last executing test programs: 12m2.099080096s ago: executing program 32 (id=433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x50, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x4044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200c1}}}}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x50}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x83, 0x4, 0x8, 0x3, 0x15, "e20b0020ffffffff"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000000200)=@framed={{}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m54.376036417s ago: executing program 33 (id=457): socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) getpgrp(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 10m59.926793467s ago: executing program 34 (id=574): fsopen(&(0x7f0000000040)='befs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x4612, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c000240000000000000"], 0xc4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000000801020000000000000000010000080900010173797a3000000000040004800900010073797a300000000006000240e84000000600c3cd4e02408808000005000300110000000900010073797a3100000000060002400000000024000480080006400000000808000640000000010800014032730a7508000540000000000500030021000000"], 0x88}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) truncate(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x0) 10m26.184796061s ago: executing program 35 (id=656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0xa, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f000001b700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x2}}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="08001400", @ANYRES32, @ANYBLOB="0a000600e3ffffffffff"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d66fc4af8c0b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c87150f53dd9"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x8020) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x3a5ed0cbf6774cab, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r6, 0x11, 0x0, r7, @void, @value}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="3b1646e79ce3c586dffb513343ca0aaa0ab8e24a21760dcc1739f761904dd45bd04287912777a56a69925d6ac0f0", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 8m35.908690123s ago: executing program 36 (id=864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$usbfs(0x0, 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000640)={0x81a9fff, 0x3000, 0x40, 0x1, 0x3}) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 8m24.892395349s ago: executing program 37 (id=883): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 7m4.506504801s ago: executing program 38 (id=977): keyctl$KEYCTL_PKEY_QUERY(0x20, 0x0, 0x0, &(0x7f00000005c0)='\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc048aeca, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x0, 0x813, 0x1, 0x3, 0x7, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x37b1, 0xfc8, 0x4a77, 0x7fff, 0x2, 0x9, {0x4, 0x800}, 0x7, 0x8}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6m37.993269458s ago: executing program 3 (id=1034): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x42) r5 = epoll_create1(0x80000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x10000000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m22.598057048s ago: executing program 39 (id=1034): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x42) r5 = epoll_create1(0x80000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x10000000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"e8248d24737d57c0f1d15d2e0b37c4df9f7b80d5690e940d6c9a070503a9281ab6d508a2f7f6cb72a560833143a5f6c909e6f12bd968589f28b8f7d1f8717062906c9f3f875dd68426be07daa6e5e61f6bfab0eed461ff85399408b84833fc34b560d72ac15ff8b4bc8f41fb22463b548c94869ad4e165ef23bb4f90da1da92f1981dba39412569e1aa5e56af2e965a040c25d4337de513ee49303ee69a13919ca6314acfe0645979b97c39ccc98ef6c0ac12cb37d0a40537239f2af515052bf8bf57569b9b78d690384de7f2322f5b90f648365c5aba70208451caad7b40b58b5832caa7af4ec35d688208b23fb28746af6368e60888c30a5ea98eeb4acbb399819b14ec71f72fba90d99973b9cfa935c54deb022fe87bf44db3fc7da2491120f2218ec0991222b55166bf10ffc75882515bf8041bcf64c0b319661e01e811b9bdfb365b32e07b315a741c73ad8918cf0afb46a9f3b3d8053f9c73fb9a98f4a4d2e5fc941a38085424015a65c9e91e20fce21f10711d5d55217ddadad26918171bef032db0a9954da6bc41cc72529c3985a27052e63f09d7f58f7f56a8563ca92271ea7c5c18acf237e524b886b7913218dcf00aa3ee38ec75661f41f189113726aea2fd854d9c3b74b8acf53134e9a7dc1896ac0a8a15b5eb4847658b09e4373c58920cc9ca592ae7b64f29f68bed134f49970fa86d2eac8b4bc5447856ff1bdf614613c7b3ebb4c9acbcd72fa77083cb32cbdb4903183e85e0cf697b062cd607da66acaca6e6606f140c86394573a4b7195bbfd5f257c739149b03039d45924f8e39dfd34fc87921fe97ddc482bc8341432ee0fb9e5ca9696dce423c39679b07dd427e7f6fc2e52b127d2777d882ec6ce03c9d8d6b0ed1f4a46185084b948b8187119e7d3847a35d5482053a4ef9b6763e9c99a33a9c10dd13dbc8e3787b930389aaf6305e7175c87339edb50a5cec54316f309c447c3642b379a7e849f2e74f8b89160a3f39f1e0952833a5b6d1da7f905be113d43fd7e07db64edfc43671b58651e7c1646bc01441e775fbd51df06d108c0fe1ddb8926b26ace94d881883449a09777401d6d818b5088ec36f17ab2e9aa916c7dcfb0f53f491c1dc4ba02feb21ce57542fa3507c7de30198d697232e3e36b1572cc76ab229c187d6eed0cbd771b0fb0e994fc05931d6dac59ae3f505a8643268a65a1712b0d9e2a9882c3e2e663fa0d82b58ed7302d18801e57f2ce8f2df6266eb6410a927802f708909851dfba0d5bfa0106038b3c5515c50dde5d7798b3d5de1f8fabcc37283fd4c08b7b1bc99df8a2e6bf684e9978941fc37869e4a23aeba0863a1023c7ed476a9af2fd250c58968a498a0479d293390f67affd96eac0a2357845b6fbb700aaccdcdfdb982ce1c9aa921e694323a28a16c0dbc2435d94816db4c615f93a88fdc387e3"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m6.922685787s ago: executing program 40 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80000, 0x71) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 6m3.339770185s ago: executing program 7 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1e, 0x13, r0, 0x82cfc000) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000c80)=""/4096, 0x1000) 6m2.468924104s ago: executing program 7 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$qrtrtun(r2, &(0x7f0000000300), 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) 5m46.58015179s ago: executing program 41 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$qrtrtun(r2, &(0x7f0000000300), 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) 5m32.886353088s ago: executing program 42 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) unshare(0x2c020400) 5m15.062127712s ago: executing program 43 (id=1143): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000600)="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", 0x1c6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x48800) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000800000000000000000019a0716be5fb0d8200", @ANYRES32=r1]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = dup(r3) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000033, r4, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000100), 0x0, 0x0, 0x1) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 4m39.083328923s ago: executing program 44 (id=1193): listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) chdir(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) 4m26.075262437s ago: executing program 45 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000100)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x300) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10}, 0x0, 0x0, 0x0}) 3m58.955445787s ago: executing program 4 (id=1268): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pwritev(r1, 0x0, 0x0, 0xffffffff, 0x9) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1000000000000]}}) 3m57.652257695s ago: executing program 4 (id=1272): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 3m56.616789s ago: executing program 4 (id=1273): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 3m55.48678823s ago: executing program 4 (id=1276): io_setup(0x30, &(0x7f0000000600)=0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x0, &(0x7f0000000180)) 3m54.119724038s ago: executing program 4 (id=1278): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f00000005c0), 0x0, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x60004016}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0xfde4, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}, {0x8}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000180)={0x6, 0x7, 0x7b, 0x401, 0x6, 0x800}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x100008) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m50.674667825s ago: executing program 3 (id=1211): socket$inet6(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32], 0x20) 3m48.879171209s ago: executing program 3 (id=1286): syz_usb_connect(0x0, 0x24a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006d99b7106b060c2075a10102030109023802020000200009041c090fd41e980a090508100004050380072501020861300725018202ffff09090500001000050a0c991079ebffb55d0f98d272ab4aef5d38c8a4a3bab9de72a241668c0db377d51293a3940e7acb57d7b8cdfc86c950e18fe0507dea45d650fe30f7573d634dff089a5db5e6174a1f1aefdd5b83a0bfec082dd4b12f4c8a2494220194fb9bd05b5accaa72dde11fd9baf0125af67b917242afbee0e671549d5d4773fc0cb082c2e995074041e930a9f9f43ad974d376dbd42a5a71817051ed0351072501020803000905020c08000406ad090500100002020900072501810f0400072501010b0300"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdir(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00'}) r5 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) 3m45.091775385s ago: executing program 3 (id=1291): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d02806ee94c4cd8abdd7fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m38.349751961s ago: executing program 46 (id=1278): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f00000005c0), 0x0, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x60004016}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0xfde4, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}, {0x8}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000180)={0x6, 0x7, 0x7b, 0x401, 0x6, 0x800}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x100008) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m28.912969029s ago: executing program 47 (id=1291): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d02806ee94c4cd8abdd7fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m44.092723614s ago: executing program 7 (id=1298): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 2m43.179903174s ago: executing program 7 (id=1410): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x0) 2m41.783669918s ago: executing program 7 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m41.048753707s ago: executing program 7 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0xa, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB], 0x248, 0x8000}, {0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000005a00)="413c4108b5b16907f4c14d56e984", 0xe}], 0x1, &(0x7f0000007340)=ANY=[@ANYBLOB="08010000000000001701000002000000ee00000086fb6a20842ef2"], 0x108, 0x20000000}], 0x2, 0x800) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 2m33.306123903s ago: executing program 0 (id=1442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 2m32.183406029s ago: executing program 0 (id=1444): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) sync() timer_create(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) timer_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1900f9e8275fd7750c8f4b59220cd9d3a0000004617c88b1b5e1ff2000000003040000080000000000001d", @ANYRESDEC=0x0, @ANYRES16, @ANYRES16, @ANYBLOB="7b369e8ef5e7d76723719ee787a0dc46386bc57bdc251be1a51d443c06634c60321ca21d4d556978a95377d7703d949295c63b83279a7a482c6412d474b1e8b31c6595059536117c0c90d3672588d2748159fcc87c68315b4cd9de29b0aa771d2d713d1cc551b16c3b94a438e3aa43e34ade526c7c60706207212bae2c97758f686f73df229422b5450725591e8df6a94cff1f9f71"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000100001000000d018000000000000000a7c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000050000480280001800a00010071756f74610000001800028008000240000000000c0001400000000000000008240001800b0001006f626a72656600001400028008000340"], 0xa4}}, 0x0) 2m30.528903603s ago: executing program 0 (id=1450): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/261, 0x105}, {0x0}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000480)=""/68, 0x44}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000140)=""/126, 0x7e}], 0x8}, 0x2) 2m29.470992994s ago: executing program 0 (id=1453): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m28.688777589s ago: executing program 0 (id=1457): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 2m27.659429951s ago: executing program 0 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$msr(r1, &(0x7f0000000240)=""/170, 0xaa) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, r1, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2004}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)='GPL\x00', 0x80000000, 0xe, &(0x7f0000000500)=""/14, 0x0, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], 0x0, 0x10, 0x7, @void, @value}, 0x94) msgget(0x2, 0x680) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x1, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}}, 0x32) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40008062, 0x0) 2m25.059009797s ago: executing program 48 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0xa, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)=ANY=[@ANYBLOB], 0x248, 0x8000}, {0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000005a00)="413c4108b5b16907f4c14d56e984", 0xe}], 0x1, &(0x7f0000007340)=ANY=[@ANYBLOB="08010000000000001701000002000000ee00000086fb6a20842ef2"], 0x108, 0x20000000}], 0x2, 0x800) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 2m12.089297854s ago: executing program 49 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$msr(r1, &(0x7f0000000240)=""/170, 0xaa) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, r1, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2004}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)='GPL\x00', 0x80000000, 0xe, &(0x7f0000000500)=""/14, 0x0, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], 0x0, 0x10, 0x7, @void, @value}, 0x94) msgget(0x2, 0x680) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x1, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}}, 0x32) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40008062, 0x0) 1m47.407736177s ago: executing program 1 (id=1532): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x202800) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "5646afb5ddef2892648d14529a303a13"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4d, 0x60, 0x31, 0x6, "05a61722", "3d9e2963"}}, 0x0}, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x20, 0xf, 0x6f, "06ad121a811ed00fa73c070dc83fb07b4dc1758160dcc3211f7130259d09c6d8cbf9c6ab999658641ddf63131b747bde6a91d90550f0ac613f4787b4cdfba7495817252aebc79d074e4fe2b030e31f0a533005fdb868b0de1d545be6a1528d910c7cd008183c64b21f3bc5f4a5b547"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xe17e}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2b}, &(0x7f0000000400)={0x40, 0xb, 0x2, "3a96"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x40}, 0x0, 0x0, 0x0}) write$char_usb(r3, 0x0, 0x300) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/134) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000b40)={0x20, 0xb, 0x79, {0x79, 0xd, "d58be004cc975dd7febca6c1644d84a4c486bb5f9d8be9148a8554feeac932e74e358baf79f0dabd3ae8f022f40d6bd85cddb0d39e0a5588b80758b3ef0fc60e56abc4b6bfb3260a97ab0e99732e75f0bd92c2b654d5a5d99ed32f8a04eb9a777165fac24f281cfe4ddaf8ad66d12d4004280b876e27ab"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f0000000f40)={0x0, 0x22, 0x13, {[@main=@item_012={0x2, 0x0, 0xb, "8510"}, @global=@item_4={0x3, 0x1, 0x0, "63b3e098"}, @global=@item_4={0x3, 0x1, 0xb, "bb62c290"}, @main=@item_012={0x2, 0x0, 0x6, 'rw'}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0xa, "8e"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9b, 0xf, 0x1, {0x22, 0xc34}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x0, 0x14, 0xea, "11e753d557f18bafe0963aac511556cbf08f6178ced97bc867af5f2ffcb7a00c86ffecacdcd9007d7ba34ddd9c3566fad96cbc80777d7bb7fb69ec5d9fe928ab7d051eaea8386bc014393adcfa7c3b034ddd10b60892efc47833eea97a34a08fa9f8e2b2a6d706dd89a5e3921e0973326a7a3d005481cea8de26c81b4c6fa35629eef3d91aadc05d4873b4e99bbd7564b4eab86d87139abd57cd2a6549c41233fdf8e8f01d253824f4df2389f9d49b332a029e2cb6e22cf24ba340782cebc52c198b67fb803cc2c062a4b5f06e79c659b9852f05d2c9c8a32c673567f1650e780147794d18ec84a638d2"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e40)={0x0, 0x8, 0x1}, &(0x7f0000000e80)={0x20, 0x1, 0x29, "e4761e6b74f87b75aef63e0a4a86ac8b110f6e771add91d6a5e56303c4bf10aa57e1c7c711fabb5393"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x5}}) ioctl$EVIOCRMFF(r1, 0x5501, &(0x7f0000000400)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x1b, 0x76, 0x7f, 0x20, 0x451, 0x5152, 0xc0b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x52, 0x6f, 0x59, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) 1m42.426163746s ago: executing program 1 (id=1544): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1m40.759052857s ago: executing program 1 (id=1546): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m39.229735697s ago: executing program 1 (id=1552): syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x68, &(0x7f00000001c0)={0x5, 0xf, 0x68, 0x3, [@generic={0x4d, 0x10, 0x1, "1855932d4daf804ec485501e726e4bcc1219a0fd974f10234e4b1dd66d8f5575c4375af28d5f0f0e7cc6baae8bc15186c8e9aab74f1b1cda60426f2a1e7fa0d47041f4fe70249d6d38f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x61, 0x73, 0xa, 