last executing test programs: 50m33.147229396s ago: executing program 32 (id=55): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/udplite6\x00') setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 50m31.665384098s ago: executing program 33 (id=69): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfe}, 0x2) 50m24.149299375s ago: executing program 34 (id=108): wait4(0x0, 0x0, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 50m17.889942797s ago: executing program 35 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 50m8.916526659s ago: executing program 36 (id=240): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x6d4b5511, 0x200, 0x3c8, 0x6, 0x40, 0x7, 0xc}, &(0x7f0000000300)=0x9c) 49m51.572562626s ago: executing program 37 (id=454): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100008595060000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f00000003c0)=r3}, 0x20) close(r3) 49m48.66344407s ago: executing program 38 (id=484): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) 49m41.944350859s ago: executing program 39 (id=543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 49m23.099115042s ago: executing program 40 (id=690): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 49m20.998023829s ago: executing program 41 (id=703): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000040)={0x5, 0x8, 0x80000000, 0x1, 0x2, 0x7, 0xc7, 0x4, 0x9, 0x9, 0x0, "78b35c15913cae86ede14e40a3f411c01a8018a894ff71102e783a301d0417bd"}) 49m10.301941398s ago: executing program 42 (id=777): socket$kcm(0x10, 0x400000002, 0x0) syz_io_uring_setup(0x114, &(0x7f0000001d00)={0x0, 0x0, 0x1, 0x3, 0x8000000}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 49m8.044624862s ago: executing program 43 (id=790): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x3c, 0x0, @private2, @local, {[@routing={0x84, 0x0, 0x1, 0x0, 0xf5}]}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010002a5f8e5d810500000000fcdbdf25", @ANYRES32=0x0, @ANYBLOB="14d004000000000008002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x22004082}, 0x4040800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(r3, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) socket(0x10, 0x3, 0x0) 37m0.233197248s ago: executing program 44 (id=5274): syz_usb_connect(0x6, 0x7a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 34m45.276205093s ago: executing program 45 (id=6081): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) 34m44.274120516s ago: executing program 46 (id=6092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14}}, 0x80}}, 0x4000000) 34m36.901935633s ago: executing program 47 (id=6117): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 34m29.875230361s ago: executing program 0 (id=6209): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 34m14.859464917s ago: executing program 48 (id=6209): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 12m18.827492609s ago: executing program 49 (id=14008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 12m2.208451258s ago: executing program 50 (id=14060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 12m0.06287066s ago: executing program 51 (id=14066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) 11m59.708760155s ago: executing program 52 (id=14072): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) 11m53.335590392s ago: executing program 1 (id=14090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 11m52.330274513s ago: executing program 1 (id=14091): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100008595060000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f00000003c0)=r3}, 0x20) close(r3) 11m51.166079727s ago: executing program 1 (id=14092): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000"], 0x20}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 11m50.917822703s ago: executing program 53 (id=14092): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000"], 0x20}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 11m47.353782627s ago: executing program 54 (id=14103): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000100)="b9ff030f6044", 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 11m46.259719937s ago: executing program 0 (id=14093): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000"], 0x20}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xb902bb55, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x4000010, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 11m45.220408761s ago: executing program 55 (id=14109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 11m45.217633731s ago: executing program 0 (id=14111): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xffffffffffffff6e, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p\b\x00\x00\x00\x00\x00\x00\x00\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000000c0)) 11m44.214355102s ago: executing program 0 (id=14113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 11m43.488788221s ago: executing program 0 (id=14115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x90a, 0x2000000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000440), 0x18, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000071110c00000000008510000002000000850000007600000095000000000000009500a50500000000cc010453c6c0b4511a0f326e65b8c392b099f3db1c286756651806f5838fff8902f53d04a362fcb8260946fb775b175b9401000000591c48ef9af4bb7a25e3bd63a9ee1d49e5ba26aa93c920433a4c19564d0d0b12e066b0a2d0dc3868191a08afba082236a06ccb9aceb85350893d607fd57c03147dc27e8659c9bbde9f299d97bebe5c4cdae6680855123ca340f660ee4cec3e0bf88ef1b86ae7356bfaf60ec30ce7b0fe5db625b22d4490453994d6e11456c1eee574000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='cramfs\x00', 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m43.189988445s ago: executing program 56 (id=14117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r1, 0x101, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5}]}, 0x24}}, 0x0) 11m43.046325352s ago: executing program 0 (id=14119): fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create(0xb54) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) 11m42.94796762s ago: executing program 57 (id=14119): fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create(0xb54) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) 5m24.660887063s ago: executing program 2 (id=15967): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 5m24.598117565s ago: executing program 2 (id=15969): munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5m24.597885757s ago: executing program 2 (id=15971): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x100000000, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0xffffffffffffffff], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m24.511518931s ago: executing program 2 (id=15975): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 5m24.463862681s ago: executing program 2 (id=15977): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32, @ANYBLOB="4500330040000000080211000000080211000001505050505050"], 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 5m24.351236803s ago: executing program 2 (id=15981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400010000408000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5m24.260716309s ago: executing program 58 (id=15981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400010000408000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5m23.42924631s ago: executing program 8 (id=16002): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32, @ANYBLOB="4500330040000000080211000000080211000001505050505050"], 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 5m23.299383446s ago: executing program 8 (id=16005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 5m23.212385131s ago: executing program 8 (id=16007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) 5m23.158499746s ago: executing program 8 (id=16009): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 5m23.158073963s ago: executing program 8 (id=16010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0xa03, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) 5m22.917238134s ago: executing program 8 (id=16012): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 5m22.756638657s ago: executing program 59 (id=16012): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 5m21.033527598s ago: executing program 1 (id=15983): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 5m20.966186029s ago: executing program 1 (id=16045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x20000001, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 5m20.858491766s ago: executing program 1 (id=16046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x24040900) 5m5.807819876s ago: executing program 60 (id=16046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x24040900) 2m34.142881542s ago: executing program 6 (id=18567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) close(r0) 2m34.117056134s ago: executing program 6 (id=18568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 2m34.055033323s ago: executing program 6 (id=18571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m34.021552995s ago: executing program 6 (id=18572): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 2m33.948830865s ago: executing program 6 (id=18573): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @string={0x4, 0x3, "cd18"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x4, 0x3, "056d"}}, 0x0, 0x0, 0x0}, 0x0) 2m31.60932134s ago: executing program 6 (id=18599): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x7, 0x6837, 0x8000, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x8001, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8b) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) 2m16.51679104s ago: executing program 61 (id=18599): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x7, 0x6837, 0x8000, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x8001, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8b) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) 12.815750709s ago: executing program 3 (id=19370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 11.62616655s ago: executing program 3 (id=19377): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = fsmount(0xffffffffffffffff, 0x1, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0x3}, {0xfff2, 0xe}, {0x3, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x51) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) 10.333438553s ago: executing program 4 (id=19380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 9.99139987s ago: executing program 3 (id=19381): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f00000003c0)=r4}, 0x20) close(r4) 8.474996572s ago: executing program 4 (id=19382): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) dup(0xffffffffffffffff) 8.109336837s ago: executing program 4 (id=19383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.975544774s ago: executing program 4 (id=19384): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) dup(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.525163852s ago: executing program 4 (id=19391): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.117676596s ago: executing program 7 (id=19394): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008880}, 0x1c815) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x800, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 5.833149237s ago: executing program 3 (id=19395): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 5.125378656s ago: executing program 7 (id=19396): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000"], 0x0, 0x4a}, 0x28) close(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0xffffffffffffffff) 5.109943112s ago: executing program 4 (id=19398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 4.217184642s ago: executing program 7 (id=19400): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {0x0, 0xff3f0000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00'}, 0x18) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 4.114324422s ago: executing program 3 (id=19401): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r2, 0x0, 0x40000100) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, 0x453, 0x200, 0x70bd2b, 0x25dfdbfc, 'I'}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 3.908365022s ago: executing program 7 (id=19404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x0, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 3.773084714s ago: executing program 7 (id=19405): move_pages(0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$setperm(0x5, 0x0, 0x10000004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc493"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x3000000, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 3.184826253s ago: executing program 3 (id=19408): creat(0x0, 0xecf86c37d53049cc) r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x5, 0x8, 0x5, 0x10100, 0xff}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0x2, 0x1ffc], 0x80a0000}) r6 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x109940, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.603562382s ago: executing program 5 (id=19410): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008880}, 0x1c815) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x800, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.866213424s ago: executing program 9 (id=19411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000400', @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.864365921s ago: executing program 7 (id=19412): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) syz_usb_connect(0x6, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12014101686036207e0e011017a30102030109022400010000ab000904980702df2b9f1f09050a0200040d00060905820208"], 0x0) 1.722377824s ago: executing program 9 (id=19413): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) 1.291898111s ago: executing program 9 (id=19414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') 1.241832297s ago: executing program 5 (id=19415): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) 996.819881ms ago: executing program 9 (id=19416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x4810) 938.298913ms ago: executing program 9 (id=19417): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read$msr(r0, &(0x7f0000000000)=""/4096, 0x1000) 902.697455ms ago: executing program 5 (id=19418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 850.686688ms ago: executing program 5 (id=19419): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) dup(0xffffffffffffffff) 215.427841ms ago: executing program 5 (id=19420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 180.021869ms ago: executing program 5 (id=19421): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x3}, {0xfff2, 0xe}, {0x3, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x51) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) 0s ago: executing program 9 (id=19422): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): gs: Mfr=0, Product=0, SerialNumber=0 [ 2900.148275][T19387] usb 10-1: config 0 descriptor?? [ 2900.245339][T19158] usb 7-1: device descriptor read/64, error -71 [ 2900.405348][T24574] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2900.485550][T19158] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2900.557163][T19387] usbhid 10-1:0.0: can't add hid device: -71 [ 2900.563412][T19387] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2900.564597][T24574] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2900.572962][T19387] usb 10-1: USB disconnect, device number 35 [ 2900.580459][T24574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.594308][T24574] usb 6-1: Product: syz [ 2900.598794][T24574] usb 6-1: Manufacturer: syz [ 2900.603425][T24574] usb 6-1: SerialNumber: syz [ 2900.608747][T24574] usb 6-1: config 0 descriptor?? [ 2900.625311][T19158] usb 7-1: device descriptor read/64, error -71 [ 2900.745384][T19158] usb usb7-port1: attempt power cycle [ 2900.822336][T24628] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 2900.828547][T19387] usb 6-1: USB disconnect, device number 42 [ 2900.831314][T24628] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 2900.843730][T24628] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 2900.851706][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2900.851719][ T30] audit: type=1400 audit(2000000133.977:2632): avc: denied { read } for pid=29204 comm="syz.4.17655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2900.877924][T24628] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 2900.887101][T24628] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2900.898086][T24628] usb 5-1: USB disconnect, device number 98 [ 2900.911097][T24628] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2900.921162][T24628] keyspan 5-1:0.133: device disconnected [ 2900.927077][T29211] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2900.952375][T19655] usb 4-1: USB disconnect, device number 88 [ 2901.105311][T19158] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2901.125805][T19158] usb 7-1: device descriptor