last executing test programs: 5m14.112481501s ago: executing program 2 (id=1108): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000e40)=0xe) 5m12.924042379s ago: executing program 2 (id=1111): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002801400018008"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5m11.846652648s ago: executing program 2 (id=1113): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m11.153948254s ago: executing program 2 (id=1116): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m7.884965623s ago: executing program 2 (id=1119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 5m6.605535046s ago: executing program 2 (id=1124): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 4m51.117419285s ago: executing program 32 (id=1124): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 4m22.846769584s ago: executing program 1 (id=1242): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r2, 0xf2e, 0xffffffffffffff48) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 4m21.522050435s ago: executing program 1 (id=1247): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) 4m20.304473328s ago: executing program 1 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x804) 4m18.767349026s ago: executing program 1 (id=1258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 4m8.768229359s ago: executing program 4 (id=1283): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4m8.496122124s ago: executing program 4 (id=1284): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 4m7.227142639s ago: executing program 4 (id=1285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4m6.974642397s ago: executing program 4 (id=1286): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', '', [], 0xa, "013cf66734da3bd098de5a30417189d548ca2a71def6c3865738647fc55cee88c4a9b2e5"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05", 0xc3}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145aa3989c8cbb335ba7af3ab70c7256b9989f911460ef51a6171eb99fb702d61693cd6faf7ab3037525f2f7ef05e6c179ba03199bb8c50ee531d3f84d5622c272b4047179710c2a3fa3e7cc1d8", 0x7d}], 0x2, 0x0, 0x0, 0x2663}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) 4m4.831839706s ago: executing program 1 (id=1290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x80, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000340)=""/75) syz_open_dev$video(&(0x7f0000000000), 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb8, 0x7000000}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0xf7d}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 4m3.739109152s ago: executing program 4 (id=1295): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 4m3.599138904s ago: executing program 1 (id=1296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m1.532081338s ago: executing program 4 (id=1300): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 3m48.455673695s ago: executing program 33 (id=1296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3m46.28301603s ago: executing program 34 (id=1300): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 1m52.643968358s ago: executing program 6 (id=1731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f0000000300)="f901f1d321ce9dafa7fda7da", 0xc}, {0x0}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000000500)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc1ef79cd38a279d05", 0x9}, {&(0x7f0000001080)="c9d4b419d532895dab8aeecadb34f0503c3aa3bddcdd6f3880bad7ce55f57a0924647be1bd8305523b78af30c47a1bf12299ac5815be1da8bd3a749dbcda262c86079005bdd70eaa23eb7a83a9c6fd5aec32f0517ccfc8d0483cc23892ad7f107e084a3db59d5ab37c492a81b59a0f4204ce3fb61babfd3c5558894241c7a71789d3fc687b4bbc1fc225a938fb7e90956a665b28316dd9e2e63dbca2ae0740aa4d3ce6036e9577d796d26dada55ef3f055033177804e2177e7adde5fd325b7dcd56f7dbcbf2c63fe5ce01ea327dd1e6485eee1c266c92a62aef6d613831b1e7d403ad5f99064ec0198cc5631d9b8072f4d0ab53f3835c773511c84002ec05dbe30d41bb5ec155442befddee9996d087b34b7978907b8375f4dc0840f04d0142a13b620fdb5b6f29e76db44c3a471149b34320a55dd47a9f121dc1f2f1bbef8537aff633cfc79a036b103a948034ae92237c1a2ab8fe129512dd685243c4af254d9a0aa4768cbd3146d1076ac1f32665e66e3e9183a8cd0107f559c9797bdff9efa7c1331909744872fdc1da1c732f07d630ce1649a937c1cfbeff28f99a10fb2b19d9e7f36fc3e03a8b63bebac4cb4db9ae7ff5042efe1c909aa39339d50536ab5ab18d0c6c34d85398cf31abc1065bafefbef46bd2301b4a7db30554e35ef7c2e4a2f036ae9b1961a5cc36567fdd83f4e9dbc5e565ecd4bae2484c0cb7125155096a04e02e52b020f9dcff534d2ec8ee6a0abbffa956069335747c529969eff170842be270defc8b490c496e5bf4a5e4a7b84297919a2ee1d99fdb9c7cf1079ba3e34c25dfb1e08c14d57b339a87340bf0d1b6c888596ca3315833dbbfe3eb2f6ebdb77dd183fd5db1ca161592d9a2e8f7c5e8725d70354cf45dfcca29a3c8ac2e1c5a69b3fdf0c892f866011b2ae2237a7d528f0ad4002c1a37ad97bed5e7684f4129f3ca83d9f0876739c5696fbfce4a1ef1b4efecd87406aeece982c5c32e4e524b5ee9da25d13342befceac935739f461347cc3ffa3ddc2cf34e26327ef8efb636b927a42c3d951142cd4decb5ae38a72617044cb97d3d7fe716da8a8257b35a02bf3ce35631e1bd12a1ebe627b19820d219d245c13afedfca21aebaec2fd635c6bec5e94bd4952fa6fa248fb23eef9caa88851709ebf8aa347b2033c8a981f74148d651b3aba74cbd771cefe5d83707d6cf8246e6f25464e86749767a315dac30882dcc754c711ff1daac37a736a8d75e32f15778d95602ba6316d58aee4af79133d1875792f1408843eb73670bccd37a2ee443000e8a85fa11e0a0628229ae3d2a190e4f1056bec7e23640f963727a0a18165f96b768e9ab0e648ebd49d8fe857e621133b98b6170e00ff8bc215cefd5e41bead22b3afccc3accd4b8dd44c26f2cbc04b2f7ffa649667d2e18bfb705ffdff0e973eb3cce1aecde4917cf88209a85eaf47744e0fc2abbe2183420c7a85e31ad5983f0d584f6f7a722917263253d4e4eba996a0a208b8b280a6adbdedaa1a8eee123b997aa848a592c5296e1efc359239e78bfa83ef0b448a428b27547ecb735bb1ca5e3e34964897e44ff324bf805223267d0df43b825861254e44c19abe9de246fbac0fd628b348c3927bac4c9cf11fdd2b1d59f711657ccca22969d8f32ddf0692132dcdd0544e31f1aff090949d0d4df24e405b984a914bc5363e076b57375b170788a8a77d62170582139e7ebac03ad58718eff4dd81777a51fb160e2fea75e2807783baa93d894ea4da74989e21cb3652390fde765af08234a97516a00cc20dd2f9d3df84c54966800e0f9ba63cae9fb426683745c9e0751ee79d58a72c3687df3cdd5bd81a546828312f7380bd32ab7339471d1c0dca620b8866cf98e38e87596fd7eb1cda6f35a821583d94d1b2ec8dada77c2770eda8b3e07f6d795ed1bb62f9f45db3ecb0bec0c87f7199a8becfe630695354aa12fed101455da4ae37d66b0a96556e072323b2a12c871c32a0904ea77e7971ae6cb18c4655d4ee61bd9db6c0a1a915a10665c29d7d6658481ac006de053f9f52abb4612d5d88b90c7d72389dc7cf30b13561a0fa4789481f8c232806a5526bf7d58193f8f6ce93324ed036b3be2062352f5b2acb0f5326a564a5f689fcc171dfae461bdc7d63ddcf22b4deb1da2ee87c83131d177b16a784fec878be78f744935c818d20af9001a0a8242d4fd64e80309e7d04073f837aba67ce3ef64bde5b64dd6a36259071322de0e65a3ffcf3eb679b9eaf317a328fe3120e82bd063ebefe656ba5081e574b2b1065b86e5c7460b9ede52abd88de1cc0d21fca25a5b37f372fbd3945ab9a4731e8cc2735a0e3c67ec2383025d529484d45d77873c349d615b5e1115cbbbb752f6e3a0bf6f0230b36d8dacf887be70ed5ecb720a6cce634582c2eba4169f0c10a1379ff3b744dd683a29fd921adafabe08a8a67731f203056ff79223bb8e56c8e1b3932ff2f599b2e89512ddf94e8ed715e6b2a2dc5239d2ed858c403be3c332c3877d3c3595010a2d05d37ab701a702ac170f43a4a25c03442ba512583d34e029b05512066f5595b99df942c9e69513b75303d1d43b4cff7abf0791b156e6eef9ce846c2b1f41be4b28245abbe2f92fe64321f6a1d724edbeacf4824471a3e52f0e508569c8a030764e679b4a3c594facbc48c20a6a13e402e0bcdc7162f0a5348b15ca8817dcdd39f57ee69b92b5879dc5c056f52bcf190e1cdc097f46e0dd7d59e474f5edf23464a5d026999508d271cfbe8b2721794f8df8cbb4ff6f446e0914eb115037fd3e416ecf63ab3029980d9f9a9688fc9f8e88274a11e7e515ee2b6f595fec98e285479b11b4fc2d5170d1f69e0b079a00807df159783b48349ab0e142ccbd7dac4a3939bf6426917854dec3f56d803f8a3bc57328a94332a27ee9cfa0dbc0a7ad7f595e2b498afccf3db25c40bf773d1ec2fdc2dd78bfa329b9f0cace3fb3ea5eafe53d5bb886f3b13d2959371438422d3ca2bcd5ec20e9bffb5b242e4fa9906efd2ef08e7c33bee9e3d1b69a4804de01e6088f2062945a5653c1ff914636f26d1dcbe33120c4b90ea722287a8a786dce1ab3dd67d7fdaec593960379c01623d238c2f90ff3bca845120e5575b4d8e1cde89b1ef6521c1e57c9d8dd5694427d3d081de094a432d13b518ff5c7456c882b702a24f32a2d5fa33824c012e494b5548ba21b2997647c79fa3b92f6958479fa4dd368a0ed60a380485472a5fd0d484d7e1e2af9e136ac25936632fbaf9b10b32f1d24edc5f332b2198c6eb7acb26d97c455c30533843df0ab179046d2ddc3bd0d76fb81e6d7d1c5a0e1457c43b500eff75800a0d6c73e8a3fa0b36d9a91fdbd4c35718d97ac4a2674c4a6957ca9394c5a4276379cedd7fc5c026a77d2e1f593a318c402d6b9789f13a426c890b75a73bb83f1d1fa59397e1db6d5c1657173e1e7ccd374f287bba80865a6949599ca2c1942d82813bae6deabd6b7fa1ba74b1180e5c77b5475509d74205eeaef8d89124436f2ba409e656df476119f510e56514ff8dabd160733866feca5c04f5d39655565a90b9ecce2d7410de527080053de62988e24a8de4559e7442007fc8386ae5ee3b38f4a8279760218030dcd2e8697db66e9dfe9407b0a2ea851444bd7884f049ddc8888f62cdabfb9170530a951ec2feb9fd4fd189a2c2c1a60e0237bc048f4a898b07e14295297a78f4083ddb5915df8a188dc1efbd93b20e3801b083e37e685e4e5b429249ef548ba0415ac336511dd6b2f7acf8046d62bb346387a9f64fcf1441d9dd378a6516fe4e63fcdc61d618e617a819d72f37ed87505754fd013c725289bfbe638f8c1519cbaccd7c6f6dec618b458fd6ad229c00507a3ac063830716433bf036f346f2abaa6efbd9f7f2ac357655eaae4b93ff41767c6436b742d233a0b81df05daa898573048bd1b541932cd81093d82767d4477b53d3bd29ca15b9871d1412367584cc9e4e0de416f397dea159b68ea334edf6ea7404a5b9ea5cbfb8e12ca7bdc9a246f96a0d402f879299106b5d899650f8fdbfb99f60ddd9e3b15274979928457cf00f6649d660e2c5d597621219471a71a4d7c5ddc2b23bf88f292bf88348f4f7e1c831b2bcb6d550b63bae8f6eb4e2b63f066c67333f7bad4e2aea3b8c03b5e666286140c279cdbf8832ae57f99299796ec289b40adcd65723f3831c027b29422360f9762fd1c5948a2b038460cbdbd77e70963f624213944fdb5a220e9c6e48437d7e9993fb94104844afd27a272e885e35b5e3a315af32c9541be8818f26005b57cd94a355340f0a82c834d770e404f2cecda02e93496f16ad13be01c2e5d353e935c884d637268c6fcf721de9787b727a96279f095962c383aa400c6eeb9607ecfa5a69b9b97808911855640ebb94ff4bef3ea39586e22352fc398bfda62f4a6d40bfdd460662c6fbe059ec379d887d70d79eb4bc4f1dfeca4089aa7a689aa181aaad463f68a9958dbd32a92632790b2686a937acffb3193eca105d19af732693100186f63d35aa9dfc73dd4ec45cf5685f1e4551c4564a8f13f0ec230c116e77ff640e20bc616fb0b472d9962e377a24117d5aae3a23e2e66e95ce501f6678c0ca5976b360ea47478853277cfe297ca7042790e3cba9522121e65ddf3d2cd6c2319244792d9649726ef317b87dad51b2accb96e0c78698ca412cc36486fdd09e9c4a109b7fabfa5b3dea6c245fe523cd23f62b08de4e6ac85f056663db2425e076701e91b58ed9186d598ba06d2c0c83513111ac8ced18", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {0x0}, {&(0x7f00000005c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x8, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000000440)="cd52c0f13f0c6ef1edbe7308207ef41c62b4ccc50ff79cca8c", 0x19}], 0x3}}], 0x3, 0x4040040) 1m52.497019973s ago: executing program 6 (id=1733): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x80, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000340)=""/75) r2 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb8, 0x7000000}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0xf7d}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r7, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 1m50.576631746s ago: executing program 6 (id=1749): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2) 1m50.356106714s ago: executing program 6 (id=1752): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") socket$caif_stream(0x25, 0x1, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1m50.056482901s ago: executing program 6 (id=1758): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x80) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b1b, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xe9, {0xe9, 0x9, "ae112cb738ec2dd3baf0fceef2aafd7f5a75ef3fdcb49315cb012bcb12e4bbd10df4c910ba97cb4b8db75b3fcdb71531d94843915a417dbc7fa946328657df36fe3aa7989c41b98edef185ec30cf66342f05ddaecde383912be7e6791b591af1c53ec65819bf6cf748f8658ebe9325f458c663c664919dee1b2628daa1852aeef29b97f1d237105756a25478ec509a900fd5181ea04f7b2254e939ded67b6cc643a0a19e172f905ee1608aa6032238c8bd34004fa2006d93b26050d9576e0d0fcca34b01d27806b25117bcf0967a6360c98cc4ddcc459e53107684dff781002a3d7304061a0238"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xf, 0xd1, "07249cd6e1a76f76564e639aa6394bcea71fccc055c35dc59074a4a75a31eb712413ac49ce8e80b6053baab9c4ce094d9dd84c4f499752a5f1e0fa88fb5e93deb8ae9fa17fbcd5cb69e7d38a35b45a53f4ac0b81327dcbdc8fbc7b38fbcf94a10c01cb054581fd2c9525c82e7a4aed5fd7b2ec31bd469626475d660efb08120adb4291b91f60a2166389c7e04cdeabb5e49e4fb0c2c0ee2ce4a7696f6f2cf364a3858efedd6f966e8b2d88db5b00b17c1faefd4fe58e3564276fec90018eb71e3c223d035fa991bc5d0ccf852d7186cc34"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x81, 0x3, "7d9e7c"}, &(0x7f0000000540)=ANY=[@ANYBLOB="2082fbff00d0a8267c"], &(0x7f0000000580)={0x20, 0x83, 0x1, '|'}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "6ae78b"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "49e81e"}}) 1m46.864327563s ago: executing program 6 (id=1778): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x65ac2689ca5200ac, 0xfe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000079a000/0x2000)=nil, &(0x7f0000413000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000bc0000/0x3000)=nil, 0x0, 0x0, r2}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) listen(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={[0xffffffff]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x76ebe000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m31.660863873s ago: executing program 35 (id=1778): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x65ac2689ca5200ac, 0xfe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000079a000/0x2000)=nil, &(0x7f0000413000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000bc0000/0x3000)=nil, 0x0, 0x0, r2}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) listen(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={[0xffffffff]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x76ebe000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.824582417s ago: executing program 3 (id=2318): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.624489619s ago: executing program 3 (id=2322): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.645425473s ago: executing program 3 (id=2327): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.40563921s ago: executing program 0 (id=2332): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.368333738s ago: executing program 3 (id=2335): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) io_setup(0xab, &(0x7f0000000000)=0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000001280)) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) io_submit(r1, 0x0, 0x0) 3.620043573s ago: executing program 0 (id=2336): ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000440)={&(0x7f0000000180)=[{&(0x7f0000000600)="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", 0x190}], 0x1, 0x7, 0x0, 0x1, 0x6, 0x6db1, 0x7, 0x3}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000780)=ANY=[], 0xfce) 3.181131093s ago: executing program 0 (id=2341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) 2.677477943s ago: executing program 5 (id=2342): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.499993556s ago: executing program 8 (id=2343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.450125226s ago: executing program 7 (id=2344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="14000000090000", 0x7) 2.413335644s ago: executing program 8 (id=2345): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.346274348s ago: executing program 5 (id=2346): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.216298874s ago: executing program 7 (id=2347): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.198117492s ago: executing program 8 (id=2348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 2.121831513s ago: executing program 7 (id=2349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000700)=ANY=[@ANYBLOB="7f6964dafa18cbaae34c6a28126e66f4d0fb6272a080371196fdebb9563d0a474279c7bb36c63fd7ca9e0c9fed86d1476b452c560006997858177d2f2e93c9e39c1373dff6d82b8ae15ea9bba5478828f4d33c8e2b6a54b474c44a5423", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000480)) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtaction={0x1bc, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x1a8, 0x1, [@m_bpf={0xc4, 0x6, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x6e, 0x6, "a59b5e253ad9d1f11d0b86547cad7bd44696cc237d58cd1c3861391c676c10b3c1d7d2d2a04abc41c1afa439274196750feb40fd8da0d712661433d87d83d1502d9c4a4e3473588382e2a4c452a183cbcd2b4d5be2b38c96b780b6cb1b9f0e5811434349436dc187e6bd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0xe0, 0xd, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x6, 0x4, 0x6, 0x1}, {0x1d2, 0x4, 0x7, 0x6}, {0x5e, 0x80, 0x2, 