0x10}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28cd14eb85e86fa24e09e1e1edab5168510449b8a5", @ANYRES8], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 1m37.905625651s ago: executing program 1 (id=1555): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1m37.221116516s ago: executing program 1 (id=1558): connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000100240000000400001b29a54200000000060400000000000000000000030000000005000000020000000900000000303000"], &(0x7f0000000e80)=""/4096, 0x40, 0x1000, 0x1, 0x800, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x1000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002680)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x10000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000200)={0xc0000009}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x15c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) 1m22.498711567s ago: executing program 2 (id=1582): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e0100000921000000012205000905"], 0x0) 1m19.930213292s ago: executing program 50 (id=1558): connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000100240000000400001b29a54200000000060400000000000000000000030000000005000000020000000900000000303000"], &(0x7f0000000e80)=""/4096, 0x40, 0x1000, 0x1, 0x800, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x1000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002680)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x10000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000200)={0xc0000009}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x15c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) 1m18.902742207s ago: executing program 5 (id=1587): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="dc71385be6d754bd6e676f62ba88ac1950d93a9f0f96fd50ad21508b306685e42ca637fcc72633b9d6de9141f0684d30", 0x30}, {&(0x7f0000000400)="5b780103242192129e137cca218a4063c26ca94af468f5d574335f5c3dad5aee62876415c4585eb7e3b319bdb7432f520243e593a9f50aeb31fce2cdbf689f616d045a877f8f17260c3ce0c8bd957cbf1d2e7c8cf05177ce9ca30e3f359c2d3d0d8779794552bff6285d4be93ed3345722042440bad36870dab99e1ed3e05c1f54810fdbffeb05a7390192008743912252284a288291f6aa814511285f7c48bea13bf42ec7e0387ad5bb4ad1da2130cc1141edf3af7aca7dab947b4d421f2560e90e72b0e76276d3933c3cb0092e102f0e299b5158cbf032ad680212da167ff5c16b06fa655fe67ca23b9d2fdffc1f1db107c594987689cabd", 0xf9}, {&(0x7f0000000240)="bd1c3e32e99abfe0531f7176760cc0d6237ebc02bebac1919b5a1b9c0e62406d407acd15232996125a465f", 0x2b}, {&(0x7f0000000540)="509e6f", 0x3}, {&(0x7f0000000580)="087a06dc960a73c7f9a911cb2e0d86f85af202cc3e1b123617c0f319f6757ffd5a57cb81204a022f8e5a0b9dda", 0x2d}], 0x5, 0xffffffff, 0x9) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1000000000000]}}) 1m18.333833717s ago: executing program 2 (id=1589): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000020c0)={0x18, 0x4}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000001040)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x68f, 0x0, 0xff, 0x12b7, 0x12, "78710e0ee9766b098ebc342e059950db4c8f9f"}) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)={0x1, 0x2, [{0xc727, 0x0, 0x34d3}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000080)=0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 1m17.479024149s ago: executing program 5 (id=1591): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8, 0x20, 0x8, 0x9ed5}, &(0x7f0000000080)=0x18) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000200)={0x6, @raw_data="98fe6404cf625acfeb28dab7e6d302fa41d603e654530adfc86e6de429a5c423dea3163539765c8bb504d9bb98811dc9b0ec716ad4204bf3905d4259a432c139bc30b99a3090f761f570251524eac6683f7ea95677bf4dbc8c0f34d58fc8a2ff41e5dae8eaa63bb7da7f484daca02d7cd565d96d5e8695f57a4fb3dc96422672507efa68c66781fb294a0bc84b61784cf4003b548bc4b1a251d83e1630c40520e82f3bfd10663f097190cfc72b9c2dfed700e315a95d527c5ded47f4b5dad398b164473fea66532c"}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) sendmmsg$sock(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1m16.534803954s ago: executing program 2 (id=1593): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0xc0, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfffa, 0x10}, {0xffe0, 0x9}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x36, 0xb0, 0x0, 0x6, 0x0, 0x0, 0x40, 0x1}}, {0x6, 0x2, [0x5ae]}}, {{0x1c, 0x1, {0x8, 0x26, 0x3, 0x0, 0x1, 0x0, 0xc, 0x1}}, {0x6, 0x2, [0x400]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "23b80e98653164d8897a7d1d6b979f4c"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xa11e}]}}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m13.391877277s ago: executing program 2 (id=1595): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x6, 0x8000000000004) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="006b55787cf76994000000000000", @ANYRES32=0x0, @ANYRESOCT], 0x48) 1m12.365358555s ago: executing program 2 (id=1598): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) 1m11.90385315s ago: executing program 5 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m10.914077593s ago: executing program 5 (id=1602): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000020c0)={0x18, 0x4}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000001040)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x68f, 0x0, 0xff, 0x12b7, 0x12, "78710e0ee9766b098ebc342e059950db4c8f9f"}) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)={0x1, 0x2, [{0xc727, 0x0, 0x34d3}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 1m9.052494468s ago: executing program 5 (id=1605): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1m8.479191392s ago: executing program 2 (id=1607): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x4, 0x1}, 0x3}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m5.552343962s ago: executing program 5 (id=1609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x3b) 52.910640453s ago: executing program 51 (id=1607): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x4, 0x1}, 0x3}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 50.221369079s ago: executing program 52 (id=1609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x3b) 33.008703965s ago: executing program 8 (id=1642): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="dc71385be6d754bd6e676f62ba88ac1950d93a9f0f96fd50ad21508b306685e42ca637fcc72633b9d6de9141f0684d30", 0x30}, {&(0x7f0000000400)="5b780103242192129e137cca218a4063c26ca94af468f5d574335f5c3dad5aee62876415c4585eb7e3b319bdb7432f520243e593a9f50aeb31fce2cdbf689f616d045a877f8f17260c3ce0c8bd957cbf1d2e7c8cf05177ce9ca30e3f359c2d3d0d8779794552bff6285d4be93ed3345722042440bad36870dab99e1ed3e05c1f54810fdbffeb05a7390192008743912252284a288291f6aa814511285f7c48bea13bf42ec7e0387ad5bb4ad1da2130cc1141edf3af7aca7dab947b4d421f2560e90e72b0e76276d3933c3cb0092e102f0e299b5158cbf032ad680212da167ff5c16b06fa655fe67ca23b9d2fdffc1f1db107c594987689cabd", 0xf9}, {&(0x7f0000000240)="bd1c3e32e99abfe0531f7176760cc0d6237ebc02bebac1919b5a1b9c0e62406d407acd15232996125a465f", 0x2b}, {&(0x7f0000000580)="087a06dc960a73c7f9a911cb2e0d86f85af202cc3e1b123617c0f319f6757ffd5a57cb81204a022f8e5a0b9dda48", 0x2e}], 0x4, 0xffffffff, 0x9) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1000000000000]}}) 31.16661358s ago: executing program 8 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="0415"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40014103f, 0x0) 29.447732486s ago: executing program 8 (id=1646): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETSW2(r0, 0x5433, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000340)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000480)={r3, 0x80000001, 0xfff, 0xb, 0x2, 0x800, 0x200, 0xa60, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x49cb, 0x7, 0x400, 0xf6}}, &(0x7f0000000540)=0xb0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) socket$igmp6(0xa, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000300)='./file1\x00', 0x0, 0x10}, 0x18) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 27.654643262s ago: executing program 8 (id=1649): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x12408, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20337, 0x20) close(r0) 26.273659189s ago: executing program 8 (id=1651): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x95, 0x22, 0x85, 0x20, 0x421, 0x4b2, 0x1058, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "5646afb5ddef2892648d14529a303a13"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4d, 0x60, 0x31, 0x6, "05a61722", "3d9e2963"}}, 0x0}, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x20, 0xf, 0x6f, "06ad121a811ed00fa73c070dc83fb07b4dc1758160dcc3211f7130259d09c6d8cbf9c6ab999658641ddf63131b747bde6a91d90550f0ac613f4787b4cdfba7495817252aebc79d074e4fe2b030e31f0a533005fdb868b0de1d545be6a1528d910c7cd008183c64b21f3bc5f4a5b547"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xe17e}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2b}, &(0x7f0000000400)={0x40, 0xb, 0x2, "3a96"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x40}, 0x0, 0x0, 0x0}) write$char_usb(r2, 0x0, 0x300) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/134) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000b40)={0x20, 0xb, 0x79, {0x79, 0xd, "d58be004cc975dd7febca6c1644d84a4c486bb5f9d8be9148a8554feeac932e74e358baf79f0dabd3ae8f022f40d6bd85cddb0d39e0a5588b80758b3ef0fc60e56abc4b6bfb3260a97ab0e99732e75f0bd92c2b654d5a5d99ed32f8a04eb9a777165fac24f281cfe4ddaf8ad66d12d4004280b876e27ab"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f0000000f40)={0x0, 0x22, 0x13, {[@main=@item_012={0x2, 0x0, 0xb, "8510"}, @global=@item_4={0x3, 0x1, 0x0, "63b3e098"}, @global=@item_4={0x3, 0x1, 0xb, "bb62c290"}, @main=@item_012={0x2, 0x0, 0x6, 'rw'}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0xa, "8e"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9b, 0xf, 0x1, {0x22, 0xc34}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x0, 0x14, 0xea, "11e753d557f18bafe0963aac511556cbf08f6178ced97bc867af5f2ffcb7a00c86ffecacdcd9007d7ba34ddd9c3566fad96cbc80777d7bb7fb69ec5d9fe928ab7d051eaea8386bc014393adcfa7c3b034ddd10b60892efc47833eea97a34a08fa9f8e2b2a6d706dd89a5e3921e0973326a7a3d005481cea8de26c81b4c6fa35629eef3d91aadc05d4873b4e99bbd7564b4eab86d87139abd57cd2a6549c41233fdf8e8f01d253824f4df2389f9d49b332a029e2cb6e22cf24ba340782cebc52c198b67fb803cc2c062a4b5f06e79c659b9852f05d2c9c8a32c673567f1650e780147794d18ec84a638d2"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e40)={0x0, 0x8, 0x1}, &(0x7f0000000e80)={0x20, 0x1, 0x29, "e4761e6b74f87b75aef63e0a4a86ac8b110f6e771add91d6a5e56303c4bf10aa57e1c7c711fabb5393"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x5}}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, &(0x7f0000000400)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x1b, 0x76, 0x7f, 0x20, 0x451, 0x5152, 0xc0b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x52, 0x6f, 0x59, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) 20.446191186s ago: executing program 8 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0xfd, 0x59565955, 0x280, 0x1e0, 0x2, @stepwise={{0x8, 0xf}, {0x1, 0x7}, {0x5, 0x2}}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000340)={r6, 0x1ff, 0x7, 0xf7}, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x4da4b232, 0x9}}, './file1\x00'}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xd4, @null, @netrom={'nr', 0x0}, 0x8, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}}, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x20, 0x31, 0xf, 0xf, 0x6, 0x5, 0x1, 0x149}}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, 0x0, 0x0) epoll_create(0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 12.159528231s ago: executing program 6 (id=1666): mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000958c834099043f4d2ad201020301090238000100fd20000904270001ff40d300052406000105240009000d240f01030000000d0010006306240200000009050b02"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x20040) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000100)={0x6000, "fc086b323a393ac5257a038948753fab072ff6f7b3d53510414570d4ca409ea0"}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x201}}) 9.384977644s ago: executing program 6 (id=1667): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) unlink(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 8.379934457s ago: executing program 6 (id=1668): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0xa, 0x40000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 7.843791056s ago: executing program 9 (id=1669): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x12408, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20337, 0x20) close(r0) 7.155091131s ago: executing program 9 (id=1670): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x849, 0x4) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 6.483821651s ago: executing program 9 (id=1671): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="dc71385be6d754bd6e676f62ba88ac1950d93a9f0f96fd50ad21508b306685e42ca637fcc72633b9d6de9141f0684d30", 0x30}, {&(0x7f0000000400)="5b780103242192129e137cca218a4063c26ca94af468f5d574335f5c3dad5aee62876415c4585eb7e3b319bdb7432f520243e593a9f50aeb31fce2cdbf689f616d045a877f8f17260c3ce0c8bd957cbf1d2e7c8cf05177ce9ca30e3f359c2d3d0d8779794552bff6285d4be93ed3345722042440bad36870dab99e1ed3e05c1f54810fdbffeb05a7390192008743912252284a288291f6aa814511285f7c48bea13bf42ec7e0387ad5bb4ad1da2130cc1141edf3af7aca7dab947b4d421f2560e90e72b0e76276d3933c3cb0092e102f0e299b5158cbf032ad680212da167ff5c16b06fa655fe67ca23b9d2fdffc1f1db107c594987689cabd", 0xf9}, {&(0x7f0000000240)="bd1c3e32e99abfe0531f7176760cc0d6237ebc02bebac1919b5a1b9c0e62406d407acd15232996125a465f", 0x2b}, {0x0}, {&(0x7f0000000580)="087a06dc960a73c7f9a911cb2e0d86f85af202cc3e1b123617c0f319f6757ffd5a57cb81204a022f8e5a0b9dda48", 0x2e}], 0x5, 0xffffffff, 0x9) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1000000000000]}}) 5.924103284s ago: executing program 6 (id=1672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0xc0, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfffa, 0x10}, {0xffe0, 0x9}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x36, 0xb0, 0x0, 0x6, 0x0, 0x0, 0x40, 0x1}}, {0x6, 0x2, [0x5ae]}}, {{0x1c, 0x1, {0x8, 0x26, 0x3, 0x0, 0x1, 0x0, 0xc, 0x1}}, {0x6, 0x2, [0x400]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "23b80e98653164d8897a7d1d6b979f4c"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xa11e}]}}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.560802703s ago: executing program 9 (id=1673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, r5, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x600, 0x1}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="080b010000000000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, {}, {}, {0x0, 0x3, 0x80000000}}, 0x0, 0xa0b1}, [@lastused={0xc, 0xf, 0x1f}]}, 0x104}}, 0x0) 2.471988932s ago: executing program 53 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0xfd, 0x59565955, 0x280, 0x1e0, 0x2, @stepwise={{0x8, 0xf}, {0x1, 0x7}, {0x5, 0x2}}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000340)={r6, 0x1ff, 0x7, 0xf7}, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x4da4b232, 0x9}}, './file1\x00'}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xd4, @null, @netrom={'nr', 0x0}, 0x8, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}}, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x20, 0x31, 0xf, 0xf, 0x6, 0x5, 0x1, 0x149}}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, 0x0, 0x0) epoll_create(0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.413221273s ago: executing program 6 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xa0}}, 0x0) 2.157823061s ago: executing program 9 (id=1676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(0x0, 0x0) 1.82612764s ago: executing program 6 (id=1677): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0xef, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xe89}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0x2, 0x34}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x3, 0xea, 0x10, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41b}}, {0x94, &(0x7f00000008c0)=@string={0x94, 0x3, "e484c8e9204def2ba895720214677df691c40d082caff7d8e412367a176ec5616e259c323908d25ee990a167f518e5e5dc9c704d3386bfa9d1cd9ed1a9a6662e960228dd42117260210f6cfcf902dd337d5d432a58e724cf8ee3a42ee3752735b13a43cebb4d49a9f115ff2ef33ddf8ec153efd6701bb1e1f5847d85cbb0aba5d0bab3fd2fe773232b12e5ede88413378c68"}}, {0x67, &(0x7f0000000980)=@string={0x67, 0x3, "51270bf1420e4a4b4a278eaac17610d49ba40e69985b7e643b794eecfcdbe31f478eb6801a08e3f60fcb68a9e239a48ef4315fe898fff837fa293d73fcbaf0a4ebd3d47373e939b21471ab994f4d787783e53cca2942a59d2fe3026f11e8717d600f647d5b"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x439}}]}) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000b40)={0x100000000, 0x4f6a, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000240)={0x40, 0x21, 0x81, {0x81, 0xe, "7cf7a0d37bc6f4f9bc07ef40a99a4717c164e116f48bb8ac94fee5a7ab7f0535343a1573b66e5db192819605729c3307fb30f7f96af7882143f11e8a905fed544f9841014df9f61cf45330d91208b97cbfaec2b299e913375bc30864d14f3809dfdeac531e7d83e375e6a4107a2eeeac5864774b903cbe548724450d45fa76"}}, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f2c000000050f2c000314300477405b72972473ddc047e8fe00d3058dc803100b108112000f000d00183f000000000000"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x48, 0x5, "391b29dc", "5d7d9574"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x46, 0x69, 0x0, 0x1, 0x9}}}, 0x0) 1.528363075s ago: executing program 3 (id=1626): syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x68, &(0x7f00000001c0)={0x5, 0xf, 0x68, 0x3, [@generic={0x4d, 0x10, 0x1, "1855932d4daf804ec485501e726e4bcc1219a0fd974f10234e4b1dd66d8f5575c4375af28d5f0f0e7cc6baae8bc15186c8e9aab74f1b1cda60426f2a1e7fa0d47041f4fe70249d6d38f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x61, 0x73, 0xa, 