), 0xc) socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) flock(r4, 0x5) acct(&(0x7f00000001c0)='./file0\x00') 29.03085894s ago: executing program 4 (id=80): r0 = syz_io_uring_setup(0x7f4c, &(0x7f0000000400)={0x0, 0xa805, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 22.985306423s ago: executing program 2 (id=81): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x1000000000000d0) pipe2$watch_queue(&(0x7f0000000000), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 2.470883994s ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0xe503, 0x0) 0s ago: executing program 2 (id=83): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x5, 0x3, 0x4, 0x1, 0x1000c, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0xffffffff, 0x20001f58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:65355' (ED25519) to the list of known hosts. syzkaller login: [ 618.694648][ T3228] cgroup: Unknown subsys name 'net' [ 619.534591][ T3228] cgroup: Unknown subsys name 'cpuset' [ 619.711937][ T3228] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 690.007337][ T3228] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 909.499450][ T3235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.762372][ T3235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.463225][ T3237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.669745][ T3237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.664268][ T3235] hsr_slave_0: entered promiscuous mode [ 927.744425][ T3235] hsr_slave_1: entered promiscuous mode [ 934.223640][ T3237] hsr_slave_0: entered promiscuous mode [ 934.264684][ T3237] hsr_slave_1: entered promiscuous mode [ 934.300283][ T3237] debugfs: 'hsr0' already exists in 'hsr' [ 934.304059][ T3237] Cannot create hsr debugfs directory [ 943.354871][ T3235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 944.131010][ T3235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 944.815036][ T3235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 945.653550][ T3235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 951.371917][ T3237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 951.771237][ T3237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 952.014818][ T3237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.403480][ T3237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 973.302566][ T3235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.961215][ T3237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.318168][ T3235] veth0_vlan: entered promiscuous mode [ 1068.864006][ T3235] veth1_vlan: entered promiscuous mode [ 1073.403935][ T3235] veth0_macvtap: entered promiscuous mode [ 1074.364270][ T3235] veth1_macvtap: entered promiscuous mode [ 1076.189939][ T3237] veth0_vlan: entered promiscuous mode [ 1078.791592][ T3237] veth1_vlan: entered promiscuous mode [ 1079.690804][ T3323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.935488][ T3323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.939875][ T3323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.942878][ T3323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.504140][ T3237] veth0_macvtap: entered promiscuous mode [ 1085.000607][ T3237] veth1_macvtap: entered promiscuous mode [ 1088.548827][ T3235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1090.600305][ T3793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.731786][ T3793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.243715][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.270528][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.345575][ T3852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1132.164871][ T3852] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1132.187257][ T3852] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1132.189793][ T3852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1132.200008][ T3852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1132.202964][ T3852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1132.411053][ T3852] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1132.414714][ T3852] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1132.439341][ T3852] usb 2-1: Product: syz [ 1132.441487][ T3852] usb 2-1: Manufacturer: syz [ 1133.292137][ T3852] cdc_wdm 2-1:1.0: skipping garbage [ 1133.294744][ T3852] cdc_wdm 2-1:1.0: skipping garbage [ 1133.773281][ T3852] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1134.782774][ T3697] usb 2-1: USB disconnect, device number 2 [ 1307.941613][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.470526][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.890755][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.943610][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.075566][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.449384][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.629676][ T56] bond0 (unregistering): Released all slaves [ 1345.130417][ T56] hsr_slave_0: left promiscuous mode [ 1345.263756][ T56] hsr_slave_1: left promiscuous mode [ 1346.319898][ T56] veth1_macvtap: left promiscuous mode [ 1346.325611][ T56] veth0_macvtap: left promiscuous mode [ 1346.377223][ T56] veth1_vlan: left promiscuous mode [ 1346.433792][ T56] veth0_vlan: left promiscuous mode [ 1382.216724][ T3908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.094071][ T3908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.270755][ T3906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.243696][ T3906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.552076][ T4015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.703364][ T4015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.303628][ T4015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.113667][ T4015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.431204][ T4015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.648749][ T4015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.750132][ T4015] bond0 (unregistering): Released all slaves [ 1421.379041][ T4015] hsr_slave_0: left promiscuous mode [ 1421.449446][ T4015] hsr_slave_1: left promiscuous mode [ 1422.141785][ T4015] veth1_macvtap: left promiscuous mode [ 1422.145521][ T4015] veth0_macvtap: left promiscuous mode [ 1422.171878][ T4015] veth1_vlan: left promiscuous mode [ 1422.176607][ T4015] veth0_vlan: left promiscuous mode [ 1458.160376][ T3908] hsr_slave_0: entered promiscuous mode [ 1458.198506][ T3908] hsr_slave_1: entered promiscuous mode [ 1459.076934][ T3906] hsr_slave_0: entered promiscuous mode [ 1459.114955][ T3906] hsr_slave_1: entered promiscuous mode [ 1459.145327][ T3906] debugfs: 'hsr0' already exists in 'hsr' [ 1459.147674][ T3906] Cannot create hsr debugfs directory [ 1477.129125][ T3908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1477.374329][ T3908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1477.723364][ T3908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1478.550024][ T3908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1481.271944][ T3906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1481.671220][ T3906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1482.179585][ T3906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1483.099370][ T3906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1509.205509][ T3908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.471440][ T3906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.483570][ T3908] veth0_vlan: entered promiscuous mode [ 1621.412324][ T3908] veth1_vlan: entered promiscuous mode [ 1627.050936][ T3908] veth0_macvtap: entered promiscuous mode [ 1629.222433][ T3908] veth1_macvtap: entered promiscuous mode [ 1629.619303][ T3906] veth0_vlan: entered promiscuous mode [ 1631.263857][ T3906] veth1_vlan: entered promiscuous mode [ 1638.747495][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.751209][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.754594][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.953002][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.973415][ T3906] veth0_macvtap: entered promiscuous mode [ 1644.704083][ T3906] veth1_macvtap: entered promiscuous mode [ 1651.107528][ T3793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.122933][ T4215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.300477][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.348430][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.712899][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.898740][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.924530][ T4619] netlink: 'syz.2.13': attribute type 2 has an invalid length. [ 1673.988079][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 1737.271575][ T4653] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 1740.620758][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.774917][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.148053][ T4668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.258378][ T4668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.797946][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.058769][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.984192][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29'. [ 1913.569551][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.233999][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.526380][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.790131][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.640839][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1947.900468][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.552059][ T13] bond0 (unregistering): Released