0x9}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0xdb, 0x2, 0x10}, {0x4, 0xaf, 0x7, 0x3}, {0x4, 0xe0, 0x5, 0x40}, {0x7, 0xf2, 0x8, 0x6}, {0x7, 0x7, 0x2, 0x8}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x6, 0xb, 0x4}, {0x755c, 0x3, 0x7, 0x2}]}]}, {0x46, 0x6, "23de4edd1f2e960c6e6df9e6327b3c23749167f6e1b65dfec24f0a9dbe980a7f520f8bafb335cade56c58ae9fc19f5ccdbe7e9f958c97fc27768fabb356b7d89f269"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x23, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x3e117c29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x2b, 0x4, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x8}}, 0x50) syz_open_dev$audion(&(0x7f0000000380), 0x80000000, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a31000000000800410073697700140033007866726d3000"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 2.118948579s ago: executing program 5 (id=2350): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x8, &(0x7f0000000240)}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, 0x0) 2.01166543s ago: executing program 8 (id=2351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.322723944s ago: executing program 0 (id=2352): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.244570117s ago: executing program 8 (id=2353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20004804) 1.189911732s ago: executing program 0 (id=2354): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_dev$sndctrl(0x0, 0x80, 0x2) r0 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb8, 0x7000000}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0xf7d}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 1.158475839s ago: executing program 7 (id=2355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.081197621s ago: executing program 5 (id=2356): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 870.78254ms ago: executing program 5 (id=2357): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c9"], 0x48) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 816.42139ms ago: executing program 7 (id=2358): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 267.431562ms ago: executing program 3 (id=2359): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 155.311925ms ago: executing program 0 (id=2360): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 122.022229ms ago: executing program 5 (id=2361): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r1, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r0], 0x3c}}, 0x8000) 108.723111ms ago: executing program 7 (id=2362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) 86.851628ms ago: executing program 3 (id=2363): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 0s ago: executing program 8 (id=2364): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): m1: renamed from eth1 [ 406.035260][ T5938] rc_core: IR keymap rc-hauppauge not found [ 406.104519][ T9246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 406.239540][ T9551] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 406.246119][ T9551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.261456][ T9246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 406.419723][ T9551] vhci_hcd vhci_hcd.0: Device attached [ 406.673321][ T5918] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 406.772935][ T993] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 406.888430][ T5911] kernel write not supported for file /input/event2 (pid: 5911 comm: kworker/1:5) [ 406.964870][ T9554] vhci_hcd: connection reset by peer [ 407.321177][ T1156] vhci_hcd vhci_hcd.4: stop threads [ 407.348958][ T5938] Registered IR keymap rc-empty [ 407.355187][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.373940][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.398707][ T1156] vhci_hcd vhci_hcd.4: release socket [ 407.407820][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 407.420310][ T1156] vhci_hcd vhci_hcd.4: disconnect device [ 407.430077][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 407.449424][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.483007][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.526401][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.557117][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.585136][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.613331][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.643028][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.716202][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.765803][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.786849][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.814243][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.831412][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.838699][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.845004][ T5938] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 407.853411][ T6032] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 407.933827][ T5938] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 407.959223][ T5938] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.021128][ T5938] usb 4-1: USB disconnect, device number 40 [ 408.151834][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.159123][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.193391][ T6032] usb 1-1: Using ep0 maxpacket: 32 [ 408.200302][ T6032] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 408.225235][ T6032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.297016][ T6032] usb 1-1: selecting invalid altsetting 3 [ 408.319377][ T6032] comedi comedi5: could not set alternate setting 3 in high speed [ 408.346221][ T6032] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 408.381628][ T6032] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 408.894029][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.907186][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.452333][ T9606] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 409.642351][ T9614] program syz.3.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.986992][ T9606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.281173][ T9611] bond1: (slave gretap1): making interface the new active one [ 410.366964][ T9611] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.670289][ T993] usb 1-1: USB disconnect, device number 33 [ 411.016479][ T9627] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 411.023049][ T9627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.031169][ T9627] vhci_hcd vhci_hcd.0: Device attached [ 411.150601][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.595185][ T9629] vhci_hcd: connection closed [ 411.677375][ T49] vhci_hcd vhci_hcd.4: stop threads [ 411.839750][ T49] vhci_hcd vhci_hcd.4: release socket [ 411.952989][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 412.153453][ T5918] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 412.262549][ T9634] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 413.176367][ T9246] veth0_vlan: entered promiscuous mode [ 413.374245][ T9246] veth1_vlan: entered promiscuous mode [ 413.489750][ T9668] program syz.4.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.220597][ T9246] veth0_macvtap: entered promiscuous mode [ 414.328498][ T9246] veth1_macvtap: entered promiscuous mode [ 414.450634][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.602136][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.718201][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.756012][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.799435][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.831394][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.201558][ T9688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.210244][ T9688] IPv6: NLM_F_CREATE should be set when creating new route [ 415.217652][ T9688] IPv6: NLM_F_CREATE should be set when creating new route [ 415.225007][ T9688] IPv6: NLM_F_CREATE should be set when creating new route [ 415.917606][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.981821][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.222707][ T9695] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 416.229283][ T9695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.237369][ T9695] vhci_hcd vhci_hcd.0: Device attached [ 416.573966][ T5960] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 416.982160][ T9696] vhci_hcd: connection reset by peer [ 417.065010][ T8225] vhci_hcd vhci_hcd.0: stop threads [ 417.121252][ T8225] vhci_hcd vhci_hcd.0: release socket [ 417.194582][ T8225] vhci_hcd vhci_hcd.0: disconnect device [ 417.410547][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.546254][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.934420][ T9707] 9p: Bad value for 'wfdno' [ 420.814882][ T6032] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 420.993121][ T6032] usb 4-1: Using ep0 maxpacket: 32 [ 421.004678][ T6032] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 421.025049][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.221834][ T6032] usb 4-1: selecting invalid altsetting 3 [ 421.228826][ T6032] comedi comedi5: could not set alternate setting 3 in high speed [ 421.237167][ T6032] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 421.688000][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.699608][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.776056][ T5960] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 422.081618][ T6032] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 422.265454][ T9752] Bluetooth: MGMT ver 1.23 [ 422.665917][ T9757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.652549][ T24] usb 4-1: USB disconnect, device number 41 [ 425.164190][ T5853] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 425.184221][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 425.230920][ T9772] nbd: socks must be embedded in a SOCK_ITEM attr [ 427.746480][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 428.266027][ T9814] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 431.238352][ T9848] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 431.244924][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.253577][ T9848] vhci_hcd vhci_hcd.0: Device attached [ 431.591954][ T5854] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 432.034137][ T9849] vhci_hcd: connection reset by peer [ 432.185893][ T36] vhci_hcd vhci_hcd.3: stop threads [ 432.268263][ T36] vhci_hcd vhci_hcd.3: release socket [ 432.406741][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 433.900137][ T9873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1314'. [ 435.172909][ T6032] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 435.336802][ T6032] usb 1-1: Using ep0 maxpacket: 32 [ 435.391044][ T6032] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 435.503962][ T9892] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 435.510543][ T9892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.520313][ T9892] vhci_hcd vhci_hcd.0: Device attached [ 435.529159][ T6032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.243177][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.253034][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.373678][ T5854] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 437.396193][ T6032] usb 1-1: selecting invalid altsetting 3 [ 437.498562][ T6032] comedi comedi5: could not set alternate setting 3 in high speed [ 437.635691][ T6032] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 437.696021][ T9893] vhci_hcd: connection closed [ 437.697532][ T60] vhci_hcd vhci_hcd.5: stop threads [ 437.880886][ T6032] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 437.894120][ T60] vhci_hcd vhci_hcd.5: release socket [ 437.907133][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 438.270537][ T9905] program syz.3.1320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.990369][ T24] usb 1-1: USB disconnect, device number 34 [ 439.540256][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1326'. [ 440.022422][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.033054][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.379335][ T9942] program syz.3.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.372757][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.384743][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.394512][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.412288][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.421447][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.431147][ T9951] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 442.437704][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.451037][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 442.569799][ T9952] vhci_hcd: connection closed [ 442.570443][ T1156] vhci_hcd vhci_hcd.5: stop threads [ 442.597024][ T1156] vhci_hcd vhci_hcd.5: release socket [ 442.611165][ T1156] vhci_hcd vhci_hcd.5: disconnect device [ 442.725078][ T9949] xfrm0 speed is unknown, defaulting to 1000 [ 443.584524][ T9949] chnl_net:caif_netlink_parms(): no params data found [ 444.485119][ T51] Bluetooth: hci2: command tx timeout [ 444.502716][ T49] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 444.566941][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.577372][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.595517][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.611614][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 444.619796][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 446.177400][ T88] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.381302][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.413343][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.542507][T10014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 446.549067][T10014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.565907][ T5853] Bluetooth: hci2: command tx timeout [ 446.571921][ T9949] bridge_slave_0: entered allmulticast mode [ 446.578650][ T9949] bridge_slave_0: entered promiscuous mode [ 446.633809][ T88] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.649761][T10014] vhci_hcd vhci_hcd.0: Device attached [ 446.692556][ T9983] xfrm0 speed is unknown, defaulting to 1000 [ 446.699580][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.734922][ T5853] Bluetooth: hci6: command tx timeout [ 446.750562][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.770168][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1349'. [ 446.786432][ T9949] bridge_slave_1: entered allmulticast mode [ 446.797351][T10015] vhci_hcd: connection closed [ 446.798126][ T12] vhci_hcd vhci_hcd.0: stop threads [ 446.846204][ T9949] bridge_slave_1: entered promiscuous mode [ 446.858398][ T12] vhci_hcd vhci_hcd.0: release socket [ 446.879160][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 446.892917][ T5938] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 446.907621][ T5938] usb 33-1: enqueue for inactive port 0 [ 446.994451][ T5938] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 447.110071][ T88] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.200357][T10025] program syz.3.