0x10}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28cd14eb85e86fa24e09e1e1edab5168510449b8a5", @ANYRES8], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.456049861s ago: executing program 4 (id=1623): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.155788282s ago: executing program 9 (id=1678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 0s ago: executing program 3 (id=1679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): (unregistering): Port device team_slave_1 removed [ 838.649012][ T8847] usb 6-1: USB disconnect, device number 27 [ 838.672767][ T8973] team0 (unregistering): Port device team_slave_0 removed [ 838.771077][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.777844][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.833148][ T8847] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 838.845849][ T8847] kobil_sct 6-1:81.159: device disconnected [ 840.038861][T10608] overlayfs: missing 'lowerdir' [ 840.321733][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.397850][ T8847] usb 2-1: USB disconnect, device number 37 [ 840.635549][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.789330][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.797106][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.821188][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 840.941546][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.949232][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.142638][T10614] loop2: detected capacity change from 0 to 7 [ 841.152147][T10614] Dev loop2: unable to read RDB block 7 [ 841.158069][T10614] loop2: unable to read partition table [ 841.261359][T10614] loop2: partition table beyond EOD, truncated [ 841.267857][T10614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 842.416976][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 843.499509][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.602261][ T8847] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 843.815547][ T8847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.827313][ T8847] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 843.838718][ T8847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.920355][T10458] veth0_vlan: entered promiscuous mode [ 843.989857][ T8847] usb 6-1: config 0 descriptor?? [ 844.029243][T10458] veth1_vlan: entered promiscuous mode [ 844.429018][ T8847] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 844.452362][T10458] veth0_macvtap: entered promiscuous mode [ 844.511459][ T8847] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0008/input/input20 [ 844.568305][T10458] veth1_macvtap: entered promiscuous mode [ 844.715427][ T8847] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 844.767449][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.778574][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.789002][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.799992][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.810574][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.821949][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.832373][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.843535][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.864694][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.983848][T10647] overlayfs: missing 'lowerdir' [ 844.996673][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.007020][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.074436][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.084607][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.137853][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.155032][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.168003][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.179555][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.190087][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.201161][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.211635][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.223288][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.240104][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.304272][T10458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.313708][T10458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.323071][T10458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.332366][T10458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.593831][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.604669][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.747754][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.759027][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.065917][ T8854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.074296][ T8854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.546169][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.554405][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.578085][T10664] loop2: detected capacity change from 0 to 7 [ 847.658929][T10664] Dev loop2: unable to read RDB block 7 [ 847.666164][T10664] loop2: unable to read partition table [ 847.739305][T10664] loop2: partition table beyond EOD, truncated [ 847.747294][T10664] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.099985][ T8] usb 6-1: USB disconnect, device number 28 [ 849.197721][T10676] random: crng reseeded on system resumption [ 849.404087][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 851.271220][ T8847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 851.450943][ T8847] usb 4-1: Using ep0 maxpacket: 16 [ 851.478461][ T8847] usb 4-1: config 0 has an invalid interface number: 28 but max is 1 [ 851.487645][ T8847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.498222][ T8847] usb 4-1: config 0 has no interface number 1 [ 851.504830][ T8847] usb 4-1: config 0 interface 28 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 851.518214][ T8847] usb 4-1: config 0 interface 28 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 851.532379][ T8847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 37, using maximum allowed: 30 [ 851.556286][ T8847] usb 4-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 851.571911][ T8847] usb 4-1: config 0 interface 28 has no altsetting 0 [ 851.578872][ T8847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 851.596273][ T8847] usb 4-1: New USB device found, idVendor=066b, idProduct=200c, bcdDevice=a1.75 [ 851.605884][ T8847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.616593][ T8847] usb 4-1: Product: syz [ 851.621625][ T8847] usb 4-1: Manufacturer: syz [ 851.626443][ T8847] usb 4-1: SerialNumber: syz [ 851.636922][ T8847] usb 4-1: config 0 descriptor?? [ 851.815295][T10702] overlayfs: missing 'lowerdir' [ 853.663228][ T3356] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 853.951219][ T3356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.963181][ T3356] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 853.974856][ T3356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.375237][ T8847] pegasus 4-1:0.28: probe with driver pegasus failed with error -71 [ 854.448704][T10718] loop2: detected capacity change from 0 to 7 [ 854.473282][T10718] Dev loop2: unable to read RDB block 7 [ 854.483024][T10718] loop2: unable to read partition table [ 854.506961][T10718] loop2: partition table beyond EOD, truncated [ 854.514535][T10718] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 854.575158][ T3356] usb 2-1: config 0 descriptor?? [ 854.588021][ T8847] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 854.658912][ T8847] usb 4-1: unknown interface protocol 0xb, assuming v1 [ 854.666377][ T8847] usb 4-1: cannot find UAC_HEADER [ 854.991147][ T8847] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 855.035992][ T3356] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 855.103083][ T8847] usb 4-1: USB disconnect, device number 14 [ 855.207335][ T3356] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input21 [ 855.399937][T10723] netlink: 'syz.3.1291': attribute type 46 has an invalid length. [ 855.412827][T10723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1291'. [ 855.489299][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.499521][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.632242][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.642229][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.746167][ T3356] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 855.938253][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.177571][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.192732][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.292884][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.303773][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.566458][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.575370][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.087125][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.095448][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.586512][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'. [ 859.070743][ T8] usb 2-1: USB disconnect, device number 38 [ 861.021915][T10755] Bluetooth: MGMT ver 1.23 [ 861.026591][T10755] Bluetooth: hci0: service_discovery: too big uuid_count value 50983 [ 861.302234][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 862.222265][T10765] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 862.232414][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.241089][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.261201][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.268919][T10765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.277202][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.284736][T10765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.306755][T10765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 862.724830][T10768] loop2: detected capacity change from 0 to 7 [ 862.779142][T10768] Dev loop2: unable to read RDB block 7 [ 862.786108][T10768] loop2: unable to read partition table [ 862.858438][T10768] loop2: partition table beyond EOD, truncated [ 862.865999][T10768] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 863.459967][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.514235][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.527709][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.546565][T10774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1302'. [ 863.605223][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.621387][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 863.645965][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 865.865456][ T9206] Bluetooth: hci2: command tx timeout [ 867.190789][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 867.372607][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.391466][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.458707][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.580030][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 867.613830][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.625392][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 867.634930][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.778892][ T10] usb 6-1: config 0 descriptor?? [ 867.941960][ T9206] Bluetooth: hci2: command tx timeout [ 868.159465][T10770] chnl_net:caif_netlink_parms(): no params data found [ 868.206363][ T10] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 868.328657][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000A/input/input22 [ 868.549028][ T10] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 868.645903][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.655903][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.893617][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.903633][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.206717][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.216759][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.401060][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.411194][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.020877][ T9206] Bluetooth: hci2: command tx timeout [ 871.293613][T10822] loop2: detected capacity change from 0 to 7 [ 871.532539][T10822] Dev loop2: unable to read RDB block 7 [ 871.538478][T10822] loop2: unable to read partition table [ 871.776065][T10822] loop2: partition table beyond EOD, truncated [ 871.783786][T10822] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 872.101794][ T9206] Bluetooth: hci2: command tx timeout [ 872.278640][T10824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1314'. [ 872.508446][ T10] usb 6-1: USB disconnect, device number 29 [ 873.020825][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.037128][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 873.048668][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 873.063136][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 873.075041][ T5804] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 873.084564][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.177439][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.185517][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.193369][T10770] bridge_slave_0: entered allmulticast mode [ 873.201473][T10770] bridge_slave_0: entered promiscuous mode [ 873.215284][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.228291][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.237100][T10770] bridge_slave_1: entered allmulticast mode [ 873.245123][T10770] bridge_slave_1: entered promiscuous mode [ 873.608733][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.652370][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.417580][T10770] team0: Port device team_slave_0 added [ 874.512302][T10770] team0: Port device team_slave_1 added [ 874.969348][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.977444][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.004843][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.224718][ T5804] Bluetooth: hci4: command tx timeout [ 875.260920][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.272737][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.301742][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.420904][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 875.975798][T10849] loop2: detected capacity change from 0 to 7 [ 876.017495][T10849] Dev loop2: unable to read RDB block 7 [ 876.023914][T10849] loop2: unable to read partition table [ 876.115339][T10770] hsr_slave_0: entered promiscuous mode [ 876.124143][T10770] hsr_slave_1: entered promiscuous mode [ 876.132120][T10770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.139865][T10770] Cannot create hsr debugfs directory [ 876.151445][T10849] loop2: partition table beyond EOD, truncated [ 876.157916][T10849] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 876.510809][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 876.791850][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.808251][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 876.819413][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.281540][T10859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.302214][T10859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.394363][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.407877][ T5804] Bluetooth: hci4: command tx timeout [ 878.803501][ T10] usb 6-1: config 0 descriptor?? [ 879.187705][T10862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1325'. [ 879.240217][ T10] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 879.390925][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000B/input/input23 [ 879.474468][ T5804] Bluetooth: hci4: command tx timeout [ 879.683831][T10827] chnl_net:caif_netlink_parms(): no params data found [ 879.725780][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.742544][ T10] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 879.853277][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.999701][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.009903][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.351737][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.362014][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.524401][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.781163][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.540592][ T5804] Bluetooth: hci4: command tx timeout [ 881.610813][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 881.742149][ T8] usb 6-1: USB disconnect, device number 30 [ 881.904342][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 881.994974][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 882.006260][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.016408][ T10] usb 1-1: Product: syz [ 882.021297][ T10] usb 1-1: Manufacturer: syz [ 882.029135][ T10] usb 1-1: SerialNumber: syz [ 882.226490][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 882.236115][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 883.198016][ T10] r8152-cfgselector 1-1: USB disconnect, device number 43 [ 884.335274][T10827] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.343484][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.351314][T10827] bridge_slave_0: entered allmulticast mode [ 884.359427][T10827] bridge_slave_0: entered promiscuous mode [ 884.781594][T10827] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.789121][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.802507][T10827] bridge_slave_1: entered allmulticast mode [ 884.810930][T10827] bridge_slave_1: entered promiscuous mode [ 885.022550][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 885.035539][T10896] loop2: detected capacity change from 0 to 7 [ 885.103471][T10896] Dev loop2: unable to read RDB block 7 [ 885.109400][T10896] loop2: unable to read partition table [ 