all slaves [ 1950.828176][ T13] hsr_slave_0: left promiscuous mode [ 1950.927997][ T13] hsr_slave_1: left promiscuous mode [ 1951.739520][ T13] veth1_macvtap: left promiscuous mode [ 1951.741951][ T13] veth0_macvtap: left promiscuous mode [ 1951.754495][ T13] veth1_vlan: left promiscuous mode [ 1951.792951][ T13] veth0_vlan: left promiscuous mode [ 1953.473769][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.513645][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.425285][ T4789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.759636][ T4789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.521624][ T4789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2001.012693][ T4789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.284026][ T3793] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.950163][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.932752][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.010281][ T4215] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.810216][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2041.909899][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.573870][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.011895][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2102.209290][ T31] audit: type=1326 audit(2098.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2102.227876][ T31] audit: type=1326 audit(2099.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.262205][ T31] audit: type=1326 audit(2100.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.296617][ T31] audit: type=1326 audit(2100.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=26 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.347907][ T31] audit: type=1326 audit(2100.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.350699][ T31] audit: type=1326 audit(2100.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.490484][ T31] audit: type=1326 audit(2100.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.591308][ T31] audit: type=1326 audit(2100.400:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.652908][ T31] audit: type=1326 audit(2100.430:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2103.694750][ T31] audit: type=1326 audit(2100.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.2.46" exe="/syz-executor" sig=0 arch=c00000f3 syscall=27 compat=0 ip=0x7fff9293280a code=0x7ffc0000 [ 2105.515070][ T4738] hsr_slave_0: entered promiscuous mode [ 2105.652558][ T4738] hsr_slave_1: entered promiscuous mode [ 2126.575163][ T4738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2127.002312][ T4738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2127.326766][ T4738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2127.485408][ T4738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2174.919109][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.480967][ T5150] comedi: valid board names for 8255 driver are: [ 2192.482972][ T5150] 8255 [ 2192.484011][ T5150] comedi: valid board names for vmk80xx driver are: [ 2192.485505][ T5150] vmk80xx [ 2192.521169][ T5150] comedi: valid board names for usbduxsigma driver are: [ 2192.523263][ T5150] usbduxsigma [ 2192.524729][ T5150] comedi: valid board names for usbduxfast driver are: [ 2192.629177][ T5150] usbduxfast [ 2192.631236][ T5150] comedi: valid board names for usbdux driver are: [ 2192.633030][ T5150] usbdux [ 2192.634443][ T5150] comedi: valid board names for ni6501 driver are: [ 2192.709321][ T5150] ni6501 [ 2192.710661][ T5150] comedi: valid board names for dt9812 driver are: [ 2192.711586][ T5150] dt9812 [ 2192.712380][ T5150] comedi: valid board names for ni_labpc_cs driver are: [ 2192.713305][ T5150] ni_labpc_cs [ 2192.714097][ T5150] comedi: valid board names for ni_daq_700 driver are: [ 2192.715625][ T5150] ni_daq_700 [ 2192.748583][ T5150] comedi: valid board names for labpc_pci driver are: [ 2192.749653][ T5150] labpc_pci [ 2192.750760][ T5150] comedi: valid board names for adl_pci9118 driver are: [ 2192.752076][ T5150] pci9118dg [ 2192.753897][ T5150] pci9118hg [ 2192.755051][ T5150] pci9118hr [ 2192.797835][ T5150] comedi: valid board names for 8255_pci driver are: [ 2192.819334][ T5150] 8255_pci [ 2192.820560][ T5150] comedi: valid board names for comedi_parport driver are: [ 2192.821459][ T5150] comedi_parport [ 2192.822217][ T5150] comedi: valid board names for comedi_test driver are: [ 2192.823610][ T5150] comedi_test [ 2192.825077][ T5150] comedi: valid board names for comedi_bond driver are: [ 2192.900408][ T5150] comedi_bond [ 2319.147577][ T4738] veth0_vlan: entered promiscuous mode [ 2321.435274][ T4738] veth1_vlan: entered promiscuous mode [ 2326.802372][ T4738] veth0_macvtap: entered promiscuous mode [ 2328.868563][ T4738] veth1_macvtap: entered promiscuous mode [ 2334.989154][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.218947][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.221897][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.511148][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.485426][ T5271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 2442.198353][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 2442.199005][ T31] audit: type=1326 audit(2439.