read/8, error -71 [ 2901.134520][T29220] netlink: 'syz.9.17662': attribute type 1 has an invalid length. [ 2901.295259][T19655] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2901.365462][T19158] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2901.385649][T19158] usb 7-1: device descriptor read/8, error -71 [ 2901.415362][T24628] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2901.448088][T19655] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2901.457173][T19655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.465129][T19655] usb 4-1: Product: syz [ 2901.469313][T19655] usb 4-1: Manufacturer: syz [ 2901.473885][T19655] usb 4-1: SerialNumber: syz [ 2901.480008][T19655] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2901.493490][T19387] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2901.506361][T19158] usb usb7-port1: unable to enumerate USB device [ 2901.565310][T24628] usb 10-1: Using ep0 maxpacket: 32 [ 2901.571822][T24628] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2901.580142][T24628] usb 10-1: config 0 has no interface number 0 [ 2901.586858][T24628] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2901.597951][T24628] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2901.608617][T24628] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2901.617931][T24628] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.626050][ T30] audit: type=1400 audit(2000000134.747:2633): avc: denied { setopt } for pid=29229 comm="syz.4.17667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2901.647118][T24628] usb 10-1: config 0 descriptor?? [ 2901.703316][T19655] usb 4-1: USB disconnect, device number 89 [ 2901.748106][T29240] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2901.805319][T19158] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2901.979842][T19158] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2901.988136][T19158] usb 6-1: config 0 has no interface number 0 [ 2901.996309][T19158] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2902.005905][T19158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.013873][T19158] usb 6-1: Product: syz [ 2902.018132][T19158] usb 6-1: Manufacturer: syz [ 2902.022708][T19158] usb 6-1: SerialNumber: syz [ 2902.028039][T19158] usb 6-1: config 0 descriptor?? [ 2902.215875][T18743] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2902.256862][T24628] usbhid 10-1:0.1: can't add hid device: -71 [ 2902.262929][T24628] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 2902.271775][T24628] usb 10-1: USB disconnect, device number 36 [ 2902.368036][T18743] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2902.377202][T18743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.385279][T18743] usb 5-1: Product: syz [ 2902.389423][T18743] usb 5-1: Manufacturer: syz [ 2902.393986][T18743] usb 5-1: SerialNumber: syz [ 2902.399518][T18743] usb 5-1: config 0 descriptor?? [ 2902.565321][T19387] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2902.572315][T19387] ath9k_htc: Failed to initialize the device [ 2902.578683][T19655] usb 4-1: ath9k_htc: USB layer deinitialized [ 2902.609313][T24628] usb 5-1: USB disconnect, device number 99 [ 2902.779786][T29254] input: syz1 as /devices/virtual/input/input199 [ 2902.875184][T19655] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2903.025953][T19655] usb 4-1: Using ep0 maxpacket: 16 [ 2903.032336][T19655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2903.043367][T19655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2903.053204][T19655] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2903.062457][T19655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2903.071453][T19655] usb 4-1: config 0 descriptor?? [ 2903.075325][T24628] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2903.237748][T24628] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2903.246969][T24628] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.255034][T24628] usb 10-1: Product: syz [ 2903.259315][T24628] usb 10-1: Manufacturer: syz [ 2903.263989][T24628] usb 10-1: SerialNumber: syz [ 2903.270067][T24628] usb 10-1: config 0 descriptor?? [ 2903.280120][T19655] usbhid 4-1:0.0: can't add hid device: -71 [ 2903.286328][T19655] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2903.295393][T19655] usb 4-1: USB disconnect, device number 90 [ 2903.354338][T29267] fuse: Unknown parameter 'use00000000000000000000' [ 2903.479134][T24574] usb 10-1: USB disconnect, device number 37 [ 2903.715206][T24628] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2903.812504][T29285] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2903.845156][T24628] usb 5-1: device descriptor read/64, error -71 [ 2904.066744][T29304] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2904.095178][T24628] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2904.245130][T24628] usb 5-1: device descriptor read/64, error -71 [ 2904.346220][T19655] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2904.355712][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17709'. [ 2904.365120][T24628] usb usb5-port1: attempt power cycle [ 2904.410212][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17712'. [ 2904.422400][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17712'. [ 2904.433025][T29331] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2904.439924][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17712'. [ 2904.503506][T29335] input: syz1 as /devices/virtual/input/input200 [ 2904.517656][T19655] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2904.527947][T19655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2904.535977][T19655] usb 7-1: Product: syz [ 2904.540184][T19655] usb 7-1: Manufacturer: syz [ 2904.544764][T19655] usb 7-1: SerialNumber: syz [ 2904.551952][T19655] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2904.569637][T19387] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2904.600405][T19158] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2904.616625][T19158] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2904.624505][T19158] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2904.632522][T19158] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2904.650854][T19158] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2904.662771][T19158] usb 6-1: USB disconnect, device number 43 [ 2904.681905][T19158] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2904.688365][T29343] fuse: Unknown parameter 'user_i00000000000000000000' [ 2904.703889][T19158] keyspan 6-1:0.133: device disconnected [ 2904.715149][T24628] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2904.745641][T24628] usb 5-1: device descriptor read/8, error -71 [ 2904.802806][T19655] usb 7-1: USB disconnect, device number 65 [ 2904.816386][T26875] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2904.943533][T29357] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2905.005114][T24628] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2905.015509][T26875] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2905.024720][T26875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.032958][T26875] usb 10-1: Product: syz [ 2905.037465][T24628] usb 5-1: device descriptor read/8, error -71 [ 2905.043622][T26875] usb 10-1: Manufacturer: syz [ 2905.048373][T26875] usb 10-1: SerialNumber: syz [ 2905.054090][T26875] usb 10-1: config 0 descriptor?? [ 2905.145267][T24628] usb usb5-port1: unable to enumerate USB device [ 2905.262496][T24628] usb 10-1: USB disconnect, device number 38 [ 2905.287524][T29364] netlink: 'syz.3.17728': attribute type 10 has an invalid length. [ 2905.311830][T29366] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2905.365108][T26875] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2905.420643][T29369] fuse: Unknown parameter 'user_i00000000000000000000' [ 2905.536849][T26875] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2905.545115][T26875] usb 6-1: config 0 has no interface number 0 [ 2905.552538][T26875] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2905.561566][T26875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.569586][T26875] usb 6-1: Product: syz [ 2905.573709][T26875] usb 6-1: Manufacturer: syz [ 2905.578343][T26875] usb 6-1: SerialNumber: syz [ 2905.583531][T26875] usb 6-1: config 0 descriptor?? [ 2905.605356][T19387] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2905.612326][T19387] ath9k_htc: Failed to initialize the device [ 2905.619016][T19655] usb 7-1: ath9k_htc: USB layer deinitialized [ 2905.736112][T25391] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 2905.886292][T25391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2905.896491][T25391] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2905.906886][T25391] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2905.915933][T19655] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2905.923758][T25391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.931847][T25391] usb 4-1: Product: syz [ 2905.936177][T25391] usb 4-1: Manufacturer: syz [ 2905.940754][T25391] usb 4-1: SerialNumber: syz [ 2905.946390][T25391] usb 4-1: config 0 descriptor?? [ 2906.085070][T19655] usb 7-1: Using ep0 maxpacket: 16 [ 2906.092112][T19655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2906.103427][T19655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2906.113673][T19655] usb 7-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2906.122717][T19655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.132054][T19655] usb 7-1: config 0 descriptor?? [ 2906.339761][T19655] usbhid 7-1:0.0: can't add hid device: -71 [ 2906.345744][T19655] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2906.354712][T19655] usb 7-1: USB disconnect, device number 66 [ 2906.487268][T29392] netlink: 'syz.4.17741': attribute type 2 has an invalid length. [ 2906.512970][T29394] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2906.643009][T29398] fuse: Unknown parameter 'user_id00000000000000000000' [ 2906.671121][T29400] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2907.039321][T29419] netlink: 'syz.6.17752': attribute type 10 has an invalid length. [ 2907.072804][T29421] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2907.275192][T25391] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2907.294299][T29427] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2907.414951][T25391] usb 10-1: device descriptor read/64, error -71 [ 2907.665117][T25391] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2907.794944][T19655] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2907.804928][T25391] usb 10-1: device descriptor read/64, error -71 [ 2907.903351][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17764'. [ 2907.913710][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17764'. [ 2907.923522][T25391] usb usb10-port1: attempt power cycle [ 2907.931583][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17764'. [ 2907.944964][T19655] usb 7-1: Using ep0 maxpacket: 32 [ 2907.951370][T19655] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2907.959442][T19655] usb 7-1: config 0 has no interface number 0 [ 2907.965645][T19655] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2907.979287][T19655] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2907.989139][T19655] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2907.999684][T19655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.010313][T19655] usb 7-1: config 0 descriptor?? [ 2908.152364][T26875] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2908.160685][T26875] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2908.168591][T26875] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2908.176381][T26875] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2908.187809][T26875] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2908.193752][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17769'. [ 2908.197037][T26875] usb 6-1: USB disconnect, device number 44 [ 2908.205647][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17769'. [ 2908.213343][T26875] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2908.232017][T26875] keyspan 6-1:0.133: device disconnected [ 2908.264947][T25391] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2908.272918][T29459] netlink: 'syz.5.17770': attribute type 10 has an invalid length. [ 2908.274872][T19387] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2908.289365][T25391] usb 10-1: device descriptor read/8, error -71 [ 2908.447750][T19387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2908.459774][T19387] usb 5-1: config 0 has no interfaces? [ 2908.465803][T19387] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2908.476902][T19387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.486773][T19387] usb 5-1: config 0 descriptor?? [ 2908.492575][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17776'. [ 2908.521085][T19387] usb 4-1: USB disconnect, device number 91 [ 2908.536467][T25391] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2908.565949][T25391] usb 10-1: device descriptor read/8, error -71 [ 2908.633436][T19655] usbhid 7-1:0.1: can't add hid device: -71 [ 2908.639446][T19655] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 2908.649864][T19655] usb 7-1: USB disconnect, device number 67 [ 2908.674992][T25391] usb usb10-port1: unable to enumerate USB device [ 2909.384872][T19655] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 2909.445072][T14856] Bluetooth: hci2: command 0x0406 tx timeout [ 2909.530596][T29498] __nla_validate_parse: 2 callbacks suppressed [ 2909.530608][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17788'. [ 2909.546840][T29498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17788'. [ 2909.568077][T19655] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 2909.576460][T19655] usb 7-1: config 0 has no interface number 0 [ 2909.584272][T19655] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2909.593401][T19655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.601914][T19655] usb 7-1: Product: syz [ 2909.606169][T19655] usb 7-1: Manufacturer: syz [ 2909.613294][T19655] usb 7-1: SerialNumber: syz [ 2909.621724][T19655] usb 7-1: config 0 descriptor?? [ 2909.709114][T29512] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2909.830679][T19655] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 2909.840118][T19655] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 2909.848224][T19655] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 2909.858042][T19655] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 2909.866905][T19655] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2909.931327][T29524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17800'. [ 2909.941743][T29524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17800'. [ 2910.032392][T19655] usb 7-1: USB disconnect, device number 68 [ 2910.040650][T19655] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2910.051787][T19655] keyspan 7-1:0.133: device disconnected [ 2910.211641][T29547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17811'. [ 2910.221299][T29547] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17811'. [ 2910.226941][T29549] input: syz1 as /devices/virtual/input/input201 [ 2910.506920][T24628] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2910.593558][ T30] audit: type=1400 audit(2000000143.718:2634): avc: denied { mount } for pid=29559 comm="syz.6.17817" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2910.629456][ T30] audit: type=1400 audit(2000000143.718:2635): avc: denied { unmount } for pid=25979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2910.651382][T24628] usb 10-1: device descriptor read/64, error -71 [ 2910.686841][T29573] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2910.894758][T24628] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2910.941618][T29591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17831'. [ 2910.950714][T29591] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2911.024762][T24628] usb 10-1: device descriptor read/64, error -71 [ 2911.042589][T29599] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2911.048567][T26875] usb 5-1: USB disconnect, device number 104 [ 2911.135847][T24628] usb usb10-port1: attempt power cycle [ 2911.158644][T29610] netlink: 'syz.4.17840': attribute type 10 has an invalid length. [ 2911.339576][T29629] openvswitch: netlink: Flow actions attr not present in new flow. [ 2911.408270][T29635] syzkaller0: entered promiscuous mode [ 2911.413787][T29635] syzkaller0: entered allmulticast mode [ 2911.422214][T29637] debugfs: '!' already exists in 'ieee80211' [ 2911.475100][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17855'. [ 2911.484051][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17855'. [ 2911.485194][T24628] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2911.527163][T24628] usb 10-1: device descriptor read/8, error -71 [ 2911.549307][T29649] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2911.618397][T29657] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2911.774700][T24628] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2911.816509][T24628] usb 10-1: device