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.951418][ T9949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.055423][ T88] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.086581][ T9949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.360073][ T9949] team0: Port device team_slave_0 added [ 448.406621][ T9949] team0: Port device team_slave_1 added [ 448.589043][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.596403][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.626059][ T9949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.643184][ T5853] Bluetooth: hci2: command tx timeout [ 448.727966][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.803664][ T5853] Bluetooth: hci6: command tx timeout [ 449.029198][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.064709][ T9949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.647967][ T5853] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 449.852085][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 450.662532][ T9949] hsr_slave_0: entered promiscuous mode [ 450.701850][ T9949] hsr_slave_1: entered promiscuous mode [ 450.723501][ T51] Bluetooth: hci2: command tx timeout [ 450.755612][ T9949] debugfs: 'hsr0' already exists in 'hsr' [ 450.797587][T10058] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 450.804160][T10058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.833706][ T9949] Cannot create hsr debugfs directory [ 450.852992][T10058] vhci_hcd vhci_hcd.0: Device attached [ 450.878946][ T88] bridge_slave_1: left allmulticast mode [ 450.884727][ T51] Bluetooth: hci6: command tx timeout [ 450.897950][ T88] bridge_slave_1: left promiscuous mode [ 450.949708][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.975385][ T88] bridge_slave_0: left allmulticast mode [ 451.004937][ T88] bridge_slave_0: left promiscuous mode [ 451.016163][T10060] vhci_hcd: connection closed [ 451.024134][ T3526] vhci_hcd vhci_hcd.5: stop threads [ 451.036503][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.066278][ T3526] vhci_hcd vhci_hcd.5: release socket [ 451.092741][ T3526] vhci_hcd vhci_hcd.5: disconnect device [ 451.102937][ T993] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 451.272302][T10052] nbd: socks must be embedded in a SOCK_ITEM attr [ 451.490977][ T88] bond1 (unregistering): (slave gretap1): Releasing active interface [ 451.503738][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 451.579308][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.592613][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.603327][ T88] bond0 (unregistering): Released all slaves [ 451.628390][ T88] bond1 (unregistering): Released all slaves [ 451.662928][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 451.678555][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.701834][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.718736][ T9983] chnl_net:caif_netlink_parms(): no params data found [ 451.725802][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 451.736480][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 451.755297][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.793230][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 451.802633][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 451.820769][ T5911] usb 4-1: Manufacturer: syz [ 451.838830][ T5911] usb 4-1: config 0 descriptor?? [ 452.175578][ T5911] rc_core: IR keymap rc-hauppauge not found [ 452.184753][ T5911] Registered IR keymap rc-empty [ 452.206414][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.233672][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.255401][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 452.277611][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 452.314864][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.353002][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.375241][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.435632][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.485507][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.543256][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.599569][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.673669][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.731734][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.784036][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.811347][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.842987][ T5911] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 452.856473][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.864717][ T5911] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 452.874914][ T9983] bridge_slave_0: entered allmulticast mode [ 452.901224][ T9983] bridge_slave_0: entered promiscuous mode [ 452.909347][ T5911] usb 4-1: USB disconnect, device number 42 [ 452.939961][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.962074][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.964724][ T51] Bluetooth: hci6: command tx timeout [ 452.980807][ T9983] bridge_slave_1: entered allmulticast mode [ 453.021060][ T9983] bridge_slave_1: entered promiscuous mode [ 453.320834][T10103] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 453.327384][T10103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 453.357643][T10103] vhci_hcd vhci_hcd.0: Device attached [ 453.368017][ T88] hsr_slave_0: left promiscuous mode [ 453.401006][ T88] hsr_slave_1: left promiscuous mode [ 453.417916][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.452700][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.484585][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.500276][T10104] vhci_hcd: connection closed [ 453.500584][ T3526] vhci_hcd vhci_hcd.0: stop threads [ 453.511292][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.535665][T10110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.543499][ T3526] vhci_hcd vhci_hcd.0: release socket [ 453.560812][ T88] veth1_macvtap: left promiscuous mode [ 453.563200][ T3526] vhci_hcd vhci_hcd.0: disconnect device [ 453.580485][ T88] veth0_macvtap: left promiscuous mode [ 453.587932][ T88] veth1_vlan: left promiscuous mode [ 453.593731][ T88] veth0_vlan: left promiscuous mode [ 453.612874][ T5911] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 453.624752][ T5911] usb 33-1: enqueue for inactive port 0 [ 453.713569][ T5911] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 453.958648][ T88] team0 (unregistering): Port device team_slave_1 removed [ 453.978285][ T88] team0 (unregistering): Port device team_slave_0 removed [ 454.284901][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.300873][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.405521][ T9983] team0: Port device team_slave_0 added [ 454.418844][ T9983] team0: Port device team_slave_1 added [ 454.471669][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.480047][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.506507][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.217497][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.244471][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.274941][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.563551][ T993] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 456.620864][ T9983] hsr_slave_0: entered promiscuous mode [ 456.642965][ T9983] hsr_slave_1: entered promiscuous mode [ 456.662381][ T9983] debugfs: 'hsr0' already exists in 'hsr' [ 456.678986][ T9983] Cannot create hsr debugfs directory [ 458.453625][T10161] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 458.460205][T10161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.468273][T10161] vhci_hcd vhci_hcd.0: Device attached [ 458.563232][T10162] vhci_hcd: connection closed [ 458.566364][ T7494] vhci_hcd vhci_hcd.3: stop threads [ 458.587312][ T88] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.598366][ T7494] vhci_hcd vhci_hcd.3: release socket [ 459.256367][ T7494] vhci_hcd vhci_hcd.3: disconnect device [ 459.644864][ T88] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.749562][T10174] program syz.0.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.406744][ T9949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.544272][ T9949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.645300][ T88] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.665693][ T9949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 460.756609][ T88] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.810564][ T9949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 460.814233][ T5911] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 461.003466][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 461.024605][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.037890][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.049130][ T5911] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 461.058683][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.077109][ T5911] usb 1-1: config 0 descriptor?? [ 461.170194][T10191] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 461.176778][T10191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.389410][T10191] vhci_hcd vhci_hcd.0: Device attached [ 462.587618][T10192] vhci_hcd: connection closed [ 462.588007][ T9175] vhci_hcd vhci_hcd.5: stop threads [ 462.624315][ T5854] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 462.652714][ T9175] vhci_hcd vhci_hcd.5: release socket [ 462.676746][ T9175] vhci_hcd vhci_hcd.5: disconnect device [ 462.765564][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 462.798177][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 462.830950][ T5911] usb 1-1: USB disconnect, device number 35 [ 462.869752][ T9983] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 462.921371][ T9983] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 462.988513][ T9983] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 463.012927][ T9983] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 463.135622][ T88] bridge_slave_1: left allmulticast mode [ 463.141922][ T88] bridge_slave_1: left promiscuous mode [ 463.148686][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.166031][ T88] bridge_slave_0: left allmulticast mode [ 463.184452][ T88] bridge_slave_0: left promiscuous mode [ 463.194729][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.654184][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1396'. [ 465.431269][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.454255][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.475010][ T88] bond0 (unregistering): Released all slaves [ 467.762921][ T5854] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 468.172957][ T993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 468.342940][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 468.360074][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.405723][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.432060][ T9949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.446330][ T993] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 468.471167][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.520893][ T993] usb 6-1: config 0 descriptor?? [ 468.657513][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.779978][ T88] hsr_slave_0: left promiscuous mode [ 468.797110][ T88] hsr_slave_1: left promiscuous mode [ 468.810187][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.830988][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.849870][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.867689][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.930241][ T88] veth1_macvtap: left promiscuous mode [ 468.950329][ T88] veth0_macvtap: left promiscuous mode [ 468.964028][ T88] veth1_vlan: left promiscuous mode [ 468.983028][ T88] veth0_vlan: left promiscuous mode [ 469.285986][ T993] usbhid 6-1:0.0: can't add hid device: -71 [ 469.292286][ T993] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 469.316218][ T993] usb 6-1: USB disconnect, device number 2 [ 469.543876][ T88] team0 (unregistering): Port device team_slave_1 removed [ 469.565781][ T88] team0 (unregistering): Port device team_slave_0 removed [ 470.472040][ T9949] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.495190][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.502412][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.541876][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.549151][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.698671][ T993] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 470.786369][T10284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 470.792952][T10284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.801212][T10284] vhci_hcd vhci_hcd.0: Device attached [ 470.925596][ T993] usb 6-1: device descriptor read/64, error -71 [ 471.113008][ T5965] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 471.223020][ T993] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 471.376264][ T993] usb 6-1: device descriptor read/64, error -71 [ 471.497916][T10286] vhci_hcd: connection reset by peer [ 471.574650][ T993] usb usb6-port1: attempt power cycle [ 471.599526][ T9175] vhci_hcd vhci_hcd.3: stop threads [ 471.639048][ T9175] vhci_hcd vhci_hcd.3: release socket [ 471.688179][ T9175] vhci_hcd vhci_hcd.3: disconnect device [ 472.081861][ T993] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 472.929164][ T993] usb 6-1: device descriptor read/8, error -71 [ 472.941897][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.042547][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.049773][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.130265][ T993] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 474.210511][ T993] usb 6-1: device descriptor read/8, error -71 [ 474.230744][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.237990][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.353654][ T993] usb usb6-port1: unable to enumerate USB device [ 475.850032][ T9949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.593461][ T5965] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 476.737633][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.668884][T10357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 477.675474][T10357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.684077][T10357] vhci_hcd vhci_hcd.0: Device attached [ 477.732100][T10362] vhci_hcd: connection closed [ 477.732453][ T1156] vhci_hcd vhci_hcd.3: stop threads [ 477.782078][ T1156] vhci_hcd vhci_hcd.3: release socket [ 477.810139][ T1156] vhci_hcd vhci_hcd.3: disconnect device [ 477.889213][ T9949] veth0_vlan: entered promiscuous mode [ 477.963534][ T5854] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 477.972155][ T9949] veth1_vlan: entered promiscuous mode [ 478.026027][ T9983] veth0_vlan: entered promiscuous mode [ 478.066384][ T9983] veth1_vlan: entered promiscuous mode [ 478.115041][ T9949] veth0_macvtap: entered promiscuous mode [ 478.136995][ T9949] veth1_macvtap: entered promiscuous mode [ 478.156944][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 478.168394][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.193346][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 478.201500][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.233913][ T5854] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 478.233963][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.252393][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.252714][ T9983] veth0_macvtap: entered promiscuous mode [ 478.280147][ T5854] usb 1-1: config 0 descriptor?? [ 478.294345][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.349289][ T10] usb 6-1: device descriptor read/64, error -71 [ 478.362314][ T7493] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.397438][ T7493] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.436867][ T9983] veth1_macvtap: entered promiscuous mode [ 478.454908][ T7493] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.466218][ T7493] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.606151][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 478.622422][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.677093][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.773887][ T10] usb 6-1: device descriptor read/64, error -71 [ 479.082220][ T10] usb usb6-port1: attempt power cycle [ 479.167723][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.358207][ T1156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.414339][ T1156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.427997][ T5854] usbhid 1-1:0.0: can't add hid device: -71 [ 479.435992][ T1156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.446292][ T5854] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 479.466824][ T5854] usb 1-1: USB disconnect, device number 36 [ 479.476488][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.487639][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.573588][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 479.614795][ T10] usb 6-1: device descriptor read/8, error -71 [ 479.701892][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.711158][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.874838][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 479.901001][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.926179][ T10] usb 6-1: device descriptor read/8, error -71 [ 479.936474][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.065142][ T10] usb usb6-port1: unable to enumerate USB device [ 480.170593][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.211301][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.546136][T10423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 482.552682][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.560331][T10423] vhci_hcd vhci_hcd.0: Device attached [ 482.622399][T10424] vhci_hcd: connection closed [ 482.623847][ T13] vhci_hcd