885.208680][T10896] loop2: partition table beyond EOD, truncated [ 885.215374][T10896] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 885.536435][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.836998][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.005311][T10770] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 886.586924][T10770] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 886.652580][T10827] team0: Port device team_slave_0 added [ 886.663716][T10905] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 886.708212][T10770] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 886.810665][T10908] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 886.867094][T10827] team0: Port device team_slave_1 added [ 886.899784][T10770] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 887.419845][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.427167][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.458150][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.883607][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.891185][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.917681][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.876654][T10827] hsr_slave_0: entered promiscuous mode [ 888.889504][T10827] hsr_slave_1: entered promiscuous mode [ 888.897904][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.905765][T10827] Cannot create hsr debugfs directory [ 889.382756][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.998697][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.154398][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.162138][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.453950][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.461781][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.472050][T10934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1342'. [ 890.596372][ T3510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.893330][ T3510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.990211][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 891.078239][ T3510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.405545][ T3510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.809514][T10943] loop2: detected capacity change from 0 to 7 [ 891.874887][T10943] Dev loop2: unable to read RDB block 7 [ 891.882530][T10943] loop2: unable to read partition table [ 891.966409][T10943] loop2: partition table beyond EOD, truncated [ 891.973637][T10943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 892.029635][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 892.379253][T10948] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 892.614467][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 892.705083][ T3510] bridge_slave_1: left allmulticast mode [ 892.711349][ T3510] bridge_slave_1: left promiscuous mode [ 892.717635][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.828026][ T3510] bridge_slave_0: left allmulticast mode [ 892.836004][ T3510] bridge_slave_0: left promiscuous mode [ 892.842486][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.307138][ T3510] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 893.457052][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.516884][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.603581][ T3510] bond0 (unregistering): Released all slaves [ 893.677019][T10951] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 895.278200][ T3510] hsr_slave_0: left promiscuous mode [ 895.320988][ T3510] hsr_slave_1: left promiscuous mode [ 895.328927][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.337679][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.435234][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.443771][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.641341][ T3510] veth1_macvtap: left promiscuous mode [ 895.647536][ T3510] veth0_macvtap: left promiscuous mode [ 895.653740][ T3510] veth1_vlan: left promiscuous mode [ 895.659292][ T3510] veth0_vlan: left promiscuous mode [ 895.841103][T10973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1353'. [ 896.659238][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 897.313541][T10986] loop2: detected capacity change from 0 to 7 [ 897.323290][T10986] Dev loop2: unable to read RDB block 7 [ 897.329288][T10986] loop2: unable to read partition table [ 897.337965][T10986] loop2: partition table beyond EOD, truncated [ 897.344661][T10986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 897.532566][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 897.602770][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 898.162467][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 898.664499][T10770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.768726][T10998] netlink: 'syz.5.1359': attribute type 29 has an invalid length. [ 898.827558][T10998] netlink: 'syz.5.1359': attribute type 29 has an invalid length. [ 898.865294][T10827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 898.994861][T10827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 899.123931][ T3510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.244887][T10827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 899.378325][ T3510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.466017][T10827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 899.647547][ T3510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.875069][ T3510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.224658][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.231697][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.571415][ T3510] bridge_slave_1: left allmulticast mode [ 900.577330][ T3510] bridge_slave_1: left promiscuous mode [ 900.585333][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.673046][ T3510] bridge_slave_0: left allmulticast mode [ 900.679048][ T3510] bridge_slave_0: left promiscuous mode [ 900.686674][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.930192][T11023] loop2: detected capacity change from 0 to 7 [ 901.031384][T11023] Dev loop2: unable to read RDB block 7 [ 901.037323][T11023] loop2: unable to read partition table [ 901.072407][T11023] loop2: partition table beyond EOD, truncated [ 901.078965][T11023] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 901.108287][T11026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'. [ 901.355639][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.408043][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.425895][ T3510] bond0 (unregistering): Released all slaves [ 902.551305][ T3510] hsr_slave_0: left promiscuous mode [ 902.579766][ T3510] hsr_slave_1: left promiscuous mode [ 902.588492][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.596395][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.658798][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.666877][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.758612][ T3510] veth1_macvtap: left promiscuous mode [ 902.766653][ T3510] veth0_macvtap: left promiscuous mode [ 902.772807][ T3510] veth1_vlan: left promiscuous mode [ 902.778356][ T3510] veth0_vlan: left promiscuous mode [ 903.748725][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 903.782797][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 904.217131][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.363019][T11043] netlink: 'syz.1.1371': attribute type 29 has an invalid length. [ 904.439339][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.512407][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.520160][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.663777][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.671500][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.866553][T10770] veth0_vlan: entered promiscuous mode [ 905.009144][T10827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 905.020488][T10827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 905.151298][T10770] veth1_vlan: entered promiscuous mode [ 905.413300][T11065] loop2: detected capacity change from 0 to 7 [ 905.496606][T10770] veth0_macvtap: entered promiscuous mode [ 905.508770][T11065] Dev loop2: unable to read RDB block 7 [ 905.515320][T11065] loop2: unable to read partition table [ 905.552290][T11065] loop2: partition table beyond EOD, truncated [ 905.558874][T11065] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 905.600835][T10770] veth1_macvtap: entered promiscuous mode [ 905.925454][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.936361][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.948760][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.960660][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.971004][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.981753][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.997368][T10770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.349763][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.360775][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.370939][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.381683][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.391896][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.403199][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.417883][T10770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.708791][T10770] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.718068][T10770] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.727742][T10770] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.736898][T10770] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.201537][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.828751][T10827] veth0_vlan: entered promiscuous mode [ 908.019528][T10827] veth1_vlan: entered promiscuous mode [ 908.395702][T11099] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 908.487082][T11099] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 908.503799][T10827] veth0_macvtap: entered promiscuous mode [ 908.629083][T10827] veth1_macvtap: entered promiscuous mode [ 908.809402][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.820594][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.830909][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.841726][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.851878][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.863284][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.873470][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.884218][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.899077][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.045111][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 909.244005][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.255624][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.268515][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.279923][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.290328][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.302770][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.313003][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.323807][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.338601][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.448406][T11114] loop2: detected capacity change from 0 to 7 [ 909.494198][T11114] Dev loop2: unable to read RDB block 7 [ 909.500138][T11114] loop2: unable to read partition table [ 909.609998][T11114] loop2: partition table beyond EOD, truncated [ 909.616760][T11114] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.655257][T10827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.664675][T10827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.679084][T10827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.688427][T10827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.913344][T11146] netlink: 'syz.0.1396': attribute type 29 has an invalid length. [ 911.982421][T11147] netlink: 'syz.0.1396': attribute type 29 has an invalid length. [ 912.691155][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 913.188792][T11169] loop2: detected capacity change from 0 to 7 [ 913.223445][T11169] Dev loop2: unable to read RDB block 7 [ 913.229347][T11169] loop2: unable to read partition table [ 913.317155][T11169] loop2: partition table beyond EOD, truncated [ 913.323807][T11169] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 914.362068][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.370164][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.435122][ T8972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.444316][ T8972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.549982][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1403'. [ 915.684703][T11203] netlink: 'syz.1.1407': attribute type 29 has an invalid length. [ 915.746051][T11203] netlink: 'syz.1.1407': attribute type 29 has an invalid length. [ 915.792819][T11205] overlayfs: missing 'workdir' [ 916.756775][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 916.832646][T11218] loop2: detected capacity change from 0 to 7 [ 916.917443][T11218] Dev loop2: unable to read RDB block 7 [ 916.924862][T11218] loop2: unable to read partition table [ 917.061533][T11218] loop2: partition table beyond EOD, truncated [ 917.068001][T11218] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 917.630807][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.638897][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.934293][ T8854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.942816][ T8854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.606998][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'. [ 918.905325][T11244] overlayfs: missing 'workdir' [ 919.734044][T11258] netlink: 'syz.5.1420': attribute type 29 has an invalid length. [ 919.758547][T11260] netlink: 'syz.5.1420': attribute type 29 has an invalid length. [ 920.641515][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 920.781847][T11268] loop2: detected capacity change from 0 to 7 [ 920.863059][T11268] Dev loop2: unable to read RDB block 7 [ 920.869146][T11268] loop2: unable to read partition table [ 921.009461][T11268] loop2: partition table beyond EOD, truncated [ 921.016774][T11268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 923.297301][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1430'. [ 923.448719][T11297] overlayfs: missing 'workdir' [ 924.572056][T11314] loop2: detected capacity change from 0 to 7 [ 924.648210][T11314] Dev loop2: unable to read RDB block 7 [ 924.654335][T11314] loop2: unable to read partition table [ 924.762182][T11314] loop2: partition table beyond EOD, truncated [ 924.768606][T11314] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 925.856524][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 926.066599][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 926.112100][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.124327][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 926.141540][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 926.153475][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 926.167236][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.352534][ T8] usb 3-1: config 0 descriptor?? [ 926.361068][T11321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 926.399623][ T8] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 926.406916][ T8] usb 3-1: No valid video chain found. [ 926.653040][ T8847] usb 3-1: USB disconnect, device number 19 [ 928.033288][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 928.163159][ T29] audit: type=1800 audit(1739888084.623:29): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1446" name="file1" dev="overlay" ino=47 res=0 errno=0 [ 929.278764][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 929.394217][T11363] netlink: 'syz.0.1450': attribute type 29 has an invalid length. [ 929.492776][T11363] netlink: 'syz.0.1450': attribute type 29 has an invalid length. [ 931.219813][T11380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 931.411503][ T29] audit: type=1800 audit(1739888087.873:30): pid=11381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1457" name="file1" dev="overlay" ino=306 res=0 errno=0 [ 932.767411][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 933.553324][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 933.819089][T11405] netlink: 'syz.2.1463': attribute type 29 has an invalid length. [ 933.962925][T11407] netlink: 'syz.2.1463': attribute type 29 has an invalid length. [ 935.415055][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 935.430798][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 935.441186][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 935.454686][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 935.465537][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 935.474989][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 936.312240][T11418] chnl_net:caif_netlink_parms(): no params data found [ 936.744337][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 936.943492][T11428] warning: `syz.1.1468' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 937.107936][T11428] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 937.541750][ T5804] Bluetooth: hci3: command tx timeout [ 938.103456][ T5804] Bluetooth: hci6: command 0x0406 tx timeout [ 938.560889][T11418] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.568360][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.576242][T11418] bridge_slave_0: entered allmulticast mode [ 938.589259][T11418] bridge_slave_0: entered promiscuous mode [ 938.696822][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.705054][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.713253][T11418] bridge_slave_1: entered allmulticast mode [ 938.722076][T11418] bridge_slave_1: entered promiscuous mode [ 938.976313][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1473'. [ 