descriptor read/8, error -71 [ 2911.822965][T29669] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2911.830612][T29669] CPU: 0 UID: 0 PID: 29669 Comm: syz.5.17866 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 2911.830640][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2911.830653][T29669] Call Trace: [ 2911.830660][T29669] [ 2911.830667][T29669] dump_stack_lvl+0x16c/0x1f0 [ 2911.830691][T29669] sysfs_warn_dup+0x7f/0xa0 [ 2911.830716][T29669] sysfs_do_create_link_sd+0x124/0x140 [ 2911.830741][T29669] sysfs_create_link+0x61/0xc0 [ 2911.830765][T29669] device_add+0x62c/0x1aa0 [ 2911.830791][T29669] ? __pfx_device_add+0x10/0x10 [ 2911.830814][T29669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2911.830836][T29669] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2911.830867][T29669] wiphy_register+0x1df4/0x29f0 [ 2911.830887][T29669] ? netdev_run_todo+0x864/0x1320 [ 2911.830908][T29669] ? __dev_printk+0x230/0x270 [ 2911.830927][T29669] ? __pfx_wiphy_register+0x10/0x10 [ 2911.830951][T29669] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2911.830973][T29669] ieee80211_register_hw+0x24a9/0x4060 [ 2911.830998][T29669] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2911.831021][T29669] ? net_generic+0xea/0x2a0 [ 2911.831041][T29669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2911.831061][T29669] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2911.831080][T29669] ? __hrtimer_setup+0x176/0x280 [ 2911.831100][T29669] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2911.831127][T29669] ? trace_kmalloc+0x2b/0xd0 [ 2911.831145][T29669] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2911.831163][T29669] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2911.831183][T29669] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2911.831203][T29669] ? __asan_memcpy+0x3c/0x60 [ 2911.831235][T29669] hwsim_new_radio_nl+0xb51/0x12c0 [ 2911.831258][T29669] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2911.831282][T29669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2911.831304][T29669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2911.831327][T29669] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2911.831348][T29669] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2911.831371][T29669] ? bpf_lsm_capable+0x9/0x10 [ 2911.831393][T29669] ? security_capable+0x7e/0x260 [ 2911.831411][T29669] ? ns_capable+0xd7/0x110 [ 2911.831430][T29669] genl_rcv_msg+0x55c/0x800 [ 2911.831451][T29669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2911.831472][T29669] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2911.831498][T29669] netlink_rcv_skb+0x155/0x420 [ 2911.831516][T29669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2911.831538][T29669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2911.831561][T29669] ? netlink_deliver_tap+0x1ae/0xd30 [ 2911.831578][T29669] ? selinux_netlink_send+0x578/0x830 [ 2911.831599][T29669] ? is_vmalloc_addr+0x86/0xa0 [ 2911.831616][T29669] genl_rcv+0x28/0x40 [ 2911.831636][T29669] netlink_unicast+0x5aa/0x870 [ 2911.831657][T29669] ? __pfx_netlink_unicast+0x10/0x10 [ 2911.831677][T29669] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2911.831700][T29669] netlink_sendmsg+0x8d1/0xdd0 [ 2911.831722][T29669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2911.831746][T29669] ____sys_sendmsg+0xa95/0xc70 [ 2911.831770][T29669] ? copy_msghdr_from_user+0x10a/0x160 [ 2911.831788][T29669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2911.831814][T29669] ? __pfx_futex_wake_mark+0x10/0x10 [ 2911.831836][T29669] ___sys_sendmsg+0x134/0x1d0 [ 2911.831854][T29669] ? __pfx____sys_sendmsg+0x10/0x10 [ 2911.831872][T29669] ? futex_private_hash_put+0x11c/0x300 [ 2911.831901][T29669] ? rcu_is_watching+0x12/0xc0 [ 2911.831932][T29669] __sys_sendmsg+0x16d/0x220 [ 2911.831950][T29669] ? __pfx___sys_sendmsg+0x10/0x10 [ 2911.831969][T29669] ? __x64_sys_futex+0x1e0/0x4c0 [ 2911.832001][T29669] do_syscall_64+0xcd/0x4c0 [ 2911.832022][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.832041][T29669] RIP: 0033:0x7f754498ebe9 [ 2911.832055][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2911.832075][T29669] RSP: 002b:00007f7545768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2911.832094][T29669] RAX: ffffffffffffffda RBX: 00007f7544bb5fa0 RCX: 00007f754498ebe9 [ 2911.832106][T29669] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003 [ 2911.832118][T29669] RBP: 00007f7544a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2911.832130][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2911.832142][T29669] R13: 00007f7544bb6038 R14: 00007f7544bb5fa0 R15: 00007ffe13be9d78 [ 2911.832161][T29669] [ 2912.260586][T24628] usb usb10-port1: unable to enumerate USB device [ 2912.261687][T19655] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2912.393869][T29684] fuse: Unknown parameter '0x0000000000000004' [ 2912.424997][T19655] usb 4-1: Using ep0 maxpacket: 16 [ 2912.428273][T29688] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2912.440378][T19655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2912.452537][T19655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2912.462283][T19655] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2912.471325][T19655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.481114][T19655] usb 4-1: config 0 descriptor?? [ 2912.512582][T29692] input: syz1 as /devices/virtual/input/input202 [ 2912.537863][T29694] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2912.546634][T29694] CPU: 0 UID: 0 PID: 29694 Comm: syz.5.17879 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 2912.546667][T29694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2912.546680][T29694] Call Trace: [ 2912.546687][T29694] [ 2912.546694][T29694] dump_stack_lvl+0x16c/0x1f0 [ 2912.546719][T29694] sysfs_warn_dup+0x7f/0xa0 [ 2912.546743][T29694] sysfs_do_create_link_sd+0x124/0x140 [ 2912.546770][T29694] sysfs_create_link+0x61/0xc0 [ 2912.546794][T29694] device_add+0x62c/0x1aa0 [ 2912.546819][T29694] ? __pfx_device_add+0x10/0x10 [ 2912.546843][T29694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2912.546865][T29694] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2912.546896][T29694] wiphy_register+0x1df4/0x29f0 [ 2912.546916][T29694] ? netdev_run_todo+0x864/0x1320 [ 2912.546938][T29694] ? __dev_printk+0x230/0x270 [ 2912.546957][T29694] ? __pfx_wiphy_register+0x10/0x10 [ 2912.546987][T29694] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2912.547010][T29694] ieee80211_register_hw+0x24a9/0x4060 [ 2912.547035][T29694] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2912.547059][T29694] ? net_generic+0xea/0x2a0 [ 2912.547079][T29694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2912.547101][T29694] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2912.547121][T29694] ? __hrtimer_setup+0x176/0x280 [ 2912.547142][T29694] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2912.547172][T29694] ? trace_kmalloc+0x2b/0xd0 [ 2912.547195][T29694] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2912.547216][T29694] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2912.547240][T29694] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2912.547265][T29694] ? __asan_memcpy+0x3c/0x60 [ 2912.547295][T29694] hwsim_new_radio_nl+0xb51/0x12c0 [ 2912.547321][T29694] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2912.547350][T29694] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2912.547377][T29694] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2912.547405][T29694] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2912.547429][T29694] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2912.547457][T29694] ? bpf_lsm_capable+0x9/0x10 [ 2912.547484][T29694] ? security_capable+0x7e/0x260 [ 2912.547505][T29694] ? ns_capable+0xd7/0x110 [ 2912.547527][T29694] genl_rcv_msg+0x55c/0x800 [ 2912.547551][T29694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2912.547575][T29694] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2912.547603][T29694] netlink_rcv_skb+0x155/0x420 [ 2912.547623][T29694] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2912.547647][T29694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2912.547673][T29694] ? netlink_deliver_tap+0x1ae/0xd30 [ 2912.547691][T29694] ? selinux_netlink_send+0x578/0x830 [ 2912.547715][T29694] ? is_vmalloc_addr+0x86/0xa0 [ 2912.547735][T29694] genl_rcv+0x28/0x40 [ 2912.547756][T29694] netlink_unicast+0x5aa/0x870 [ 2912.547778][T29694] ? __pfx_netlink_unicast+0x10/0x10 [ 2912.547799][T29694] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2912.547823][T29694] netlink_sendmsg+0x8d1/0xdd0 [ 2912.547845][T29694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2912.547869][T29694] ____sys_sendmsg+0xa95/0xc70 [ 2912.547894][T29694] ? copy_msghdr_from_user+0x10a/0x160 [ 2912.547913][T29694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2912.547939][T29694] ? __pfx_futex_wake_mark+0x10/0x10 [ 2912.547967][T29694] ___sys_sendmsg+0x134/0x1d0 [ 2912.547986][T29694] ? __pfx____sys_sendmsg+0x10/0x10 [ 2912.548005][T29694] ? futex_private_hash_put+0x11c/0x300 [ 2912.548036][T29694] ? rcu_is_watching+0x12/0xc0 [ 2912.548068][T29694] __sys_sendmsg+0x16d/0x220 [ 2912.548088][T29694] ? __pfx___sys_sendmsg+0x10/0x10 [ 2912.548105][T29694] ? __x64_sys_futex+0x1e0/0x4c0 [ 2912.548139][T29694] do_syscall_64+0xcd/0x4c0 [ 2912.548161][T29694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.548180][T29694] RIP: 0033:0x7f754498ebe9 [ 2912.548195][T29694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2912.548213][T29694] RSP: 002b:00007f7545768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2912.548234][T29694] RAX: ffffffffffffffda RBX: 00007f7544bb5fa0 RCX: 00007f754498ebe9 [ 2912.548247][T29694] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003 [ 2912.548259][T29694] RBP: 00007f7544a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2912.548272][T29694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2912.548283][T29694] R13: 00007f7544bb6038 R14: 00007f7544bb5fa0 R15: 00007ffe13be9d78 [ 2912.548302][T29694] [ 2913.198383][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17892'. [ 2913.360535][T29741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2913.590463][T19655] letsketch 0003:6161:4D15.0030: Device info: ᣍ [ 2913.694583][T25391] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2913.748319][T29762] openvswitch: netlink: Flow actions attr not present in new flow. [ 2913.790952][T19655] letsketch 0003:6161:4D15.0030: Device info: ఁ [ 2913.845570][T25391] usb 10-1: Using ep0 maxpacket: 16 [ 2913.851907][T25391] usb 10-1: config 0 has no interfaces? [ 2913.866988][T25391] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2913.876249][T25391] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2913.884325][T25391] usb 10-1: Product: syz [ 2913.888653][T25391] usb 10-1: Manufacturer: syz [ 2913.893336][T25391] usb 10-1: SerialNumber: syz [ 2913.899171][T25391] usb 10-1: config 0 descriptor?? [ 2914.020004][T19655] usb 4-1: Max retries (5) exceeded reading string descriptor 202 [ 2914.029014][T19655] letsketch 0003:6161:4D15.0030: probe with driver letsketch failed with error -71 [ 2914.040573][T19655] usb 4-1: USB disconnect, device number 92 [ 2914.145903][T29791] delete_channel: no stack [ 2914.150427][T29791] delete_channel: no stack [ 2914.235761][T29802] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2914.400048][T29813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2914.545747][T29834] __nla_validate_parse: 8 callbacks suppressed [ 2914.545765][T29834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17945'. [ 2914.561509][T29834] netlink: 48 bytes leftover after parsing attributes in process `syz.6.17945'. [ 2914.592908][T29839] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2914.669744][T29845] syzkaller0: entered promiscuous mode [ 2914.676760][T29845] syzkaller0: entered allmulticast mode [ 2914.802844][T29856] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17956'. [ 2914.813036][T29856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2914.871007][T29861] C: renamed from team_slave_0 [ 2914.878026][T29861] netlink: 'syz.3.17958': attribute type 3 has an invalid length. [ 2914.885887][T29861] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17958'. [ 2914.962203][T29870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2915.016154][T29877] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2915.105904][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17971'. [ 2915.128280][T29887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17971'. [ 2915.230230][T29901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2915.361431][T29918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17985'. [ 2915.456859][T29932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2915.554529][T29944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17999'. [ 2915.688462][T29962] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18007'. [ 2915.785514][T17947] tipc: Subscription rejected, illegal request [ 2915.810607][T29976] input: syz1 as /devices/virtual/input/input203 [ 2915.837947][T29980] netlink: 'syz.3.18016': attribute type 10 has an invalid length. [ 2915.874970][T24628] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2915.996540][T30000] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18025'. [ 2916.039987][T24628] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2916.049142][T24628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.057323][T24628] usb 6-1: Product: syz [ 2916.061454][T24628] usb 6-1: Manufacturer: syz [ 2916.066354][T24628] usb 6-1: SerialNumber: syz [ 2916.071823][T24628] usb 6-1: config 0 descriptor?? [ 2916.134488][T26875] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2916.159454][T30008] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2916.308107][T26875] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2916.317218][T26875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.328697][T26875] usb 5-1: Product: syz [ 2916.332889][T26875] usb 5-1: Manufacturer: syz [ 2916.335184][T30018] openvswitch: netlink: Flow key attr not present in new flow. [ 2916.337530][T26875] usb 5-1: SerialNumber: syz [ 2916.352080][T26875] usb 5-1: config 0 descriptor?? [ 2916.474240][T30033] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2916.484097][T19655] usb 10-1: USB disconnect, device number 47 [ 2916.513647][T30035] debugfs: '!' already exists in 'ieee80211' [ 2916.571760][T26875] usb 5-1: USB disconnect, device number 105 [ 2916.586733][T30039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2916.660588][ T30] audit: type=1400 audit(2000000149.788:2636): avc: denied { remount } for pid=30041 comm="syz.9.18043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2916.660616][T30042] bpf: Bad value for 'uid' [ 2916.781231][T16540] Bluetooth: hci0: unexpected event for opcode 0x203d [ 2916.845838][T30067] syz1: rxe_newlink: already configured on syz_tun [ 2917.246853][T30110] netlink: 'syz.3.18074': attribute type 1 has an invalid length. [ 2917.258277][T30110] netlink: 'syz.3.18074': attribute type 1 has an invalid length. [ 2917.280376][T30114] netlink: 'syz.6.18076': attribute type 29 has an invalid length. [ 2917.297225][T30114] netlink: 'syz.6.18076': attribute type 29 has an invalid length. [ 2917.320575][T30114] netlink: 'syz.6.18076': attribute type 29 has an invalid length. [ 2917.453299][ T30] audit: type=1400 audit(2000000150.578:2637): avc: denied { nlmsg_read } for pid=30132 comm="syz.4.18085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2917.665962][T30165] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2917.705448][T30167] netlink: 'syz.9.18101': attribute type 10 has an invalid length. [ 2918.006359][T30202] netlink: 'syz.4.18116': attribute type 10 has an invalid length. [ 2918.221240][T30234] netlink: 'syz.6.18133': attribute type 10 has an invalid length. [ 2918.259469][ T30] audit: type=1400 audit(2000000151.388:2638): avc: denied { write } for pid=30240 comm="syz.6.18137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2918.455608][T25391] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2918.618703][T25391] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2918.637828][T25391] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2918.647185][T25391] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2918.664390][T25391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.678834][T26875] usb 6-1: USB disconnect, device number 45 [ 2918.706946][T30300] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2918.720136][T30300] CPU: 1 UID: 0 PID: 30300 Comm: syz.5.18166 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 2918.720163][T30300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2918.720174][T30300] Call Trace: [ 2918.720181][T30300] [ 2918.720189][T30300] dump_stack_lvl+0x16c/0x1f0 [ 2918.720212][T30300] sysfs_warn_dup+0x7f/0xa0 [ 2918.720240][T30300] sysfs_do_create_link_sd+0x124/0x140 [ 2918.720267][T30300] sysfs_create_link+0x61/0xc0 [ 2918.720292][T30300] device_add+0x62c/0x1aa0 [ 2918.720316][T30300] ? __pfx_device_add+0x10/0x10 [ 