vhci_hcd.3: stop threads [ 482.669410][ T13] vhci_hcd vhci_hcd.3: release socket [ 482.691600][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 483.624081][ T5965] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 483.854506][ T5965] usb 8-1: Using ep0 maxpacket: 32 [ 483.975016][ T5965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.619008][ T5965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.631240][ T5965] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 484.640640][ T5965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.738275][ T10] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 484.755854][ T5965] usb 8-1: config 0 descriptor?? [ 484.932913][ T10] usb 1-1: device descriptor read/64, error -71 [ 485.830019][ T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 485.992901][ T10] usb 1-1: device descriptor read/64, error -71 [ 486.114570][ T10] usb usb1-port1: attempt power cycle [ 486.264826][ T5965] usbhid 8-1:0.0: can't add hid device: -71 [ 486.294081][ T5965] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 486.340948][ T5965] usb 8-1: USB disconnect, device number 2 [ 486.473115][ T10] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 486.499579][ T10] usb 1-1: device descriptor read/8, error -71 [ 486.763639][ T10] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 486.865392][ T10] usb 1-1: device descriptor read/8, error -71 [ 487.005990][ T10] usb usb1-port1: unable to enumerate USB device [ 487.441417][T10491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 487.447969][T10491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.456914][T10491] vhci_hcd vhci_hcd.0: Device attached [ 487.671318][T10499] vhci_hcd: connection closed [ 487.683301][ T60] vhci_hcd vhci_hcd.0: stop threads [ 488.332167][ T60] vhci_hcd vhci_hcd.0: release socket [ 488.339381][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 488.475328][ T5938] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 488.495153][ T6032] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 488.520966][ T5938] usb 33-1: enqueue for inactive port 0 [ 488.624521][ T5938] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 488.792872][ T6032] usb 7-1: device descriptor read/64, error -71 [ 488.873486][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 489.042861][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 489.053530][ T6032] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 489.065035][ T9] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 489.088948][ T9] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 489.114216][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 489.129713][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.152699][ T9] usb 8-1: Product: syz [ 489.161450][ T9] usb 8-1: Manufacturer: syz [ 489.173040][ T9] usb 8-1: SerialNumber: syz [ 489.199462][ T6032] usb 7-1: device descriptor read/64, error -71 [ 489.335607][ T6032] usb usb7-port1: attempt power cycle [ 489.409634][ T9] usb 8-1: USB disconnect, device number 3 [ 489.695051][ T6032] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 489.725509][ T6032] usb 7-1: device descriptor read/8, error -71 [ 489.963421][ T6032] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 490.014303][ T6032] usb 7-1: device descriptor read/8, error -71 [ 490.023990][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 490.125317][ T6032] usb usb7-port1: unable to enumerate USB device [ 490.194344][ T9] usb 1-1: device descriptor read/64, error -71 [ 490.322962][ T5911] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 490.462972][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 490.502894][ T5911] usb 8-1: Using ep0 maxpacket: 32 [ 490.521532][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.558603][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.593543][ T5911] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 490.628277][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.628287][ T9] usb 1-1: device descriptor read/64, error -71 [ 490.950820][ T9] usb usb1-port1: attempt power cycle [ 491.023198][ T5911] usb 8-1: config 0 descriptor?? [ 491.303003][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 491.333509][ T9] usb 1-1: device descriptor read/8, error -71 [ 492.042915][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 492.104804][ T9] usb 1-1: device descriptor read/8, error -71 [ 492.189639][ T5911] usbhid 8-1:0.0: can't add hid device: -71 [ 492.209724][ T5911] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 492.253178][T10558] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 492.259729][T10558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.267359][T10558] vhci_hcd vhci_hcd.0: Device attached [ 492.277771][ T5911] usb 8-1: USB disconnect, device number 4 [ 492.281067][ T9] usb usb1-port1: unable to enumerate USB device [ 492.330037][T10561] vhci_hcd: connection closed [ 492.331026][ T13] vhci_hcd vhci_hcd.6: stop threads [ 492.359414][ T13] vhci_hcd vhci_hcd.6: release socket [ 492.377941][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 492.763315][ T5938] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 492.953128][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 492.978565][ T5938] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 493.017365][ T5938] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 493.075602][ T5938] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 493.129028][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.165877][ T5938] usb 4-1: Product: syz [ 493.189099][ T5938] usb 4-1: Manufacturer: syz [ 493.211159][ T5938] usb 4-1: SerialNumber: syz [ 493.343131][ T5965] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 493.520344][T10595] siw: device registration error -23 [ 493.911022][ T5938] usb 4-1: USB disconnect, device number 43 [ 493.918017][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 493.949678][ T5965] usb 1-1: no configurations [ 493.971493][ T5965] usb 1-1: can't read configurations, error -22 [ 494.142894][ T5965] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 494.334521][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 494.355225][ T5965] usb 1-1: no configurations [ 494.370852][ T5965] usb 1-1: can't read configurations, error -22 [ 494.385165][ T5965] usb usb1-port1: attempt power cycle [ 494.779576][ T5965] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 495.474811][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 495.624321][ T5965] usb 1-1: no configurations [ 495.643977][ T5965] usb 1-1: can't read configurations, error -22 [ 495.812972][ T5965] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 495.853562][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 495.873582][ T5965] usb 1-1: no configurations [ 495.894497][ T5965] usb 1-1: can't read configurations, error -22 [ 495.913412][ T5965] usb usb1-port1: unable to enumerate USB device [ 496.398431][T10626] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 496.404986][T10626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 496.413152][T10626] vhci_hcd vhci_hcd.0: Device attached [ 496.463771][T10628] vhci_hcd: connection closed [ 496.465760][ T88] vhci_hcd vhci_hcd.7: stop threads [ 496.501037][ T88] vhci_hcd vhci_hcd.7: release socket [ 496.527705][ T88] vhci_hcd vhci_hcd.7: disconnect device [ 496.674063][ T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 496.712194][T10637] siw: device registration error -23 [ 497.172868][ T10] usb 1-1: device descriptor read/64, error -71 [ 497.179226][ T5965] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 497.422944][ T10] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 497.431099][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 497.441546][ T5965] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 498.063172][ T5965] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 498.075586][ T5965] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 498.112933][ T10] usb 1-1: device descriptor read/64, error -71 [ 498.219001][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.257155][ T5965] usb 6-1: Product: syz [ 498.275595][ T5965] usb 6-1: Manufacturer: syz [ 498.295479][ T5965] usb 6-1: SerialNumber: syz [ 498.313691][ T10] usb usb1-port1: attempt power cycle [ 498.557623][ T5965] usb 6-1: USB disconnect, device number 11 [ 498.672880][ T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 498.714680][ T10] usb 1-1: device descriptor read/8, error -71 [ 498.845477][ T993] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 498.973001][ T10] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 499.013418][ T993] usb 8-1: Using ep0 maxpacket: 16 [ 499.025180][ T10] usb 1-1: device descriptor read/8, error -71 [ 499.044620][ T993] usb 8-1: no configurations [ 499.050917][ T993] usb 8-1: can't read configurations, error -22 [ 499.153131][ T10] usb usb1-port1: unable to enumerate USB device [ 499.197309][ T993] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 499.382825][ T993] usb 8-1: Using ep0 maxpacket: 16 [ 499.419227][ T993] usb 8-1: no configurations [ 499.450786][ T993] usb 8-1: can't read configurations, error -22 [ 499.481352][ T993] usb usb8-port1: attempt power cycle [ 499.926824][ T993] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 499.983658][ T993] usb 8-1: Using ep0 maxpacket: 16 [ 500.054571][ T993] usb 8-1: no configurations [ 500.077353][ T993] usb 8-1: can't read configurations, error -22 [ 500.324015][ T993] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 500.763006][T10689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 500.769578][T10689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.777217][T10689] vhci_hcd vhci_hcd.0: Device attached [ 500.783756][ T993] usb 8-1: Using ep0 maxpacket: 16 [ 500.800857][ T993] usb 8-1: no configurations [ 500.821712][T10691] vhci_hcd: connection closed [ 500.824242][ T13] vhci_hcd vhci_hcd.0: stop threads [ 500.845247][ T993] usb 8-1: can't read configurations, error -22 [ 500.858050][ T13] vhci_hcd vhci_hcd.0: release socket [ 500.877774][ T993] usb usb8-port1: unable to enumerate USB device [ 500.893609][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 501.480103][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487809][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.544011][ T993] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 502.713034][ T993] usb 8-1: Using ep0 maxpacket: 32 [ 502.726451][ T5965] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 502.747746][ T993] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 502.774816][ T993] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 502.792448][ T993] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 502.818657][ T993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.837884][ T993] usb 8-1: Product: syz [ 502.849178][ T993] usb 8-1: Manufacturer: syz [ 502.865972][ T993] usb 8-1: SerialNumber: syz [ 502.893068][ T5965] usb 1-1: device descriptor read/64, error -71 [ 503.127077][ T993] usb 8-1: USB disconnect, device number 9 [ 503.169168][ T5965] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 503.265347][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1510'. [ 503.348438][ T5965] usb 1-1: device descriptor read/64, error -71 [ 503.670889][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 504.328236][ T5965] usb usb1-port1: attempt power cycle [ 504.802864][ T5965] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 504.854848][ T5965] usb 1-1: device descriptor read/8, error -71 [ 505.362670][ T5965] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 505.475298][ T5965] usb 1-1: device descriptor read/8, error -71 [ 505.633193][ T5965] usb usb1-port1: unable to enumerate USB device [ 505.947324][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1522'. [ 507.691927][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 507.886085][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 507.910904][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 507.961214][ T10] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 507.996254][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 508.030868][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.070675][ T10] usb 1-1: Product: syz [ 508.090524][ T10] usb 1-1: Manufacturer: syz [ 508.123380][ T10] usb 1-1: SerialNumber: syz [ 508.470665][ T10] usb 1-1: USB disconnect, device number 57 [ 508.975976][ T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 509.132996][ T24] usb 4-1: device descriptor read/64, error -71 [ 509.404199][ T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 509.562943][ T24] usb 4-1: device descriptor read/64, error -71 [ 509.715034][ T24] usb usb4-port1: attempt power cycle [ 510.083553][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 510.977904][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 511.072375][ T24] usb 4-1: device descriptor read/8, error -71 [ 511.533404][ T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 511.607003][ T24] usb 4-1: device descriptor read/8, error -71 [ 511.763072][ T24] usb usb4-port1: unable to enumerate USB device [ 512.733233][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 512.924585][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 512.957164][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 513.007818][ T24] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 513.049953][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.092521][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.139322][ T24] usb 4-1: Product: syz [ 513.164431][ T24] usb 4-1: Manufacturer: syz [ 513.184105][ T24] usb 4-1: SerialNumber: syz [ 513.515098][ T24] usb 4-1: USB disconnect, device number 48 [ 514.626879][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1549'. [ 516.113403][ T6032] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 516.286128][ T6032] usb 7-1: device descriptor read/64, error -71 [ 517.202903][ T6032] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 517.383323][ T6032] usb 7-1: device descriptor read/64, error -71 [ 517.554242][ T6032] usb usb7-port1: attempt power cycle [ 517.953691][ T6032] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 518.038273][ T6032] usb 7-1: device descriptor read/8, error -71 [ 519.153445][ T6032] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 519.358504][ T6032] usb 7-1: device descriptor read/8, error -71 [ 519.505113][ T6032] usb usb7-port1: unable to enumerate USB device [ 519.593565][T10454] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 519.601265][ T5965] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 519.784409][T10454] usb 4-1: Using ep0 maxpacket: 32 [ 519.794976][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 519.811076][T10454] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 519.840987][ T5965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.866842][T10454] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 519.889789][ T5965] usb 1-1: config 0 has no interfaces? [ 519.912469][T10454] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 519.928099][ T5965] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 519.950273][T10454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.963335][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.984363][T10454] usb 4-1: Product: syz [ 519.993252][ T5965] usb 1-1: Product: syz [ 520.008324][T10454] usb 4-1: Manufacturer: syz [ 520.017988][ T5965] usb 1-1: Manufacturer: syz [ 520.028363][T10454] usb 4-1: SerialNumber: syz [ 520.043450][ T5965] usb 1-1: SerialNumber: syz [ 520.123019][ T5965] usb 1-1: config 0 descriptor?? [ 520.300573][T10454] usb 4-1: USB disconnect, device number 49 [ 521.776015][ T6032] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 521.973835][ T6032] usb 4-1: Using ep0 maxpacket: 32 [ 522.012046][ T6032] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 522.067744][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.182183][ T6032] usb 4-1: selecting invalid altsetting 3 [ 522.213823][ T6032] comedi comedi5: could not set alternate setting 3 in high speed [ 522.247008][ T6032] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 522.487070][ T6032] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 522.578623][T10972] program syz.7.