last executing test programs: 12.629095091s ago: executing program 3 (id=601): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x10cf, 0x9, 0x5, 0x2, 0x2, 'syz0\x00'}) shutdown(r2, 0x1) 11.712967349s ago: executing program 3 (id=606): prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, &(0x7f0000000040), &(0x7f00000001c0), 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 6.890393986s ago: executing program 1 (id=622): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000008000000003f30000007845e5bee63c1168ad076bd5244d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0xb, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES8], &(0x7f00000003c0)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000010280000202800000004000016020000000100000f010000000300000002000000004b865800e56677c9277c6a2803000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x5}, 0x28) r2 = getpid() setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.411088976s ago: executing program 3 (id=626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x22, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0x0, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xc53, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000028c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d6174636800000024000280080003000000000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) syz_usbip_server_init(0x6) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.350532484s ago: executing program 0 (id=629): r0 = syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000580)={0x268, 0x5}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r4, 0x3, &(0x7f0000000040)=0xe) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x1c}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000800)=""/4110, 0x100e, 0x10103, 0x0, 0x0) r6 = open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r6], 0x2b) sendfile(r8, r6, 0x0, 0x4000000053d2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) 4.072922826s ago: executing program 0 (id=631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fcdbdf25070000000800040003000000080008006401010108000800ffffffff14000500fe8000000000000000000000000000aa14000600"/78], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r7 = openat$cdrom(0xffffff9c, &(0x7f00000003c0), 0x80100, 0x0) ioctl$CDROMRESET(r7, 0x40041271) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 3.971085133s ago: executing program 1 (id=632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 3.545537176s ago: executing program 0 (id=633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000280)='./control\x00', 0x111) inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 2.750316708s ago: executing program 2 (id=634): pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) read$hiddev(r0, &(0x7f0000000100)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x46e2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}]}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000040900010073797a30000000003c000000090a010400000000000000000700000708000a40000000000900020073797a31000000000900010073797a300000"], 0x84}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.749893919s ago: executing program 2 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='squashfs\x00', 0x8, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) memfd_create(&(0x7f0000000240)=',k^@[[\x00', 0x0) poll(&(0x7f0000000040)=[{r2, 0x953}], 0x1, 0x7) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000c00)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffb, 0x4000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x10}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11c}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x7ebfec34eb85ce8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x406, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x100001ef, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400009ad, 0x0, 0xfffffffffffffff7}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='squashfs\x00', 0x8, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) memfd_create(&(0x7f0000000240)=',k^@[[\x00', 0x0) (async) poll(&(0x7f0000000040)=[{r2, 0x953}], 0x1, 0x7) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000c00)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x9}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffb, 0x4000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x10}, 0x50) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11c}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x7ebfec34eb85ce8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x406, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x100001ef, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400009ad, 0x0, 0xfffffffffffffff7}]}) (async) 2.650120562s ago: executing program 2 (id=636): epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r5) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 2.573989623s ago: executing program 0 (id=637): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x4, 0xfffbbffd, 0xca, 0x5, "0c41920887e8d2b791f805000000000000006b", 0x4e4, 0x203}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0x79}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 1.921219361s ago: executing program 1 (id=638): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x25dfdbfc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20040000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x10cf, 0x9, 0x5, 0x2, 0x2, 'syz0\x00'}) shutdown(r2, 0x1) 1.360943113s ago: executing program 0 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, 0x0, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x6, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x1000, 0x1004, 0xffffffff, 0x1, 0x5, 0x347, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0x3, 0x100, 0x6, 0x6, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x410007, 0x4, 0x4]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x204002, &(0x7f0000000480)={[], [{@subj_type={'subj_type', 0x3d, '/dev/bus/usb/\x01\x00#/00#\x00'}}, {@flag='async'}, {@subj_role={'subj_role', 0x3d, 'c@\a \x85\x84\xae$5\xe8u\xbb\xff6xdigio\x00'}}, {@dont_appraise}, {@hash}, {@appraise}, {@seclabel}], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000380)='./file2\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r2) fdatasync(r5) getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x2, 0x0, 0x8000, 0x3fe, 0xffffffffffffffff}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.323375003s ago: executing program 3 (id=640): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000006000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/196, 0xc4}, {&(0x7f0000000940)=""/172, 0xac}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000800)=""/92, 0x5c}], 0x5, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) (async) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x2) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r8}, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0x11, 0x0, &(0x7f0000000dc0)="7afcfc56505d0808000000000300085a778376a7e8347cbe9795c108a6bbc7da19cff5eef4660000009b8920fa35b88a8fe62059db8e03dc72f4426f2b457904f7cd4719a8024c72c7a112f944b6e683098dddcf52fd6a17afa8c50a46192041c7154df7584a3f917136f47e2ca4310893a790faf2c322a3f3b334e510e53cd684c8bcb557e3123d0029383de8290c0c", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x40}, 0x3c) 1.280027561s ago: executing program 2 (id=641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fcdbdf25070000000800040003000000080008006401010108000800ffffffff14000500fe8000000000000000000000000000aa14000600"/78], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r7 = openat$cdrom(0xffffff9c, &(0x7f00000003c0), 0x80100, 0x0) ioctl$CDROMRESET(r7, 0x40041271) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 1.111332643s ago: executing program 3 (id=642): r0 = syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000580)={0x268, 0x5}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r4, 0x3, &(0x7f0000000040)=0xe) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x1c}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000800)=""/4110, 0x100e, 0x10103, 0x0, 0x0) 1.037011873s ago: executing program 1 (id=643): pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) read$hiddev(r0, &(0x7f0000000100)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x46e2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}]}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000040900010073797a30000000003c000000090a010400000000000000000700000708000a40000000000900020073797a31000000000900010073797a300000"], 0x84}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 940.980527ms ago: executing program 1 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310029bd7000fedbdf2501000000000000000b00000000040014"], 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0xffe3}], 0x1}}], 0x1, 0x4000800) 490.16651ms ago: executing program 2 (id=645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0xd00, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x1800000}], 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 401.074561ms ago: executing program 3 (id=646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 261.603009ms ago: executing program 0 (id=647): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040500000200000000000011030002000000000200000000000000006100"/68], 0x0, 0x44}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x2a, 0x2ff]) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x8108}, {r3, 0x441}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x814, 0x100008b}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x38}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 261.29742ms ago: executing program 2 (id=648): epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r5) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=649): epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x5}, 0x8) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r5) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:47252' (ED25519) to the list of known hosts. [ 77.821677][ T5650] cgroup: Unknown subsys name 'net' [ 77.967304][ T5650] cgroup: Unknown subsys name 'cpuset' [ 77.972346][ T5650] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.134607][ T5650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.130911][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.142962][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.149478][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.155357][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.160022][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.165047][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.165869][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.169789][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.171234][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.173590][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.174430][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.175735][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.176955][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.177088][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.177817][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.177973][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.202794][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.210407][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.217283][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.222668][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.137813][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.142289][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.145968][ T5750] bridge_slave_0: entered allmulticast mode [ 85.150059][ T5750] bridge_slave_0: entered promiscuous mode [ 85.166085][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.169295][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.172333][ T5743] bridge_slave_0: entered allmulticast mode [ 85.176572][ T5743] bridge_slave_0: entered promiscuous mode [ 85.192558][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.195626][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.198643][ T5743] bridge_slave_1: entered allmulticast mode [ 85.202582][ T5743] bridge_slave_1: entered promiscuous mode [ 85.217235][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.220082][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.222901][ T5750] bridge_slave_1: entered allmulticast mode [ 85.232612][ T5750] bridge_slave_1: entered promiscuous mode [ 85.265377][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.269104][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.272266][ T5749] bridge_slave_0: entered allmulticast mode [ 85.276682][ T5749] bridge_slave_0: entered promiscuous mode [ 85.282478][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.287142][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.290277][ T5749] bridge_slave_1: entered allmulticast mode [ 85.294256][ T5749] bridge_slave_1: entered promiscuous mode [ 85.320121][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.323236][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.326614][ T5740] bridge_slave_0: entered allmulticast mode [ 85.330575][ T5740] bridge_slave_0: entered promiscuous mode [ 85.349752][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.365602][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.368884][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.371837][ T5740] bridge_slave_1: entered allmulticast mode [ 85.376677][ T5740] bridge_slave_1: entered promiscuous mode [ 85.393563][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.401497][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.408518][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.441670][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.449167][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.486473][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.516321][ T5750] team0: Port device team_slave_0 added [ 85.520850][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.552308][ T5743] team0: Port device team_slave_0 added [ 85.556478][ T5750] team0: Port device team_slave_1 added [ 85.560931][ T5749] team0: Port device team_slave_0 added [ 85.564403][ T5740] team0: Port device team_slave_0 added [ 85.568268][ T5743] team0: Port device team_slave_1 added [ 85.591644][ T5749] team0: Port device team_slave_1 added [ 85.595723][ T5740] team0: Port device team_slave_1 added [ 