939.037261][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.140805][ T29] audit: type=1800 audit(1739888095.593:31): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1471" name="file1" dev="overlay" ino=98 res=0 errno=0 [ 939.179833][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.598762][T11418] team0: Port device team_slave_0 added [ 939.621387][ T5804] Bluetooth: hci3: command tx timeout [ 939.757713][T11418] team0: Port device team_slave_1 added [ 940.127346][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.135043][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.161473][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.250862][T11459] netlink: 'syz.5.1475': attribute type 29 has an invalid length. [ 940.306301][T11459] netlink: 'syz.5.1475': attribute type 29 has an invalid length. [ 940.362138][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.369214][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.398218][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.881085][T11418] hsr_slave_0: entered promiscuous mode [ 940.891266][T11418] hsr_slave_1: entered promiscuous mode [ 941.252829][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 941.701073][ T5804] Bluetooth: hci3: command tx timeout [ 943.185995][T11418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 943.345743][T11418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 943.550531][T11418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 943.683917][T11418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 943.795402][ T5804] Bluetooth: hci3: command tx timeout [ 944.965243][ T29] audit: type=1800 audit(1739888101.413:32): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1483" name="file1" dev="overlay" ino=490 res=0 errno=0 [ 945.086245][T11499] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(Íë…èo¢N ááí«QhQI¸¥ÿ [ 945.418419][T11418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.452370][ T8272] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 945.662979][T11418] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.701647][ T8272] usb 2-1: Using ep0 maxpacket: 8 [ 945.747224][ T8272] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 945.759067][ T8272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 945.769395][ T8272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 945.779528][ T8272] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.793348][ T8272] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 945.802763][ T8272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.872462][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.880098][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.995889][ T3848] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.003732][ T3848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.229209][T11505] netlink: 'syz.5.1486': attribute type 29 has an invalid length. [ 946.417038][ T8272] usb 2-1: usb_control_msg returned -32 [ 946.423411][ T8272] usbtmc 2-1:16.0: can't read capabilities [ 946.440789][T11505] netlink: 'syz.5.1486': attribute type 29 has an invalid length. [ 946.608616][T11418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.621279][T11418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.820967][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.831048][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.924326][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.934238][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.993535][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.002878][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.922065][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.101913][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.754226][ T3729] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.862931][ T9206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.875179][ T9206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.912347][ T9206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.948001][ T9206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.979123][ T9206] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 948.989197][ T9206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.018893][ T3729] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.335289][ T3729] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.419438][ T8] usb 2-1: USB disconnect, device number 39 [ 949.586453][ T3729] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.132602][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.567249][ T3729] bridge_slave_1: left allmulticast mode [ 950.573472][ T3729] bridge_slave_1: left promiscuous mode [ 950.579711][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.731759][ T3729] bridge_slave_0: left allmulticast mode [ 950.741295][ T3729] bridge_slave_0: left promiscuous mode [ 950.747487][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.014895][ T29] audit: type=1800 audit(1739888107.433:33): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1495" name="file1" dev="overlay" ino=625 res=0 errno=0 [ 951.151234][ T5804] Bluetooth: hci2: command tx timeout [ 951.362519][ T3729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.412581][ T3729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.428617][ T3729] bond0 (unregistering): Released all slaves [ 951.489747][T11544] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 951.506616][T11544] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 952.442218][ T3729] hsr_slave_0: left promiscuous mode [ 952.471008][ T3729] hsr_slave_1: left promiscuous mode [ 952.479315][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.487229][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.612525][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.620504][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.789687][ T3729] veth1_macvtap: left promiscuous mode [ 952.795833][ T3729] veth0_macvtap: left promiscuous mode [ 952.802169][ T3729] veth1_vlan: left promiscuous mode [ 952.807723][ T3729] veth0_vlan: left promiscuous mode [ 953.220943][ T5804] Bluetooth: hci2: command tx timeout [ 953.794044][ T3729] team0 (unregistering): Port device team_slave_1 removed [ 953.821821][ T3729] team0 (unregistering): Port device team_slave_0 removed [ 954.221542][T11558] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 954.301212][T11526] chnl_net:caif_netlink_parms(): no params data found [ 955.271637][ T3356] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 955.300786][ T5804] Bluetooth: hci2: command tx timeout [ 955.462370][ T8272] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 955.480731][ T3356] usb 2-1: Using ep0 maxpacket: 8 [ 955.554344][T11584] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 955.581056][ T3356] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 955.595309][ T3356] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 955.605756][ T3356] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 955.616118][ T3356] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.630596][ T3356] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 955.639926][ T3356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.679548][T11418] veth0_vlan: entered promiscuous mode [ 955.708337][ T8272] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 955.717018][ T8272] usb 3-1: config 0 has no interface number 0 [ 955.723414][ T8272] usb 3-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 955.837659][T11418] veth1_vlan: entered promiscuous mode [ 955.883738][ T8272] usb 3-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 955.893746][ T8272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.902071][ T8272] usb 3-1: Product: syz [ 955.906408][ T8272] usb 3-1: Manufacturer: syz [ 955.911229][ T8272] usb 3-1: SerialNumber: syz [ 956.065802][ T8272] usb 3-1: config 0 descriptor?? [ 956.293406][ T3356] usb 2-1: usb_control_msg returned -32 [ 956.299351][ T3356] usbtmc 2-1:16.0: can't read capabilities [ 956.398893][T11418] veth0_macvtap: entered promiscuous mode [ 956.526274][T11418] veth1_macvtap: entered promiscuous mode [ 956.688911][ T29] audit: type=1800 audit(1739888113.133:34): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1504" name="file1" dev="overlay" ino=535 res=0 errno=0 [ 956.744945][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.758218][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.782442][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.792640][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.964738][ T8272] usb 3-1: USB disconnect, device number 20 [ 957.025352][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.035089][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.043225][T11526] bridge_slave_0: entered allmulticast mode [ 957.052394][T11526] bridge_slave_0: entered promiscuous mode [ 957.126798][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.138331][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.148894][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.159539][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.169873][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.180641][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.193599][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.204964][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.218320][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.393402][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.401209][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.401335][ T5804] Bluetooth: hci2: command tx timeout [ 957.408966][T11526] bridge_slave_1: entered allmulticast mode [ 957.423388][T11526] bridge_slave_1: entered promiscuous mode [ 957.444496][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.452314][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.455381][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.481629][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.492330][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.505298][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.516716][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.526794][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.537464][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.551289][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.565826][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.575729][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.013498][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.057661][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.133389][T11418] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.143449][T11418] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.152668][T11418] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.161944][T11418] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.549723][T11526] team0: Port device team_slave_0 added [ 958.649059][T11526] team0: Port device team_slave_1 added [ 958.893114][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.900587][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.930073][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.090916][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.098282][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.124797][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.310964][ T8272] usb 2-1: USB disconnect, device number 40 [ 959.661318][T11526] hsr_slave_0: entered promiscuous mode [ 959.673342][T11526] hsr_slave_1: entered promiscuous mode [ 959.682163][T11526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.690033][T11526] Cannot create hsr debugfs directory [ 961.318074][T11635] netlink: 'syz.5.1511': attribute type 29 has an invalid length. [ 961.421615][T11635] netlink: 'syz.5.1511': attribute type 29 has an invalid length. [ 961.664064][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.670890][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.307328][T11526] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 962.361922][T11526] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 962.452933][T11526] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 962.572294][T11526] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 962.982164][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 964.014040][ T8847] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 964.244916][ T8847] usb 6-1: Using ep0 maxpacket: 8 [ 964.310103][ T8847] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 964.321803][ T8847] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 964.332328][ T8847] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.342615][ T8847] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.356504][ T8847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.365926][ T8847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.598302][T11526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.912516][ T3729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.998904][ T8847] usb 6-1: usb_control_msg returned -32 [ 965.005116][ T8847] usbtmc 6-1:16.0: can't read capabilities [ 965.073251][ T3729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.196427][T11526] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.267137][ T3729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.351465][ T1846] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.359368][ T1846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.389043][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.399227][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.456332][ T3729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.508085][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.519083][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.573119][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.580825][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.137388][ T3729] bridge_slave_1: left allmulticast mode [ 966.143562][ T3729] bridge_slave_1: left promiscuous mode [ 966.150216][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.234379][ T3729] bridge_slave_0: left allmulticast mode [ 966.240681][ T3729] bridge_slave_0: left promiscuous mode [ 966.247248][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.297196][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.307709][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.782206][ T3729] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 966.900951][ T3729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.929740][ T3729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.968303][ T3729] bond0 (unregistering): Released all slaves [ 967.041506][T11691] netlink: 'syz.2.1521': attribute type 29 has an invalid length. [ 967.057614][T11694] netlink: 'syz.2.1521': attribute type 29 has an invalid length. [ 967.757320][ T8846] usb 6-1: USB disconnect, device number 31 [ 967.857131][ T3729] hsr_slave_0: left promiscuous mode [ 967.888228][ T3729] hsr_slave_1: left promiscuous mode [ 967.896590][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.905394][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.037739][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.050738][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.130938][ T3729] veth1_macvtap: left promiscuous mode [ 968.136744][ T3729] veth0_macvtap: left promiscuous mode [ 968.145787][ T3729] veth1_vlan: left promiscuous mode [ 968.152489][ T3729] veth0_vlan: left promiscuous mode [ 969.105914][ T3729] team0 (unregistering): Port device team_slave_1 removed [ 969.157883][ T3729] team0 (unregistering): Port device team_slave_0 removed [ 969.353086][T11714] 9pnet_fd: Insufficient options for proto=fd [ 969.951167][T11720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.037551][T11721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.753664][ T8972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.762010][ T8972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.134258][T11728] netlink: 'syz.2.1531': attribute type 29 has an invalid length. [ 972.192251][T11526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.255356][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.262554][T11728] netlink: 'syz.2.1531': attribute type 29 has an invalid length. [ 972.263488][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.950751][ T8272] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 973.152935][ T8272] usb 2-1: Using ep0 maxpacket: 8 [ 973.191089][ T8272] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 973.203866][ T8272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 973.215138][ T8272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.225752][ T8272] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.239242][ T8272] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 973.248737][ T8272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.631001][ T8272] usb 2-1: usb_control_msg returned -32 [ 973.637072][ T8272] usbtmc 2-1:16.0: can't read capabilities [ 974.035907][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.046165][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.204096][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.214019][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.265376][T11757] evm: overlay not supported [ 974.292199][ T29] audit: type=1804 audit(1739888130.753:35): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1536" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 974.879975][T11526] veth0_vlan: entered promiscuous mode [ 974.911522][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.921912][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.988233][T11767] 9pnet_fd: Insufficient options for proto=fd [ 975.034468][T11526] veth1_vlan: entered promiscuous mode [ 975.304425][T11526] veth0_macvtap: entered promiscuous mode [ 