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.436816][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.446506][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.028360][ T6032] usb 1-1: USB disconnect, device number 58 [ 524.470561][T10980] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 524.512593][T10980] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 524.523702][T10980] overlayfs: failed to look up (tracing) for ino (-66) [ 524.703433][ T6032] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 524.864061][ T6032] usb 1-1: device descriptor read/64, error -71 [ 525.103448][ T24] usb 4-1: USB disconnect, device number 50 [ 525.232900][ T6032] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 525.373676][ T6032] usb 1-1: device descriptor read/64, error -71 [ 525.504734][ T6032] usb usb1-port1: attempt power cycle [ 525.632917][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 525.823952][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 525.864490][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 525.888663][ T6032] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 525.913472][ T24] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 525.944276][ T6032] usb 1-1: device descriptor read/8, error -71 [ 525.954748][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 525.982993][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.001257][ T24] usb 4-1: Product: syz [ 526.015579][ T24] usb 4-1: Manufacturer: syz [ 526.036592][ T24] usb 4-1: SerialNumber: syz [ 526.204737][ T6032] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 526.255566][ T6032] usb 1-1: device descriptor read/8, error -71 [ 526.292836][ T24] usb 4-1: USB disconnect, device number 51 [ 526.417094][ T6032] usb usb1-port1: unable to enumerate USB device [ 528.973603][ T6032] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 529.194038][ T6032] usb 1-1: Using ep0 maxpacket: 16 [ 529.242245][ T6032] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.288131][ T6032] usb 1-1: config 0 has no interfaces? [ 529.327159][ T6032] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 529.363243][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.393707][ T6032] usb 1-1: Product: syz [ 529.411944][ T6032] usb 1-1: Manufacturer: syz [ 529.435756][ T6032] usb 1-1: SerialNumber: syz [ 529.491020][ T6032] usb 1-1: config 0 descriptor?? [ 530.032332][T11017] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 530.068183][T11017] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 530.078321][T11017] overlayfs: failed to look up (tracing) for ino (-66) [ 531.510028][ T6032] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 531.732849][ T6032] usb 6-1: Using ep0 maxpacket: 32 [ 531.790489][ T6032] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 531.840747][ T6032] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 531.909734][ T6032] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 531.951895][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.994045][ T6032] usb 6-1: Product: syz [ 532.009816][ T6032] usb 6-1: Manufacturer: syz [ 532.031952][ T6032] usb 6-1: SerialNumber: syz [ 532.069999][ T5965] usb 1-1: USB disconnect, device number 63 [ 532.303060][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 532.337667][ T6032] usb 6-1: USB disconnect, device number 12 [ 532.560852][ T10] usb 7-1: device descriptor read/64, error -71 [ 532.815439][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 532.975951][ T10] usb 7-1: device descriptor read/64, error -71 [ 533.114815][ T10] usb usb7-port1: attempt power cycle [ 533.422903][ T5938] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 533.492860][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 533.533711][ T10] usb 7-1: device descriptor read/8, error -71 [ 533.597161][ T5938] usb 6-1: device descriptor read/64, error -71 [ 533.805968][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 533.840330][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1599'. [ 533.856537][ T5938] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 533.878019][ T10] usb 7-1: device descriptor read/8, error -71 [ 533.993149][ T10] usb usb7-port1: unable to enumerate USB device [ 534.013606][ T5938] usb 6-1: device descriptor read/64, error -71 [ 534.143327][ T5938] usb usb6-port1: attempt power cycle [ 534.514065][ T5938] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 534.564857][ T5938] usb 6-1: device descriptor read/8, error -71 [ 534.814554][ T5938] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 534.865380][ T5938] usb 6-1: device descriptor read/8, error -71 [ 534.993329][ T5938] usb usb6-port1: unable to enumerate USB device [ 535.715615][ T5938] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 535.785505][T11068] siw: device registration error -23 [ 536.103046][ T5938] usb 7-1: Using ep0 maxpacket: 16 [ 536.114038][ T5938] usb 7-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 536.142286][ T5938] usb 7-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 536.161200][ T5938] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 536.177272][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.185641][ T5938] usb 7-1: Product: syz [ 536.189908][ T5938] usb 7-1: Manufacturer: syz [ 536.224624][ T5938] usb 7-1: SerialNumber: syz [ 536.644086][ T6032] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 536.700183][ T808] usb 7-1: USB disconnect, device number 14 [ 536.944646][ T6032] usb 6-1: Using ep0 maxpacket: 32 [ 536.961894][ T6032] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 536.993362][ T6032] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 537.020370][ T6032] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 537.036903][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.050171][ T6032] usb 6-1: Product: syz [ 537.058962][ T6032] usb 6-1: Manufacturer: syz [ 537.079036][ T6032] usb 6-1: SerialNumber: syz [ 537.332971][ T6032] usb 6-1: USB disconnect, device number 17 [ 537.608003][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 538.642937][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 538.802921][ T10] usb 4-1: device descriptor read/64, error -71 [ 539.067699][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 539.243317][ T10] usb 4-1: device descriptor read/64, error -71 [ 539.263529][ T5938] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 539.373744][ T10] usb usb4-port1: attempt power cycle [ 539.417523][ T5938] usb 6-1: device descriptor read/64, error -71 [ 539.684483][ T5938] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 539.736350][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 539.805606][ T10] usb 4-1: device descriptor read/8, error -71 [ 539.859059][ T5938] usb 6-1: device descriptor read/64, error -71 [ 539.927447][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1622'. [ 539.993364][ T5938] usb usb6-port1: attempt power cycle [ 540.072888][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 540.127057][ T10] usb 4-1: device descriptor read/8, error -71 [ 540.253242][ T10] usb usb4-port1: unable to enumerate USB device [ 540.362893][ T5938] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 540.406836][ T5938] usb 6-1: device descriptor read/8, error -71 [ 540.664295][ T5938] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 540.704028][ T5938] usb 6-1: device descriptor read/8, error -71 [ 540.823313][ T5938] usb usb6-port1: unable to enumerate USB device [ 541.592928][ T5938] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 541.773481][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 541.787032][ T5938] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 541.811234][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.868244][ T5938] usb 7-1: selecting invalid altsetting 3 [ 541.887257][ T5938] comedi comedi5: could not set alternate setting 3 in high speed [ 541.915281][ T5938] usbduxsigma 7-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 541.941541][ T5938] usbduxsigma 7-1:128.0: probe with driver usbduxsigma failed with error -22 [ 542.280088][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.290634][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.632628][T11140] loop7: detected capacity change from 0 to 8192 [ 542.743250][ T5938] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 542.894503][ T5938] usb 6-1: device descriptor read/64, error -71 [ 543.173344][ T5938] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 543.363220][ T5938] usb 6-1: device descriptor read/64, error -71 [ 544.071970][ T5938] usb usb6-port1: attempt power cycle [ 544.419488][ T808] usb 7-1: USB disconnect, device number 15 [ 544.514155][ T5938] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 544.578363][ T5938] usb 6-1: device descriptor read/8, error -71 [ 544.920590][T11171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.927908][T11171] IPv6: NLM_F_CREATE should be set when creating new route [ 544.935217][T11171] IPv6: NLM_F_CREATE should be set when creating new route [ 544.942449][T11171] IPv6: NLM_F_CREATE should be set when creating new route [ 544.952997][ T5938] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 545.877352][ T5938] usb 6-1: device descriptor read/8, error -71 [ 546.004883][ T5938] usb usb6-port1: unable to enumerate USB device [ 546.758385][ T808] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 547.174627][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 547.199434][ T808] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 547.235807][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.272023][T11203] 9p: Bad value for 'rfdno' [ 547.304276][ T808] usb 6-1: selecting invalid altsetting 3 [ 547.314793][ T808] comedi comedi5: could not set alternate setting 3 in high speed [ 547.331642][ T808] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 547.347990][ T808] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 547.456797][ T30] audit: type=1326 audit(1773715616.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.3.1662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ebe99c799 code=0x0 [ 547.703483][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.713738][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.413587][T11240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.420847][T11240] IPv6: NLM_F_CREATE should be set when creating new route [ 549.428202][T11240] IPv6: NLM_F_CREATE should be set when creating new route [ 549.435471][T11240] IPv6: NLM_F_CREATE should be set when creating new route [ 549.978370][ T24] usb 6-1: USB disconnect, device number 26 [ 550.207122][T11244] loop5: detected capacity change from 0 to 512 [ 551.525436][T10454] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 551.574453][T11276] loop3: detected capacity change from 0 to 512 [ 551.692859][T10454] usb 6-1: Using ep0 maxpacket: 32 [ 551.711542][T10454] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 551.742443][T10454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.790896][T10454] usb 6-1: selecting invalid altsetting 3 [ 551.807087][T10454] comedi comedi5: could not set alternate setting 3 in high speed [ 551.832076][T10454] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 551.876864][T10454] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 552.256747][T11283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.270623][T11283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.403376][T11287] loop6: detected capacity change from 0 to 16 [ 552.487482][T11287] erofs (device loop6): mounted with root inode @ nid 36. [ 553.226750][T11299] loop3: detected capacity change from 0 to 8192 [ 553.382834][T11299] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 553.439153][T11304] kvm: user requested TSC rate below hardware speed [ 553.439258][T11299] FAT-fs (loop3): Filesystem has been set read-only [ 553.689967][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1704'. [ 553.800755][T11314] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.031633][T11310] bridge_slave_0: left allmulticast mode [ 554.038317][T11310] bridge_slave_0: left promiscuous mode [ 554.047006][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.080451][T11310] bridge_slave_1: left allmulticast mode [ 554.096191][T11310] bridge_slave_1: left promiscuous mode [ 554.102326][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.129177][T11310] bond0: (slave bond_slave_0): Releasing backup interface [ 554.147670][T11310] bond0: (slave bond_slave_1): Releasing backup interface [ 554.179257][T11310] team0: Port device team_slave_0 removed [ 554.215427][T11310] team0: Port device team_slave_1 removed [ 554.224817][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.232548][T11310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.248101][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.256443][T11310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.268877][T11310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.386782][ T24] usb 6-1: USB disconnect, device number 27 [ 555.662989][T10454] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 555.844632][T10454] usb 6-1: Using ep0 maxpacket: 32 [ 555.874372][T10454] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 555.925728][T10454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.017739][T10454] usb 6-1: selecting invalid altsetting 3 [ 556.037949][T10454] comedi comedi5: could not set alternate setting 3 in high speed [ 556.071803][T10454] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 556.097675][T10454] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 556.471414][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.480503][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.298413][T11399] loop7: detected capacity change from 0 to 128 [ 557.391239][ T30] audit: type=1800 audit(1773715626.104:3): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1738" name="file2" dev="loop7" ino=1048622 res=0 errno=0 [ 557.923667][T11413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.930975][T11413] IPv6: NLM_F_CREATE should be set when creating new route [ 557.938327][T11413] IPv6: NLM_F_CREATE should be set when creating new route [ 557.945633][T11413] IPv6: NLM_F_CREATE should be set when creating new route [ 558.523328][T10454] usb 6-1: USB disconnect, device number 28 [ 558.979201][T11432] loop6: detected capacity change from 0 to 512 [ 559.644763][ T6032] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 559.653148][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 559.813664][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 559.819765][ T6032] usb 4-1: Using ep0 maxpacket: 32 [ 559.831026][ T24] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 559.841435][ T6032] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 559.852333][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.860546][ T6032] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 559.886083][ T6032] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 559.908156][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.922241][ T24] usb 7-1: selecting invalid altsetting 3 [ 559.937962][ T6032] usb 4-1: Product: syz [ 559.948435][ T6032] usb 4-1: Manufacturer: syz [ 559.954754][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 559.966668][ T6032] usb 4-1: SerialNumber: syz [ 559.971341][ T24] usbduxsigma 7-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 560.010401][ T24] usbduxsigma 7-1:128.0: probe with driver usbduxsigma failed with error -22 [ 560.282875][ T6032] usb 4-1: USB disconnect, device number 56 [ 560.368317][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.379162][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.338588][T11496] program syz.3.1774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.505160][T11500] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 561.511731][T11500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.519620][T11500] vhci_hcd vhci_hcd.0: Device attached [ 561.834102][T10454] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 562.383824][ T5965] usb 7-1: USB disconnect, device number 16 [ 562.426597][T11501] vhci_hcd: connection reset by peer [ 562.542886][ T144] vhci_hcd vhci_hcd.7: stop threads [ 562.626777][ T144] vhci_hcd vhci_hcd.7: release socket [ 562.752343][ T144] vhci_hcd vhci_hcd.7: disconnect device [ 562.915776][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.953130][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.222147][T11514] binfmt_misc: register: failed to install interpreter file ./file0 [ 563.473000][ T5965] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 563.643150][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 563.660514][ T5965] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 563.686958][ T5965] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 563.716977][ T5965] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 563.734741][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.752612][ T5965] usb 6-1: Product: syz [ 563.761678][ T5965] usb 6-1: Manufacturer: syz [ 563.772599][ T5965] usb 6-1: SerialNumber: syz [ 564.021525][ T5965] usb 6-1: USB disconnect, device number 29 [ 564.562961][ T5965] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 564.732826][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 564.757456][ T5965] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 564.783415][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.866978][ T5965] usb 1-1: selecting invalid altsetting 3 [ 564.887684][ T5965] comedi comedi5: could not set alternate setting 3 in high speed [ 564.910217][ T5965] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 564.951456][ T5965] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 564.968342][T11504] Bluetooth: hci2: command 0x0406 tx timeout [ 565.384254][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.393112][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.437635][T11548] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 565.444208][T11548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.452707][T11548] vhci_hcd vhci_hcd.0: Device attached [ 566.209750][T11549] vhci_hcd: connection closed [ 566.211189][ T1156] vhci_hcd vhci_hcd.7: stop threads [ 566.319380][ T1156] vhci_hcd vhci_hcd.7: release socket [ 566.400644][ T1156] vhci_hcd vhci_hcd.7: disconnect device [ 567.195749][T10454] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 567.375890][ T808] usb 1-1: USB disconnect, device number 64 [ 567.879120][T11572] loop0: detected capacity change from 0 to 128 [ 567.913670][ T808] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 568.136411][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 568.219644][ T808] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 568.309801][T11578] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 568.316389][T11578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.328655][T11578] vhci_hcd vhci_hcd.0: Device attached [ 568.374137][ T808] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 568.559306][ T808] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 568.723980][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.756039][ T24] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 568.848594][ T808] usb 4-1: Product: syz [ 568.898231][ T808] usb 4-1: Manufacturer: syz [ 568.966376][ T808] usb 4-1: SerialNumber: syz [ 569.008243][T11579] vhci_hcd: connection reset by peer [ 569.114093][ T7493] vhci_hcd vhci_hcd.5: stop threads [ 569.180475][ T7493] vhci_hcd vhci_hcd.5: release socket [ 569.275727][ T7493] vhci_hcd vhci_hcd.5: disconnect device [ 569.554675][ T808] usb 4-1: USB disconnect, device number 57 [ 570.086936][T11504] Bluetooth: hci6: command 0x0406 tx timeout [ 570.102501][T11594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 570.233296][ T5965] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 570.415269][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 570.434245][ T5965] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 570.452782][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.491754][T11603] loop7: detected capacity change from 0 to 512 [ 570.567776][ T5965] usb 6-1: selecting invalid altsetting 3 [ 570.590037][ T5965] comedi comedi5: could not set alternate setting 3 in high speed [ 570.600530][ T5965] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 570.618075][ T5965] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 570.619553][ T6065] udevd[6065]: setting mode of /dev/comedi5 to 020600 failed: No such file or directory [ 570.679562][ T6065] udevd[6065]: setting owner of /dev/comedi5 to uid=0, gid=0 failed: No such file or directory [ 571.096905][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.105841][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.398685][T11612] program syz.7.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.162832][ T10] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 572.312877][ T10] usb 1-1: device descriptor read/64, error -71 [ 572.496446][ T5854] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 572.564922][ T10] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 572.673002][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 572.700006][ T5854] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 572.727820][ T5854] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 572.730352][ T10] usb 1-1: device descriptor read/64, error -71 [ 572.758561][ T5854] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 572.776860][T11628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.793568][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.818891][ T5854] usb 8-1: Product: syz [ 572.832880][ T5854] usb 8-1: Manufacturer: syz [ 572.844714][ T5854] usb 8-1: SerialNumber: syz [ 572.886286][ T10] usb usb1-port1: attempt power cycle [ 573.122027][ T808] usb 6-1: USB disconnect, device number 30 [ 573.136421][ T5854] usb 8-1: USB disconnect, device number 10 [ 573.242950][ T10] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 573.290486][ T10] usb 1-1: device descriptor read/8, error -71 [ 573.543935][ T10] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 573.594340][ T10] usb 1-1: device descriptor read/8, error -71 [ 573.715842][ T10] usb usb1-port1: unable to enumerate USB device [ 573.994999][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 574.314333][T11651] program syz.3.1831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.487545][T11653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 574.734473][ T5854] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 574.913497][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 574.934020][ T5854] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 574.974657][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.055804][ T5854] usb 6-1: selecting invalid altsetting 3 [ 575.081202][ T5854] comedi comedi5: could not set alternate setting 3 in high speed [ 575.108659][ T5854] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 575.156998][ T5854] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 575.178060][ T5853] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 575.195444][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 575.230595][T11664] nbd: socks must be embedded in a SOCK_ITEM attr [ 575.346385][ T5965] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 575.512832][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 575.536855][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.545966][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.748216][ T5965] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 575.784325][ T5965] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 575.807772][ T5965] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.841434][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.861136][ T5965] usb 4-1: Product: syz [ 575.865545][ T5965] usb 4-1: Manufacturer: syz [ 575.875492][ T5965] usb 4-1: SerialNumber: syz [ 575.997894][ T6065] udevd[6065]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 576.017889][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 576.107513][ T5965] usb 4-1: USB disconnect, device number 58 [ 577.011441][T11697] program syz.0.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.594717][ T6032] usb 6-1: USB disconnect, device number 31 [ 577.761936][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 577.775538][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 577.775572][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.775588][ T5853] Workqueue: hci6 hci_rx_work [ 577.775626][ T5853] Call Trace: [ 577.775710][ T5853] [ 577.775721][ T5853] dump_stack_lvl+0xe8/0x150 [ 577.775789][ T5853] sysfs_create_dir_ns+0x271/0x2a0 [ 577.775824][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 577.775864][ T5853] ? do_raw_spin_unlock+0xf5/0x210 [ 577.775899][ T5853] kobject_add_internal+0x62b/0xd00 [ 577.775941][ T5853] kobject_add+0x163/0x240 [ 577.775977][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 577.776008][ T5853] ? _raw_spin_unlock+0x28/0x50 [ 577.776034][ T5853] ? get_device_parent+0x366/0x3a0 [ 577.776069][ T5853] device_add+0x408/0xb70 [ 577.776103][ T5853] hci_conn_add_sysfs+0xd5/0x210 [ 577.776131][ T5853] le_conn_complete_evt+0xf1d/0x1430 [ 577.776172][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 577.776201][ T5853] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 577.776233][ T5853] ? __pfx___mutex_lock+0x10/0x10 [ 577.776261][ T5853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 577.776287][ T5853] ? skb_pull_data+0xfb/0x200 [ 577.776326][ T5853] hci_le_conn_complete_evt+0x187/0x470 [ 577.776364][ T5853] hci_event_packet+0x7af/0x12c0 [ 577.776403][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 577.776434][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 577.776466][ T5853] ? kcov_remote_start+0x49a/0x7a0 [ 577.776495][ T5853] ? hci_send_to_monitor+0xe2/0x590 [ 577.776531][ T5853] hci_rx_work+0x3ee/0x1040 [ 577.776567][ T5853] ? process_one_work+0x8bb/0x1780 [ 577.776600][ T5853] process_one_work+0x9ab/0x1780 [ 577.776659][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 577.776692][ T5853] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.776740][ T5853] worker_thread+0xba8/0x11e0 [ 577.776789][ T5853] kthread+0x388/0x470 [ 577.776816][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 577.776834][ T5853] ? __pfx_kthread+0x10/0x10 [ 577.776863][ T5853] ret_from_fork+0x51e/0xb90 [ 577.776899][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 577.776930][ T5853] ? __switch_to+0xc7d/0x1450 [ 577.776963][ T5853] ? __pfx_kthread+0x10/0x10 [ 577.776992][ T5853] ret_from_fork_asm+0x1a/0x30 [ 577.777034][ T5853] [ 577.777105][ T5853] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 578.019631][ T5853] Bluetooth: hci6: failed to register connection device [ 578.065305][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1854'. [ 578.099420][T11706] nbd: socks must be embedded in a SOCK_ITEM attr [ 578.424731][T11715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 578.786975][T11715] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 578.798706][T11715] overlayfs: failed to look up (tracing) for ino (-66) [ 579.889752][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 579.955325][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 580.099572][T11504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.111914][T11504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.122273][T11504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.137894][T11504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.145729][T11504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.377885][T11721] xfrm0 speed is unknown, defaulting to 1000 [ 580.483024][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 580.652808][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 580.678168][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 580.719124][ T10] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 580.762223][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 580.798369][T11721] chnl_net:caif_netlink_parms(): no params data found [ 580.799559][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.838211][ T10] usb 4-1: Product: syz [ 580.853739][ T10] usb 4-1: Manufacturer: syz [ 580.862235][ T10] usb 4-1: SerialNumber: syz [ 581.117404][ T10] usb 4-1: USB disconnect, device number 59 [ 581.340654][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.348305][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.356148][T11721] bridge_slave_0: entered allmulticast mode [ 581.366139][T11721] bridge_slave_0: entered promiscuous mode [ 581.380138][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.397642][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.406528][T11721] bridge_slave_1: entered allmulticast mode [ 581.419909][T11721] bridge_slave_1: entered promiscuous mode [ 581.620965][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.655735][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.669037][T11755] program syz.5.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.001622][T11721] team0: Port device team_slave_0 added [ 582.021759][T11721] team0: Port device team_slave_1 added [ 582.094349][T11754] loop7: detected capacity change from 0 to 8192 [ 582.094950][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.110272][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.155589][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.171285][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.180640][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.210347][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.242997][T11504] Bluetooth: hci0: command tx timeout [ 582.322863][ T5977] loop7: p1 p2 p3 p4[EZD] [ 582.346503][ T5977] loop7: p1 start 16384 is beyond EOD, truncated [ 582.423340][ T5977] loop7: p3 start 67108864 is beyond EOD, truncated [ 582.453088][ T5977] loop7: p4 size 33554432 extends beyond EOD, truncated [ 582.501037][T11721] hsr_slave_0: entered promiscuous mode [ 582.514794][T11754] loop7: p1 p2 p3 p4[EZD] [ 582.519905][T11762] loop3: detected capacity change from 0 to 136 [ 582.527766][T11754] loop7: p1 start 16384 is beyond EOD, truncated [ 582.537644][T11721] hsr_slave_1: entered promiscuous mode [ 582.558180][T11721] debugfs: 'hsr0' already exists in 'hsr' [ 582.566355][T11721] Cannot create hsr debugfs directory [ 582.572483][T11754] loop7: p3 start 67108864 is beyond EOD, truncated [ 582.606362][T11754] loop7: p4 size 33554432 extends beyond EOD, truncated [ 582.620328][T11762] Attempt to read inode for relocated directory [ 583.025035][T11770] loop3: detected capacity change from 0 to 512 [ 583.134364][ T6030] udevd[6030]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 583.146658][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 583.190000][ T6030] udevd[6030]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 583.200268][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 583.596641][T11778] overlay: filesystem on ./file0 not supported as upperdir [ 584.073594][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 584.106139][T11787] program syz.5.1878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.292913][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 584.318069][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 584.362821][T11504] Bluetooth: hci0: command tx timeout [ 584.372353][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 584.386687][ T24] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 584.400863][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 584.416753][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.434102][ T24] usb 1-1: Product: syz [ 584.438888][ T24] usb 1-1: Manufacturer: syz [ 584.444248][ T24] usb 1-1: SerialNumber: syz [ 584.480126][T11721] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 584.522885][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 584.533520][T11721] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 584.549872][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.570693][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.590713][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.601124][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.674372][ T24] usb 1-1: USB disconnect, device number 69 [ 584.753198][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.777032][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.787639][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.796003][ T10] usb 8-1: Manufacturer: syz [ 584.821270][ T10] usb 8-1: config 0 descriptor?? [ 584.834267][T11721] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.862556][T11721] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 584.920238][T11799] loop3: detected capacity change from 0 to 512 [ 585.174342][ T10] rc_core: IR keymap rc-hauppauge not found [ 585.195141][ T10] Registered IR keymap rc-empty [ 585.200244][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.224256][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.255192][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 585.288905][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 