85.621052][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.623539][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.632449][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.646875][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.649767][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.660338][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.671762][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.674923][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.685720][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.691405][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.694756][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.705596][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.721731][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.725151][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.736473][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.755108][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.758003][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.769192][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.775649][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.778115][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.787771][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.799777][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.802663][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.813046][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.871235][ T5750] hsr_slave_0: entered promiscuous mode [ 85.873986][ T5750] hsr_slave_1: entered promiscuous mode [ 85.896153][ T5743] hsr_slave_0: entered promiscuous mode [ 85.900698][ T5743] hsr_slave_1: entered promiscuous mode [ 85.903977][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 85.906452][ T5743] Cannot create hsr debugfs directory [ 85.934723][ T5740] hsr_slave_0: entered promiscuous mode [ 85.937857][ T5740] hsr_slave_1: entered promiscuous mode [ 85.940195][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 85.942755][ T5740] Cannot create hsr debugfs directory [ 85.960467][ T5749] hsr_slave_0: entered promiscuous mode [ 85.962996][ T5749] hsr_slave_1: entered promiscuous mode [ 85.965553][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 85.967465][ T5749] Cannot create hsr debugfs directory [ 86.224556][ T5744] Bluetooth: hci2: command tx timeout [ 86.224717][ T62] Bluetooth: hci0: command tx timeout [ 86.224765][ T5745] Bluetooth: hci1: command tx timeout [ 86.314754][ T62] Bluetooth: hci3: command tx timeout [ 86.368418][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.386849][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.390931][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.403154][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.413100][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.423200][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.438000][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.447031][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.487161][ T857] cfg80211: failed to load regulatory.db [ 86.506538][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.512662][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.515753][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.520540][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.523686][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.530875][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.535432][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.540935][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.629892][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.636665][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.640687][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.648437][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.653204][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.660245][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.663109][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.668792][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.775567][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.782587][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.789869][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.800558][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.807781][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.812936][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.819847][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.835161][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.841822][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.868264][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.915632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.919161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.950539][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.956394][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.959915][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.002444][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.035493][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.038598][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.043330][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.046716][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.093517][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.152521][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.166222][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.169450][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.194980][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.198402][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.298249][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.354443][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.368468][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.370760][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.390712][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.393281][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.622161][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.668931][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.675474][ T5740] veth0_vlan: entered promiscuous mode [ 87.694667][ T5740] veth1_vlan: entered promiscuous mode [ 87.727086][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.746173][ T5740] veth0_macvtap: entered promiscuous mode [ 87.756012][ T5749] veth0_vlan: entered promiscuous mode [ 87.762392][ T5740] veth1_macvtap: entered promiscuous mode [ 87.778083][ T5749] veth1_vlan: entered promiscuous mode [ 87.793845][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.803039][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.836389][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.845173][ T5750] veth0_vlan: entered promiscuous mode [ 87.865233][ T189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.881781][ T5749] veth0_macvtap: entered promiscuous mode [ 87.887823][ T189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.893419][ T189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907218][ T5750] veth1_vlan: entered promiscuous mode [ 87.917928][ T5749] veth1_macvtap: entered promiscuous mode [ 87.921409][ T189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.998406][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.018889][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.022245][ T5743] veth0_vlan: entered promiscuous mode [ 88.030417][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.034032][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.065027][ T1259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.069047][ T1259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.073298][ T5743] veth1_vlan: entered promiscuous mode [ 88.089039][ T1259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.093271][ T1259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.102374][ T5750] veth0_macvtap: entered promiscuous mode [ 88.113071][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.121134][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.150164][ T5750] veth1_macvtap: entered promiscuous mode [ 88.205334][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.217164][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.221361][ T5743] veth0_macvtap: entered promiscuous mode [ 88.228118][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.232531][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.250110][ T5743] veth1_macvtap: entered promiscuous mode [ 88.250313][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.273113][ T189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.278028][ T189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.294186][ T189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298273][ T189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303367][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.305855][ T62] Bluetooth: hci0: command tx timeout [ 88.305890][ T62] Bluetooth: hci1: command tx timeout [ 88.305982][ T62] Bluetooth: hci2: command tx timeout [ 88.307770][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.331885][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.354595][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.386557][ T62] Bluetooth: hci3: command tx timeout [ 88.421756][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.425383][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.447154][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.451843][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.501692][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.508378][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.567556][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.571789][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.616462][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.624401][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.651470][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.667889][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.776143][ T5894] ======================================================= [ 88.776143][ T5894] WARNING: The mand mount option has been deprecated and [ 88.776143][ T5894] and is ignored by this kernel. Remove the mand [ 88.776143][ T5894] option from the mount to silence this warning. [ 88.776143][ T5894] ======================================================= [ 88.807600][ T5894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.916220][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.920679][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.925415][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.928293][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.931258][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.934980][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.949747][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.958226][ T5894] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.962849][ T5894] overlayfs: failed to look up (tracing) for ino (-66) [ 88.967279][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.988079][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.004095][ T5896] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.070811][ T5900] tipc: Started in network mode [ 89.073653][ T5900] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 89.079327][ T5900] tipc: Enabling of bearer rejected, failed to enable media [ 89.856004][ T5908] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 90.177703][ T5905] Process accounting resumed [ 90.383988][ T62] Bluetooth: hci1: command tx timeout [ 90.384048][ T5744] Bluetooth: hci2: command tx timeout [ 90.387820][ T62] Bluetooth: hci0: command tx timeout [ 90.473464][ T62] Bluetooth: hci3: command tx timeout [ 92.221755][ T5918] pim6reg: entered allmulticast mode [ 92.237377][ T5922] team0: entered allmulticast mode [ 92.240837][ T5922] team_slave_0: entered allmulticast mode [ 92.243306][ T5922] team_slave_1: entered allmulticast mode [ 92.247055][ T5926] team0: left allmulticast mode [ 92.249071][ T5926] team_slave_0: left allmulticast mode [ 92.251376][ T5926] team_slave_1: left allmulticast mode [ 92.255516][ T5926] pim6reg: left allmulticast mode [ 92.347501][ T5938] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 92.350272][ T5938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.465736][ T62] Bluetooth: hci2: command tx timeout [ 92.465790][ T62] Bluetooth: hci1: command tx timeout [ 92.465813][ T62] Bluetooth: hci0: command tx timeout [ 92.530954][ T5938] vhci_hcd vhci_hcd.0: Device attached [ 92.543910][ T5744] Bluetooth: hci3: command tx timeout [ 92.937295][ T5940] vhci_hcd: connection closed [ 92.942609][ T1259] vhci_hcd vhci_hcd.2: stop threads [ 92.954120][ T1259] vhci_hcd vhci_hcd.2: release socket [ 92.958921][ T1259] vhci_hcd vhci_hcd.2: disconnect device [ 92.994145][ T53] usb 42-1: enqueue for inactive port 0 [ 93.507639][ T53] usb usb42-port1: attempt power cycle [ 93.965210][ T5950] __nla_validate_parse: 139 callbacks suppressed [ 93.965260][ T5950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13'. [ 94.016069][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.019898][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.131276][ T5950] syzkaller0: entered promiscuous mode [ 94.132740][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.137260][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.152045][ T5950] syzkaller0: entered allmulticast mode [ 94.192160][ T53] usb usb42-port1: unable to enumerate USB device [ 94.280799][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.287431][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.600369][ T5954] Process accounting resumed [ 95.897399][ T40] audit: type=1326 audit(1778642037.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5978 comm="syz.1.16" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 96.030530][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 96.035200][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 96.114491][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 96.127111][ T5986] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 96.499160][ T40] audit: type=1326 audit(1778642038.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.18" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 96.811174][ T6007] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 96.842794][ T5990] Process accounting resumed [ 97.591579][ T40] audit: type=1326 audit(1778642039.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.2.23" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 98.044886][ T6027] syzkaller0: entered promiscuous mode [ 98.047233][ T6027] syzkaller0: entered allmulticast mode [ 98.130417][ T6022] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 100.189461][ T6043] binder: 6042:6043 ioctl 4018620d 0 returned -22 [ 100.195623][ T6043] binder: 6042:6043 ioctl c0306201 0 returned -14 [ 100.488994][ T40] audit: type=1326 audit(1778642042.