2918.720339][T30300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2918.720360][T30300] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2918.720390][T30300] wiphy_register+0x1df4/0x29f0 [ 2918.720410][T30300] ? netdev_run_todo+0x864/0x1320 [ 2918.720431][T30300] ? __dev_printk+0x230/0x270 [ 2918.720450][T30300] ? __pfx_wiphy_register+0x10/0x10 [ 2918.720474][T30300] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2918.720496][T30300] ieee80211_register_hw+0x24a9/0x4060 [ 2918.720520][T30300] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2918.720541][T30300] ? net_generic+0xea/0x2a0 [ 2918.720561][T30300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2918.720581][T30300] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2918.720599][T30300] ? __hrtimer_setup+0x176/0x280 [ 2918.720618][T30300] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2918.720650][T30300] ? trace_kmalloc+0x2b/0xd0 [ 2918.720672][T30300] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2918.720693][T30300] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2918.720717][T30300] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2918.720740][T30300] ? __asan_memcpy+0x3c/0x60 [ 2918.720765][T30300] hwsim_new_radio_nl+0xb51/0x12c0 [ 2918.720789][T30300] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2918.720816][T30300] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2918.720842][T30300] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2918.720868][T30300] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2918.720901][T30300] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2918.720927][T30300] ? bpf_lsm_capable+0x9/0x10 [ 2918.720954][T30300] ? security_capable+0x7e/0x260 [ 2918.720975][T30300] ? ns_capable+0xd7/0x110 [ 2918.720997][T30300] genl_rcv_msg+0x55c/0x800 [ 2918.721020][T30300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2918.721042][T30300] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2918.721070][T30300] netlink_rcv_skb+0x155/0x420 [ 2918.721089][T30300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2918.721110][T30300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2918.721132][T30300] ? netlink_deliver_tap+0x1ae/0xd30 [ 2918.721147][T30300] ? selinux_netlink_send+0x578/0x830 [ 2918.721168][T30300] ? is_vmalloc_addr+0x86/0xa0 [ 2918.721185][T30300] genl_rcv+0x28/0x40 [ 2918.721204][T30300] netlink_unicast+0x5aa/0x870 [ 2918.721224][T30300] ? __pfx_netlink_unicast+0x10/0x10 [ 2918.721244][T30300] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2918.721266][T30300] netlink_sendmsg+0x8d1/0xdd0 [ 2918.721287][T30300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2918.721310][T30300] ____sys_sendmsg+0xa95/0xc70 [ 2918.721331][T30300] ? copy_msghdr_from_user+0x10a/0x160 [ 2918.721349][T30300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2918.721375][T30300] ? __pfx_futex_wake_mark+0x10/0x10 [ 2918.721396][T30300] ___sys_sendmsg+0x134/0x1d0 [ 2918.721413][T30300] ? __pfx____sys_sendmsg+0x10/0x10 [ 2918.721430][T30300] ? futex_private_hash_put+0x11c/0x300 [ 2918.721457][T30300] ? rcu_is_watching+0x12/0xc0 [ 2918.721488][T30300] __sys_sendmsg+0x16d/0x220 [ 2918.721505][T30300] ? __pfx___sys_sendmsg+0x10/0x10 [ 2918.721520][T30300] ? __x64_sys_futex+0x1e0/0x4c0 [ 2918.721552][T30300] do_syscall_64+0xcd/0x4c0 [ 2918.721573][T30300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2918.721592][T30300] RIP: 0033:0x7f754498ebe9 [ 2918.721606][T30300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2918.721624][T30300] RSP: 002b:00007f7545768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2918.721643][T30300] RAX: ffffffffffffffda RBX: 00007f7544bb5fa0 RCX: 00007f754498ebe9 [ 2918.721656][T30300] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 2918.721669][T30300] RBP: 00007f7544a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2918.721682][T30300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2918.721693][T30300] R13: 00007f7544bb6038 R14: 00007f7544bb5fa0 R15: 00007ffe13be9d78 [ 2918.721711][T30300] [ 2919.219215][T30312] openvswitch: netlink: Flow actions attr not present in new flow. [ 2919.424582][T30345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30345 comm=syz.9.18187 [ 2919.437355][T30345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30345 comm=syz.9.18187 [ 2919.524627][T19655] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2919.675909][T30382] openvswitch: netlink: Flow actions attr not present in new flow. [ 2919.685623][T19655] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 2919.701514][T19655] usb 7-1: config 0 has no interface number 0 [ 2919.723570][T19655] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2919.738942][T19655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.749420][T19655] usb 7-1: Product: syz [ 2919.756036][T19655] usb 7-1: Manufacturer: syz [ 2919.760719][T19655] usb 7-1: SerialNumber: syz [ 2919.766699][T19655] usb 7-1: config 0 descriptor?? [ 2919.789528][T30394] __nla_validate_parse: 11 callbacks suppressed [ 2919.789544][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18210'. [ 2919.860420][T30404] netlink: 32 bytes leftover after parsing attributes in process `syz.9.18215'. [ 2919.991286][T30421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18223'. [ 2920.633463][T30449] debugfs: '!' already exists in 'ieee80211' [ 2920.934822][T19655] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2921.074215][T19655] usb 5-1: device descriptor read/64, error -71 [ 2921.232486][T26875] usb 4-1: USB disconnect, device number 93 [ 2921.312917][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18245'. [ 2921.322556][T19655] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2921.454207][T19655] usb 5-1: device descriptor read/64, error -71 [ 2921.564196][T19655] usb usb5-port1: attempt power cycle [ 2921.631271][T30487] mac80211_hwsim hwsim122 ..#c: renamed from wlan1 [ 2921.656620][T30489] syz1: rxe_newlink: already configured on syz_tun [ 2921.814777][T30496] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18254'. [ 2921.856505][T30500] openvswitch: netlink: Flow key attr not present in new flow. [ 2921.904915][T19655] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2921.924790][T19655] usb 5-1: device descriptor read/8, error -71 [ 2922.004195][T19387] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2922.155410][T19387] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2922.166079][T19655] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2922.173712][T19387] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2922.182816][T19387] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2922.191986][T19387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2922.205491][T19655] usb 5-1: device descriptor read/8, error -71 [ 2922.239283][T30509] validate_nla: 2 callbacks suppressed [ 2922.239297][T30509] netlink: 'syz.3.18260': attribute type 10 has an invalid length. [ 2922.292885][T19387] usb 7-1: USB disconnect, device number 69 [ 2922.315493][T19655] usb usb5-port1: unable to enumerate USB device [ 2922.370850][T30521] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18266'. [ 2922.531070][T30539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18275'. [ 2922.917474][T23051] syz_tun (unregistering): left allmulticast mode [ 2922.924383][T23051] syz_tun (unregistering): left promiscuous mode [ 2922.930837][T23051] bridge0: port 3(syz_tun) entered disabled state [ 2922.930826][T14856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2922.933052][T14856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2922.951542][T14856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2922.958972][T14856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2922.967055][T14856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2923.063354][T30554] chnl_net:caif_netlink_parms(): no params data found [ 2923.096176][T30554] bridge0: port 1(bridge_slave_0) entered blocking state [ 2923.103263][T30554] bridge0: port 1(bridge_slave_0) entered disabled state [ 2923.110412][T30554] bridge_slave_0: entered allmulticast mode [ 2923.120020][T30554] bridge_slave_0: entered promiscuous mode [ 2923.127860][T30554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2923.134963][T30554] bridge0: port 2(bridge_slave_1) entered disabled state [ 2923.142088][T30554] bridge_slave_1: entered allmulticast mode [ 2923.149136][T30554] bridge_slave_1: entered promiscuous mode [ 2923.173257][T30554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2923.184638][T30554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2923.207061][T30554] team0: Port device team_slave_0 added [ 2923.214321][T30554] team0: Port device team_slave_1 added [ 2923.231581][T30554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2923.238682][T30554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2923.265095][T30554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2923.277939][T30554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2923.284945][T30554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2923.310831][T30554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2923.332422][T15510] bridge_slave_0: left allmulticast mode [ 2923.338132][T15510] bridge_slave_0: left promiscuous mode [ 2923.343731][T15510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2923.434122][T26875] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 2923.576920][T15510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2923.586187][T15510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2923.596944][T15510] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2923.605716][T26875] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2923.613706][T26875] usb 4-1: config 0 has no interface number 0 [ 2923.614407][T15510] bond0 (unregistering): Released all slaves [ 2923.621697][T26875] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2923.638643][T26875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2923.647625][T26875] usb 4-1: config 0 descriptor?? [ 2923.649910][T30554] hsr_slave_0: entered promiscuous mode [ 2923.668934][T30554] hsr_slave_1: entered promiscuous mode [ 2923.675586][T26875] usb 4-1: selecting invalid altsetting 1 [ 2923.681348][T26875] dvb_ttusb_budget: ttusb_init_controller: error [ 2923.690009][T30554] debugfs: 'hsr0' already exists in 'hsr' [ 2923.690696][T26875] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2923.697383][T30554] Cannot create hsr debugfs directory [ 2923.709964][T15510] tipc: Left network mode [ 2923.755388][T26875] DVB: Unable to find symbol cx22700_attach() [ 2923.807467][T26875] DVB: Unable to find symbol tda10046_attach() [ 2923.822050][T26875] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2923.960236][T19387] usb 4-1: USB disconnect, device number 94 [ 2924.166230][T15510] hsr_slave_0: left promiscuous mode [ 2924.172219][T15510] hsr_slave_1: left promiscuous mode [ 2924.178532][T15510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2924.186910][T15510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2924.229184][T15510] team0 (unregistering): Port device team_slave_1 removed [ 2924.239323][T15510] team0 (unregistering): Port device team_slave_0 removed [ 2924.380400][T30554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2924.388881][T30554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2924.396963][T30554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2924.406964][T30554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2924.440896][T30554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2924.452502][T30554] 8021q: adding VLAN 0 to HW filter on device team0 [ 2924.465634][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2924.472670][T15465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2924.482336][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2924.489406][T15465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2924.571422][T30554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2924.772764][T30554] veth0_vlan: entered promiscuous mode [ 2924.788199][T30554] veth1_vlan: entered promiscuous mode [ 2924.809961][T30554] veth0_macvtap: entered promiscuous mode [ 2924.819738][T30554] veth1_macvtap: entered promiscuous mode [ 2924.835228][T30554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2924.866199][T19387] usb 10-1: USB disconnect, device number 48 [ 2924.871346][T30554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2924.898998][T17947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.044119][T14856] Bluetooth: hci5: command tx timeout [ 2925.246043][T17947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.266137][T17947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.277091][T17947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.313216][T15510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2925.321135][T15510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2925.341059][T17947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2925.349411][T17947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2925.904829][T19158] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2926.105694][T19158] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2926.115845][T19158] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2926.124959][T19158] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2926.134035][T19158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2927.124089][T14856] Bluetooth: hci5: command tx timeout [ 2927.516521][T30719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18345'. [ 2927.553968][T19158] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2927.585593][T30723] netlink: 300 bytes leftover after parsing attributes in process `syz.5.18347'. [ 2927.703957][T19158] usb 4-1: Using ep0 maxpacket: 8 [ 2927.741878][T19158] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2927.785207][T19158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.818861][T19158] usb 4-1: Product: syz [ 2927.835506][T19158] usb 4-1: Manufacturer: syz [ 2927.853674][T19158] usb 4-1: SerialNumber: syz [ 2927.891133][T19158] usb 4-1: config 0 descriptor?? [ 2928.133872][T19158] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2928.251694][T30747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.18357'. [ 2928.418739][T19158] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2928.868395][T19158] usb 7-1: USB disconnect, device number 70 [ 2929.210746][T14856] Bluetooth: hci5: command tx timeout [ 2929.753679][T18743] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2929.923723][T18743] usb 7-1: Using ep0 maxpacket: 16 [ 2929.942914][T18743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2929.973752][T18743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2929.983483][T18743] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2930.004168][T18743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.023990][T18743] usb 7-1: config 0 descriptor?? [ 2930.026679][T30798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18378'. [ 2930.162347][T26875] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2930.187377][T19158] usb 4-1: USB disconnect, device number 95 [ 2930.284329][T30804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18379'. [ 2930.346826][T26875] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2930.390059][T26875] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2930.436626][T26875] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2930.486412][T26875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.601811][T30810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18383'. [ 2930.947173][T18743] letsketch 0003:6161:4D15.0031: Device info: ఁ [ 2930.976539][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18390'. [ 2931.146724][T18743] letsketch 0003:6161:4D15.0031: Device info: 洅 [ 2931.283572][T14856] Bluetooth: hci5: command tx timeout [ 2931.382927][T18743] usb 7-1: Max retries (5) exceeded reading string descriptor 202 [ 2931.391059][T18743] letsketch 0003:6161:4D15.0031: probe with driver letsketch failed with error -71 [ 2931.402140][T18743] usb 7-1: USB disconnect, device number 71 [ 2931.495935][T30838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18394'. [ 2932.213608][T19158] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2932.363625][T19158] usb 4-1: device descriptor read/64, error -71 [ 2932.689291][T19158] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2932.843633][T19158] usb 4-1: device descriptor read/64, error -71 [ 2932.965951][T19158] usb usb4-port1: attempt power cycle [ 2932.975523][T18743] usb 10-1: USB disconnect, device number 49 [ 2933.672781][T30915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18428'. [ 2933.684410][T19158] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2933.974849][T19158] usb 4-1: device descriptor read/8, error -71 [ 2934.233464][T19158] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2934.351325][T19158] usb 4-1: device descriptor read/8, error -71 [ 2934.505235][T19158] usb usb4-port1: unable to enumerate USB device [ 2936.315228][T30971] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18451'. [ 2936.588483][T30974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18452'. [ 