585.348942][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.393216][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.425338][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.445754][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.483455][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.516111][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.563512][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.593061][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.625704][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.654032][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.667734][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.673155][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 585.711399][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 585.741255][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 585.783637][ T10] usb 8-1: USB disconnect, device number 11 [ 585.799170][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.932652][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.982157][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.031947][T11721] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.058729][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.066088][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.090137][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.097452][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.403044][T11504] Bluetooth: hci0: command tx timeout [ 586.490766][T11504] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 586.491866][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1895'. [ 586.534321][T11833] nbd: socks must be embedded in a SOCK_ITEM attr [ 586.789926][ T6065] udevd[6065]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 586.830202][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 587.007948][ T13] bond0 (unregistering): Released all slaves [ 587.036974][ T13] bond1 (unregistering): Released all slaves [ 587.053330][T10454] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 587.423971][T10454] usb 6-1: Using ep0 maxpacket: 32 [ 587.440214][T11844] program syz.7.1898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.457547][T10454] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 587.474104][T10454] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 587.505402][T10454] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 587.514885][T10454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.538312][T10454] usb 6-1: Product: syz [ 587.552122][T10454] usb 6-1: Manufacturer: syz [ 587.573873][T10454] usb 6-1: SerialNumber: syz [ 587.847270][T10454] usb 6-1: USB disconnect, device number 32 [ 588.099331][T11721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.192532][ T13] hsr_slave_0: left promiscuous mode [ 588.209327][ T13] hsr_slave_1: left promiscuous mode [ 588.232193][ T13] veth1_macvtap: left promiscuous mode [ 588.245908][ T13] veth0_macvtap: left promiscuous mode [ 588.258686][ T13] veth1_vlan: left promiscuous mode [ 588.268131][ T13] veth0_vlan: left promiscuous mode [ 588.495386][ T5853] Bluetooth: hci0: command tx timeout [ 588.788751][T11890] program syz.7.1906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.168774][T11896] program syz.7.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.787693][T11908] loop3: detected capacity change from 0 to 512 [ 590.122986][ T808] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 590.314041][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 590.347292][ T808] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 590.366749][T11929] program syz.3.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.385920][ T808] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 590.421054][ T808] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.454583][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.463323][T11721] veth0_vlan: entered promiscuous mode [ 590.486451][ T808] usb 1-1: Product: syz [ 590.497723][ T808] usb 1-1: Manufacturer: syz [ 590.506351][ T808] usb 1-1: SerialNumber: syz [ 590.514417][T11931] program syz.7.1918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.556742][T11721] veth1_vlan: entered promiscuous mode [ 590.708151][T11721] veth0_macvtap: entered promiscuous mode [ 590.758778][T11721] veth1_macvtap: entered promiscuous mode [ 590.815470][ T808] usb 1-1: USB disconnect, device number 70 [ 590.898517][T11721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.960360][T11721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.012511][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.023255][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.032345][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.070727][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.644290][T11961] 9pnet_fd: Insufficient options for proto=fd [ 591.711040][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.750887][T11967] program syz.5.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.761232][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.999930][T11972] program syz.0.1929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.889574][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.389324][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.502858][ T5854] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 593.689886][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 593.714053][ T5854] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 593.744287][ T5854] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 593.791639][ T5854] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 593.814684][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.829341][T12005] 9pnet_fd: Insufficient options for proto=fd [ 593.841963][ T5854] usb 1-1: Product: syz [ 593.852386][ T5854] usb 1-1: Manufacturer: syz [ 593.859595][ T5854] usb 1-1: SerialNumber: syz [ 594.067992][T12012] program syz.7.1940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.115593][ T5854] usb 1-1: USB disconnect, device number 71 [ 594.289912][T12018] program syz.8.1944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.533686][T12030] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4008640512 (8017281024 ns) > initial count (10 ns). Using initial count to start timer. [ 594.913799][T12039] 9pnet_fd: Insufficient options for proto=fd [ 595.447801][T12058] program syz.0.1956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.668384][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1960'. [ 595.882916][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 595.949178][T12078] 9pnet_fd: Insufficient options for proto=fd [ 596.064238][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 596.111392][ T10] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 596.147304][ T10] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 596.200654][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 596.236007][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.259944][ T10] usb 8-1: Product: syz [ 596.279853][ T10] usb 8-1: Manufacturer: syz [ 596.299008][ T10] usb 8-1: SerialNumber: syz [ 596.393587][T12096] program syz.0.1971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.546061][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 596.574599][ T10] usb 8-1: USB disconnect, device number 12 [ 596.835729][T12109] loop5: detected capacity change from 0 to 512 [ 597.319771][T12125] 9pnet_fd: Insufficient options for proto=fd [ 597.678755][ T5853] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 597.723749][T12136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 601.257332][ T6065] udevd[6065]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.312338][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.453124][ T5911] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 601.585708][T12162] 9p: Bad value for 'rfdno' [ 601.603431][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 601.626130][ T5911] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 601.649899][ T5911] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 601.672618][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 601.692435][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.732114][ T5911] usb 4-1: Product: syz [ 601.751068][ T5911] usb 4-1: Manufacturer: syz [ 601.767925][ T5911] usb 4-1: SerialNumber: syz [ 601.940863][T12180] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4008640512 (8017281024 ns) > initial count (10 ns). Using initial count to start timer. [ 601.965265][T12178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.008339][ T5911] usb 4-1: USB disconnect, device number 60 [ 602.487753][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 602.498344][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 602.498374][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.498390][ T5853] Workqueue: hci5 hci_rx_work [ 602.498420][ T5853] Call Trace: [ 602.498430][ T5853] [ 602.498440][ T5853] dump_stack_lvl+0xe8/0x150 [ 602.498479][ T5853] sysfs_create_dir_ns+0x271/0x2a0 [ 602.498525][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.498560][ T5853] ? do_raw_spin_unlock+0xf5/0x210 [ 602.498599][ T5853] kobject_add_internal+0x62b/0xd00 [ 602.498640][ T5853] kobject_add+0x163/0x240 [ 602.498676][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 602.498707][ T5853] ? _raw_spin_unlock+0x3f/0x50 [ 602.498735][ T5853] ? get_device_parent+0x366/0x3a0 [ 602.498770][ T5853] device_add+0x408/0xb70 [ 602.498805][ T5853] hci_conn_add_sysfs+0xd5/0x210 [ 602.498834][ T5853] le_conn_complete_evt+0xf1d/0x1430 [ 602.498878][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.498909][ T5853] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 602.498940][ T5853] ? __pfx___mutex_lock+0x10/0x10 [ 602.498969][ T5853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.498996][ T5853] ? skb_pull_data+0xfb/0x200 [ 602.499035][ T5853] hci_le_conn_complete_evt+0x187/0x470 [ 602.499075][ T5853] hci_event_packet+0x7af/0x12c0 [ 602.499108][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.499139][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 602.499177][ T5853] ? hci_send_to_monitor+0xe2/0x590 [ 602.499215][ T5853] hci_rx_work+0x3ee/0x1040 [ 602.499253][ T5853] ? process_one_work+0x8bb/0x1780 [ 602.499287][ T5853] process_one_work+0x9ab/0x1780 [ 602.499346][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 602.499378][ T5853] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.499426][ T5853] worker_thread+0xba8/0x11e0 [ 602.499477][ T5853] kthread+0x388/0x470 [ 602.499514][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 602.499534][ T5853] ? __pfx_kthread+0x10/0x10 [ 602.499565][ T5853] ret_from_fork+0x51e/0xb90 [ 602.499603][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 602.499636][ T5853] ? __switch_to+0xc7d/0x1450 [ 602.499670][ T5853] ? __pfx_kthread+0x10/0x10 [ 602.499700][ T5853] ret_from_fork_asm+0x1a/0x30 [ 602.499741][ T5853] [ 602.499936][ T5853] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.785108][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2001'. [ 602.849921][ T5853] Bluetooth: hci5: failed to register connection device [ 606.133791][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 606.163321][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 606.392014][T12226] siw: device registration error -23 [ 606.989889][T12232] loop0: detected capacity change from 0 to 512 [ 607.312814][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 607.493803][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 607.512690][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 607.544146][ T10] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 607.579524][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.612853][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.641234][ T10] usb 4-1: Product: syz [ 607.657307][ T10] usb 4-1: Manufacturer: syz [ 607.676453][ T10] usb 4-1: SerialNumber: syz [ 607.853359][ T6032] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 607.964215][T12263] siw: device registration error -23 [ 608.054741][ T6032] usb 8-1: Using ep0 maxpacket: 8 [ 608.212149][ T6032] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.284274][ T6032] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 608.354956][ T10] usb 4-1: USB disconnect, device number 61 [ 608.451014][ T6032] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 608.492443][ T6032] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.518945][ T6032] usb 8-1: Product: syz [ 608.528542][T12267] program syz.8.2025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.541997][ T6032] usb 8-1: Manufacturer: syz [ 608.555588][ T6032] usb 8-1: SerialNumber: syz [ 608.607066][ T6032] usb 8-1: config 0 descriptor?? [ 608.958133][T11504] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 609.012271][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 609.678580][T12280] nbd: socks must be embedded in a SOCK_ITEM attr [ 610.968373][ T5911] usb 8-1: USB disconnect, device number 13 [ 612.411613][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.431661][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.872337][T12312] siw: device registration error -23 [ 613.732830][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 613.896144][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 613.907251][ T24] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 613.935474][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.006386][ T24] usb 4-1: selecting invalid altsetting 3 [ 614.019986][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 614.044065][ T24] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 614.112849][ T5965] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 614.139451][ T24] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 614.191049][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.201930][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.284164][T12350] fuse: Bad value for 'fd' [ 614.302930][ T5965] usb 8-1: Using ep0 maxpacket: 8 [ 614.323067][ T5965] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.359905][ T5965] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 614.380249][ T5965] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 614.416252][ T5965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.444546][ T5965] usb 8-1: Product: syz [ 614.453307][ T5965] usb 8-1: Manufacturer: syz [ 614.463552][ T5965] usb 8-1: SerialNumber: syz [ 614.479796][ T5965] usb 8-1: config 0 descriptor?? [ 614.663087][T12358] siw: device registration error -23 [ 615.910408][T12390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.917746][T12390] IPv6: NLM_F_CREATE should be set when creating new route [ 615.925083][T12390] IPv6: NLM_F_CREATE should be set when creating new route [ 615.932330][T12390] IPv6: NLM_F_CREATE should be set when creating new route [ 616.370075][T12401] fuse: Bad value for 'fd' [ 616.510267][ T808] usb 4-1: USB disconnect, device number 62 [ 616.819379][ T808] usb 8-1: USB disconnect, device number 14 [ 618.111968][T12433] fuse: Bad value for 'fd' [ 618.521751][T12444] siw: device registration error -23 [ 618.703083][ T5965] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 618.925478][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 618.951597][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.970209][ T5965] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 619.045421][ T5965] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 619.071370][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.092678][ T5965] usb 4-1: Product: syz [ 619.105739][ T5965] usb 4-1: Manufacturer: syz [ 619.120760][ T5965] usb 4-1: SerialNumber: syz [ 619.147281][ T5965] usb 4-1: config 0 descriptor?? [ 620.154045][ T5938] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 620.322936][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 620.333674][ T5938] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 620.344370][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.352445][ T5938] usb 1-1: Product: syz [ 620.357559][ T5938] usb 1-1: Manufacturer: syz [ 620.362560][ T5938] usb 1-1: SerialNumber: syz [ 620.429752][T12480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 620.686223][ T5938] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 620.761959][ T5938] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 620.773351][ T5938] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 620.783671][ T5938] usb 1-1: media controller created [ 620.806842][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.877754][ T5938] zl10353_read_register: readreg