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.1.31" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 100.811838][ T6049] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 100.815581][ T6049] __nla_validate_parse: 432 callbacks suppressed [ 100.815670][ T6049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.31'. [ 101.384465][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.387608][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.391130][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.394413][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.397817][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.401095][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.405373][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.408131][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.411281][ T6052] netlink: 11 bytes leftover after parsing attributes in process `syz.2.32'. [ 102.148845][ T40] audit: type=1326 audit(1778642044.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.0.38" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 102.328973][ T6068] Process accounting resumed [ 102.440348][ T6081] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 102.873919][ T5184] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 103.089901][ T5184] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.100080][ T5184] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.105881][ T5184] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.110748][ T5184] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.117790][ T5184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.136418][ T5184] usb 8-1: config 0 descriptor?? [ 104.403241][ T6100] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.423150][ T6100] macvlan2: entered promiscuous mode [ 104.425785][ T6100] macvlan2: entered allmulticast mode [ 104.427691][ T6100] veth0_macvtap: entered allmulticast mode [ 105.784409][ T6120] syzkaller0: entered promiscuous mode [ 105.786243][ T6120] syzkaller0: entered allmulticast mode [ 106.199621][ T40] audit: type=1326 audit(1778642048.200:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.46" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 106.483449][ T6122] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 106.487934][ T6122] __nla_validate_parse: 284 callbacks suppressed [ 106.487953][ T6122] netlink: 224 bytes leftover after parsing attributes in process `syz.0.46'. [ 107.139570][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 107.143048][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 107.770703][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 108.182251][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 108.302189][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 108.336230][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 108.356743][ T6141] netlink: 52 bytes leftover after parsing attributes in process `syz.1.50'. [ 108.598277][ T6126] Process accounting resumed [ 108.790163][ T6151] binder: 6150:6151 ioctl 4018620d 0 returned -22 [ 108.795720][ T6151] binder: 6150:6151 ioctl c0306201 0 returned -14 [ 109.751512][ T6160] netlink: 11 bytes leftover after parsing attributes in process `syz.2.54'. [ 109.754439][ T6160] netlink: 11 bytes leftover after parsing attributes in process `syz.2.54'. [ 110.129946][ T5184] usbhid 8-1:0.0: can't add hid device: -32 [ 110.133256][ T5184] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 111.653337][ T6164] Process accounting resumed [ 112.063069][ T40] audit: type=1326 audit(1778642054.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.58" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 113.336192][ T6189] __nla_validate_parse: 144 callbacks suppressed [ 113.336234][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 113.341631][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 113.403130][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 113.406422][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 113.538931][ T6182] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 113.545178][ T6182] netlink: 224 bytes leftover after parsing attributes in process `syz.1.58'. [ 113.619355][ T6189] Process accounting resumed [ 114.284289][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.433992][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 114.438052][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 114.442279][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 114.449232][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.454197][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 114.460929][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 114.465081][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.467834][ T10] usb 6-1: Product: syz [ 114.469469][ T10] usb 6-1: Manufacturer: syz [ 114.471076][ T10] usb 6-1: SerialNumber: syz [ 114.487886][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 114.526994][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input5 [ 114.641606][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 114.644639][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 115.003845][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 115.006552][ T10] (id 0x00) [ 115.058747][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 115.062146][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 115.084357][ T6219] fuse: Bad value for 'fd' [ 115.096839][ T10] rc_core: IR keymap rc-imon-pad not found [ 115.100031][ T10] Registered IR keymap rc-empty [ 115.101951][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 115.106246][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.112281][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 115.205961][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 115.211100][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input6 [ 115.223269][ T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:2> initialized [ 115.278931][ T6214] Process accounting resumed [ 115.686909][ T10] usb 6-1: USB disconnect, device number 2 [ 115.706610][ T6205] imon:send_packet: error submitting urb(-19) [ 115.724207][ T6205] imon:vfd_write: send packet #0 failed [ 116.382259][ T40] audit: type=1326 audit(1778642058.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.1.74" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 116.383933][ T6249] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 116.395753][ T5744] Bluetooth: hci3: command 0x2016 tx timeout [ 116.498989][ T6252] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 116.616787][ T6253] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 116.824450][ T6232] Process accounting resumed [ 117.022381][ T6255] syzkaller0: entered promiscuous mode [ 117.025222][ T6255] syzkaller0: entered allmulticast mode [ 117.295166][ T6260] process 'syz.2.76' launched './file0' with NULL argv: empty string added [ 118.478099][ T5744] Bluetooth: hci3: command 0x2016 tx timeout [ 118.783987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.147152][ T6266] __nla_validate_parse: 297 callbacks suppressed [ 119.147209][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 119.236521][ T6268] binder: 6267:6268 ioctl 4018620d 0 returned -22 [ 119.239734][ T6268] binder: 6267:6268 ioctl c0306201 0 returned -14 [ 119.891357][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 119.894976][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 119.932777][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 119.935786][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 120.078892][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 120.081914][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 120.278889][ T6281] Zero length message leads to an empty skb [ 120.460776][ T6283] syzkaller0: entered promiscuous mode [ 120.462933][ T6283] syzkaller0: entered allmulticast mode [ 120.509664][ T6280] Process accounting resumed [ 120.995204][ T6294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 121.627107][ T40] audit: type=1326 audit(1778642063.630:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.1.84" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 121.794955][ T6304] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 121.798563][ T6304] netlink: 224 bytes leftover after parsing attributes in process `syz.1.84'. [ 123.112481][ T6314] netlink: 32 bytes leftover after parsing attributes in process `syz.3.86'. [ 124.278267][ T6320] Process accounting resumed [ 124.843161][ T6328] __nla_validate_parse: 5 callbacks suppressed [ 124.843226][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.88'. [ 124.848415][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.88'. [ 125.158391][ T6328] Process accounting resumed [ 125.773611][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.777318][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.781022][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.784250][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.787609][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.790860][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.795495][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.798516][ T6339] netlink: 11 bytes leftover after parsing attributes in process `syz.3.91'. [ 125.895923][ T6341] netlink: 'syz.2.92': attribute type 11 has an invalid length. [ 126.165246][ T6341] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 126.169991][ T6341] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 126.194646][ T6349] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 126.211602][ T6352] vxlan0: entered promiscuous mode [ 126.220871][ T189] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.225107][ T189] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.228888][ T189] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.237459][ T189] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.891611][ T6358] syzkaller0: entered promiscuous mode [ 126.894274][ T6358] syzkaller0: entered allmulticast mode [ 127.065405][ T40] audit: type=1326 audit(1778642069.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.96" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 127.212819][ T6367] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 127.320573][ T40] audit: type=1326 audit(1778642069.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.0.98" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 127.575127][ T6379] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 127.977972][ T6384] binder: 6383:6384 ioctl 4018620d 0 returned -22 [ 127.982095][ T6384] binder: 6383:6384 ioctl c0306201 0 returned -14 [ 128.292364][ T919] IPVS: starting estimator thread 0... [ 128.464283][ T6394] IPVS: using max 42 ests per chain, 100800 per kthread [ 129.872366][ T6407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 130.384075][ T5184] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.533806][ T5184] usb 6-1: device descriptor read/64, error -71 [ 130.717126][ T6416] __nla_validate_parse: 139 callbacks suppressed [ 130.717140][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.723496][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.728496][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.732402][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.736584][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.740040][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.743224][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.746559][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.750003][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.753104][ T6416] netlink: 11 bytes leftover after parsing attributes in process `syz.3.107'. [ 130.773838][ T5184] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.903890][ T5184] usb 6-1: device descriptor read/64, error -71 [ 131.014964][ T5184] usb usb6-port1: attempt power cycle [ 131.355121][ T5184] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.374716][ T5184] usb 6-1: device descriptor read/8, error -71 [ 131.633873][ T5184] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.656344][ T5184] usb 6-1: device descriptor read/8, error -71 [ 131.779997][ T5184] usb usb6-port1: unable to enumerate USB device [ 131.892828][ T40] audit: type=1326 audit(1778642073.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.3.113" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6fcc code=0x0 [ 132.053271][ T6435] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 132.155507][ T6436] Process accounting resumed [ 132.498620][ T6453] warning: `syz.0.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.280954][ T6481] 9p: Bad value for 'rfdno' [ 134.363926][ T6121] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.528173][ T6121] usb 6-1: Using ep0 maxpacket: 32 [ 134.532597][ T6121] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 134.536419][ T6121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.549213][ T6121] usb 6-1: config 0 descriptor?? [ 134.571821][ T6121] as10x_usb: device has been detected [ 134.578810][ T6121] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 134.607211][ T6121] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 134.652666][ T6121] as10x_usb: error during firmware upload part1 [ 134.656258][ T6121] Registered device nBox DVB-T Dongle [ 134.852441][ T6121] usb 6-1: USB disconnect, device number 7 [ 134.934295][ T6471] Process accounting resumed [ 135.161031][ T6121] Unregistered device nBox DVB-T Dongle [ 135.169627][ T6121] as10x_usb: device has been disconnected [ 135.273063][ T6498] hsr0: entered promiscuous mode [ 135.281261][ T6498] hsr_slave_0: left promiscuous mode [ 135.287846][ T6498] hsr_slave_1: left promiscuous mode [ 135.296479][ T6498] hsr0 (unregistering): left promiscuous mode [ 135.340081][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.347459][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.153817][ T5184] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 137.323893][ T5184] usb 7-1: Using ep0 maxpacket: 16 [ 137.328453][ T5184] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.335133][ T5184] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.339067][ T5184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.342611][ T5184] usb 7-1: Product: syz [ 137.344834][ T5184] usb 7-1: Manufacturer: syz [ 137.346751][ T5184] usb 7-1: SerialNumber: syz [ 137.354849][ T5184] usb 7-1: config 0 descriptor?? [ 137.370786][ T5184] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.374945][ T5184] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 137.641030][ T6533] hsr0: entered promiscuous mode [ 137.644330][ T6533] __nla_validate_parse: 724 callbacks suppressed [ 137.644375][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 137.665367][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.694761][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 137.697953][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 137.924106][ T6533] hsr_slave_0: left promiscuous mode [ 137.927548][ T6533] hsr_slave_1: left promiscuous mode [ 137.937058][ T6533] hsr0 (unregistering): left promiscuous mode [ 137.960488][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 