2936.903462][T25391] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2937.083254][T25391] usb 5-1: Using ep0 maxpacket: 16 [ 2937.095205][T25391] usb 5-1: config 0 has no interfaces? [ 2937.102289][T25391] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2937.102740][T31001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18464'. [ 2937.112574][T25391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2937.139077][T25391] usb 5-1: Product: syz [ 2937.168348][T25391] usb 5-1: Manufacturer: syz [ 2937.181474][T25391] usb 5-1: SerialNumber: syz [ 2937.205556][T25391] usb 5-1: config 0 descriptor?? [ 2937.832492][T31036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18480'. [ 2938.124062][T19158] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 2938.193194][T19387] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2938.293233][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 2938.298793][T19158] usb 10-1: no configurations [ 2938.303473][T19158] usb 10-1: can't read configurations, error -22 [ 2938.343161][T19387] usb 4-1: Using ep0 maxpacket: 16 [ 2938.349484][T19387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2938.361563][T19387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2938.371676][T19387] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2938.382113][T19387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2938.390732][T19387] usb 4-1: config 0 descriptor?? [ 2938.434182][T19158] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2938.583210][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 2938.589188][T19158] usb 10-1: no configurations [ 2938.593970][T19158] usb 10-1: can't read configurations, error -22 [ 2938.600737][T19158] usb usb10-port1: attempt power cycle [ 2938.840503][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18492'. [ 2938.943230][T19158] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2939.229262][T19387] letsketch 0003:6161:4D15.0032: Device info: ఁ [ 2939.437726][T19387] letsketch 0003:6161:4D15.0032: Device info: 洅 [ 2939.676692][T19387] usb 4-1: Max retries (5) exceeded reading string descriptor 202 [ 2939.709601][T19387] letsketch 0003:6161:4D15.0032: probe with driver letsketch failed with error -71 [ 2939.768091][T19387] usb 4-1: USB disconnect, device number 100 [ 2939.779349][T26875] usb 5-1: USB disconnect, device number 110 [ 2939.786002][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 2939.793436][T19158] usb 10-1: no configurations [ 2939.799820][T19158] usb 10-1: can't read configurations, error -22 [ 2940.266121][T19158] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2940.293496][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 2940.301483][T19158] usb 10-1: no configurations [ 2940.308496][T19158] usb 10-1: can't read configurations, error -22 [ 2940.316397][T19158] usb usb10-port1: unable to enumerate USB device [ 2940.574260][T26875] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2940.713572][T26875] usb 5-1: device descriptor read/64, error -71 [ 2941.204723][T26875] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2941.413146][T26875] usb 5-1: device descriptor read/64, error -71 [ 2941.557015][T26875] usb usb5-port1: attempt power cycle [ 2942.398378][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18523'. [ 2942.622805][T26875] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2942.723324][T26875] usb 5-1: device descriptor read/8, error -71 [ 2942.761161][T31159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18528'. [ 2942.770784][T31159] netlink: 48 bytes leftover after parsing attributes in process `syz.5.18528'. [ 2942.892944][T25391] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2943.033104][T19387] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 2943.043040][T25391] usb 10-1: Using ep0 maxpacket: 8 [ 2943.051021][T25391] usb 10-1: no configurations [ 2943.056560][T25391] usb 10-1: can't read configurations, error -22 [ 2943.214655][T25391] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2943.248690][T19387] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2943.257530][T19387] usb 6-1: config 0 has no interface number 0 [ 2943.271721][T19387] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2943.281022][T19387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2943.289172][T19387] usb 6-1: Product: syz [ 2943.294382][T19387] usb 6-1: Manufacturer: syz [ 2943.299324][T19387] usb 6-1: SerialNumber: syz [ 2943.308485][T19387] usb 6-1: config 0 descriptor?? [ 2943.372952][T25391] usb 10-1: Using ep0 maxpacket: 8 [ 2943.379623][T25391] usb 10-1: no configurations [ 2943.384524][T25391] usb 10-1: can't read configurations, error -22 [ 2943.391892][T25391] usb usb10-port1: attempt power cycle [ 2943.509566][T26875] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2943.543688][T26875] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2943.552919][T26875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2943.561131][T26875] usb 5-1: Product: syz [ 2943.567171][T26875] usb 5-1: Manufacturer: syz [ 2943.571858][T26875] usb 5-1: SerialNumber: syz [ 2943.612597][T26875] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2943.670846][T24628] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2943.802999][T25391] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2943.824312][T25391] usb 10-1: Using ep0 maxpacket: 8 [ 2943.831568][T25391] usb 10-1: no configurations [ 2943.836351][T25391] usb 10-1: can't read configurations, error -22 [ 2943.850329][T19387] usb 6-1: Firmware version (0.0) predates our first public release. [ 2943.858972][T19387] usb 6-1: Please update to version 0.2 or newer [ 2943.912967][T18743] usb 5-1: USB disconnect, device number 114 [ 2943.973133][T25391] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2944.044646][T25391] usb 10-1: Using ep0 maxpacket: 8 [ 2944.050959][T25391] usb 10-1: no configurations [ 2944.055685][T25391] usb 10-1: can't read configurations, error -22 [ 2944.062262][T25391] usb usb10-port1: unable to enumerate USB device [ 2944.100374][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18548'. [ 2944.110745][T31205] netlink: 48 bytes leftover after parsing attributes in process `syz.6.18548'. [ 2944.111010][T19387] usb 6-1: USB disconnect, device number 46 [ 2944.388373][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18561'. [ 2944.412868][T31230] netlink: 48 bytes leftover after parsing attributes in process `syz.6.18561'. [ 2944.422027][T16540] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2944.429835][T16540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2944.440007][T16540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2944.447576][T16540] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2944.457152][T16540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2944.622353][T31231] chnl_net:caif_netlink_parms(): no params data found [ 2944.697313][T31231] bridge0: port 1(bridge_slave_0) entered blocking state [ 2944.705693][T31231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2944.712831][T31231] bridge_slave_0: entered allmulticast mode [ 2944.719413][T31231] bridge_slave_0: entered promiscuous mode [ 2944.726924][T31231] bridge0: port 2(bridge_slave_1) entered blocking state [ 2944.733040][T24628] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2944.734395][T31231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2944.745748][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18572'. [ 2944.747965][T31231] bridge_slave_1: entered allmulticast mode [ 2944.758334][T24628] ath9k_htc: Failed to initialize the device [ 2944.763390][T31231] bridge_slave_1: entered promiscuous mode [ 2944.769785][T31260] netlink: 48 bytes leftover after parsing attributes in process `syz.6.18572'. [ 2944.785057][T18743] usb 5-1: ath9k_htc: USB layer deinitialized [ 2944.800801][T31231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2944.811497][T31231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2944.828660][T31231] team0: Port device team_slave_0 added [ 2944.836382][T31231] team0: Port device team_slave_1 added [ 2944.849712][T31231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2944.856865][T31231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2944.883240][T31231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2944.894578][T31231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2944.901488][T31231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2944.927355][T31231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2944.949933][T31231] hsr_slave_0: entered promiscuous mode [ 2944.955799][T31231] hsr_slave_1: entered promiscuous mode [ 2945.053320][T19655] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2945.072800][T18743] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2945.148661][T31231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2945.157250][T31231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2945.165158][T31231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2945.173287][T31231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2945.187767][T31231] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.194847][T31231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.202101][T31231] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.209129][T31231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.216622][T19655] usb 7-1: Using ep0 maxpacket: 16 [ 2945.224025][T19655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2945.235389][T18743] usb 5-1: Using ep0 maxpacket: 16 [ 2945.241889][T31231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2945.241975][T19655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2945.257076][T31231] 8021q: adding VLAN 0 to HW filter on device team0 [ 2945.262847][T18743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2945.275686][T18743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2945.287523][T19655] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2945.287579][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.296619][T18743] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2945.312641][T19655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2945.320782][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.320791][T18743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2945.336993][T19655] usb 7-1: config 0 descriptor?? [ 2945.345722][T18743] usb 5-1: config 0 descriptor?? [ 2945.351921][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.358980][T15465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.366942][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.374028][T15465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.473893][T31231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2945.497682][T31231] veth0_vlan: entered promiscuous mode [ 2945.506393][T31231] veth1_vlan: entered promiscuous mode [ 2945.524208][T31231] veth0_macvtap: entered promiscuous mode [ 2945.536825][T31231] veth1_macvtap: entered promiscuous mode [ 2945.558937][T31231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2945.575269][T18743] usbhid 5-1:0.0: can't add hid device: -71 [ 2945.582081][T31231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2945.591050][T18743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2945.606484][T15465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.624437][T15465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.635361][T18743] usb 5-1: USB disconnect, device number 115 [ 2945.666958][T15465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.693303][T15465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2945.741977][T15473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2945.763673][T15473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2945.788907][T15473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2945.798336][T15473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2946.189594][T31298] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18583'. [ 2946.214355][T19655] letsketch 0003:6161:4D15.0033: Device info: ఁ [ 2946.414808][T19655] letsketch 0003:6161:4D15.0033: Device info: 洅 [ 2946.482883][T14856] Bluetooth: hci6: command tx timeout [ 2946.532905][T18743] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2946.647367][T19655] usb 7-1: Max retries (5) exceeded reading string descriptor 202 [ 2946.655365][T19655] letsketch 0003:6161:4D15.0033: probe with driver letsketch failed with error -71 [ 2946.666748][T19655] usb 7-1: USB disconnect, device number 72 [ 2946.692869][T18743] usb 4-1: Using ep0 maxpacket: 8 [ 2946.699137][T18743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2946.709974][T18743] usb 4-1: config 0 has no interfaces? [ 2946.719983][T18743] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2946.733982][T18743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.742107][T18743] usb 4-1: Product: syz [ 2946.746327][T18743] usb 4-1: Manufacturer: syz [ 2946.750932][T18743] usb 4-1: SerialNumber: syz [ 2946.756810][T18743] usb 4-1: config 0 descriptor?? [ 2946.912135][T31326] netlink: 76 bytes leftover after parsing attributes in process `syz.5.18596'. [ 2947.072686][T24628] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2947.119073][T31332] syz_tun: entered allmulticast mode [ 2947.235584][T24628] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2947.244926][T24628] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2947.253197][T24628] usb 10-1: Product: syz [ 2947.586529][T24628] usb 10-1: Manufacturer: syz [ 2947.591265][T24628] usb 10-1: SerialNumber: syz [ 2947.599946][T24628] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2947.613515][T19158] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2947.791327][T31329] syz_tun: left allmulticast mode [ 2947.845013][T18743] usb 10-1: USB disconnect, device number 58 [ 2948.562636][T16540] Bluetooth: hci6: command tx timeout [ 2948.660701][T19158] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2948.704555][T19158] ath9k_htc: Failed to initialize the device [ 2949.419809][T18743] usb 10-1: ath9k_htc: USB layer deinitialized [ 2949.465093][T19655] usb 4-1: USB disconnect, device number 101 [ 2949.498563][T31373] fuse: Bad value for 'fd' [ 2949.732644][T24628] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 2949.740343][ T4379] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2949.742616][T18743] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2949.882613][T24628] usb 5-1: device descriptor read/64, error -71 [ 2949.912595][ T4379] usb 6-1: Using ep0 maxpacket: 16 [ 2949.918815][ T4379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.929819][ T4379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2949.939579][ T4379] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2949.948753][ T4379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.957951][ T4379] usb 6-1: config 0 descriptor?? [ 2950.112585][T18743] usb 10-1: Using ep0 maxpacket: 16 [ 2950.118929][T18743] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2950.129161][T18743] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2950.138288][T18743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.142588][T24628] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 2950.150060][T18743] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2950.292752][T24628] usb 5-1: device descriptor read/64, error -71 [ 2950.402658][T16540] Bluetooth: hci4: command 0x0406 tx timeout [ 2950.403236][T24628] usb usb5-port1: attempt power cycle [ 2950.642611][T14856] Bluetooth: hci6: command tx timeout [ 2950.767171][ T4379] letsketch 0003:6161:4D15.0034: Device info: ఁ [ 2950.774928][T24628] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 2950.814095][T24628] usb 5-1: device descriptor read/8, error -71 [ 2950.983023][ T4379] letsketch 0003:6161:4D15.0034: Device info: 洅 [ 2951.052753][T24628] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 2951.073981][T24628] usb 5-1: device descriptor read/8, error -71 [ 2951.182716][T24628] usb usb5-port1: unable to enumerate USB device [ 2951.202948][T18743] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 2951.211089][T18743] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 2951.215611][ T4379] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 2951.225449][T18743] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2951.226553][ T4379] letsketch 0003:6161:4D15.0034: probe with driver letsketch failed with error -71 [ 2951.242995][T18743] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 2951.246251][ T4379] usb 6-1: USB disconnect, device number 47 [ 2951.251024][T18743] usb 10-1: USB disconnect, device number 59 [ 2952.530068][T31404] netlink: 76 bytes leftover after parsing attributes in process `syz.9.18625'. [ 2952.723007][T14856] Bluetooth: hci6: command tx timeout [ 2952.739322][T31419] syz_tun: entered allmulticast mode [ 2953.366099][T31401] syz_tun: left allmulticast mode [ 2953.630985][T31439] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18638'. [ 