975.390215][T11526] veth1_macvtap: entered promiscuous mode [ 975.612846][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.626292][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.637127][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.647912][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.658033][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.668868][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.678999][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.689759][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.705009][T11526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.995232][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.006237][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.016560][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.030848][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.041722][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.052612][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.062833][T11526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.073600][T11526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.088598][T11526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.515725][T11526] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.525026][T11526] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.534470][T11526] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.546371][T11526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.682141][T11780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.772529][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.851437][ T8846] usb 2-1: USB disconnect, device number 41 [ 979.760856][ T29] audit: type=1800 audit(1739888136.223:36): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1548" name="file1" dev="overlay" ino=251 res=0 errno=0 [ 980.511414][ T3356] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 980.640665][T11820] 9pnet_fd: Insufficient options for proto=fd [ 980.702616][ T3356] usb 6-1: Using ep0 maxpacket: 16 [ 980.749752][ T3356] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 980.762922][ T3356] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 980.772358][ T3356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.860451][ T3356] usb 6-1: config 0 descriptor?? [ 980.918855][ T3356] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 980.926268][ T3356] usb 6-1: No valid video chain found. [ 981.119001][ T3356] usb 6-1: USB disconnect, device number 32 [ 981.731898][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 981.934985][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 982.000837][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 982.013287][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 982.024039][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 982.034461][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.048007][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 982.057419][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.526759][ T8] usb 3-1: usb_control_msg returned -32 [ 982.533040][ T8] usbtmc 3-1:16.0: can't read capabilities [ 982.953589][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.963972][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.035775][T11849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.125021][T11850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.340012][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.349971][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.229612][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.239882][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.296583][ T29] audit: type=1800 audit(1739888141.753:37): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1560" name="file1" dev="overlay" ino=75 res=0 errno=0 [ 985.397796][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.408328][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.784417][ T3356] usb 3-1: USB disconnect, device number 21 [ 987.171882][T11877] loop2: detected capacity change from 0 to 7 [ 987.237925][T11877] Dev loop2: unable to read RDB block 7 [ 987.244566][T11877] loop2: unable to read partition table [ 987.346394][T11877] loop2: partition table beyond EOD, truncated [ 987.353735][T11877] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 987.584215][ T8972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.592406][ T8972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.765793][ T3729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.775871][ T3729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.750743][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 988.954611][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 989.029297][ T8] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 989.042430][ T8] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 989.052315][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.236956][ T8] usb 7-1: config 0 descriptor?? [ 989.289964][ T8] usb 7-1: Found UVC 0.00 device (10c4:ea90) [ 989.297186][ T8] usb 7-1: No valid video chain found. [ 989.459455][ T8] usb 7-1: USB disconnect, device number 2 [ 989.826785][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1488'. [ 990.603032][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.695966][T11913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.068455][ T29] audit: type=1800 audit(1739888149.533:38): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="file1" dev="overlay" ino=294 res=0 errno=0 [ 993.761198][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 993.976429][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 994.010817][T11930] loop2: detected capacity change from 0 to 7 [ 994.038560][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 994.052269][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 994.062975][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 994.073112][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.086348][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 994.095603][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.154811][T11930] Dev loop2: unable to read RDB block 7 [ 994.161008][T11930] loop2: unable to read partition table [ 994.174089][T11930] loop2: partition table beyond EOD, truncated [ 994.181038][T11930] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 994.403794][ T8] usb 9-1: usb_control_msg returned -32 [ 994.409660][ T8] usbtmc 9-1:16.0: can't read capabilities [ 994.799229][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.808853][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.980416][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.990206][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.125737][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.135614][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.819507][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.829134][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.481352][T11960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.501859][T11960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.590922][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.280458][ T3356] usb 9-1: USB disconnect, device number 7 [ 999.540746][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 999.542317][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 999.790979][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 999.832499][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.844136][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 999.853615][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.984835][ T8] usb 3-1: config 0 descriptor?? [ 1000.040495][ T8] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 1000.047633][ T8] usb 3-1: No valid video chain found. [ 1000.231477][ T8] usb 3-1: USB disconnect, device number 22 [ 1000.512418][ T29] audit: type=1800 audit(1739888156.933:39): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1585" name="file1" dev="overlay" ino=37 res=0 errno=0 [ 1001.072037][T11975] loop2: detected capacity change from 0 to 7 [ 1001.101876][T11975] Dev loop2: unable to read RDB block 7 [ 1001.107826][T11975] loop2: unable to read partition table [ 1001.177582][T11975] loop2: partition table beyond EOD, truncated [ 1001.184629][T11975] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1001.287765][ T5145] Dev loop2: unable to read RDB block 7 [ 1001.294132][ T5145] loop2: unable to read partition table [ 1001.315781][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1001.321380][ T5145] loop2: partition table beyond EOD, truncated [ 1001.338168][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1001.348782][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1001.364882][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1001.382501][ T5791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1001.399131][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1003.501540][ T9206] Bluetooth: hci5: command tx timeout [ 1004.098600][T11977] chnl_net:caif_netlink_parms(): no params data found [ 1004.196465][T12009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.217458][T12009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.308049][T12010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.991859][ T9206] Bluetooth: hci5: command tx timeout [ 1006.067190][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1006.261199][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1006.301949][ T8] usb 7-1: config 0 has no interfaces? [ 1006.308251][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1006.317973][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.478535][ T8] usb 7-1: config 0 descriptor?? [ 1006.983629][ T8] usb 7-1: can't set config #0, error -71 [ 1007.032847][ T8] usb 7-1: USB disconnect, device number 3 [ 1007.811003][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1007.862283][ T29] audit: type=1800 audit(1739888164.313:40): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1597" name="file1" dev="overlay" ino=151 res=0 errno=0 [ 1007.963675][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.972428][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.983167][T11977] bridge_slave_0: entered allmulticast mode [ 1007.992704][T11977] bridge_slave_0: entered promiscuous mode [ 1008.011106][ T8] usb 3-1: device descriptor read/64, error -71 [ 1008.031130][ T9206] Bluetooth: hci5: command tx timeout [ 1008.139169][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.147094][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.155595][T11977] bridge_slave_1: entered allmulticast mode [ 1008.163844][T11977] bridge_slave_1: entered promiscuous mode [ 1008.253266][T12031] loop2: detected capacity change from 0 to 7 [ 1008.267472][T12031] Dev loop2: unable to read RDB block 7 [ 1008.274332][T12031] loop2: unable to read partition table [ 1008.281275][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1008.336498][T12031] loop2: partition table beyond EOD, truncated [ 1008.344686][T12031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1008.438110][ T8] usb 3-1: device descriptor read/64, error -71 [ 1008.547602][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.570667][ T8] usb usb3-port1: attempt power cycle [ 1008.653472][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.961793][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1009.065097][ T8] usb 3-1: device descriptor read/8, error -71 [ 1009.095285][T11977] team0: Port device team_slave_0 added [ 1009.187374][T11977] team0: Port device team_slave_1 added [ 1009.347053][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1009.393665][T12041] Bluetooth: hci0: service_discovery: too big uuid_count value 50983 [ 1009.436934][ T8] usb 3-1: device descriptor read/8, error -71 [ 1009.565964][ T8] usb usb3-port1: unable to enumerate USB device [ 1009.605883][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.613163][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.642593][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.843197][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.850393][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.876779][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.100630][ T9206] Bluetooth: hci5: command tx timeout [ 1010.448870][T11977] hsr_slave_0: entered promiscuous mode [ 1010.457541][T11977] hsr_slave_1: entered promiscuous mode [ 1010.465284][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.473260][T11977] Cannot create hsr debugfs directory [ 1011.391103][ T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1011.629237][T12059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.649794][T12059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.742654][T12060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.525375][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1012.538251][ T8] usb 9-1: config 0 has no interfaces? [ 1012.544924][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1012.554332][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.439953][ T8] usb 9-1: config 0 descriptor?? [ 1013.763986][ T8] usb 9-1: USB disconnect, device number 8 [ 1014.461788][T11977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1014.605806][T11977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1014.718736][T11977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1014.933854][T11977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1015.686735][T12076] fuse: Unknown parameter 'grou00000000000000000000' [ 1015.695926][ T29] audit: type=1800 audit(1739888172.153:41): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1610" name="file1" dev="overlay" ino=182 res=0 errno=0 [ 1016.322612][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.724257][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.798101][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.805634][ T8972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.818503][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.826056][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.443537][T12087] loop2: detected capacity change from 0 to 7 [ 1017.498236][T12087] Dev loop2: unable to read RDB block 7 [ 1017.505987][T12087] loop2: unable to read partition table [ 1017.554854][T12087] loop2: partition table beyond EOD, truncated [ 1017.562902][T12087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1018.935863][T12097] Bluetooth: hci0: service_discovery: too big uuid_count value 50983 [ 1019.288115][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.621655][ T2155] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1020.803782][ T2155] usb 9-1: device descriptor read/64, error -71 [ 1021.056414][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.076522][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.168012][T12118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.952126][ T2155] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1023.090668][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.097348][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.310564][ T2155] usb 9-1: device descriptor read/64, error -71 [ 1023.427787][ T2155] usb usb9-port1: attempt power cycle [ 1024.117371][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1618'. [ 1024.915412][T11977] veth0_vlan: entered promiscuous mode [ 1025.061489][T11977] veth1_vlan: entered promiscuous mode [ 1025.658233][T11977] veth0_macvtap: entered promiscuous mode [ 1025.750807][T11977] veth1_macvtap: entered promiscuous mode [ 1025.970390][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.981702][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.992106][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.008943][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.021132][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.032143][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.046887][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.057714][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.067908][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.078703][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.095495][T11977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.161474][ T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1026.174916][ T4387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.256601][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.269142][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.279881][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.290805][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.300933][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.313837][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.324319][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.330974][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1026.335075][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.350464][T11977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.361288][T11977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.376197][T11977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.411705][ T8] usb 9-1: config 0 has no interfaces? [ 1026.417365][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1026.427517][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.496190][ T4387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.549636][ T8] usb 9-1: config 0 descriptor?? [ 1026.774849][ T4387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.941264][ T4387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.064121][ T8847] usb 9-1: USB disconnect, device number 12 [ 1027.091535][T12142] fuse: Unknown parameter 'grou00000000000000000000' [ 1027.099797][T11977] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.108915][T11977] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.118154][T11977] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.131133][T11977] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.572960][ T4387] bridge_slave_1: left allmulticast mode [ 1027.578881][ T4387] bridge_slave_1: left promiscuous mode [ 1027.585738][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.677701][ T4387] bridge_slave_0: left allmulticast mode [ 1027.684051][ T4387] bridge_slave_0: left promiscuous mode [ 1027.690881][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.264765][T12147] loop2: detected capacity change from 0 to 7 [ 1028.381688][T12147] Dev loop2: unable to read RDB block 7 [ 1028.387564][T12147] loop2: unable to read partition table [ 1028.436426][T12147] loop2: partition table beyond EOD, truncated [ 1028.443641][T12147] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1028.561762][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.658541][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.659950][ T4387] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1028.698677][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.807295][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.827823][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1028.852578][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.056337][ T4387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.132900][ T4387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.347550][T12155] Bluetooth: hci0: service_discovery: too big uuid_count value 50983 [ 1029.369003][ T4387] bond0 (unregistering): Released all slaves [ 1029.391253][ T4387] bond1 (unregistering): Released all slaves [ 1030.801047][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.824845][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.913027][T12168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.674015][ T9206] Bluetooth: hci1: command tx timeout [ 1033.696517][ T4387] hsr_slave_0: left promiscuous mode [ 1033.718937][ T9206] Bluetooth: hci1: command tx timeout [ 1033.732637][ T4387] hsr_slave_1: left promiscuous mode [ 1033.743006][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.750784][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.763359][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.771309][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.793863][ T4387] veth1_macvtap: left promiscuous mode [ 1033.799519][ T4387] veth0_macvtap: left promiscuous mode [ 1033.805921][ T4387] veth1_vlan: left promiscuous mode [ 1033.811714][ T4387] veth0_vlan: left promiscuous mode [ 1034.109116][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1034.238839][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1034.247633][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1034.266397][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1034.304094][ T5791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1034.314109][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1034.997758][ T4387] team0 (unregistering): Port device team_slave_1 removed [ 1035.114437][ T4387] team0 (unregistering): Port device team_slave_0 removed [ 1035.759043][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1630'. [ 1035.788460][T12149] chnl_net:caif_netlink_parms(): no params data found [ 1035.809580][ T5791] Bluetooth: hci1: command tx timeout [ 1036.420790][ T5791] Bluetooth: hci6: command tx timeout [ 1036.874445][T12206] fuse: Unknown parameter 'group_i00000000000000000000' [ 1037.133131][ T8] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1037.361099][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1037.398459][ T8] usb 9-1: config 0 has no interfaces? [ 1037.404933][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1037.414838][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.594400][ T8] usb 9-1: config 0 descriptor?? [ 1037.666574][T12183] chnl_net:caif_netlink_parms(): no params data found [ 1037.813566][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.822623][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.830437][T12149] bridge_slave_0: entered allmulticast mode [ 1037.838627][T12149] bridge_slave_0: entered promiscuous mode [ 1037.871601][ T5791] Bluetooth: hci1: command tx timeout [ 1038.080722][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.089953][T12149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.097980][T12149] bridge_slave_1: entered allmulticast mode [ 1038.106410][T12149] bridge_slave_1: entered promiscuous mode [ 1038.121631][ T8] usb 9-1: USB disconnect, device number 13 [ 1038.500719][ T5791] Bluetooth: hci6: command tx timeout [ 1038.613924][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.693546][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.172816][T12149] team0: Port device team_slave_0 added [ 1039.284984][T12149] team0: Port device team_slave_1 added [ 1039.747787][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.756654][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.784401][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.122005][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.129835][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.140492][T12183] bridge_slave_0: entered allmulticast mode [ 1040.149779][T12183] bridge_slave_0: entered promiscuous mode [ 1040.205569][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.213315][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.241928][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.457415][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.465368][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.473513][T12183] bridge_slave_1: entered allmulticast mode [ 1040.485439][T12183] bridge_slave_1: entered promiscuous mode [ 1040.600619][ T5791] Bluetooth: hci6: command tx timeout [ 1041.664813][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.719260][T12149] hsr_slave_0: entered promiscuous mode [ 1041.729609][T12149] hsr_slave_1: entered promiscuous mode [ 1041.738564][T12149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.746469][T12149] Cannot create hsr debugfs directory [ 1041.836762][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.092622][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.108047][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.177385][T12228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.345869][T12183] team0: Port device team_slave_0 added [ 1042.564328][T12183] team0: Port device team_slave_1 added [ 1042.663996][ T5791] Bluetooth: hci6: command tx timeout [ 1043.232585][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.239885][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.266505][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.877103][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.884453][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.910831][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.414242][ T2155] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1044.670975][ T2155] usb 7-1: Using ep0 maxpacket: 8 [ 1044.713772][ T2155] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1044.725633][ T2155] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1044.736285][ T2155] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1044.747672][ T2155] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.769573][ T2155] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1044.780023][ T2155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.952733][T12183] hsr_slave_0: entered promiscuous mode [ 1044.961561][T12183] hsr_slave_1: entered promiscuous mode [ 1044.969064][T12183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.976845][T12183] Cannot create hsr debugfs directory [ 1045.219834][ T2155] usb 7-1: usb_control_msg returned -32 [ 1045.226052][ T2155] usbtmc 7-1:16.0: can't read capabilities [ 1045.705775][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.715343][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.773468][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.782874][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.828804][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.838824][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.903946][T12260] fuse: Unknown parameter 'group_i00000000000000000000' [ 1045.914300][T12149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1046.058943][T12149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1046.169268][T12149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1046.170799][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.185928][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.208103][T12149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.409566][ T8533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.417784][ T8533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.471659][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.482777][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.229855][T12268] loop2: detected capacity change from 0 to 7 [ 1047.300854][T12268] Dev loop2: unable to read RDB block 7 [ 1047.306796][T12268] loop2: unable to read partition table [ 1047.461956][T12268] loop2: partition table beyond EOD, truncated [ 1047.468432][T12268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1048.149189][ T8] usb 7-1: USB disconnect, device number 4 [ 1048.526143][T12183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1048.708587][T12183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1048.718607][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1583'. [ 1048.858790][T12183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1048.957907][T12149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.031765][T12183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1049.211688][ T2155] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1049.304793][T12149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.404917][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.412428][ T8533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.472002][ T2155] usb 7-1: Using ep0 maxpacket: 8 [ 1049.542981][ T2155] usb 7-1: config 0 has no interfaces? [ 1049.548763][ T2155] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1049.561030][ T2155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.609194][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.617019][ T8533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.713644][ T2155] usb 7-1: config 0 descriptor?? [ 1050.075467][ T2155] usb 7-1: USB disconnect, device number 5 [ 1051.167836][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1646'. [ 1051.177884][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1646'. [ 1051.264806][ T29] audit: type=1800 audit(1739888207.693:42): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1647" name="file1" dev="overlay" ino=37 res=0 errno=0 [ 1051.551620][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.969673][ T8972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.304762][T12299] fuse: Unknown parameter 'group_i00000000000000000000' [ 1052.927893][T12307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.952888][T12307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.078209][T12308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.129042][ T8972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.708935][T12183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.938781][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.281657][ T44] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1054.535175][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 1054.593905][ T44] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1054.605753][ T44] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1054.616180][ T44] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1054.626436][ T44] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.639802][ T44] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1054.649211][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.695892][ T8972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.846428][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.854344][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.960352][ T8972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.104871][ T3848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.112594][ T3848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.253200][T12318] loop2: detected capacity change from 0 to 7 [ 1055.324410][T12318] Dev loop2: unable to read RDB block 7 [ 1055.330558][T12318] loop2: unable to read partition table [ 1055.394944][T12318] loop2: partition table beyond EOD, truncated [ 1055.401726][T12318] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1055.661411][ T44] usb 9-1: usb_control_msg returned -32 [ 1055.667310][ T44] usbtmc 9-1:16.0: can't read capabilities [ 1055.970738][ T8972] bridge_slave_1: left allmulticast mode [ 1055.976731][ T8972] bridge_slave_1: left promiscuous mode [ 1055.984052][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.019262][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.030106][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.191211][ T8972] bridge_slave_0: left allmulticast mode [ 1056.197244][ T8972] bridge_slave_0: left promiscuous mode [ 1056.206169][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.235095][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.245080][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.287129][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1653'. [ 1056.555488][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.566512][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.172659][ T8972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.222866][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.234584][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.236198][ T8972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.271139][T12336] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1057.303734][ T8972] bond0 (unregistering): Released all slaves [ 1057.382387][ T2155] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1057.593853][ T2155] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1057.602580][ T2155] usb 7-1: config 0 has no interface number 0 [ 1057.609040][ T2155] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1057.730809][ T2155] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1057.741828][ T2155] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.752344][ T2155] usb 7-1: Product: syz [ 1057.756722][ T2155] usb 7-1: Manufacturer: syz [ 1057.762208][ T2155] usb 7-1: SerialNumber: syz [ 1057.833438][ T2155] usb 7-1: config 0 descriptor?? [ 1058.205953][ T8972] hsr_slave_0: left promiscuous mode [ 1058.232728][ T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1058.262534][ T8972] hsr_slave_1: left promiscuous mode [ 1058.271706][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.279676][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.399667][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.408174][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.452177][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 1058.458065][ T8972] veth1_macvtap: left promiscuous mode [ 1058.467259][ T8972] veth0_macvtap: left promiscuous mode [ 1058.473353][ T8972] veth1_vlan: left promiscuous mode [ 1058.478906][ T8972] veth0_vlan: left promiscuous mode [ 1058.513906][ T8] usb 10-1: config 0 has no interfaces? [ 1058.519778][ T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1058.529487][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.556057][ T2155] usb 7-1: USB disconnect, device number 6 [ 1058.578599][ T6096] udevd[6096]: setting owner of /dev/bus/usb/007/006 to uid=0, gid=0 failed: No such file or directory [ 1058.636597][ T8] usb 10-1: config 0 descriptor?? [ 1058.935018][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.151388][ T44] usb 9-1: USB disconnect, device number 14 [ 1059.679247][ T8972] team0 (unregistering): Port device team_slave_1 removed [ 1059.870723][ T8972] team0 (unregistering): Port device team_slave_0 removed [ 1059.930807][ T29] audit: type=1800 audit(1739888216.393:43): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1658" name="file1" dev="overlay" ino=343 res=0 errno=0 [ 1060.225445][ T3356] usb 10-1: USB disconnect, device number 5 [ 1060.235357][T12351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1060.242858][T12351] IPv6: NLM_F_CREATE should be set when creating new route [ 1060.250519][T12351] IPv6: NLM_F_CREATE should be set when creating new route [ 1060.520611][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.858176][T12149] veth0_vlan: entered promiscuous mode [ 1060.974581][T12149] veth1_vlan: entered promiscuous mode [ 1060.985569][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 1061.032945][T12183] veth0_vlan: entered promiscuous mode [ 1061.109931][T12361] fuse: Unknown parameter 'group_id00000000000000000000' [ 1061.175572][T12183] veth1_vlan: entered promiscuous mode [ 1061.463083][T12149] veth0_macvtap: entered promiscuous mode [ 1061.555856][ T8972] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.695680][ T8972] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.794989][T12149] veth1_macvtap: entered promiscuous mode [ 1061.807776][T12183] veth0_macvtap: entered promiscuous mode [ 1061.873708][ T8972] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.930191][T12183] veth1_macvtap: entered promiscuous mode [ 1061.977024][ T8972] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.737989][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.751891][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.766942][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.778586][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.788684][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.799515][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.809623][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.820427][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.835171][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.259732][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.271124][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.283018][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.294273][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.304534][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.315315][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.325542][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.336329][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.346558][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.357363][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.372463][T12183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.569906][ T8972] bridge_slave_1: left allmulticast mode [ 1063.575962][ T8972] bridge_slave_1: left promiscuous mode [ 1063.584437][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.814487][ T8972] bridge_slave_0: left allmulticast mode [ 1063.825948][ T8972] bridge_slave_0: left promiscuous mode [ 1063.836160][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.392414][T12375] loop2: detected capacity change from 0 to 7 [ 1064.608762][T12375] Dev loop2: unable to read RDB block 7 [ 1064.615026][T12375] loop2: unable to read partition table [ 1064.695290][T12375] loop2: partition table beyond EOD, truncated [ 1064.702097][T12375] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1064.979369][T12378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.997139][T12378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.081802][T12379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.281949][ T8972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.299834][ T8972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.359335][ T8972] bond0 (unregistering): Released all slaves [ 1065.447819][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.458612][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.469143][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.479901][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.490042][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.500900][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.511043][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.523318][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.543026][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.585156][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.596000][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.606943][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.617736][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.632234][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.643866][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.654126][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.664983][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.675099][T12183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.685963][T12183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.700863][T12183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.919688][T12149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.931302][T12149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.942992][T12149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.954280][T12149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.179619][T12183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.188710][T12183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.198625][T12183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.208231][T12183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.322197][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1663'. [ 1066.676539][ T8972] hsr_slave_0: left promiscuous mode [ 1066.724188][ T8972] hsr_slave_1: left promiscuous mode [ 1066.732361][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.740628][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.847096][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.856142][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.956376][ T8972] veth1_macvtap: left promiscuous mode [ 1066.963652][ T8972] veth0_macvtap: left promiscuous mode [ 1066.969569][ T8972] veth1_vlan: left promiscuous mode [ 1066.975414][ T8972] veth0_vlan: left promiscuous mode [ 1067.842447][ T44] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1067.888128][ T8972] team0 (unregistering): Port device team_slave_1 removed [ 1067.933688][ T8972] team0 (unregistering): Port device team_slave_0 removed [ 1068.259732][T12398] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1068.300771][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 1068.360644][ T5417] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1068.388906][ T44] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1068.403583][ T44] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1068.414975][ T44] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1068.425345][ T44] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.439010][ T44] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.448524][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.583285][ T5417] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1068.591943][ T5417] usb 7-1: config 0 has no interface number 0 [ 1068.601197][ T5417] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1068.692654][ T5417] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1068.706399][ T5417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.715546][ T5417] usb 7-1: Product: syz [ 1068.719939][ T5417] usb 7-1: Manufacturer: syz [ 1068.724874][ T5417] usb 7-1: SerialNumber: syz [ 1068.756844][ T5417] usb 7-1: config 0 descriptor?? [ 1068.908048][ T44] usb 10-1: usb_control_msg returned -32 [ 1068.914418][ T44] usbtmc 10-1:16.0: can't read capabilities [ 1069.285139][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.295069][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.392936][ T5417] usb 7-1: USB disconnect, device number 7 [ 1069.425684][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.437164][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.577222][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.587449][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.620171][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.297258][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.307421][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.626484][ T29] audit: type=1800 audit(1739888227.093:44): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1667" name="file1" dev="overlay" ino=391 res=0 errno=0 [ 1071.221089][ T9206] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.542976][ T8272] usb 10-1: USB disconnect, device number 6 [ 1071.871812][ T2155] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1071.963996][T12442] fuse: Unknown parameter 'group_id00000000000000000000' [ 1072.051204][ T2155] usb 7-1: Using ep0 maxpacket: 8 [ 1072.103383][ T2155] usb 7-1: config 0 has no interfaces? [ 1072.109413][ T2155] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1072.119189][ T2155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.199951][ T2155] usb 7-1: config 0 descriptor?? [ 1072.559787][ T2155] usb 7-1: USB disconnect, device number 8 [ 1073.294420][T12459] loop2: detected capacity change from 0 to 7 [ 1073.343008][T12459] Dev loop2: unable to read RDB block 7 [ 1073.349023][T12459] loop2: unable to read partition table [ 1073.435625][T12459] loop2: partition table beyond EOD, truncated [ 1073.443732][T12459] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1075.674601][ T8533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.682747][ T8533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.748367][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.757267][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.773072][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1673'. [ 1076.964731][ T8973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.974171][ T8973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.997292][ T8533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.005814][ T8533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.343426][ T2155] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1078.372509][ T9206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.391535][ T9206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.400834][ T9206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.416179][ T9206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.427579][ T9206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1078.442816][ T9206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.572030][ T2155] usb 7-1: Using ep0 maxpacket: 8 [ 1078.627887][ T2155] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 1078.638964][ T2155] usb 7-1: config 2 has no interface number 0 [ 1078.646251][ T2155] usb 7-1: config 2 interface 31 has no altsetting 0 [ 1078.753189][ T2155] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1078.762965][ T2155] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.773338][ T2155] usb 7-1: Product: syz [ 1078.778023][ T2155] usb 7-1: Manufacturer: syz [ 1078.783061][ T2155] usb 7-1: SerialNumber: syz [ 1079.014543][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.025414][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.418837][ T2155] ===================================================== [ 1079.434225][ T2155] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0 [ 1079.441959][ T2155] mii_nway_restart+0x119/0x1e0 [ 1079.447099][ T2155] ch9200_bind+0x238/0xeb0 [ 1079.455643][ T2155] usbnet_probe+0xdb0/0x3eb0 [ 1079.461530][ T2155] usb_probe_interface+0xd33/0x12e0 [ 1079.466976][ T2155] really_probe+0x4dc/0xd90 [ 1079.472259][ T2155] __driver_probe_device+0x2ab/0x5d0 [ 1079.478498][ T2155] driver_probe_device+0x72/0x890 [ 1079.483851][ T2155] __device_attach_driver+0x568/0x9e0 [ 1079.489492][ T2155] bus_for_each_drv+0x403/0x620 [ 1079.494769][ T2155] __device_attach+0x3c1/0x650 [ 1079.499931][ T2155] device_initial_probe+0x32/0x40 [ 1079.505790][ T2155] bus_probe_device+0x3dc/0x5c0 [ 1079.511057][ T2155] device_add+0x13aa/0x1ba0 [ 1079.515775][ T2155] usb_set_configuration+0x31c9/0x38d0 [ 1079.523458][ T2155] usb_generic_driver_probe+0x109/0x2a0 [ 1079.529244][ T2155] usb_probe_device+0x3a7/0x690 [ 1079.534851][ T2155] really_probe+0x4dc/0xd90 [ 1079.539544][ T2155] __driver_probe_device+0x2ab/0x5d0 [ 1079.545589][ T2155] driver_probe_device+0x72/0x890 [ 1079.550897][ T2155] __device_attach_driver+0x568/0x9e0 [ 1079.559968][ T2155] bus_for_each_drv+0x403/0x620 [ 1079.566149][ T2155] __device_attach+0x3c1/0x650 [ 1079.571569][ T2155] device_initial_probe+0x32/0x40 [ 1079.576901][ T2155] bus_probe_device+0x3dc/0x5c0 [ 1079.582362][ T2155] device_add+0x13aa/0x1ba0 [ 1079.587194][ T2155] usb_new_device+0x15f0/0x2470 [ 1079.592630][ T2155] hub_event+0x4ffb/0x72d0 [ 1079.597342][ T2155] process_scheduled_works+0xc1a/0x1e80 [ 1079.603413][ T2155] worker_thread+0xea7/0x14f0 [ 1079.608334][ T2155] kthread+0x6b9/0xef0 [ 1079.613070][ T2155] ret_from_fork+0x6d/0x90 [ 1079.617759][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1079.624483][ T2155] [ 1079.627314][ T2155] Local variable buff created at: [ 1079.632787][ T2155] ch9200_mdio_read+0x3c/0x100 [ 1079.637719][ T2155] mii_nway_restart+0x8a/0x1e0 [ 1079.642841][ T2155] [ 1079.645294][ T2155] CPU: 0 UID: 0 PID: 2155 Comm: kworker/0:2 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1079.656407][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1079.671890][ T2155] Workqueue: usb_hub_wq hub_event [ 1079.677422][ T2155] ===================================================== [ 1079.684757][ T2155] Disabling lock debugging due to kernel taint [ 1079.691361][ T2155] Kernel panic - not syncing: kmsan.panic set ... [ 1079.697936][ T2155] CPU: 0 UID: 0 PID: 2155 Comm: kworker/0:2 Tainted: G B 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1079.710747][ T2155] Tainted: [B]=BAD_PAGE [ 1079.715022][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1079.725246][ T2155] Workqueue: usb_hub_wq hub_event [ 1079.730523][ T2155] Call Trace: [ 1079.733924][ T2155] [ 1079.736979][ T2155] dump_stack_lvl+0x216/0x2d0 [ 1079.741842][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1079.747882][ T2155] dump_stack+0x1e/0x24 [ 1079.752341][ T2155] panic+0x4e2/0xcf0 [ 1079.756461][ T2155] ? kmsan_get_metadata+0xb1/0x1c0 [ 1079.761814][ T2155] kmsan_report+0x2c7/0x2d0 [ 1079.766522][ T2155] ? __device_attach+0x3c1/0x650 [ 1079.771692][ T2155] ? worker_thread+0xea7/0x14f0 [ 1079.777231][ T2155] ? __switch_to_asm+0x50/0x60 [ 1079.782169][ T2155] ? __msan_warning+0x95/0x120 [ 1079.787105][ T2155] ? mii_nway_restart+0x119/0x1e0 [ 1079.792286][ T2155] ? ch9200_bind+0x238/0xeb0 [ 1079.797062][ T2155] ? usbnet_probe+0xdb0/0x3eb0 [ 1079.802019][ T2155] ? usb_probe_interface+0xd33/0x12e0 [ 1079.807610][ T2155] ? really_probe+0x4dc/0xd90 [ 1079.812433][ T2155] ? __driver_probe_device+0x2ab/0x5d0 [ 1079.818099][ T2155] ? driver_probe_device+0x72/0x890 [ 1079.823460][ T2155] ? __device_attach_driver+0x568/0x9e0 [ 1079.829249][ T2155] ? bus_for_each_drv+0x403/0x620 [ 1079.834462][ T2155] ? __device_attach+0x3c1/0x650 [ 1079.839603][ T2155] ? device_initial_probe+0x32/0x40 [ 1079.844998][ T2155] ? bus_probe_device+0x3dc/0x5c0 [ 1079.850280][ T2155] ? device_add+0x13aa/0x1ba0 [ 1079.855144][ T2155] ? usb_set_configuration+0x31c9/0x38d0 [ 1079.860982][ T2155] ? usb_generic_driver_probe+0x109/0x2a0 [ 1079.866893][ T2155] ? usb_probe_device+0x3a7/0x690 [ 1079.872124][ T2155] ? really_probe+0x4dc/0xd90 [ 1079.876959][ T2155] ? __driver_probe_device+0x2ab/0x5d0 [ 1079.882628][ T2155] ? driver_probe_device+0x72/0x890 [ 1079.887978][ T2155] ? __device_attach_driver+0x568/0x9e0 [ 1079.893684][ T2155] ? bus_for_each_drv+0x403/0x620 [ 1079.898880][ T2155] ? __device_attach+0x3c1/0x650 [ 1079.904018][ T2155] ? device_initial_probe+0x32/0x40 [ 1079.909416][ T2155] ? bus_probe_device+0x3dc/0x5c0 [ 1079.914618][ T2155] ? device_add+0x13aa/0x1ba0 [ 1079.919487][ T2155] ? usb_new_device+0x15f0/0x2470 [ 1079.924698][ T2155] ? hub_event+0x4ffb/0x72d0 [ 1079.929483][ T2155] ? process_scheduled_works+0xc1a/0x1e80 [ 1079.935420][ T2155] ? worker_thread+0xea7/0x14f0 [ 1079.940425][ T2155] ? kthread+0x6b9/0xef0 [ 1079.944827][ T2155] ? ret_from_fork+0x6d/0x90 [ 1079.949590][ T2155] ? ret_from_fork_asm+0x1a/0x30 [ 1079.954691][ T2155] ? control_read+0x25b/0x2d0 [ 1079.959543][ T2155] ? kmsan_get_metadata+0x13e/0x1c0 [ 1079.964937][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1079.970972][ T2155] __msan_warning+0x95/0x120 [ 1079.975745][ T2155] mii_nway_restart+0x119/0x1e0 [ 1079.980768][ T2155] ch9200_bind+0x238/0xeb0 [ 1079.985349][ T2155] ? __pfx_ch9200_bind+0x10/0x10 [ 1079.990443][ T2155] usbnet_probe+0xdb0/0x3eb0 [ 1079.995235][ T2155] ? pm_runtime_enable+0x3bb/0x3f0 [ 1080.000555][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.006603][ T2155] ? __pfx_usbnet_probe+0x10/0x10 [ 1080.011823][ T2155] usb_probe_interface+0xd33/0x12e0 [ 1080.017257][ T2155] ? __pfx_usb_probe_interface+0x10/0x10 [ 1080.023098][ T2155] really_probe+0x4dc/0xd90 [ 1080.027763][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.033783][ T2155] __driver_probe_device+0x2ab/0x5d0 [ 1080.039295][ T2155] driver_probe_device+0x72/0x890 [ 1080.044477][ T2155] ? kmsan_get_metadata+0x13e/0x1c0 [ 1080.049875][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.055883][ T2155] __device_attach_driver+0x568/0x9e0 [ 1080.061434][ T2155] bus_for_each_drv+0x403/0x620 [ 1080.066476][ T2155] ? __pfx___device_attach_driver+0x10/0x10 [ 1080.072565][ T2155] __device_attach+0x3c1/0x650 [ 1080.077545][ T2155] device_initial_probe+0x32/0x40 [ 1080.082785][ T2155] bus_probe_device+0x3dc/0x5c0 [ 1080.087824][ T2155] device_add+0x13aa/0x1ba0 [ 1080.092585][ T2155] usb_set_configuration+0x31c9/0x38d0 [ 1080.098274][ T2155] ? usb_set_configuration+0x931/0x38d0 [ 1080.104059][ T2155] usb_generic_driver_probe+0x109/0x2a0 [ 1080.109790][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.115804][ T2155] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1080.122065][ T2155] usb_probe_device+0x3a7/0x690 [ 1080.127124][ T2155] ? __pfx_usb_probe_device+0x10/0x10 [ 1080.132695][ T2155] really_probe+0x4dc/0xd90 [ 1080.137350][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.143369][ T2155] __driver_probe_device+0x2ab/0x5d0 [ 1080.148908][ T2155] driver_probe_device+0x72/0x890 [ 1080.154109][ T2155] ? kmsan_get_metadata+0x13e/0x1c0 [ 1080.159515][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.165530][ T2155] __device_attach_driver+0x568/0x9e0 [ 1080.171086][ T2155] bus_for_each_drv+0x403/0x620 [ 1080.176127][ T2155] ? __pfx___device_attach_driver+0x10/0x10 [ 1080.182211][ T2155] __device_attach+0x3c1/0x650 [ 1080.187195][ T2155] device_initial_probe+0x32/0x40 [ 1080.192436][ T2155] bus_probe_device+0x3dc/0x5c0 [ 1080.197474][ T2155] device_add+0x13aa/0x1ba0 [ 1080.202185][ T2155] usb_new_device+0x15f0/0x2470 [ 1080.207241][ T2155] hub_event+0x4ffb/0x72d0 [ 1080.211909][ T2155] ? __pfx_hub_event+0x10/0x10 [ 1080.216854][ T2155] process_scheduled_works+0xc1a/0x1e80 [ 1080.222652][ T2155] worker_thread+0xea7/0x14f0 [ 1080.227486][ T2155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1080.233519][ T2155] kthread+0x6b9/0xef0 [ 1080.237748][ T2155] ? __pfx_worker_thread+0x10/0x10 [ 1080.243030][ T2155] ? __pfx_kthread+0x10/0x10 [ 1080.247785][ T2155] ret_from_fork+0x6d/0x90 [ 1080.252370][ T2155] ? __pfx_kthread+0x10/0x10 [ 1080.257304][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1080.262253][ T2155] [ 1080.265710][ T2155] Kernel Offset: disabled [ 1080.270104][ T2155] Rebooting in 86400 seconds..