137.964323][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 138.040961][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 138.044158][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 138.075687][ T5184] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 138.189249][ T6545] FAULT_INJECTION: forcing a failure. [ 138.189249][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 138.194886][ T6545] CPU: 2 UID: 0 PID: 6545 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 138.194912][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.194922][ T6545] Call Trace: [ 138.195066][ T6545] [ 138.195075][ T6545] dump_stack_lvl+0x100/0x190 [ 138.195103][ T6545] should_fail_ex.cold+0x5/0xa [ 138.195126][ T6545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 138.195157][ T6545] should_failslab+0xc2/0x120 [ 138.195179][ T6545] __kmalloc_noprof+0xe0/0x850 [ 138.195203][ T6545] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 138.195238][ T6545] genl_family_rcv_msg_doit+0xc7/0x300 [ 138.195269][ T6545] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.195295][ T6545] ? genl_get_cmd+0x3e7/0x760 [ 138.195326][ T6545] ? bpf_lsm_capable+0x9/0x10 [ 138.195346][ T6545] ? security_capable+0x80/0x260 [ 138.195378][ T6545] genl_rcv_msg+0x560/0x800 [ 138.195409][ T6545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.195437][ T6545] ? __pfx_nfc_genl_disable_se+0x10/0x10 [ 138.195470][ T6545] ? __lock_acquire+0x4a5/0x2630 [ 138.195493][ T6545] netlink_rcv_skb+0x159/0x420 [ 138.195517][ T6545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.195545][ T6545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.195581][ T6545] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.195609][ T6545] genl_rcv+0x28/0x40 [ 138.195633][ T6545] netlink_unicast+0x585/0x850 [ 138.195660][ T6545] ? __pfx_netlink_unicast+0x10/0x10 [ 138.195691][ T6545] netlink_sendmsg+0x8b0/0xda0 [ 138.195719][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.195747][ T6545] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 138.195776][ T6545] ____sys_sendmsg+0x9e1/0xb70 [ 138.195809][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.195871][ T6545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.195909][ T6545] ___sys_sendmsg+0x190/0x1e0 [ 138.195936][ T6545] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.195974][ T6545] ? find_held_lock+0x2b/0x80 [ 138.196013][ T6545] __sys_sendmsg+0x170/0x220 [ 138.196033][ T6545] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.196051][ T6545] ? __fget_files+0x21f/0x3d0 [ 138.196079][ T6545] ? ksys_write+0x1ac/0x250 [ 138.196100][ T6545] ? rcu_is_watching+0x12/0xc0 [ 138.196128][ T6545] __do_fast_syscall_32+0xe7/0x950 [ 138.196155][ T6545] ? lockdep_hardirqs_on+0x78/0x100 [ 138.196179][ T6545] do_fast_syscall_32+0x32/0x70 [ 138.196202][ T6545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.196224][ T6545] RIP: 0023:0xf700efcc [ 138.196239][ T6545] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 138.196253][ T6545] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 138.196269][ T6545] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 138.196279][ T6545] RDX: 0000000002008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.196288][ T6545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.196297][ T6545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.196305][ T6545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.196327][ T6545] [ 138.328276][ T6537] Process accounting resumed [ 138.361939][ T6547] netlink: 52 bytes leftover after parsing attributes in process `syz.1.148'. [ 138.367966][ T6547] syzkaller0: entered promiscuous mode [ 138.369886][ T6547] syzkaller0: entered allmulticast mode [ 138.496942][ T5184] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 138.500316][ T5184] em28xx 7-1:0.0: board has no eeprom [ 138.563850][ T5184] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 138.568151][ T5184] em28xx 7-1:0.0: dvb set to bulk mode. [ 138.571089][ T9] em28xx 7-1:0.0: Binding DVB extension [ 138.591192][ T5184] usb 7-1: USB disconnect, device number 2 [ 138.598773][ T5184] em28xx 7-1:0.0: Disconnecting em28xx [ 138.630916][ T9] em28xx 7-1:0.0: Registering input extension [ 138.637439][ T5184] em28xx 7-1:0.0: Closing input extension [ 138.666282][ T5184] em28xx 7-1:0.0: Freeing device [ 138.715578][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 139.971486][ T6573] fuse: Bad value for 'fd' [ 140.163362][ T40] audit: type=1326 audit(1778642082.140:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.158" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 140.275448][ T58] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 140.443865][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 140.447078][ T58] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.450308][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.453634][ T58] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.457431][ T6583] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 140.460419][ T58] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.460631][ T6583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.158'. [ 140.466004][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.466033][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.488535][ T58] usbtmc 6-1:16.0: bulk endpoints not found [ 140.842211][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.847592][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.230487][ T58] kernel read not supported for file /dsp1 (pid: 58 comm: kworker/3:1) [ 142.277472][ T6606] kAFS: unable to lookup cell '(,c¾ûL' [ 143.222663][ T857] usb 6-1: USB disconnect, device number 8 [ 143.333793][ T6626] __nla_validate_parse: 140 callbacks suppressed [ 143.333805][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.338757][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.345148][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.354400][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.362299][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.365730][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.370071][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.373012][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.376590][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.379538][ T6626] netlink: 11 bytes leftover after parsing attributes in process `syz.1.173'. [ 143.445940][ T6630] syzkaller0: entered promiscuous mode [ 143.447644][ T6630] syzkaller0: entered allmulticast mode [ 143.724356][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.883871][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 143.887001][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 143.895945][ T5887] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.899129][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.901676][ T5887] usb 6-1: Product: syz [ 143.903145][ T5887] usb 6-1: Manufacturer: syz [ 143.905748][ T5887] usb 6-1: SerialNumber: syz [ 143.945034][ T5887] usb 6-1: config 0 descriptor?? [ 143.949663][ T5887] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.953270][ T5887] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 144.561530][ T5887] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 144.983327][ T5887] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 144.986430][ T5887] em28xx 6-1:0.0: board has no eeprom [ 145.046170][ T5887] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.053842][ T5887] em28xx 6-1:0.0: dvb set to bulk mode. [ 145.056243][ T5844] em28xx 6-1:0.0: Binding DVB extension [ 145.076227][ T5887] usb 6-1: USB disconnect, device number 9 [ 145.173898][ T5887] em28xx 6-1:0.0: Disconnecting em28xx [ 146.110330][ T5844] em28xx 6-1:0.0: Registering input extension [ 146.116081][ T5887] em28xx 6-1:0.0: Closing input extension [ 146.846237][ T5887] em28xx 6-1:0.0: Freeing device [ 148.423916][ T40] audit: type=1326 audit(1778642090.390:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.187" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 148.750404][ T6680] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 148.754158][ T6680] __nla_validate_parse: 132 callbacks suppressed [ 148.754171][ T6680] netlink: 224 bytes leftover after parsing attributes in process `syz.2.187'. [ 149.081852][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.130840][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.210346][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.219451][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.291490][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.320448][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.629246][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.634071][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.637012][ T6685] Process accounting resumed [ 149.896832][ T6701] syzkaller0: entered promiscuous mode [ 149.898736][ T6701] syzkaller0: entered allmulticast mode [ 150.478687][ T6711] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 151.053536][ T6715] syzkaller0: entered promiscuous mode [ 151.056101][ T6715] syzkaller0: entered allmulticast mode [ 151.276815][ T6726] FAULT_INJECTION: forcing a failure. [ 151.276815][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.281418][ T6726] CPU: 3 UID: 0 PID: 6726 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 151.281434][ T6726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.281442][ T6726] Call Trace: [ 151.281448][ T6726] [ 151.281454][ T6726] dump_stack_lvl+0x100/0x190 [ 151.281473][ T6726] should_fail_ex.cold+0x5/0xa [ 151.281490][ T6726] _copy_from_iter+0x1f4/0x1690 [ 151.281505][ T6726] ? __asan_memset+0x23/0x50 [ 151.281525][ T6726] ? __pfx__copy_from_iter+0x10/0x10 [ 151.281537][ T6726] ? __pfx___alloc_skb+0x10/0x10 [ 151.281556][ T6726] netlink_sendmsg+0x808/0xda0 [ 151.281577][ T6726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.281597][ T6726] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 151.281619][ T6726] ____sys_sendmsg+0x9e1/0xb70 [ 151.281636][ T6726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.281655][ T6726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.281678][ T6726] ___sys_sendmsg+0x190/0x1e0 [ 151.281698][ T6726] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.281723][ T6726] ? find_held_lock+0x2b/0x80 [ 151.281749][ T6726] __sys_sendmsg+0x170/0x220 [ 151.281763][ T6726] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.281784][ T6726] ? __fget_files+0x21f/0x3d0 [ 151.281812][ T6726] ? ksys_write+0x1ac/0x250 [ 151.281834][ T6726] ? rcu_is_watching+0x12/0xc0 [ 151.281857][ T6726] __do_fast_syscall_32+0xe7/0x950 [ 151.281887][ T6726] ? lockdep_hardirqs_on+0x78/0x100 [ 151.281916][ T6726] do_fast_syscall_32+0x32/0x70 [ 151.281946][ T6726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.281969][ T6726] RIP: 0023:0xf6fcefcc [ 151.281987][ T6726] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 151.282007][ T6726] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 151.282026][ T6726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 151.282038][ T6726] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.282048][ T6726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.282057][ T6726] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.282064][ T6726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.282079][ T6726] [ 151.429061][ T6722] netlink: 11 bytes leftover after parsing attributes in process `syz.1.198'. [ 151.432335][ T6722] netlink: 11 bytes leftover after parsing attributes in process `syz.1.198'. [ 151.437002][ T6722] netlink: 11 bytes leftover after parsing attributes in process `syz.1.198'. [ 151.503391][ T40] audit: type=1326 audit(1778642093.500:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.2.201" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 151.807904][ T6739] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 152.064029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 152.396852][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.402306][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.956178][ T6748] fuse: Bad value for 'fd' [ 153.573185][ T40] audit: type=1326 audit(1778642095.570:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.210" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 153.699695][ T6758] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 153.973155][ T6761] Process accounting resumed [ 154.239799][ T6772] __nla_validate_parse: 292 callbacks suppressed [ 154.239833][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 155.744763][ T6788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 156.052674][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.056111][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.416091][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.419047][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.471519][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.474459][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 157.025678][ T6771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.066854][ T6786] Process accounting resumed [ 157.166443][ T6802] netlink: 11 bytes leftover after parsing attributes in process `syz.0.218'. [ 157.169116][ T6802] netlink: 11 bytes leftover after parsing attributes in process `syz.0.218'. [ 157.267088][ T6807] fuse: Bad value for 'fd' [ 158.305185][ T62] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 158.309701][ T62] Bluetooth: hci2: Injecting HCI hardware error event [ 158.315991][ T62] Bluetooth: hci2: hardware error 0x00 [ 159.447422][ T6832] __nla_validate_parse: 145 callbacks suppressed [ 159.447435][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.452258][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.565873][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.592599][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.636845][ T6836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.668601][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.674052][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.676308][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.220'. [ 159.824119][ T34] usb 5-1: device descriptor read/64, error -71 [ 159.841747][ T6808] Process accounting resumed [ 159.924522][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 160.063863][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.193958][ T34] usb 5-1: device descriptor read/64, error -71 [ 160.196082][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 160.198198][ T6848] fuse: Bad value for 'fd' [ 160.199998][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 160.231545][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 160.315746][ T34] usb usb5-port1: attempt power cycle [ 160.478183][ T6858] syzkaller0: entered promiscuous mode [ 160.480415][ T6858] syzkaller0: entered allmulticast mode [ 160.653901][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.675184][ T34] usb 5-1: device descriptor read/8, error -71 [ 160.824523][ T6853] Process accounting resumed [ 160.915301][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.944586][ T34] usb 5-1: device descriptor read/8, error -71 [ 161.044299][ T34] usb usb5-port1: unable to enumerate USB device [ 161.347952][ T62] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.386582][ T6777] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 162.447296][ T6883] fuse: Bad value for 'fd' [ 162.554824][ T6777] usb 6-1: Using ep0 maxpacket: 32 [ 162.558089][ T6777] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 162.561050][ T6777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.569812][ T6777] usb 6-1: config 0 descriptor?? [ 162.590251][ T6777] as10x_usb: device has been detected [ 162.592395][ T6777] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 162.603162][ T6777] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 162.631532][ T6777] as10x_usb: error during firmware upload part1 [ 162.635902][ T6777] Registered device nBox DVB-T Dongle [ 163.286813][ T5887] usb 6-1: USB disconnect, device number 10 [ 163.322036][ T5887] Unregistered device nBox DVB-T Dongle [ 163.326818][ T5887] as10x_usb: device has been disconnected [ 164.094332][ T6886] Process accounting resumed [ 164.238392][ T62] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 164.541641][ T6910] Process accounting resumed [ 164.616934][ T6913] __nla_validate_parse: 19 callbacks suppressed [ 164.616947][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.623199][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.628109][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.632614][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.636864][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.645279][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.649351][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.660469][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.664984][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 164.669809][ T6913] netlink: 11 bytes leftover after parsing attributes in process `syz.1.249'. [ 166.000691][ T6942] Process accounting resumed [ 166.262316][ T40] audit: type=1326 audit(1778642108.260:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.261" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 166.533838][ T6960] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 167.090392][ T6958] Process accounting resumed [ 168.304008][ T62] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 168.308810][ T62] Bluetooth: hci3: Injecting HCI hardware error event [ 168.314935][ T5744] Bluetooth: hci3: hardware error 0x00 [ 168.359893][ T6996] FAULT_INJECTION: forcing a failure. [ 168.359893][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 168.364010][ T6996] CPU: 2 UID: 0 PID: 6996 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(full) [ 168.364025][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.364031][ T6996] Call Trace: [ 168.364035][ T6996] [ 168.364040][ T6996] dump_stack_lvl+0x100/0x190 [ 168.364057][ T6996] should_fail_ex.cold+0x5/0xa [ 168.364071][ T6996] should_failslab+0xc2/0x120 [ 168.364085][ T6996] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 168.364102][ T6996] ? skb_clone+0x190/0x400 [ 168.364117][ T6996] skb_clone+0x190/0x400 [ 168.364129][ T6996] netlink_deliver_tap+0xaed/0xcc0 [ 168.364148][ T6996] netlink_unicast+0x62b/0x850 [ 168.364165][ T6996] ? __pfx_netlink_unicast+0x10/0x10 [ 168.364184][ T6996] netlink_sendmsg+0x8b0/0xda0 [ 168.364202][ T6996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.364220][ T6996] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 168.364239][ T6996] ____sys_sendmsg+0x9e1/0xb70 [ 168.364254][ T6996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.364271][ T6996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.364293][ T6996] ___sys_sendmsg+0x190/0x1e0 [ 168.364311][ T6996] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.364334][ T6996] ? find_held_lock+0x2b/0x80 [ 168.364359][ T6996] __sys_sendmsg+0x170/0x220 [ 168.364372][ T6996] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.364384][ T6996] ? __fget_files+0x21f/0x3d0 [ 168.364402][ T6996] ? ksys_write+0x1ac/0x250 [ 168.364416][ T6996] ? rcu_is_watching+0x12/0xc0 [ 168.364432][ T6996] __do_fast_syscall_32+0xe7/0x950 [ 168.364451][ T6996] ? lockdep_hardirqs_on+0x78/0x100 [ 168.364469][ T6996] do_fast_syscall_32+0x32/0x70 [ 168.364487][ T6996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.364502][ T6996] RIP: 0023:0xf7fe6fcc [ 168.364516][ T6996] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 168.364527][ T6996] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 168.364538][ T6996] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 168.364545][ T6996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.364552][ T6996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.364558][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.364565][ T6996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.364579][ T6996] [ 168.527913][ T6990] Process accounting resumed [ 169.291064][ T7010] Process accounting resumed [ 170.106030][ T40] audit: type=1326 audit(1778642112.110:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.0.289" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 170.364025][ T7037] __nla_validate_parse: 157 callbacks suppressed [ 170.364056][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 170.396271][ T5744] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 170.463503][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'. [ 172.651186][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 172.738388][ T7046] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 172.750898][ T7046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.289'. [ 172.839135][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.842550][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.847017][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.849627][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.853024][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.856650][ T7051] netlink: 11 bytes leftover after parsing attributes in process `syz.1.285'. [ 174.005437][ T7063] fuse: Bad value for 'fd' [ 174.065386][ T7065] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.070557][ T7065] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.386512][ T5744] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 174.391607][ T5744] Bluetooth: hci1: Injecting HCI hardware error event [ 174.396550][ T5744] Bluetooth: hci1: hardware error 0x00 [ 174.898490][ T7065] overlayfs: statfs failed on './file0' [ 175.173879][ T5817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 175.323899][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 175.327942][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.334357][ T5817] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.338137][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.341466][ T5817] usb 6-1: Product: syz [ 175.343375][ T5817] usb 6-1: Manufacturer: syz [ 175.346240][ T5817] usb 6-1: SerialNumber: syz [ 175.350752][ T5817] usb 6-1: config 0 descriptor?? [ 175.358722][ T5817] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.362878][ T5817] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 175.967428][ T5817] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 176.383529][ T5817] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.386387][ T5817] em28xx 6-1:0.0: board has no eeprom [ 176.453890][ T5817] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 176.457218][ T5817] em28xx 6-1:0.0: dvb set to bulk mode. [ 176.461542][ T5886] em28xx 6-1:0.0: Binding DVB extension [ 176.463823][ T5744] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 176.468076][ T5817] usb 6-1: USB disconnect, device number 11 [ 176.468760][ T5817] em28xx 6-1:0.0: Disconnecting em28xx [ 176.484997][ T5886] em28xx 6-1:0.0: Registering input extension [ 176.487112][ T5817] em28xx 6-1:0.0: Closing input extension [ 176.498899][ T5817] em28xx 6-1:0.0: Freeing device [ 176.545867][ T7080] __nla_validate_parse: 137 callbacks suppressed [ 176.545881][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.552322][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.556816][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.559926][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.563356][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.568235][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.571840][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.575214][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.581597][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.586366][ T7080] netlink: 11 bytes leftover after parsing attributes in process `syz.2.298'. [ 176.668977][ T40] audit: type=1326 audit(1778642118.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.3.299" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6fcc code=0x0 [ 176.714764][ T5744] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 176.723079][ T5744] Bluetooth: hci0: Injecting HCI hardware error event [ 176.727626][ T5744] Bluetooth: hci0: hardware error 0x00 [ 177.353910][ T40] audit: type=1326 audit(1778642119.350:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.301" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 177.590862][ T7090] Process accounting resumed [ 177.769203][ T7103] fuse: Bad value for 'fd' [ 178.129207][ T7106] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 178.135202][ T7106] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 178.783877][ T5744] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 178.791703][ T7123] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.837681][ T7123] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 178.841148][ T7123] overlayfs: failed to look up (tracing) for ino (-66) [ 178.884050][ T7123] tipc: Started in network mode [ 178.885824][ T7123] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 178.889759][ T7123] tipc: Enabling of bearer rejected, failed to enable media [ 179.549468][ T7117] Process accounting resumed [ 181.551887][ T7139] Process accounting resumed [ 181.620468][ T7147] syzkaller0: entered promiscuous mode [ 181.626791][ T7147] syzkaller0: entered allmulticast mode [ 181.938321][ T5887] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 182.096084][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 182.112145][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 182.125824][ T5887] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.128928][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.131764][ T5887] usb 7-1: Product: syz [ 182.133124][ T5887] usb 7-1: Manufacturer: syz [ 182.135003][ T5887] usb 7-1: SerialNumber: syz [ 182.145980][ T5887] usb 7-1: config 0 descriptor?? [ 182.161668][ T5887] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.164801][ T5887] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 182.710930][ T7160] __nla_validate_parse: 144 callbacks suppressed [ 182.710980][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.718123][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.759620][ T5887] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 182.870534][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.874063][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.953990][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 182.957857][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 183.175804][ T5887] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 183.178487][ T5887] em28xx 7-1:0.0: board has no eeprom [ 183.246090][ T5887] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 183.252418][ T5887] em28xx 7-1:0.0: dvb set to bulk mode. [ 183.265432][ T1039] em28xx 7-1:0.0: Binding DVB extension [ 183.283320][ T5887] usb 7-1: USB disconnect, device number 3 [ 183.287248][ T5887] em28xx 7-1:0.0: Disconnecting em28xx [ 183.305073][ T7162] Process accounting resumed [ 183.313969][ T1039] em28xx 7-1:0.0: Registering input extension [ 183.316250][ T5887] em28xx 7-1:0.0: Closing input extension [ 183.333603][ T5887] em28xx 7-1:0.0: Freeing device [ 183.974948][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 183.978921][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 184.042504][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 184.046351][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.321'. [ 184.085647][ T6777] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 184.233919][ T6777] usb 6-1: Using ep0 maxpacket: 32 [ 184.237644][ T6777] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 184.240760][ T6777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.305860][ T6777] usb 6-1: config 0 descriptor?? [ 184.311348][ T6777] as10x_usb: device has been detected [ 184.314783][ T6777] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 184.327857][ T6777] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 184.333232][ T6777] as10x_usb: error during firmware upload part1 [ 184.338381][ T6777] Registered device nBox DVB-T Dongle [ 184.514022][ T6777] usb 6-1: USB disconnect, device number 12 [ 184.545070][ T6777] Unregistered device nBox DVB-T Dongle [ 184.546565][ T6777] as10x_usb: device has been disconnected [ 184.770462][ T7180] Process accounting resumed [ 186.288994][ T7197] Process accounting resumed [ 186.645049][ T7204] Process accounting resumed [ 188.537220][ T7233] __nla_validate_parse: 16 callbacks suppressed [ 188.537232][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.542497][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.546399][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.549846][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.553571][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.557299][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.561539][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.564929][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.568439][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 188.571849][ T7233] netlink: 11 bytes leftover after parsing attributes in process `syz.2.338'. [ 189.399366][ T7240] Process accounting resumed [ 190.281047][ T7247] Process accounting resumed [ 190.589914][ T7260] Process accounting resumed [ 191.266701][ T7282] binder: 7281:7282 ioctl 4018620d 0 returned -22 [ 191.270355][ T7282] binder: 7281:7282 ioctl c0306201 0 returned -14 [ 192.229892][ T40] audit: type=1326 audit(1778642134.230:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.350" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 194.200015][ T7320] __nla_validate_parse: 150 callbacks suppressed [ 194.200072][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 195.167976][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 