2958.564902][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.359557][T24628] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2959.534843][T24628] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2959.583259][T24628] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2959.605508][T24628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.619892][T24628] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2960.705882][T24628] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 2960.803991][T24628] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 2960.812151][T24628] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2960.821550][T24628] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 2960.830523][T24628] usb 6-1: USB disconnect, device number 48 [ 2960.867488][T31553] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18680'. [ 2960.977380][T31514] Set syz1 is full, maxelem 65536 reached [ 2961.171188][T31568] syz_tun: entered allmulticast mode [ 2961.182009][T19158] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2961.363779][T19158] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2961.410932][T19158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2961.456547][T19158] usb 5-1: Product: syz [ 2961.480791][T19158] usb 5-1: Manufacturer: syz [ 2961.502827][T19158] usb 5-1: SerialNumber: syz [ 2961.549646][T19158] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2961.615002][T24628] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2961.890020][T31564] syz_tun: left allmulticast mode [ 2962.203489][T19158] usb 5-1: USB disconnect, device number 120 [ 2962.627163][T16540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2962.634394][T16540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2962.645553][T16540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2962.653696][T16540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2962.660992][T16540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2962.783298][T31586] chnl_net:caif_netlink_parms(): no params data found [ 2962.801880][T24628] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2962.808913][T24628] ath9k_htc: Failed to initialize the device [ 2962.817406][T19158] usb 5-1: ath9k_htc: USB layer deinitialized [ 2962.824749][T31586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2962.832093][T31586] bridge0: port 1(bridge_slave_0) entered disabled state [ 2962.839217][T31586] bridge_slave_0: entered allmulticast mode [ 2962.845728][T31586] bridge_slave_0: entered promiscuous mode [ 2962.853913][T31586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2962.860999][T31586] bridge0: port 2(bridge_slave_1) entered disabled state [ 2962.870975][T31586] bridge_slave_1: entered allmulticast mode [ 2962.877797][T31586] bridge_slave_1: entered promiscuous mode [ 2962.897687][T31586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2962.908552][T31586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2962.917830][ T4379] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2962.940968][T31586] team0: Port device team_slave_0 added [ 2962.949264][T31586] team0: Port device team_slave_1 added [ 2962.974075][T31586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2962.981060][T31586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2962.996586][T31605] input: syz1 as /devices/virtual/input/input204 [ 2963.007170][T18743] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2963.015530][T31586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2963.034449][T31586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2963.041378][T31586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2963.067938][T31586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2963.091386][T31586] hsr_slave_0: entered promiscuous mode [ 2963.097876][T31586] hsr_slave_1: entered promiscuous mode [ 2963.098401][ T4379] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2963.103912][T31586] debugfs: 'hsr0' already exists in 'hsr' [ 2963.115085][ T4379] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2963.119562][T31586] Cannot create hsr debugfs directory [ 2963.130628][ T4379] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2963.143451][T19158] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2963.151147][ T4379] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.159285][ T4379] usb 10-1: Product: syz [ 2963.164083][ T4379] usb 10-1: Manufacturer: syz [ 2963.168771][ T4379] usb 10-1: SerialNumber: syz [ 2963.171912][T18743] usb 6-1: Using ep0 maxpacket: 8 [ 2963.178997][ T4379] usb 10-1: config 0 descriptor?? [ 2963.181205][T18743] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2963.201914][T18743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.209952][T18743] usb 6-1: Product: syz [ 2963.214293][T18743] usb 6-1: Manufacturer: syz [ 2963.218879][T18743] usb 6-1: SerialNumber: syz [ 2963.224957][T18743] usb 6-1: config 0 descriptor?? [ 2963.311782][T19158] usb 5-1: Using ep0 maxpacket: 16 [ 2963.317995][T19158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2963.328891][T19158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2963.331773][T25391] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2963.338633][T19158] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2963.356421][T19158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.366032][T19158] usb 5-1: config 0 descriptor?? [ 2963.403415][ T4379] usb 10-1: USB disconnect, device number 60 [ 2963.431640][T31586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2963.431656][T18743] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2963.449165][T31586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2963.458488][T31586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2963.467080][T31586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2963.485451][T31586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2963.492502][T31586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2963.499793][T31586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2963.504642][T25391] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2963.506858][T31586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2963.516131][T25391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.537139][T25391] usb 4-1: Product: syz [ 2963.541448][T25391] usb 4-1: Manufacturer: syz [ 2963.546967][T25391] usb 4-1: SerialNumber: syz [ 2963.553018][T31586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2963.562718][T25391] usb 4-1: config 0 descriptor?? [ 2963.568342][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 2963.577058][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2963.584389][T19158] usbhid 5-1:0.0: can't add hid device: -71 [ 2963.590342][T19158] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2963.599913][T19158] usb 5-1: USB disconnect, device number 121 [ 2963.608862][T31586] 8021q: adding VLAN 0 to HW filter on device team0 [ 2963.618477][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 2963.625525][T15473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2963.635217][T15510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2963.642282][T15510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2963.741302][T31586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2963.784478][T25391] usb 4-1: USB disconnect, device number 102 [ 2963.858024][T31586] veth0_vlan: entered promiscuous mode [ 2963.867114][T31586] veth1_vlan: entered promiscuous mode [ 2963.885083][T31586] veth0_macvtap: entered promiscuous mode [ 2963.892749][T31586] veth1_macvtap: entered promiscuous mode [ 2963.904047][T31586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2963.914590][T31586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2963.924825][ T4957] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2963.933695][ T4957] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2963.944243][ T4957] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2963.953347][ T4957] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2963.984408][T15510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2963.994224][T15510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2964.016650][ T4957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2964.024595][ T4957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.471656][T16540] Bluetooth: hci2: command tx timeout [ 2965.899504][T18743] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2965.951662][T18743] usb 6-1: USB disconnect, device number 49 [ 2966.141669][T24628] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2966.391623][T24628] usb 8-1: Using ep0 maxpacket: 16 [ 2966.404178][T24628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2966.439952][T24628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2966.464134][T24628] usb 8-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 2966.517031][T24628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2966.607706][T24628] usb 8-1: config 0 descriptor?? [ 2966.840381][T24628] usbhid 8-1:0.0: can't add hid device: -71 [ 2966.850418][T24628] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2966.912622][T24628] usb 8-1: USB disconnect, device number 37 [ 2967.531571][T16540] Bluetooth: hci2: command tx timeout [ 2967.675475][T31710] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18732'. [ 2968.012469][T18743] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2968.622058][T18743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2968.640459][T18743] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2968.651591][T18743] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2968.666846][T18743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.685291][T18743] usb 5-1: Product: syz [ 2968.695694][T18743] usb 5-1: Manufacturer: syz [ 2968.700939][T18743] usb 5-1: SerialNumber: syz [ 2968.920329][T18743] usb 5-1: config 0 descriptor?? [ 2969.601444][T14856] Bluetooth: hci2: command tx timeout [ 2970.278150][T24628] usb 5-1: USB disconnect, device number 122 [ 2970.891433][T14856] Bluetooth: hci3: command 0x0406 tx timeout [ 2971.682718][T16540] Bluetooth: hci2: command tx timeout [ 2974.436915][T31844] misc userio: No port type given on /dev/userio [ 2974.987688][T31855] syz_tun: entered allmulticast mode [ 2975.081201][T19158] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2975.118143][T31840] syz_tun: left allmulticast mode [ 2975.701061][T19158] usb 8-1: Using ep0 maxpacket: 16 [ 2975.960511][T19158] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2976.002043][T19158] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2976.022745][T19158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.030772][T19158] usb 8-1: Product: syz [ 2976.040708][T19158] usb 8-1: Manufacturer: syz [ 2976.045514][T19158] usb 8-1: SerialNumber: syz [ 2976.051105][T19158] usb 8-1: config 0 descriptor?? [ 2976.311051][T19158] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2976.471042][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 2976.481551][T19158] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2976.494030][T19158] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.503323][T19158] usb 10-1: Product: syz [ 2976.511017][T19158] usb 10-1: Manufacturer: syz [ 2976.520358][T19158] usb 10-1: SerialNumber: syz [ 2976.529101][T19158] usb 10-1: config 0 descriptor?? [ 2976.950921][T19158] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2977.785836][T19158] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2977.832998][T19158] usb 8-1: USB disconnect, device number 38 [ 2977.842146][ T4379] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2978.006130][ T4379] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2978.098366][ T4379] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2978.125515][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.134721][ T4379] usb 5-1: Product: syz [ 2978.138960][ T4379] usb 5-1: Manufacturer: syz [ 2978.144569][ T4379] usb 5-1: SerialNumber: syz [ 2978.154911][ T4379] usb 5-1: config 0 descriptor?? [ 2978.937886][T18743] usb 5-1: USB disconnect, device number 123 [ 2979.092142][T32174] usb 10-1: USB disconnect, device number 61 [ 2979.570889][T32174] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 2981.221906][T32174] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 2981.230422][T32174] usb 10-1: config 0 has no interface number 0 [ 2981.239475][T32174] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2981.254838][T32174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.275963][T32174] usb 10-1: Product: syz [ 2981.280212][T32174] usb 10-1: Manufacturer: syz [ 2981.288948][T32174] usb 10-1: SerialNumber: syz [ 2981.601074][T32174] usb 10-1: config 0 descriptor?? [ 2981.910845][T18743] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2982.243718][T32174] usb 10-1: Firmware version (0.0) predates our first public release. [ 2982.281800][T32174] usb 10-1: Please update to version 0.2 or newer [ 2982.410940][T18743] usb 4-1: Using ep0 maxpacket: 8 [ 2982.423135][T18743] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2982.432299][T18743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.440485][T18743] usb 4-1: Product: syz [ 2982.445191][T18743] usb 4-1: Manufacturer: syz [ 2982.454915][T18743] usb 4-1: SerialNumber: syz [ 2982.462492][T18743] usb 4-1: config 0 descriptor?? [ 2982.668397][T32174] usb 10-1: USB disconnect, device number 62 [ 2982.693744][T18743] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2984.012981][T18743] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2984.059626][T18743] usb 4-1: USB disconnect, device number 103 [ 2986.465279][T32061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18860'. [ 2986.568713][T32069] syz_tun: entered allmulticast mode [ 2987.156814][T32054] syz_tun: left allmulticast mode [ 2990.710266][T32174] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2990.792066][ T4379] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2990.919438][T18743] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2990.940228][T32174] usb 8-1: Using ep0 maxpacket: 32 [ 2990.950272][ T4379] usb 6-1: Using ep0 maxpacket: 16 [ 2990.950437][T32174] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 2990.956480][ T4379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2990.974861][T32174] usb 8-1: config 0 has no interface number 0 [ 2990.977392][ T4379] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2990.985660][T32174] usb 8-1: config 0 interface 184 has no altsetting 0 [ 2990.990095][ T4379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2990.998580][T32174] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2991.006642][ T4379] usb 6-1: Product: syz [ 2991.019068][ T4379] usb 6-1: Manufacturer: syz [ 2991.025536][ T4379] usb 6-1: SerialNumber: syz [ 2991.032895][ T4379] usb 6-1: config 0 descriptor?? [ 2991.037780][T32174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.041613][ T4379] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2991.056821][T32174] usb 8-1: Product: syz [ 2991.058659][ T4379] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2991.125724][T32174] usb 8-1: Manufacturer: syz [ 2991.131729][T32174] usb 8-1: SerialNumber: syz [ 2991.137986][T32174] usb 8-1: config 0 descriptor?? [ 2991.143441][T18743] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2991.153326][T32174] smsc75xx v1.0.0 [ 2991.156997][T18743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.165185][T18743] usb 10-1: Product: syz [ 2991.169462][T18743] usb 10-1: Manufacturer: syz [ 2991.174668][T18743] usb 10-1: SerialNumber: syz [ 2991.499686][T18743] usb 10-1: config 0 descriptor?? [ 2991.724084][T18743] usb 10-1: USB disconnect, device number 63 [ 2991.937897][ T4379] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2992.200145][T24574] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2992.341100][T32174] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 2992.353004][ T4379] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2992.361248][ T4379] em28xx 6-1:0.0: board has no eeprom [ 2992.368921][T24574] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2992.378010][T24574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.386733][T24574] usb 4-1: Product: syz [ 2992.390926][T24574] usb 4-1: Manufacturer: syz [ 2992.395512][T24574] usb 4-1: SerialNumber: syz [ 2992.401274][T24574] usb 4-1: config 0 descriptor?? [ 2992.547961][T32174] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2992.559882][T32174] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2992.592819][T32174] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2992.603190][T32174] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2992.614403][T32174] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 2992.620492][T24574] usb 4-1: USB disconnect, device number 104 [ 2992.625413][T32174] usb 8-1: USB disconnect, device number 39 [ 2992.640201][ T4379] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2992.669400][ T4379] em28xx 6-1:0.0: dvb set to bulk mode. [ 2992.679530][T19158] em28xx 6-1:0.0: Binding DVB extension [ 2992.689684][ T4379] usb 6-1: USB disconnect, device number 50 [ 2992.710403][ T4379] em28xx 6-1:0.0: Disconnecting em28xx [ 2992.722607][T19158] em28xx 6-1:0.0: Registering input extension [ 2992.728851][ T4379] em28xx 6-1:0.0: Closing input extension [ 2992.855697][ T4379] em28xx 6-1:0.0: Freeing device [ 