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.4.74" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa973280a code=0x7ffc0000 [ 2442.337827][ T31] audit: type=1326 audit(2439.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.4.74" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa973280a code=0x7ffc0000 [ 2443.584408][ T31] audit: type=1326 audit(2440.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.4.74" exe="/syz-executor" sig=0 arch=c00000f3 syscall=47 compat=0 ip=0x7fffa973280a code=0x7ffc0000 [ 2443.628976][ T31] audit: type=1326 audit(2440.430:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.4.74" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa973280a code=0x7ffc0000 [ 2443.770276][ T31] audit: type=1326 audit(2440.590:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.4.74" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa973280a code=0x7ffc0000 [ 2543.986626][ C1] ------------[ cut here ]------------ [ 2543.987448][ C1] WARNING: [irq_settings_is_per_cpu_devid(desc)] kernel/irq/manage.c:2125 at request_threaded_irq+0x320/0x38c, CPU#1: syz.2.83/5317 [ 2543.990358][ C1] Modules linked in: [ 2543.991995][ C1] CPU: 1 UID: 0 PID: 5317 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT [ 2543.993080][ C1] Hardware name: riscv-virtio,qemu (DT) [ 2543.993805][ C1] epc : request_threaded_irq+0x320/0x38c [ 2543.994621][ C1] ra : request_threaded_irq+0x320/0x38c [ 2543.995278][ C1] epc : ffffffff8032d750 ra : ffffffff8032d750 sp : ffff8f8004007810 [ 2543.995861][ C1] gp : ffffffff89f9df20 tp : ffffaf801b9a1a80 t0 : ffffffff86391c0a [ 2543.996335][ C1] t1 : ffffffff9136c6e0 t2 : ffffffff8016a132 s0 : ffff8f8004007870 [ 2543.996787][ C1] s1 : 0000000000000000 a0 : 0000000000000005 a1 : 0000000000000000 [ 2543.997264][ C1] a2 : 0000000000080000 a3 : ffffffff8032d750 a4 : ffff8f800af48eb8 [ 2543.997724][ C1] a5 : 000000000000feb8 a6 : 0000000000000003 a7 : ffffffff86660460 [ 2543.998216][ C1] s2 : 0000000000200000 s3 : ffffaf8011e8d000 s4 : 0000000000000005 [ 2543.998622][ C1] s5 : ffffffff84b56ef4 s6 : ffffaf801c167000 s7 : 0000000000000000 [ 2543.999034][ C1] s8 : ffffffff87597e60 s9 : 0000000000020000 s10: ffffaf801c167000 [ 2543.999548][ C1] s11: 0000000000000001 t3 : 0000000000000001 t4 : 0000000000001fff [ 2544.000014][ C1] t5 : 00000000000000c8 t6 : 0000000000000002 ssp : 0000000000000000 [ 2544.000473][ C1] status: 0000000200000120 badaddr: ffffffff8032d750 cause: 0000000000000003 [ 2544.001203][ C1] [] request_threaded_irq+0x320/0x38c [ 2544.002277][ C1] [] parport_attach+0x780/0xb14 [ 2544.003126][ C1] [] comedi_device_attach+0x350/0x7ec [ 2544.003888][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 2544.004505][ C1] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 2544.005219][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 2544.006090][ C1] [] syscall_handler+0x92/0x114 [ 2544.006836][ C1] [] do_trap_ecall_u+0x3d2/0x58c [ 2544.007720][ C1] [] handle_exception+0x15e/0x16a [ 2544.009997][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2544.011263][ C1] CPU: 1 UID: 0 PID: 5317 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT [ 2544.011948][ C1] Hardware name: riscv-virtio,qemu (DT) [ 2544.012274][ C1] Call Trace: [ 2544.012535][ C1] [] dump_backtrace+0x2e/0x3c [ 2544.013345][ C1] [] show_stack+0x30/0x3c [ 2544.013947][ C1] [] dump_stack_lvl+0x114/0x1ac [ 2544.014849][ C1] [] dump_stack+0x1c/0x28 [ 2544.015767][ C1] [] vpanic+0x274/0x684 [ 2544.016402][ C1] [] panic+0xa0/0xa4 [ 2544.016990][ C1] [] check_panic_on_warn+0xc0/0xe4 [ 2544.017667][ C1] [] __warn+0x284/0x498 [ 2544.018435][ C1] [] __report_bug+0x1d4/0x2ac [ 2544.019278][ C1] [] report_bug+0xd8/0x28c [ 2544.020136][ C1] [] handle_break+0x13a/0x30c [ 2544.021018][ C1] [] do_trap_break+0x188/0x358 [ 2544.021928][ C1] [] handle_exception+0x15e/0x16a [ 2544.022945][ C1] [] request_threaded_irq+0x320/0x38c [ 2544.023601][ C1] [] parport_attach+0x780/0xb14 [ 2544.024410][ C1] [] comedi_device_attach+0x350/0x7ec [ 2544.025111][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 2544.025797][ C1] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 2544.026500][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 2544.027313][ C1] [] syscall_handler+0x92/0x114 [ 2544.028046][ C1] [] do_trap_ecall_u+0x3d2/0x58c [ 2544.029013][ C1] [] handle_exception+0x15e/0x16a [ 2544.030496][ C1] SMP: stopping secondary CPUs