196.660607][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.360'. [ 196.671616][ T40] audit: type=1326 audit(1778642138.680:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.2.359" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 196.845596][ T7338] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 196.849196][ T7338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.359'. [ 196.859790][ T7342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.361'. [ 197.560646][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 198.342351][ T7354] binder: 7353:7354 ioctl 4018620d 0 returned -22 [ 198.351643][ T7354] binder: 7353:7354 ioctl c0306201 0 returned -14 [ 198.840720][ T7362] netlink: 52 bytes leftover after parsing attributes in process `syz.2.367'. [ 198.865376][ T7362] syzkaller0: entered promiscuous mode [ 198.867098][ T7362] syzkaller0: entered allmulticast mode [ 199.107218][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.141003][ T7369] fuse: Bad value for 'fd' [ 200.267733][ T40] audit: type=1326 audit(1778642142.280:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.2.369" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 200.360345][ T7381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 200.432504][ T7380] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 200.438692][ T7380] netlink: 224 bytes leftover after parsing attributes in process `syz.2.369'. [ 200.982649][ T40] audit: type=1326 audit(1778642142.980:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.3.376" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6fcc code=0x0 [ 201.063602][ T7397] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 201.067035][ T7397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.376'. [ 201.980756][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 201.983913][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 202.087430][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 202.090965][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 202.283198][ T7414] netlink: 11 bytes leftover after parsing attributes in process `syz.3.381'. [ 202.288329][ T7414] netlink: 11 bytes leftover after parsing attributes in process `syz.3.381'. [ 202.292273][ T7414] netlink: 11 bytes leftover after parsing attributes in process `syz.3.381'. [ 202.849628][ T7410] Process accounting resumed [ 204.268413][ T40] audit: type=1326 audit(1778642146.270:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.2.389" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 204.463548][ T7441] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 205.545561][ T7457] Process accounting resumed [ 205.641328][ T7461] Process accounting resumed [ 205.732801][ T40] audit: type=1326 audit(1778642147.730:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.394" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 205.897205][ T7472] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 205.907008][ T7472] __nla_validate_parse: 450 callbacks suppressed [ 205.907080][ T7472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.394'. [ 206.179110][ T7481] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 206.222643][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.318531][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.330992][ T7483] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 206.367205][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.427934][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.609929][ T7487] fuse: Bad value for 'fd' [ 206.643447][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.653966][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 206.733068][ T7494] netlink: 11 bytes leftover after parsing attributes in process `syz.0.399'. [ 206.736614][ T7494] netlink: 11 bytes leftover after parsing attributes in process `syz.0.399'. [ 206.740401][ T7494] netlink: 11 bytes leftover after parsing attributes in process `syz.0.399'. [ 206.854778][ T7482] Process accounting resumed [ 206.991314][ T40] audit: type=1326 audit(1778642148.990:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.1.401" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 207.173351][ T7505] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 207.591881][ T40] audit: type=1326 audit(1778642149.590:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.2.404" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 207.820654][ T7513] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 208.261362][ T7530] netlink: 'syz.3.406': attribute type 11 has an invalid length. [ 208.355356][ T7530] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 208.357861][ T7530] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 208.640207][ T40] audit: type=1326 audit(1778642150.640:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.2.409" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 208.734932][ T7540] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 208.971813][ T7547] fuse: Bad value for 'fd' [ 208.986700][ T7544] syzkaller0: entered promiscuous mode [ 208.993441][ T7544] syzkaller0: entered allmulticast mode [ 209.234672][ T40] audit: type=1326 audit(1778642151.240:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7550 comm="syz.3.414" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6fcc code=0x0 [ 209.328152][ T7553] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 211.616527][ T7564] __nla_validate_parse: 289 callbacks suppressed [ 211.616541][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.621743][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.625360][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.628363][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.631853][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.635378][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.638897][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.641736][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.645090][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.648039][ T7564] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.694055][ T7572] syzkaller0: entered promiscuous mode [ 211.696530][ T7572] syzkaller0: entered allmulticast mode [ 211.725173][ T7579] fuse: Bad value for 'fd' [ 211.769313][ T7577] syzkaller0: entered promiscuous mode [ 211.771699][ T7577] syzkaller0: entered allmulticast mode [ 212.598352][ T7585] Process accounting resumed [ 214.381732][ T7614] fuse: Bad value for 'fd' [ 214.610380][ T7625] syzkaller0: entered promiscuous mode [ 214.612914][ T7625] syzkaller0: entered allmulticast mode [ 215.062412][ T5817] IPVS: starting estimator thread 0... [ 215.153927][ T7636] IPVS: using max 39 ests per chain, 93600 per kthread [ 216.047343][ T7653] syzkaller0: entered promiscuous mode [ 216.049238][ T7653] syzkaller0: entered allmulticast mode [ 216.446590][ T7664] fuse: Bad value for 'fd' [ 216.714549][ T7667] __nla_validate_parse: 563 callbacks suppressed [ 216.714561][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 217.313618][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.317810][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.322393][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.326839][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.330915][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.334486][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.338043][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.341643][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.345090][ T7672] netlink: 11 bytes leftover after parsing attributes in process `syz.0.450'. [ 217.947155][ T7676] Process accounting resumed [ 219.286244][ T7703] fuse: Bad value for 'fd' [ 219.624460][ T40] audit: type=1326 audit(1778642161.620:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.460" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 220.707594][ T40] audit: type=1326 audit(1778642162.710:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.464" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 220.942353][ T7715] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 221.490305][ T7722] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 221.754988][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.766710][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.346962][ T7741] __nla_validate_parse: 146 callbacks suppressed [ 222.346976][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 223.678108][ T7756] binder: 7755:7756 ioctl 4018620d 0 returned -22 [ 223.682185][ T7756] binder: 7755:7756 ioctl c0306201 0 returned -14 [ 223.828677][ T7762] tmpfs: Bad value for 'mpol' [ 223.855087][ T7763] netlink: 52 bytes leftover after parsing attributes in process `syz.1.475'. [ 223.861823][ T7763] syzkaller0: entered promiscuous mode [ 223.865202][ T7763] syzkaller0: entered allmulticast mode [ 224.577090][ T7771] binder: 7770:7771 ioctl 4018620d 0 returned -22 [ 224.580148][ T7771] binder: 7770:7771 ioctl c0306201 0 returned -14 [ 225.747479][ T7793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.486'. [ 225.822492][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 227.617297][ T7813] binder: 7812:7813 ioctl 4018620d 0 returned -22 [ 227.621317][ T7813] binder: 7812:7813 ioctl c0306201 0 returned -14 [ 228.043324][ T7824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.495'. [ 229.337232][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.340665][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.347220][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.366028][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.374919][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.378913][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.383062][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.387769][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.392375][ T7844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.501'. [ 229.736882][ T7858] syzkaller0: entered promiscuous mode [ 229.739091][ T7858] syzkaller0: entered allmulticast mode [ 230.039152][ T7848] Process accounting resumed [ 230.455812][ T7872] tmpfs: Bad value for 'mpol' [ 232.828558][ T7904] FAULT_INJECTION: forcing a failure. [ 232.828558][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 232.869864][ T7904] CPU: 3 UID: 0 PID: 7904 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(full) [ 232.869891][ T7904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.869901][ T7904] Call Trace: [ 232.869909][ T7904] [ 232.869917][ T7904] dump_stack_lvl+0x100/0x190 [ 232.869943][ T7904] should_fail_ex.cold+0x5/0xa [ 232.869966][ T7904] ? __tipc_nl_compat_doit+0xe6/0x3d0 [ 232.869996][ T7904] should_failslab+0xc2/0x120 [ 232.870017][ T7904] __kmalloc_noprof+0xe0/0x850 [ 232.870032][ T7904] ? __lock_acquire+0x4a5/0x2630 [ 232.870053][ T7904] __tipc_nl_compat_doit+0xe6/0x3d0 [ 232.870074][ T7904] ? kfree_skbmem+0x19a/0x210 [ 232.870096][ T7904] ? consume_skb+0xd1/0x110 [ 232.870116][ T7904] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 232.870134][ T7904] ? netlink_deliver_tap+0xa4d/0xcc0 [ 232.870155][ T7904] ? netlink_unicast+0x62b/0x850 [ 232.870177][ T7904] ? netlink_sendmsg+0x8b0/0xda0 [ 232.870210][ T7904] ? bpf_lsm_capable+0x9/0x10 [ 232.870229][ T7904] ? security_capable+0x80/0x260 [ 232.870258][ T7904] tipc_nl_compat_doit+0x11e/0x290 [ 232.870282][ T7904] tipc_nl_compat_recv+0x7dc/0xc40 [ 232.870303][ T7904] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 232.870324][ T7904] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 232.870343][ T7904] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 232.870378][ T7904] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 232.870412][ T7904] genl_family_rcv_msg_doit+0x214/0x300 [ 232.870473][ T7904] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.870501][ T7904] ? genl_get_cmd+0x3e7/0x760 [ 232.870534][ T7904] ? __dev_queue_xmit+0xa10/0x4950 [ 232.870558][ T7904] ? __radix_tree_lookup+0x217/0x2b0 [ 232.870585][ T7904] genl_rcv_msg+0x560/0x800 [ 232.870613][ T7904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.870639][ T7904] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 232.870670][ T7904] netlink_rcv_skb+0x159/0x420 [ 232.870693][ T7904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.870720][ T7904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.870754][ T7904] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.870780][ T7904] genl_rcv+0x28/0x40 [ 232.870804][ T7904] netlink_unicast+0x585/0x850 [ 232.870832][ T7904] ? __pfx_netlink_unicast+0x10/0x10 [ 232.870864][ T7904] netlink_sendmsg+0x8b0/0xda0 [ 232.870893][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.870920][ T7904] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 232.870950][ T7904] ____sys_sendmsg+0x9e1/0xb70 [ 232.870979][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.871005][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.871040][ T7904] ___sys_sendmsg+0x190/0x1e0 [ 232.871068][ T7904] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.871107][ T7904] ? find_held_lock+0x2b/0x80 [ 232.871146][ T7904] __sys_sendmsg+0x170/0x220 [ 232.871166][ T7904] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.871184][ T7904] ? __fget_files+0x21f/0x3d0 [ 232.871213][ T7904] ? ksys_write+0x1ac/0x250 [ 232.871236][ T7904] ? rcu_is_watching+0x12/0xc0 [ 232.871261][ T7904] __do_fast_syscall_32+0xe7/0x950 [ 232.871288][ T7904] ? lockdep_hardirqs_on+0x78/0x100 [ 232.871319][ T7904] do_fast_syscall_32+0x32/0x70 [ 232.871345][ T7904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.871368][ T7904] RIP: 0023:0xf7fe6fcc [ 232.871384][ T7904] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 232.871401][ T7904] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 232.871419][ T7904] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 232.871430][ T7904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.871440][ T7904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.871450][ T7904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.871460][ T7904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.871484][ T7904] [ 233.269776][ T7910] __nla_validate_parse: 150 callbacks suppressed [ 233.269796][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'. [ 233.289848][ T7910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.520'. [ 233.353096][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.370489][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.401035][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.436847][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.523'. [ 233.439672][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.445219][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.449007][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.452927][ T7911] netlink: 11 bytes leftover after parsing attributes in process `syz.1.521'. [ 