2993.275766][T32191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18911'. [ 2993.603119][T32205] ubi: mtd0 is already attached to ubi31 [ 2993.968715][T18743] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2994.163149][T18743] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2994.172277][T18743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.180374][T18743] usb 8-1: Product: syz [ 2994.184639][T18743] usb 8-1: Manufacturer: syz [ 2994.189806][T18743] usb 8-1: SerialNumber: syz [ 2994.490232][ T4379] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2994.565810][T18743] usb 8-1: config 0 descriptor?? [ 2994.613560][T32229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18925'. [ 2994.709186][T32238] 9pnet_fd: Insufficient options for proto=fd [ 2994.720538][T24574] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2994.750007][ T4379] usb 4-1: Using ep0 maxpacket: 16 [ 2994.756367][ T4379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2994.774175][ T4379] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2994.789459][T18743] usb 8-1: USB disconnect, device number 40 [ 2994.795254][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.804105][ T4379] usb 4-1: Product: syz [ 2994.808302][ T4379] usb 4-1: Manufacturer: syz [ 2994.812915][ T4379] usb 4-1: SerialNumber: syz [ 2994.818734][ T4379] usb 4-1: config 0 descriptor?? [ 2994.825746][ T4379] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2994.834995][ T4379] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2994.860166][T24574] usb 5-1: device descriptor read/64, error -71 [ 2994.894971][T32245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18932'. [ 2995.114340][T24574] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2995.260127][T24574] usb 5-1: device descriptor read/64, error -71 [ 2995.411510][T24574] usb usb5-port1: attempt power cycle [ 2995.482428][ T4379] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2995.780184][T24574] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2995.875036][T24574] usb 5-1: device descriptor read/8, error -71 [ 2995.991373][ T4379] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2996.057271][ T4379] em28xx 4-1:0.0: board has no eeprom [ 2996.100364][T32257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18937'. [ 2996.224539][T32266] 9pnet_fd: Insufficient options for proto=fd [ 2996.263603][T24574] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2996.300566][T24574] usb 5-1: device descriptor read/8, error -71 [ 2996.371166][T32269] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18939'. [ 2997.119981][ T4379] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2997.198410][T24574] usb usb5-port1: unable to enumerate USB device [ 2997.635661][ T4379] em28xx 4-1:0.0: dvb set to bulk mode. [ 2997.642175][T24628] em28xx 4-1:0.0: Binding DVB extension [ 2997.715071][ T4379] usb 4-1: USB disconnect, device number 105 [ 2997.724534][T24628] em28xx 4-1:0.0: Registering input extension [ 2997.836603][ T4379] em28xx 4-1:0.0: Disconnecting em28xx [ 2997.842670][ T4379] em28xx 4-1:0.0: Closing input extension [ 2997.851387][ T4379] em28xx 4-1:0.0: Freeing device [ 2997.924515][T32291] netlink: 52 bytes leftover after parsing attributes in process `syz.5.18950'. [ 2997.938441][T32292] syz_tun: entered allmulticast mode [ 2997.981090][T19387] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2998.139856][T19387] usb 10-1: Using ep0 maxpacket: 8 [ 2998.147744][T19387] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2998.157503][T19387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.165728][T19387] usb 10-1: Product: syz [ 2998.171151][T19387] usb 10-1: Manufacturer: syz [ 2998.175816][T19387] usb 10-1: SerialNumber: syz [ 2998.182440][T19387] usb 10-1: config 0 descriptor?? [ 2998.209909][T18743] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2998.339803][ T4379] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2998.359791][T18743] usb 6-1: Using ep0 maxpacket: 16 [ 2998.366149][T18743] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2998.377930][T18743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2998.389968][T19387] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2998.400033][T18743] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2998.409533][T18743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.417607][T18743] usb 6-1: Product: syz [ 2998.421997][T18743] usb 6-1: Manufacturer: syz [ 2998.426584][T18743] usb 6-1: SerialNumber: syz [ 2998.432837][T18743] usb 6-1: config 0 descriptor?? [ 2998.439056][T18743] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2998.448463][T18743] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2998.490595][ T4379] usb 4-1: not running at top speed; connect to a high speed hub [ 2998.499094][ T4379] usb 4-1: config 6 has an invalid interface number: 60 but max is 0 [ 2998.508321][ T4379] usb 4-1: config 6 has no interface number 0 [ 2998.514499][ T4379] usb 4-1: config 6 interface 60 altsetting 3 endpoint 0xD has invalid maxpacket 28782, setting to 64 [ 2998.525517][ T4379] usb 4-1: config 6 interface 60 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 2998.536884][T32273] syz_tun: left allmulticast mode [ 2998.582461][ T4379] usb 4-1: config 6 interface 60 has no altsetting 0 [ 2998.594236][ T4379] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=74.43 [ 2998.605778][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.621417][ T4379] usb 4-1: Product: syz [ 2998.625905][ T4379] usb 4-1: Manufacturer: syz [ 2998.630667][ T4379] usb 4-1: SerialNumber: syz [ 2998.636879][T32298] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2998.862234][ T4379] imon_raw 4-1:6.60: IR endpoint missing [ 2998.869541][ T4379] usb 4-1: USB disconnect, device number 106 [ 2998.934052][T32309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18955'. [ 2999.073430][T18743] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2999.140639][T18743] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2999.210899][T18743] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2999.277121][T18743] em28xx 6-1:0.0: No AC97 audio processor [ 3000.075581][T32317] fuse: Unknown parameter 'grou00000000000000000000' [ 3000.165700][T19387] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3000.186245][T19387] usb 10-1: USB disconnect, device number 64 [ 3000.356995][T32330] syz_tun: entered allmulticast mode [ 3001.019693][ T30] audit: type=1107 audit(2000000234.023:2639): pid=32335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 3001.083948][T32328] syz_tun: left allmulticast mode [ 3001.194217][T32174] usb 6-1: USB disconnect, device number 51 [ 3001.211364][T32174] em28xx 6-1:0.0: Disconnecting em28xx [ 3001.316231][T32348] fuse: Unknown parameter 'grou00000000000000000000' [ 3001.330382][T32174] em28xx 6-1:0.0: Freeing device [ 3001.930025][T32360] syz_tun: entered allmulticast mode [ 3002.063467][T32340] syz_tun: left allmulticast mode [ 3002.233073][T32366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18976'. [ 3003.484376][T32381] syz_tun: entered allmulticast mode [ 3003.695220][T18743] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 3003.811064][T32404] input: syz0 as /devices/virtual/input/input207 [ 3004.046750][T32379] syz_tun: left allmulticast mode [ 3004.052252][ T4379] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 3004.222993][ T4379] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 3004.309572][T18743] usb 8-1: Using ep0 maxpacket: 8 [ 3004.340986][T18743] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3004.372267][T18743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3004.387163][T18743] usb 8-1: Product: syz [ 3004.394408][T18743] usb 8-1: Manufacturer: syz [ 3004.399271][T18743] usb 8-1: SerialNumber: syz [ 3004.571264][T18743] usb 8-1: config 0 descriptor?? [ 3004.588411][ T4379] usb 4-1: config 0 has no interface number 0 [ 3004.643971][ T4379] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3004.671318][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3004.686328][ T4379] usb 4-1: Product: syz [ 3004.691176][ T4379] usb 4-1: Manufacturer: syz [ 3004.695844][ T4379] usb 4-1: SerialNumber: syz [ 3004.701462][ T4379] usb 4-1: config 0 descriptor?? [ 3004.887016][T18743] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3004.919507][T19387] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 3005.082720][T19387] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3005.096192][T19387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3005.110116][T19387] usb 5-1: config 0 descriptor?? [ 3005.116370][ T4379] usb 4-1: Firmware: major: 18, minor: 128, hardware type: UNKNOWN (75) [ 3005.317218][ T4379] usb 4-1: failed to fetch extended address, random address set [ 3005.326497][ T4379] usb 4-1: atusb_probe: initialization failed, error = -524 [ 3005.335479][ T4379] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 3005.525401][T19387] usb 5-1: USB disconnect, device number 2 [ 3005.533628][ T4379] usb 4-1: USB disconnect, device number 107 [ 3006.129365][T32439] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18999'. [ 3008.181373][T18743] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 3008.202834][T18743] usb 8-1: USB disconnect, device number 41 [ 3008.248445][T32445] input: syz0 as /devices/virtual/input/input208 [ 3010.483729][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19013'. [ 3011.815576][T32494] input: syz0 as /devices/virtual/input/input209 [ 3011.949039][T24628] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 3012.767339][T24628] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3013.174280][T24628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.269281][T24628] usb 6-1: config 0 descriptor?? [ 3013.632949][T19387] usb 6-1: USB disconnect, device number 52 [ 3014.583810][T32538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19034'. [ 3016.778317][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19041'. [ 3016.779392][T32550] fuse: Bad value for 'user_id' [ 3016.797237][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19041'. [ 3016.807045][T32550] fuse: Bad value for 'user_id' [ 3017.781198][T32575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19049'. [ 3019.918765][T19158] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 3020.394998][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.606283][T19158] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3020.629902][T19158] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3020.639391][T19158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.714125][T32615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19062'. [ 3021.571480][T19158] usb 8-1: config 0 descriptor?? [ 3021.588774][T19158] pwc: Askey VC010 type 2 USB webcam detected. [ 3023.215792][T19158] pwc: recv_control_msg error -71 req 02 val 2b00 [ 3023.319923][T19158] pwc: recv_control_msg error -71 req 02 val 2700 [ 3023.578117][T19158] pwc: recv_control_msg error -71 req 02 val 2c00 [ 3024.301346][T19158] pwc: recv_control_msg error -71 req 04 val 1000 [ 3024.618331][T19158] pwc: recv_control_msg error -71 req 04 val 1300 [ 3024.629623][T19158] pwc: recv_control_msg error -71 req 04 val 1400 [ 3024.639138][T19158] pwc: recv_control_msg error -71 req 02 val 2000 [ 3024.653287][T19158] pwc: recv_control_msg error -71 req 02 val 2100 [ 3024.674228][T19158] pwc: recv_control_msg error -71 req 04 val 1500 [ 3024.695648][T19158] pwc: recv_control_msg error -71 req 02 val 2500 [ 3025.111675][T19158] pwc: recv_control_msg error -71 req 02 val 2400 [ 3025.223340][T19158] pwc: recv_control_msg error -71 req 02 val 2600 [ 3025.269269][T19158] pwc: recv_control_msg error -71 req 02 val 2900 [ 3025.410727][T19158] pwc: recv_control_msg error -71 req 02 val 2800 [ 3025.411383][T32658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19076'. [ 3025.440842][T19158] pwc: recv_control_msg error -71 req 04 val 1100 [ 3025.471160][T19158] pwc: recv_control_msg error -71 req 04 val 1200 [ 3025.553535][T19158] pwc: Registered as video103. [ 3025.573955][T19158] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input210 [ 3025.732572][T19158] usb 8-1: USB disconnect, device number 42 [ 3027.598658][T32691] batadv_slave_0: entered promiscuous mode [ 3029.949333][T19158] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3030.178049][T19158] usb 4-1: Using ep0 maxpacket: 16 [ 3030.184961][T19158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3030.198353][T19158] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3030.209311][T19158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.217336][T19158] usb 4-1: Product: syz [ 3030.259069][T19158] usb 4-1: Manufacturer: syz [ 3030.264153][T19158] usb 4-1: SerialNumber: syz [ 3030.295748][T19158] usb 4-1: config 0 descriptor?? [ 3030.926581][T19158] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3030.935888][T19158] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 3030.994569][T32561] Set syz1 is full, maxelem 65536 reached [ 3031.655560][T19158] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 3032.120899][T19158] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 3032.643279][T19158] em28xx 4-1:0.0: board has no eeprom [ 3033.771271][ T30] audit: type=1107 audit(2000000266.884:2640): pid=32758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 3034.592755][T19158] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 3034.617737][T19158] em28xx 4-1:0.0: dvb set to bulk mode. [ 3034.623317][T24628] em28xx 4-1:0.0: Binding DVB extension [ 3034.633603][T19158] usb 4-1: USB disconnect, device number 108 [ 3034.653799][T19158] em28xx 4-1:0.0: Disconnecting em28xx [ 3034.720830][T24628] em28xx 4-1:0.0: Registering input extension [ 3034.727147][T19158] em28xx 4-1:0.0: Closing input extension [ 3034.931916][T19158] em28xx 4-1:0.0: Freeing device [ 3037.606473][ T343] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input212 [ 3038.181436][ T359] syz_tun: entered allmulticast mode [ 3038.799865][ T348] syz_tun: left allmulticast mode [ 3041.346943][ T410] lo speed is unknown, defaulting to 1000 [ 3041.352855][ T410] lo speed is unknown, defaulting to 1000 [ 3041.359960][ T410] lo speed is unknown, defaulting to 1000 [ 3041.385836][ T410] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 3041.452201][ T410] lo speed is unknown, defaulting to 1000 [ 3041.460811][ T410] lo speed is unknown, defaulting to 1000 [ 3041.469384][ T410] lo speed is unknown, defaulting to 1000 [ 3041.477871][ T410] lo speed is unknown, defaulting to 1000 [ 3041.486405][ T410] lo speed is unknown, defaulting to 1000 [ 3041.495250][ T410] lo speed is unknown, defaulting to 1000 [ 3041.506142][ T410] lo speed is unknown, defaulting to 1000 [ 3041.514632][ T410] lo speed is unknown, defaulting to 1000 [ 3041.521008][ T410] lo speed is unknown, defaulting to 1000 [ 3041.527261][ T410] lo speed is unknown, defaulting to 1000 [ 3042.360786][ T419] fuse: Invalid rootmode [ 3045.903084][ T30] audit: type=1107 audit(2000000278.175:2641): pid=467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 3046.252480][ T480] fuse: Bad value for 'rootmode' [ 3046.397168][T24574] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3046.637161][T24574] usb 6-1: Using ep0 maxpacket: 8 [ 3046.692366][T24574] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3046.788497][T24574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.887558][T24574] usb 6-1: Product: syz [ 3046.933599][T24574] usb 6-1: Manufacturer: syz [ 3046.987142][T24574] usb 6-1: SerialNumber: syz [ 3047.051782][T24574] usb 6-1: config 0 descriptor?? [ 3047.323364][T24574] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3047.465096][ T4379] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 3047.700011][ T4379] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 3047.750664][ T4379] usb 8-1: config 0 has no interface number 0 [ 3047.766809][ T4379] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3047.779195][ T4379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.788548][T24628] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 3047.807140][ T4379] usb 8-1: Product: syz [ 3047.819087][ T4379] usb 8-1: Manufacturer: syz [ 3047.837298][ T4379] usb 8-1: SerialNumber: syz [ 3047.844097][ T4379] usb 8-1: config 0 descriptor?? [ 3047.917298][T24409] Bluetooth: hci5: command 0x0406 tx timeout [ 3047.948265][T24628] usb 10-1: device descriptor read/64, error -71 [ 3047.965324][T24574] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 3048.453399][ T4379] usb 8-1: Firmware: major: 18, minor: 128, hardware type: UNKNOWN (75) [ 3048.517042][T24628] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 3048.661057][ T4379] usb 8-1: failed to fetch extended address, random address set [ 3048.668826][T24628] usb 10-1: device descriptor read/64, error -71 [ 3048.675188][ T4379] usb 8-1: atusb_probe: initialization failed, error = -524 [ 3048.682594][ T4379] atusb 8-1:0.128: probe with driver atusb failed with error -524 [ 3048.797092][T24628] usb usb10-port1: attempt power cycle [ 3048.867602][T32174] usb 8-1: USB disconnect, device number 43 [ 3049.136934][T24628] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 