233.810579][ T7924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.310876][ T7932] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 235.319482][ T7932] lo speed is unknown, defaulting to 1000 [ 235.322204][ T7932] lo speed is unknown, defaulting to 1000 [ 235.335100][ T7932] lo speed is unknown, defaulting to 1000 [ 235.339818][ T7932] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 235.346047][ T7932] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 235.353917][ T7932] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 235.381323][ T7932] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.400186][ T7932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.607291][ T7932] lo speed is unknown, defaulting to 1000 [ 235.612624][ T7932] lo speed is unknown, defaulting to 1000 [ 235.635851][ T7932] lo speed is unknown, defaulting to 1000 [ 235.669828][ T7932] lo speed is unknown, defaulting to 1000 [ 235.681337][ T7932] lo speed is unknown, defaulting to 1000 [ 235.689034][ T7939] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 235.718859][ T7939] bond1: (slave geneve3): making interface the new active one [ 235.722697][ T7939] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 235.725946][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.729216][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.751080][ T7939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.759078][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.763520][ T1259] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.804493][ T7939] bridge0: port 2(bridge_slave_1) entered listening state [ 235.812280][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.833030][ T7934] smbdirect: ib_dev[syz2] removed [ 235.899276][ T7945] fuse: fd is not a fuse device [ 236.200619][ T7956] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.051280][ T40] audit: type=1326 audit(1778642182.050:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.543" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 240.435548][ T7988] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 240.438572][ T7988] __nla_validate_parse: 135 callbacks suppressed [ 240.438665][ T7988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.543'. [ 241.353471][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.359706][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.364930][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.368634][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.372837][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.379680][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.384407][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.388102][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 241.392144][ T7998] netlink: 11 bytes leftover after parsing attributes in process `syz.3.545'. [ 242.728739][ T8012] Process accounting resumed [ 242.909955][ T8024] binder: 8022:8024 ioctl 4018620d 0 returned -22 [ 242.913441][ T8024] binder: 8022:8024 ioctl c0306201 0 returned -14 [ 243.304924][ T8031] FAULT_INJECTION: forcing a failure. [ 243.304924][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.310719][ T8031] CPU: 2 UID: 0 PID: 8031 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 243.310745][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.310756][ T8031] Call Trace: [ 243.310764][ T8031] [ 243.310772][ T8031] dump_stack_lvl+0x100/0x190 [ 243.310800][ T8031] should_fail_ex.cold+0x5/0xa [ 243.310825][ T8031] _copy_from_user+0x2e/0xd0 [ 243.310847][ T8031] __sys_bpf+0x243/0x4b90 [ 243.310870][ T8031] ? __pfx___sys_bpf+0x10/0x10 [ 243.310887][ T8031] ? get_pid_task+0x106/0x250 [ 243.310916][ T8031] ? proc_fail_nth_write+0x9f/0x220 [ 243.310948][ T8031] ? find_held_lock+0x2b/0x80 [ 243.310980][ T8031] ? find_held_lock+0x2b/0x80 [ 243.311006][ T8031] ? ksys_write+0x190/0x250 [ 243.311035][ T8031] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 243.311067][ T8031] ? kernel_write+0x5e3/0x6c0 [ 243.311106][ T8031] ? fput+0x79/0x100 [ 243.311133][ T8031] ? ksys_write+0x1ac/0x250 [ 243.311159][ T8031] __ia32_sys_bpf+0x79/0xf0 [ 243.311181][ T8031] ? lockdep_hardirqs_on+0x78/0x100 [ 243.311211][ T8031] __do_fast_syscall_32+0xe7/0x950 [ 243.311242][ T8031] ? lockdep_hardirqs_on+0x78/0x100 [ 243.311273][ T8031] do_fast_syscall_32+0x32/0x70 [ 243.311304][ T8031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.311330][ T8031] RIP: 0023:0xf700efcc [ 243.311348][ T8031] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 243.311366][ T8031] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 243.311388][ T8031] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800000c0 [ 243.311401][ T8031] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 243.311412][ T8031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.311429][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.311441][ T8031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.311468][ T8031] [ 243.473864][ T8037] binder: 8036:8037 ioctl 4018620d 0 returned -22 [ 243.484521][ T8037] binder: 8036:8037 ioctl c0306201 0 returned -14 [ 244.361182][ T8049] Process accounting resumed [ 244.761439][ T8065] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 244.815930][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.825268][ T8065] team0: Port device netdevsim1 added [ 244.983016][ T8079] FAULT_INJECTION: forcing a failure. [ 244.983016][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.992667][ T8079] CPU: 0 UID: 0 PID: 8079 Comm: syz.0.567 Not tainted syzkaller #0 PREEMPT(full) [ 244.992709][ T8079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.992721][ T8079] Call Trace: [ 244.992728][ T8079] [ 244.992735][ T8079] dump_stack_lvl+0x100/0x190 [ 244.992761][ T8079] should_fail_ex.cold+0x5/0xa [ 244.992785][ T8079] _copy_to_user+0x32/0xd0 [ 244.992806][ T8079] simple_read_from_buffer+0xcb/0x170 [ 244.992830][ T8079] proc_fail_nth_read+0x1af/0x230 [ 244.992859][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.992904][ T8079] ? rw_verify_area+0xce/0x6d0 [ 244.992922][ T8079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.992968][ T8079] vfs_read+0x1e4/0xb30 [ 244.992991][ T8079] ? __pfx_vfs_read+0x10/0x10 [ 244.993009][ T8079] ? find_held_lock+0x2b/0x80 [ 244.993031][ T8079] ? __fget_files+0x215/0x3d0 [ 244.993057][ T8079] ? __fget_files+0x21f/0x3d0 [ 244.993084][ T8079] ksys_read+0x12a/0x250 [ 244.993104][ T8079] ? __pfx_ksys_read+0x10/0x10 [ 244.993123][ T8079] ? rcu_is_watching+0x12/0xc0 [ 244.993144][ T8079] ? rcu_is_watching+0x12/0xc0 [ 244.993166][ T8079] do_int80_emulation+0x141/0x700 [ 244.993197][ T8079] asm_int80_emulation+0x1a/0x20 [ 244.993213][ T8079] RIP: 0023:0xf71361ab [ 244.993226][ T8079] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 244.993242][ T8079] RSP: 002b:00000000f53ab4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 244.993259][ T8079] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53ab5d0 [ 244.993269][ T8079] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 244.993278][ T8079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.993287][ T8079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.993297][ T8079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.993321][ T8079] [ 245.138733][ T8082] binder: 8081:8082 ioctl 4018620d 0 returned -22 [ 245.144703][ T8082] binder: 8081:8082 ioctl c0306201 0 returned -14 [ 245.563039][ T8092] __nla_validate_parse: 451 callbacks suppressed [ 245.563165][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.563317][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 245.566041][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.577838][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.581498][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.586192][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.589425][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.593094][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.596131][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 245.599261][ T8092] netlink: 11 bytes leftover after parsing attributes in process `syz.2.575'. [ 246.626680][ T8090] Process accounting resumed [ 246.850122][ T8110] Bluetooth: MGMT ver 1.23 [ 247.334045][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 247.427965][ T8118] binder: 8117:8118 ioctl 4018620d 0 returned -22 [ 247.431265][ T8118] binder: 8117:8118 ioctl c0306201 0 returned -14 [ 247.504073][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 247.513869][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.522384][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.534917][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.549019][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.565297][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.577489][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.847260][ T5886] usb 5-1: GET_CAPABILITIES returned 0 [ 247.849047][ T5886] usbtmc 5-1:16.0: can't read capabilities [ 247.957157][ T40] audit: type=1326 audit(1778642189.960:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.3.585" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6fcc code=0x0 [ 248.061630][ T8129] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 248.170796][ T5886] usb 5-1: USB disconnect, device number 6 [ 248.656146][ T8141] FAULT_INJECTION: forcing a failure. [ 248.656146][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 248.664507][ T8141] CPU: 3 UID: 0 PID: 8141 Comm: syz.0.588 Not tainted syzkaller #0 PREEMPT(full) [ 248.664534][ T8141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.664545][ T8141] Call Trace: [ 248.664553][ T8141] [ 248.664561][ T8141] dump_stack_lvl+0x100/0x190 [ 248.664590][ T8141] should_fail_ex.cold+0x5/0xa [ 248.664614][ T8141] should_failslab+0xc2/0x120 [ 248.664639][ T8141] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 248.664670][ T8141] ? __alloc_skb+0x140/0x710 [ 248.664696][ T8141] __alloc_skb+0x140/0x710 [ 248.664715][ T8141] ? __alloc_skb+0x5b7/0x710 [ 248.664735][ T8141] ? __pfx___alloc_skb+0x10/0x10 [ 248.664753][ T8141] ? __alloc_skb+0x4e9/0x710 [ 248.664779][ T8141] ? __alloc_skb+0x5b7/0x710 [ 248.664799][ T8141] ? __pfx___alloc_skb+0x10/0x10 [ 248.664821][ T8141] skb_copy+0x1ca/0x3a0 [ 248.664842][ T8141] ieee80211_attach_ack_skb+0x2c/0x190 [ 248.664868][ T8141] ieee80211_mgmt_tx+0x12dd/0x2590 [ 248.664895][ T8141] ? __pfx_kmalloc_reserve+0x10/0x10 [ 248.664929][ T8141] cfg80211_mlme_mgmt_tx+0x803/0x1600 [ 248.664965][ T8141] nl80211_tx_mgmt+0x9f9/0xf30 [ 248.664992][ T8141] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 248.665017][ T8141] ? __pfx_netdev_run_todo+0x10/0x10 [ 248.665056][ T8141] ? nl80211_pre_doit+0x19a/0xae0 [ 248.665078][ T8141] genl_family_rcv_msg_doit+0x214/0x300 [ 248.665111][ T8141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.665139][ T8141] ? genl_get_cmd+0x3e7/0x760 [ 248.665172][ T8141] ? bpf_lsm_capable+0x9/0x10 [ 248.665192][ T8141] ? security_capable+0x80/0x260 [ 248.665220][ T8141] ? ns_capable+0xd2/0xf0 [ 248.665247][ T8141] genl_rcv_msg+0x560/0x800 [ 248.665279][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.665306][ T8141] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 248.665323][ T8141] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 248.665343][ T8141] ? __pfx_nl80211_post_doit+0x10/0x10 [ 248.665370][ T8141] netlink_rcv_skb+0x159/0x420 [ 248.665397][ T8141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.665425][ T8141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.665460][ T8141] ? netlink_deliver_tap+0x1ae/0xcc0 [ 248.665487][ T8141] genl_rcv+0x28/0x40 [ 248.665511][ T8141] netlink_unicast+0x585/0x850 [ 248.665538][ T8141] ? __pfx_netlink_unicast+0x10/0x10 [ 248.665569][ T8141] netlink_sendmsg+0x8b0/0xda0 [ 248.665596][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.665624][ T8141] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 248.665654][ T8141] ____sys_sendmsg+0x9e1/0xb70 [ 248.665676][ T8141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.665702][ T8141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.665729][ T8141] ? lock_acquire+0x1b1/0x370 [ 248.665747][ T8141] ? find_held_lock+0x2b/0x80 [ 248.665778][ T8141] ___sys_sendmsg+0x190/0x1e0 [ 248.665806][ T8141] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.665844][ T8141] ? find_held_lock+0x2b/0x80 [ 248.665882][ T8141] __sys_sendmsg+0x170/0x220 [ 248.665903][ T8141] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.665922][ T8141] ? irqentry_exit+0x24d/0x7e0 [ 248.665965][ T8141] __do_fast_syscall_32+0xe7/0x950 [ 248.665991][ T8141] ? lockdep_hardirqs_on+0x78/0x100 [ 248.666017][ T8141] do_fast_syscall_32+0x32/0x70 [ 248.666044][ T8141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.666067][ T8141] RIP: 0023:0xf6ffefcc [ 248.666083][ T8141] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 248.666101][ T8141] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 248.666119][ T8141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 248.666131][ T8141] RDX: 0000000028004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.666140][ T8141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.666149][ T8141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.666158][ T8141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.666181][ T8141] [ 249.087891][ T8153] binder: 8152:8153 ioctl 4018620d 0 returned -22 [ 249.092007][ T8153] binder: 8152:8153 ioctl c0306201 0 returned -14 [ 249.170355][ T8132] Process accounting resumed [ 250.978785][ T40] audit: type=1326 audit(1778642192.980:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8176 comm="syz.2.598" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 251.103968][ T8179] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 251.111998][ T8179] __nla_validate_parse: 284 callbacks suppressed [ 251.112023][ T8179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.598'. [ 252.096748][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.122622][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.199385][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.205174][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.554722][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.560455][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 252.661222][ T8188] Process accounting resumed [ 252.733100][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 253.279199][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.285567][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.633663][ T40] audit: type=1326 audit(1778642195.630:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.0.611" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 253.698528][ T8235] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 253.702198][ T8235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.611'. [ 256.271446][ T8258] binder: 8257:8258 ioctl 4018620d 0 returned -22 [ 256.274954][ T8258] binder: 8257:8258 ioctl c0306201 0 returned -14 [ 258.721439][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'. [ 258.824285][ T40] audit: type=1326 audit(1778642200.820:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.2.625" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 259.008099][ T8290] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 259.011422][ T8290] netlink: 224 bytes leftover after parsing attributes in process `syz.2.625'. [ 260.546532][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.549499][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.555208][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 260.581923][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.585452][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.624593][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.641116][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.644182][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.682231][ T8309] Process accounting resumed [ 261.428225][ T8318] 9pnet_virtio: no channels available for device syz [ 261.489099][ T8289] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 261.491616][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.495362][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 261.545819][ T8324] Can't find a SQUASHFS superblock on nullb0 [ 261.555271][ T8324] capability: warning: `syz.2.635' uses deprecated v2 capabilities in a way that may be insecure [ 261.558412][ T8325] Can't find a SQUASHFS superblock on nullb0 [ 261.737243][ T8319] vhci_hcd: connection closed [ 261.740668][ T13] vhci_hcd vhci_hcd.3: stop threads [ 261.744435][ T13] vhci_hcd vhci_hcd.3: release socket [ 261.747738][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 262.068473][ T40] audit: type=1326 audit(1778642204.010:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.0.637" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefcc code=0x0 [ 262.158827][ T8334] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 262.161960][ T8334] netlink: 224 bytes leftover after parsing attributes in process `syz.0.637'. [ 263.005889][ T8343] comedi comedi2: comedi_config --init_data is deprecated [ 263.707454][ T8357] Process accounting resumed [ 264.311676][ T1039] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 264.468841][ T1039] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 264.468872][ T1039] usb 5-1: config 0 has no interface number 0 [ 264.468910][ T1039] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 264.468936][ T1039] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.468960][ T1039] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.470667][ T1039] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 264.470694][ T1039] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 264.470708][ T1039] usb 5-1: Product: syz [ 264.470719][ T1039] usb 5-1: SerialNumber: syz [ 264.484325][ T1039] usb 5-1: config 0 descriptor?? [ 264.508758][ T1039] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 264.517297][ T1039] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input12 [ 264.590673][ T1039] ------------[ cut here ]------------ [ 264.590782][ T1039] URB ffff888029d93800 submitted while active [ 264.590805][ T1039] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#2: kworker/2:2/1039 [ 264.590857][ T1039] Modules linked in: [ 264.590915][ T1039] CPU: 2 UID: 0 PID: 1039 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 264.590939][ T1039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.590954][ T1039] Workqueue: usb_hub_wq hub_event [ 264.590972][ T1039] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 264.591015][ T1039] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d 70 b4 fa 48 8d 3d 86 49 91 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 264.591034][ T1039] RSP: 0018:ffffc900066e6e50 EFLAGS: 00010293 [ 264.591058][ T1039] RAX: 0000000000000000 RBX: ffff888029d93800 RCX: fffff52000cdcdb6 [ 264.591073][ T1039] RDX: ffff8880209c0000 RSI: ffff888029d93800 RDI: ffffffff90e4dc20 [ 264.591087][ T1039] RBP: ffff888072821b40 R08: 0000000000000000 R09: fffffbfff21afb8a [ 264.591100][ T1039] R10: ffffc900066e6ed8 R11: 0000000000000000 R12: ffff88801b6508a0 [ 264.591114][ T1039] R13: ffff88801b650810 R14: ffff88801b650850 R15: ffff8880256122e0 [ 264.591129][ T1039] FS: 0000000000000000(0000) GS:ffff888097377000(0000) knlGS:0000000000000000 [ 264.591170][ T1039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.591187][ T1039] CR2: 00000000800fb018 CR3: 000000007433a000 CR4: 0000000000352ef0 [ 264.591201][ T1039] Call Trace: [ 264.591209][ T1039] [ 264.591217][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.591319][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.591345][ T1039] ? __pm_runtime_resume+0xc3/0x170 [ 264.591375][ T1039] cm109_input_open+0x273/0x420 [ 264.591406][ T1039] ? __pfx_cm109_input_open+0x10/0x10 [ 264.591436][ T1039] input_open_device+0x24c/0x3d0 [ 264.591466][ T1039] kbd_connect+0x124/0x180 [ 264.591499][ T1039] input_attach_handler.isra.0+0x177/0x1e0 [ 264.591523][ T1039] input_register_device.cold+0x139/0x375 [ 264.591558][ T1039] cm109_usb_probe+0x128d/0x17f0 [ 264.591590][ T1039] usb_probe_interface+0x303/0x8f0 [ 264.591618][ T1039] ? __pfx_usb_probe_interface+0x10/0x10 [ 264.591643][ T1039] really_probe+0x241/0xa60 [ 264.591670][ T1039] __driver_probe_device+0x22e/0x480 [ 264.591695][ T1039] driver_probe_device+0x4c/0x1b0 [ 264.591721][ T1039] __device_attach_driver+0x1df/0x340 [ 264.591812][ T1039] ? __pfx___device_attach_driver+0x10/0x10 [ 264.591838][ T1039] bus_for_each_drv+0x159/0x1e0 [ 264.591869][ T1039] ? __pfx_bus_for_each_drv+0x10/0x10 [ 264.591901][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.591931][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.591963][ T1039] __device_attach+0x1e4/0x4d0 [ 264.591986][ T1039] ? __pfx___device_attach+0x10/0x10 [ 264.592010][ T1039] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.592037][ T1039] device_initial_probe+0xaf/0xd0 [ 264.592069][ T1039] bus_probe_device+0x64/0x160 [ 264.592092][ T1039] device_add+0x1210/0x1950 [ 264.592122][ T1039] ? __pfx_device_add+0x10/0x10 [ 264.592149][ T1039] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.592186][ T1039] usb_set_configuration+0xd97/0x1c60 [ 264.592237][ T1039] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 264.592264][ T1039] usb_generic_driver_probe+0xa1/0xe0 [ 264.592292][ T1039] usb_probe_device+0xef/0x400 [ 264.592312][ T1039] ? __pfx_usb_probe_device+0x10/0x10 [ 264.592334][ T1039] really_probe+0x241/0xa60 [ 264.592358][ T1039] __driver_probe_device+0x22e/0x480 [ 264.592380][ T1039] ? usb_driver_applicable+0x1c7/0x220 [ 264.592404][ T1039] driver_probe_device+0x4c/0x1b0 [ 264.592427][ T1039] __device_attach_driver+0x1df/0x340 [ 264.592452][ T1039] ? __pfx___device_attach_driver+0x10/0x10 [ 264.592473][ T1039] bus_for_each_drv+0x159/0x1e0 [ 264.592503][ T1039] ? __pfx_bus_for_each_drv+0x10/0x10 [ 264.592533][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.592560][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.592589][ T1039] __device_attach+0x1e4/0x4d0 [ 264.592611][ T1039] ? __pfx___device_attach+0x10/0x10 [ 264.592634][ T1039] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.592679][ T1039] device_initial_probe+0xaf/0xd0 [ 264.592702][ T1039] bus_probe_device+0x64/0x160 [ 264.592722][ T1039] device_add+0x1210/0x1950 [ 264.592750][ T1039] ? __pfx_device_add+0x10/0x10 [ 264.592773][ T1039] ? add_device_randomness+0xb7/0xf0 [ 264.592800][ T1039] usb_new_device.cold+0x685/0x115c [ 264.592829][ T1039] ? do_raw_spin_lock+0x128/0x260 [ 264.592850][ T1039] ? __pfx_usb_new_device+0x10/0x10 [ 264.592879][ T1039] ? mark_held_locks+0x40/0x70 [ 264.592901][ T1039] hub_event+0x314d/0x4af0 [ 264.592942][ T1039] ? __pfx_hub_event+0x10/0x10 [ 264.592958][ T1039] ? put_objects.isra.0+0x190/0x1f0 [ 264.592998][ T1039] ? rcu_is_watching+0x12/0xc0 [ 264.593027][ T1039] process_one_work+0xa0e/0x1980 [ 264.593068][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 264.593099][ T1039] ? __pfx_hub_event+0x10/0x10 [ 264.593121][ T1039] worker_thread+0x5ef/0xe50 [ 264.593152][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 264.593171][ T1039] ? kthread+0x13a/0x450 [ 264.593187][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 264.593205][ T1039] kthread+0x370/0x450 [ 264.593220][ T1039] ? __pfx_kthread+0x10/0x10 [ 264.593237][ T1039] ret_from_fork+0x72b/0xd50 [ 264.593260][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 264.593282][ T1039] ? __switch_to+0x800/0x1100 [ 264.593308][ T1039] ? __pfx_kthread+0x10/0x10 [ 264.593327][ T1039] ret_from_fork_asm+0x1a/0x30 [ 264.593364][ T1039] [ 264.593374][ T1039] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.593389][ T1039] CPU: 2 UID: 0 PID: 1039 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 264.593410][ T1039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.593422][ T1039] Workqueue: usb_hub_wq hub_event [ 264.593439][ T1039] Call Trace: [ 264.593448][ T1039] [ 264.593455][ T1039] dump_stack_lvl+0x100/0x190 [ 264.593475][ T1039] vpanic+0x552/0x970 [ 264.593495][ T1039] ? __pfx_vpanic+0x10/0x10 [ 264.593521][ T1039] panic+0xd1/0xe0 [ 264.593537][ T1039] ? __pfx_panic+0x10/0x10 [ 264.593559][ T1039] ? check_panic_on_warn+0x1f/0x90 [ 264.593580][ T1039] check_panic_on_warn.cold+0x19/0x34 [ 264.593599][ T1039] ? usb_submit_urb+0x15fa/0x1910 [ 264.593622][ T1039] __warn.cold+0x191/0x328 [ 264.593642][ T1039] __report_bug+0x296/0x3d0 [ 264.593667][ T1039] ? usb_submit_urb+0x15fa/0x1910 [ 264.593692][ T1039] ? __pfx___report_bug+0x10/0x10 [ 264.593745][ T1039] ? preempt_schedule_common+0x42/0xc0 [ 264.593771][ T1039] ? preempt_schedule_thunk+0x16/0x30 [ 264.593801][ T1039] report_bug_entry+0xe1/0x290 [ 264.593825][ T1039] ? usb_submit_urb+0x15fd/0x1910 [ 264.593852][ T1039] handle_bug+0x1cd/0x2a0 [ 264.593872][ T1039] exc_invalid_op+0x17/0x50 [ 264.593890][ T1039] asm_exc_invalid_op+0x1a/0x20 [ 264.593908][ T1039] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 264.593931][ T1039] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d 70 b4 fa 48 8d 3d 86 49 91 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 264.593949][ T1039] RSP: 0018:ffffc900066e6e50 EFLAGS: 00010293 [ 264.593993][ T1039] RAX: 0000000000000000 RBX: ffff888029d93800 RCX: fffff52000cdcdb6 [ 264.594006][ T1039] RDX: ffff8880209c0000 RSI: ffff888029d93800 RDI: ffffffff90e4dc20 [ 264.594018][ T1039] RBP: ffff888072821b40 R08: 0000000000000000 R09: fffffbfff21afb8a [ 264.594030][ T1039] R10: ffffc900066e6ed8 R11: 0000000000000000 R12: ffff88801b6508a0 [ 264.594041][ T1039] R13: ffff88801b650810 R14: ffff88801b650850 R15: ffff8880256122e0 [ 264.594070][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.594096][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.594122][ T1039] ? __pm_runtime_resume+0xc3/0x170 [ 264.594148][ T1039] cm109_input_open+0x273/0x420 [ 264.594176][ T1039] ? __pfx_cm109_input_open+0x10/0x10 [ 264.594202][ T1039] input_open_device+0x24c/0x3d0 [ 264.594248][ T1039] kbd_connect+0x124/0x180 [ 264.594275][ T1039] input_attach_handler.isra.0+0x177/0x1e0 [ 264.594298][ T1039] input_register_device.cold+0x139/0x375 [ 264.594327][ T1039] cm109_usb_probe+0x128d/0x17f0 [ 264.594358][ T1039] usb_probe_interface+0x303/0x8f0 [ 264.594383][ T1039] ? __pfx_usb_probe_interface+0x10/0x10 [ 264.594405][ T1039] really_probe+0x241/0xa60 [ 264.594429][ T1039] __driver_probe_device+0x22e/0x480 [ 264.594452][ T1039] driver_probe_device+0x4c/0x1b0 [ 264.594474][ T1039] __device_attach_driver+0x1df/0x340 [ 264.594495][ T1039] ? __pfx___device_attach_driver+0x10/0x10 [ 264.594515][ T1039] bus_for_each_drv+0x159/0x1e0 [ 264.594542][ T1039] ? __pfx_bus_for_each_drv+0x10/0x10 [ 264.594569][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.594593][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.594620][ T1039] __device_attach+0x1e4/0x4d0 [ 264.594641][ T1039] ? __pfx___device_attach+0x10/0x10 [ 264.594664][ T1039] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.594691][ T1039] device_initial_probe+0xaf/0xd0 [ 264.594714][ T1039] bus_probe_device+0x64/0x160 [ 264.594735][ T1039] device_add+0x1210/0x1950 [ 264.594762][ T1039] ? __pfx_device_add+0x10/0x10 [ 264.594786][ T1039] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.594819][ T1039] usb_set_configuration+0xd97/0x1c60 [ 264.594866][ T1039] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 264.594891][ T1039] usb_generic_driver_probe+0xa1/0xe0 [ 264.594917][ T1039] usb_probe_device+0xef/0x400 [ 264.594935][ T1039] ? __pfx_usb_probe_device+0x10/0x10 [ 264.594955][ T1039] really_probe+0x241/0xa60 [ 264.594977][ T1039] __driver_probe_device+0x22e/0x480 [ 264.594996][ T1039] ? usb_driver_applicable+0x1c7/0x220 [ 264.595019][ T1039] driver_probe_device+0x4c/0x1b0 [ 264.595041][ T1039] __device_attach_driver+0x1df/0x340 [ 264.595070][ T1039] ? __pfx___device_attach_driver+0x10/0x10 [ 264.595091][ T1039] bus_for_each_drv+0x159/0x1e0 [ 264.595118][ T1039] ? __pfx_bus_for_each_drv+0x10/0x10 [ 264.595147][ T1039] ? lockdep_hardirqs_on+0x78/0x100 [ 264.595173][ T1039] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.595201][ T1039] __device_attach+0x1e4/0x4d0 [ 264.595223][ T1039] ? __pfx___device_attach+0x10/0x10 [ 264.595245][ T1039] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.595271][ T1039] device_initial_probe+0xaf/0xd0 [ 264.595293][ T1039] bus_probe_device+0x64/0x160 [ 264.595314][ T1039] device_add+0x1210/0x1950 [ 264.595339][ T1039] ? __pfx_device_add+0x10/0x10 [ 264.595363][ T1039] ? add_device_randomness+0xb7/0xf0 [ 264.595393][ T1039] usb_new_device.cold+0x685/0x115c [ 264.595422][ T1039] ? do_raw_spin_lock+0x128/0x260 [ 264.595442][ T1039] ? __pfx_usb_new_device+0x10/0x10 [ 264.595471][ T1039] ? mark_held_locks+0x40/0x70 [ 264.990331][ T1039] hub_event+0x314d/0x4af0 [ 264.992232][ T1039] ? __pfx_hub_event+0x10/0x10 [ 264.994290][ T1039] ? put_objects.isra.0+0x190/0x1f0 [ 264.996005][ T1039] ? rcu_is_watching+0x12/0xc0 [ 264.997640][ T1039] process_one_work+0xa0e/0x1980 [ 264.999327][ T1039] ? __pfx_process_one_work+0x10/0x10 [ 265.001093][ T1039] ? __pfx_hub_event+0x10/0x10 [ 265.002683][ T1039] worker_thread+0x5ef/0xe50 [ 265.004154][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 265.005810][ T1039] ? kthread+0x13a/0x450 [ 265.007209][ T1039] ? __pfx_worker_thread+0x10/0x10 [ 265.008822][ T1039] kthread+0x370/0x450 [ 265.010205][ T1039] ? __pfx_kthread+0x10/0x10 [ 265.012082][ T1039] ret_from_fork+0x72b/0xd50 [ 265.013648][ T1039] ? __pfx_ret_from_fork+0x10/0x10 [ 265.015277][ T1039] ? __switch_to+0x800/0x1100 [ 265.016776][ T1039] ? __pfx_kthread+0x10/0x10 [ 265.018265][ T1039] ret_from_fork_asm+0x1a/0x30 [ 265.019981][ T1039] [ 265.021912][ T1039] Kernel Offset: disabled [ 265.023475][ T1039] Rebooting in 86400 seconds..