3049.146966][ T30] audit: type=1107 audit(2000000282.255:2642): pid=519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 3049.163389][T24628] usb 10-1: device descriptor read/8, error -71 [ 3049.341278][T19655] usb 6-1: USB disconnect, device number 53 [ 3049.477273][T24628] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 3049.518006][T24628] usb 10-1: device descriptor read/8, error -71 [ 3049.647059][T24628] usb usb10-port1: unable to enumerate USB device [ 3049.900994][ T551] siw: device registration error -23 [ 3052.176999][T19655] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 3052.866763][T19655] usb 10-1: Using ep0 maxpacket: 8 [ 3052.881736][T19655] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3052.902489][T19655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.910753][T18743] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 3052.927301][T19655] usb 10-1: Product: syz [ 3052.931774][T19655] usb 10-1: Manufacturer: syz [ 3052.936578][T19655] usb 10-1: SerialNumber: syz [ 3052.984567][T19655] usb 10-1: config 0 descriptor?? [ 3053.062088][ T591] 9pnet_fd: Insufficient options for proto=fd [ 3053.096832][T32174] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3053.229150][T18743] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 3053.455230][T19655] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3053.463762][T18743] usb 8-1: config 0 has no interface number 0 [ 3053.475234][T18743] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3053.484358][T18743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3053.492511][T18743] usb 8-1: Product: syz [ 3053.500557][T18743] usb 8-1: Manufacturer: syz [ 3053.505168][T18743] usb 8-1: SerialNumber: syz [ 3053.511277][T18743] usb 8-1: config 0 descriptor?? [ 3053.607740][T32174] usb 6-1: device descriptor read/64, error -71 [ 3054.404551][T18743] usb 8-1: Firmware version (0.0) predates our first public release. [ 3054.433397][ T610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input213 [ 3054.484839][T18743] usb 8-1: Please update to version 0.2 or newer [ 3054.526640][T32174] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3054.557901][T18743] usb 8-1: USB disconnect, device number 44 [ 3054.650254][ T620] 9p: Unknown access argument 18446744073709551615: -34 [ 3054.666871][T32174] usb 6-1: device descriptor read/64, error -71 [ 3054.689020][T19655] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3054.689739][ T622] 9pnet_fd: Insufficient options for proto=fd [ 3054.720493][T19655] usb 10-1: USB disconnect, device number 69 [ 3054.797171][T32174] usb usb6-port1: attempt power cycle [ 3056.079366][ T645] fuse: Unknown parameter 'use00000000000000000000' [ 3057.221317][ T30] audit: type=1400 audit(2000000290.356:2643): avc: denied { append } for pid=666 comm="syz.9.19225" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3057.308421][ T668] input: syz0 as /devices/virtual/input/input214 [ 3058.306514][ T4379] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3059.116945][T24628] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 3059.142596][ T690] fuse: Unknown parameter 'use00000000000000000000' [ 3059.259468][ T4379] usb 4-1: Using ep0 maxpacket: 8 [ 3059.269662][ T4379] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3059.278817][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3059.286868][T24628] usb 10-1: device descriptor read/64, error -71 [ 3059.294694][ T4379] usb 4-1: Product: syz [ 3059.299152][ T4379] usb 4-1: Manufacturer: syz [ 3059.303913][ T4379] usb 4-1: SerialNumber: syz [ 3059.318410][ T4379] usb 4-1: config 0 descriptor?? [ 3059.589168][T24628] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 3059.608596][ T4379] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3059.756444][T24628] usb 10-1: device descriptor read/64, error -71 [ 3059.867511][T24628] usb usb10-port1: attempt power cycle [ 3060.496301][T24628] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 3060.556804][T24628] usb 10-1: device descriptor read/8, error -71 [ 3060.866402][T24628] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 3060.925413][T24628] usb 10-1: device descriptor read/8, error -71 [ 3060.933559][ T4379] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3060.945106][ T4379] usb 4-1: USB disconnect, device number 109 [ 3061.047045][T24628] usb usb10-port1: unable to enumerate USB device [ 3063.204640][ T774] binder: 773:774 ioctl c0306201 0 returned -14 [ 3063.287006][T19655] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 3063.607779][ T780] fuse: Unknown parameter 'user_i00000000000000000000' [ 3063.716138][T19655] usb 8-1: Using ep0 maxpacket: 8 [ 3064.320421][T19655] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3064.629897][T19655] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.640687][T19655] usb 8-1: Product: syz [ 3064.644948][T19655] usb 8-1: Manufacturer: syz [ 3064.649774][T19655] usb 8-1: SerialNumber: syz [ 3064.671010][T19655] usb 8-1: config 0 descriptor?? [ 3064.701530][ T794] blktrace: Concurrent blktraces are not allowed on loop8 [ 3064.935292][T19655] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3068.397563][T16540] Bluetooth: hci6: command 0x0406 tx timeout [ 3068.979794][T19655] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3069.015953][T19655] usb 8-1: USB disconnect, device number 45 [ 3069.153168][ T829] syz_tun: entered allmulticast mode [ 3069.754866][ T823] syz_tun: left allmulticast mode [ 3070.319254][T19158] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 3070.545751][T19158] usb 10-1: Using ep0 maxpacket: 8 [ 3070.558128][T19158] usb 10-1: config index 0 descriptor too short (expected 16291, got 18) [ 3070.603015][ T864] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3070.631279][T19158] usb 10-1: config 93 has too many interfaces: 47, using maximum allowed: 32 [ 3070.705897][T19158] usb 10-1: config 93 has an invalid descriptor of length 42, skipping remainder of the config [ 3071.062913][T19158] usb 10-1: config 93 has 0 interfaces, different from the descriptor's value: 47 [ 3071.089235][ T870] blktrace: Concurrent blktraces are not allowed on loop6 [ 3071.289260][T19158] usb 10-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=a7.70 [ 3071.715883][T19158] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.785659][T19158] usb 10-1: Product: syz [ 3071.795762][T19158] usb 10-1: Manufacturer: syz [ 3071.800442][T19158] usb 10-1: SerialNumber: syz [ 3073.080650][T19158] usb 10-1: USB disconnect, device number 74 [ 3073.149089][ T887] 9p: Unknown access argument 18446744073709551615: -34 [ 3073.334824][ T784] Set syz1 is full, maxelem 65536 reached [ 3073.444534][ T903] netlink: 'syz.7.19298': attribute type 7 has an invalid length. [ 3073.467302][ T903] : entered promiscuous mode [ 3074.676902][T32174] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3075.028586][T32174] usb 6-1: Using ep0 maxpacket: 16 [ 3075.062073][T32174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.299079][T32174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3075.308978][T32174] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 3075.318037][T32174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3075.347496][T32174] usb 6-1: config 0 descriptor?? [ 3075.441043][ T943] 9p: Unknown access argument 18446744073709551615: -34 [ 3075.979462][T32174] usbhid 6-1:0.0: can't add hid device: -32 [ 3076.138978][T32174] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 3077.557763][T32174] usb 6-1: USB disconnect, device number 57 [ 3077.671778][ T978] 9p: Unknown access argument 18446744073709551615: -34 [ 3078.965262][T32174] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 3079.116448][T32174] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3079.203422][T32174] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3079.693313][T32174] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 3079.702563][T32174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3079.716348][T32174] usb 10-1: Product: syz [ 3079.739088][T32174] usb 10-1: Manufacturer: syz [ 3079.744312][T32174] usb 10-1: SerialNumber: syz [ 3079.753249][T32174] usb 10-1: config 0 descriptor?? [ 3079.975586][T32174] usb 10-1: USB disconnect, device number 75 [ 3080.215499][T19158] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3080.385179][T19158] usb 6-1: Using ep0 maxpacket: 16 [ 3080.397946][T19158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3080.448602][T19158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3080.479280][T19158] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 3080.521325][T19158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.548704][T19158] usb 6-1: config 0 descriptor?? [ 3080.558752][ T1041] netlink: 32 bytes leftover after parsing attributes in process `syz.9.19340'. [ 3081.442460][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.378031][T19158] letsketch 0003:6161:4D15.0035: Device info: ఁ [ 3082.584811][T19158] letsketch 0003:6161:4D15.0035: Device info: 洅 [ 3082.829025][T19158] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 3082.842625][T19158] letsketch 0003:6161:4D15.0035: probe with driver letsketch failed with error -71 [ 3082.863943][T19158] usb 6-1: USB disconnect, device number 58 [ 3082.892991][ T1076] fuse: Bad value for 'fd' [ 3084.504286][ T1106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3087.322246][ T1153] bridge0: port 2(syz_tun) entered blocking state [ 3087.331188][ T1153] bridge0: port 2(syz_tun) entered disabled state [ 3087.349636][ T1153] syz_tun: entered allmulticast mode [ 3087.365960][ T1153] syz_tun: entered promiscuous mode [ 3088.836280][ T1172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19380'. [ 3091.072162][ T1099] Set syz1 is full, maxelem 65536 reached [ 3094.776986][ T1243] ubi: mtd0 is already attached to ubi31 [ 3094.894892][ T30] audit: type=1107 audit(2000000328.028:2644): pid=1247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 3094.915598][ T1265] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input215 [ 3097.609529][ T1331] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3098.736590][ T31] INFO: task syz.6.18599:31333 blocked for more than 144 seconds. [ 3099.509298][ T31] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 3099.518521][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3099.528356][ T31] task:syz.6.18599 state:D stack:26488 pid:31333 tgid:31333 ppid:25979 task_flags:0x400040 flags:0x00004006 [ 3099.541491][ T31] Call Trace: [ 3099.545389][ T31] [ 3099.548462][ T31] __schedule+0x1190/0x5de0 [ 3099.553753][ T31] ? stack_trace_save+0x8e/0xc0 [ 3099.559400][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 3099.565859][ T31] ? __pfx___schedule+0x10/0x10 [ 3099.570881][ T31] ? kasan_save_stack+0x33/0x60 [ 3099.576686][ T31] ? kasan_record_aux_stack+0xa7/0xc0 [ 3099.582251][ T31] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 3099.589277][ T31] ? deactivate_locked_super+0x94/0x1a0 [ 3099.595668][ T31] ? schedule+0x2d7/0x3a0 [ 3099.600242][ T31] ? rcu_is_watching+0x12/0xc0 [ 3099.606951][ T31] ? lock_release+0x201/0x2f0 [ 3099.611910][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 3099.618682][ T31] schedule+0xe7/0x3a0 [ 3099.623070][ T31] schedule_preempt_disabled+0x13/0x30 [ 3099.629120][ T31] __mutex_lock+0x82a/0x10b0 [ 3099.633868][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 3099.641844][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3099.647463][ T31] ? net_generic+0xea/0x2a0 [ 3099.652765][ T31] ? rcu_is_watching+0x12/0xc0 [ 3099.658344][ T31] ? lock_release+0x201/0x2f0 [ 3099.663194][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 3099.669044][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 3099.675120][ T31] nfsd_umount+0x48/0xe0 [ 3099.679676][ T31] deactivate_locked_super+0xc1/0x1a0 [ 3099.685583][ T31] deactivate_super+0xde/0x100 [ 3099.690490][ T31] cleanup_mnt+0x225/0x450 [ 3099.696247][ T31] task_work_run+0x150/0x240 [ 3099.701159][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3099.706876][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 3099.712773][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 3099.718867][ T31] do_syscall_64+0x3f6/0x4c0 [ 3099.723635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3099.730856][ T31] RIP: 0033:0x7ff224f8ebe9 [ 3099.736002][ T31] RSP: 002b:00007ffcc953a8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3099.744935][ T31] RAX: 0000000000000000 RBX: 00007ff2251b7da0 RCX: 00007ff224f8ebe9 [ 3099.753071][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 3099.762480][ T31] RBP: 00007ff2251b7da0 R08: 000000000000111c R09: 00000019c953abbf [ 3099.770998][ T31] R10: 00007ff2251b7cb0 R11: 0000000000000246 R12: 00000000002cfb87 [ 3099.779676][ T31] R13: 00007ff2251b6180 R14: ffffffffffffffff R15: 00007ffcc953a9e0 [ 3099.788269][ T31] [ 3099.791688][ T31] INFO: lockdep is turned off. [ 3099.797450][ T31] NMI backtrace for cpu 0 [ 3099.797464][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 3099.797487][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3099.797499][ T31] Call Trace: [ 3099.797505][ T31] [ 3099.797512][ T31] dump_stack_lvl+0x116/0x1f0 [ 3099.797536][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3099.797561][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3099.797589][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3099.797624][ T31] watchdog+0xf0e/0x1260 [ 3099.797647][ T31] ? __pfx_watchdog+0x10/0x10 [ 3099.797666][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3099.797686][ T31] ? __kthread_parkme+0x19e/0x250 [ 3099.797712][ T31] ? __pfx_watchdog+0x10/0x10 [ 3099.797731][ T31] kthread+0x3c5/0x780 [ 3099.797748][ T31] ? __pfx_kthread+0x10/0x10 [ 3099.797767][ T31] ? rcu_is_watching+0x12/0xc0 [ 3099.797789][ T31] ? __pfx_kthread+0x10/0x10 [ 3099.797806][ T31] ret_from_fork+0x5d7/0x6f0 [ 3099.797823][ T31] ? __pfx_kthread+0x10/0x10 [ 3099.797840][ T31] ret_from_fork_asm+0x1a/0x30 [ 3099.797865][ T31] [ 3099.797883][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3099.915812][ C1] NMI backtrace for cpu 1 [ 3099.915826][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 3099.915842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3099.915850][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3099.915869][ C1] Code: 7c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 92 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3099.915882][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 3099.915898][ C1] RAX: 000000000e33054c RBX: 0000000000000001 RCX: ffffffff8b937c29 [ 3099.915907][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162680 RDI: ffffffff819133c1 [ 3099.915915][ C1] RBP: ffffed1003c56488 R08: 0000000000000000 R09: ffffed10170a6655 [ 3099.915924][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 3099.915932][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab3b90 R15: 0000000000000000 [ 3099.915941][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 3099.915954][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3099.915963][ C1] CR2: 00007f0521fe0928 CR3: 0000000097371000 CR4: 00000000003526f0 [ 3099.915972][ C1] Call Trace: [ 3099.915977][ C1] [ 3099.915981][ C1] default_idle+0x13/0x20 [ 3099.915997][ C1] default_idle_call+0x6d/0xb0 [ 3099.916011][ C1] do_idle+0x391/0x510 [ 3099.916028][ C1] ? __pfx_do_idle+0x10/0x10 [ 3099.916043][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 3099.916059][ C1] cpu_startup_entry+0x4f/0x60 [ 3099.916074][ C1] start_secondary+0x21d/0x2b0 [ 3099.916092][ C1] ? __pfx_start_secondary+0x10/0x10 [ 3099.916111][ C1] common_startup_64+0x13e/0x148 [ 3099.916130][ C1] [ 3100.088525][ C1] vkms_vblank_simulate: vblank timer overrun [ 3100.143722][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3100.150581][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 3100.162352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3100.172381][ T31] Call Trace: [ 3100.175635][ T31] [ 3100.178543][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3100.183114][ T31] vpanic+0x6e8/0x7a0 [ 3100.187077][ T31] ? __pfx_vpanic+0x10/0x10 [ 3100.191559][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 3100.197428][ T31] panic+0xca/0xd0 [ 3100.201130][ T31] ? __pfx_panic+0x10/0x10 [ 3100.205523][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3100.210874][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 3100.217019][ T31] ? watchdog+0xd78/0x1260 [ 3100.221409][ T31] ? watchdog+0xd6b/0x1260 [ 3100.225799][ T31] watchdog+0xd89/0x1260 [ 3100.230016][ T31] ? __pfx_watchdog+0x10/0x10 [ 3100.234668][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3100.239859][ T31] ? __kthread_parkme+0x19e/0x250 [ 3100.244865][ T31] ? __pfx_watchdog+0x10/0x10 [ 3100.249532][ T31] kthread+0x3c5/0x780 [ 3100.253581][ T31] ? __pfx_kthread+0x10/0x10 [ 3100.258149][ T31] ? rcu_is_watching+0x12/0xc0 [ 3100.262896][ T31] ? __pfx_kthread+0x10/0x10 [ 3100.267465][ T31] ret_from_fork+0x5d7/0x6f0 [ 3100.272034][ T31] ? __pfx_kthread+0x10/0x10 [ 3100.276603][ T31] ret_from_fork_asm+0x1a/0x30 [ 3100.281354][ T31] [ 3100.284530][ T31] Kernel Offset: disabled [ 3100.288837][ T31] Rebooting in 86400 seconds..