error (reg=127, ret==-71) [ 621.011175][ T5938] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 621.044385][ T5938] usb 1-1: USB disconnect, device number 72 [ 621.319506][ T10] usb 4-1: USB disconnect, device number 63 [ 622.188475][T12507] 9p: Could not find request transport: fd0x0000000000000006 [ 622.623841][ T5938] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 622.784144][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 622.808038][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 622.848715][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 622.868547][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.892786][ T5938] usb 1-1: Product: syz [ 622.897034][ T5938] usb 1-1: Manufacturer: syz [ 622.905225][ T5938] usb 1-1: SerialNumber: syz [ 622.934605][ T5938] usb 1-1: config 0 descriptor?? [ 623.178478][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 623.536416][T12531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.807343][T12540] 9p: Could not find request transport: fd0x0000000000000006 [ 623.882894][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 624.202799][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 624.215624][ T10] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 624.242869][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.280399][ T10] usb 8-1: selecting invalid altsetting 3 [ 624.292902][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 624.312824][ T10] usbduxsigma 8-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 624.339896][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.346514][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.349343][ T10] usbduxsigma 8-1:128.0: probe with driver usbduxsigma failed with error -22 [ 624.372012][T12554] Bluetooth: MGMT ver 1.23 [ 624.381709][T12554] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 625.073782][T12568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.315905][ T10] usb 1-1: USB disconnect, device number 73 [ 625.561503][T12574] 9pnet_fd: Insufficient options for proto=fd [ 625.981699][T12583] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 626.466464][T12592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4008640512 (8017281024 ns) > initial count (10 ns). Using initial count to start timer. [ 626.592272][T12600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.802876][ T6032] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 626.982774][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 627.004731][ T6032] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 627.029789][ T24] usb 8-1: USB disconnect, device number 15 [ 627.042175][ T6032] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 627.068067][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.095584][ T6032] usb 6-1: Product: syz [ 627.109768][ T6032] usb 6-1: Manufacturer: syz [ 627.124540][ T6032] usb 6-1: SerialNumber: syz [ 627.147821][ T6032] usb 6-1: config 0 descriptor?? [ 627.949946][T12632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.057336][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 628.529422][T12635] nbd: socks must be embedded in a SOCK_ITEM attr [ 629.512487][ T5938] usb 6-1: USB disconnect, device number 33 [ 631.981179][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2162'. [ 631.996598][ T7560] udevd[7560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.046752][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.262862][ T5938] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 632.604239][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 632.611316][ T5938] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 632.623595][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.969727][ T5938] usb 1-1: selecting invalid altsetting 3 [ 632.984576][ T5938] comedi comedi5: could not set alternate setting 3 in high speed [ 633.003145][ T5938] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 633.042501][ T5938] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 633.084015][ T6032] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 633.342867][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 633.392218][ T6032] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 633.431072][ T6032] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 633.452813][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.469936][ T6032] usb 6-1: Product: syz [ 633.490216][ T6032] usb 6-1: Manufacturer: syz [ 633.507610][ T6032] usb 6-1: SerialNumber: syz [ 633.583539][T12687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 633.619489][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2175'. [ 633.919649][T12691] nbd: socks must be embedded in a SOCK_ITEM attr [ 635.142898][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 635.399864][ T6032] usb 6-1: config 0 descriptor?? [ 635.625419][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 637.138912][ T5965] usb 1-1: USB disconnect, device number 74 [ 637.562843][ T5938] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 637.581803][ T6032] usb 6-1: USB disconnect, device number 34 [ 637.742775][ T5938] usb 8-1: Using ep0 maxpacket: 16 [ 637.789061][ T5938] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.860587][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.922235][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.540241][ T5938] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 638.550032][ T5938] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.590678][ T5938] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 638.635378][ T5938] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 638.676501][ T5938] usb 8-1: Manufacturer: syz [ 638.726962][ T5938] usb 8-1: config 0 descriptor?? [ 638.902125][T12748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 639.032879][ T5938] rc_core: IR keymap rc-hauppauge not found [ 639.063053][ T5965] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 639.088126][ T5938] Registered IR keymap rc-empty [ 639.102259][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.142880][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.282373][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 639.290071][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 639.305127][ T5965] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 639.319514][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input10 [ 639.333936][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.357573][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.399617][ T5965] usb 4-1: selecting invalid altsetting 3 [ 639.406024][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.413878][ T5965] comedi comedi5: could not set alternate setting 3 in high speed [ 639.422124][ T5965] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 639.436584][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.456766][ T5965] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 639.474373][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.503285][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.523577][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.553284][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.582983][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.613170][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.632913][ T5938] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 639.912244][ T5938] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 639.949955][ T5938] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 639.982147][ T5938] usb 8-1: USB disconnect, device number 16 [ 640.182841][ T5965] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 640.342952][ T5965] usb 6-1: Using ep0 maxpacket: 8 [ 640.378782][ T5965] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 640.436772][ T5965] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 641.081696][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.212800][ T5965] usb 6-1: Product: syz [ 641.223834][ T5965] usb 6-1: Manufacturer: syz [ 641.232784][ T5965] usb 6-1: SerialNumber: syz [ 641.249840][ T5965] usb 6-1: config 0 descriptor?? [ 641.289184][ T5965] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 641.688627][ T5965] gspca_zc3xx: reg_w_i err -71 [ 641.947533][T12790] program syz.8.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.483159][ T5965] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 642.507306][ T5965] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 642.520447][ T5965] usb 6-1: USB disconnect, device number 35 [ 643.780393][ T808] usb 4-1: USB disconnect, device number 64 [ 644.340599][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 644.605490][ T5918] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 644.886635][T12828] nbd: socks must be embedded in a SOCK_ITEM attr [ 645.049208][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 645.299781][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 645.513907][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 645.738646][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.890243][ T5918] usb 6-1: Product: syz [ 646.017760][ T5918] usb 6-1: Manufacturer: syz [ 646.126741][ T5918] usb 6-1: SerialNumber: syz [ 646.816988][ T5918] usb 6-1: config 0 descriptor?? [ 647.671927][ T5918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 647.732844][ T5982] udevd[5982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 647.761829][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 648.214221][ T5918] gspca_zc3xx: reg_w_i err -110 [ 649.432341][T12870] 9p: Bad value for 'rfdno' [ 649.437213][ T5918] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 649.458061][ T5918] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 649.501608][ T5918] usb 6-1: USB disconnect, device number 36 [ 650.993873][ T5911] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 651.046051][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 651.224105][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 651.311984][ T5911] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 651.496210][ T5911] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 651.600588][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.694067][ T5911] usb 6-1: Product: syz [ 651.714237][T12898] nbd: socks must be embedded in a SOCK_ITEM attr [ 651.748835][ T5911] usb 6-1: Manufacturer: syz [ 651.824766][ T5911] usb 6-1: SerialNumber: syz [ 652.028094][ T5911] usb 6-1: config 0 descriptor?? [ 652.331775][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 652.773273][ T5911] gspca_zc3xx: reg_w_i err -71 [ 653.452820][ T5911] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 653.585359][ T5911] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 654.139219][ T5911] usb 6-1: USB disconnect, device number 37 [ 654.627615][ T6065] udevd[6065]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.666398][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.802665][T12914] 9p: Bad value for 'rfdno' [ 656.662108][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 656.944514][T12955] nbd: socks must be embedded in a SOCK_ITEM attr [ 660.206284][ T6065] udevd[6065]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 660.280672][ T5977] udevd[5977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 662.771726][T13053] siw: device registration error -23 [ 663.872291][T13075] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 665.053026][T13101] siw: device registration error -23 [ 665.365201][T13104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.857543][T13117] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 666.039264][ T808] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 666.902813][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 666.914498][ T808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 666.930098][ T808] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 666.957862][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.987422][ T808] usb 4-1: Product: syz [ 667.000626][ T808] usb 4-1: Manufacturer: syz [ 667.013448][ T808] usb 4-1: SerialNumber: syz [ 667.033587][ T808] usb 4-1: config 0 descriptor?? [ 667.054396][ T808] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 667.276223][T13146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.384980][T13151] siw: device registration error -23 [ 667.488919][ T808] gspca_zc3xx: reg_w_i err -71 [ 667.927321][T13150] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 668.102776][ T808] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 668.121804][ T808] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 668.176692][ T808] usb 4-1: USB disconnect, device number 65 [ 669.281761][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2361'. [ 669.294402][T13180] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 669.306443][T13180] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 669.315011][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.3.2363 Not tainted syzkaller #0 PREEMPT(full) [ 669.324411][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.334495][T13180] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 669.339656][T13180] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 45 ef e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 29 ef e4 fe 49 81 3c 24 40 28 09 8c [ 669.359308][T13180] RSP: 0018:ffffc90003ad7a68 EFLAGS: 00010206 [ 669.365484][T13180] RAX: 0000000000000009 RBX: ffff88807dff7600 RCX: 0000000000080000 [ 669.373482][T13180] RDX: ffffc90006dfa000 RSI: 000000000000066a RDI: 000000000000066b [ 669.381471][T13180] RBP: dffffc0000000000 R08: ffffffff824b05ea R09: ffffffff8e75d6a0 [ 669.389465][T13180] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 669.397462][T13180] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888028d9e600 [ 669.405458][T13180] FS: 00007f4ebf8fc6c0(0000) GS:ffff888125537000(0000) knlGS:0000000000000000 [ 669.414410][T13180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.421013][T13180] CR2: 0000200000003000 CR3: 0000000025ea2000 CR4: 00000000003526f0 [ 669.429018][T13180] Call Trace: [ 669.432326][T13180] [ 669.435289][T13180] fuse_parse_param+0x69b/0xa80 [ 669.440177][T13180] ? __pfx_fuse_parse_param+0x10/0x10 [ 669.445577][T13180] ? static_key_count+0x41/0x70 [ 669.450453][T13180] vfs_parse_fs_param+0x1a9/0x420 [ 669.455500][T13180] vfs_parse_monolithic_sep+0x283/0x360 [ 669.461066][T13180] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 669.466714][T13180] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 669.472798][T13180] ? alloc_fs_context+0x9e9/0xd50 [ 669.477845][T13180] do_new_mount+0x304/0xd30 [ 669.482369][T13180] ? apparmor_capable+0x126/0x170 [ 669.487412][T13180] ? security_capable+0x7e/0x2c0 [ 669.492402][T13180] ? __pfx_do_new_mount+0x10/0x10 [ 669.497474][T13180] ? ns_capable+0x89/0xe0 [ 669.501838][T13180] ? path_mount+0x690/0x10e0 [ 669.506464][T13180] ? user_path_at+0xd4/0x160 [ 669.511078][T13180] __se_sys_mount+0x31d/0x420 [ 669.515779][T13180] ? __pfx___se_sys_mount+0x10/0x10 [ 669.521008][T13180] ? __x64_sys_mount+0x20/0xc0 [ 669.525798][T13180] do_syscall_64+0x14d/0xf80 [ 669.530404][T13180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.536500][T13180] ? clear_bhb_loop+0x40/0x90 [ 669.541195][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.547110][T13180] RIP: 0033:0x7f4ebe99c799 [ 669.551557][T13180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.571191][T13180] RSP: 002b:00007f4ebf8fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 669.579644][T13180] RAX: ffffffffffffffda RBX: 00007f4ebec15fa0 RCX: 00007f4ebe99c799 [ 669.587640][T13180] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 669.595666][T13180] RBP: 00007f4ebea32c99 R08: 0000200000002140 R09: 0000000000000000 [ 669.603688][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.611680][T13180] R13: 00007f4ebec16038 R14: 00007f4ebec15fa0 R15: 00007ffc982b0608 [ 669.619703][T13180] [ 669.622752][T13180] Modules linked in: [ 669.627932][T13180] ---[ end trace 0000000000000000 ]--- [ 669.668290][T13180] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 669.673662][T13180] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 45 ef e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 29 ef e4 fe 49 81 3c 24 40 28 09 8c [ 669.695556][T13180] RSP: 0018:ffffc90003ad7a68 EFLAGS: 00010206 [ 669.705262][T13180] RAX: 0000000000000009 RBX: ffff88807dff7600 RCX: 0000000000080000 [ 669.713430][T13180] RDX: ffffc90006dfa000 RSI: 000000000000066a RDI: 000000000000066b [ 669.721716][T13180] RBP: dffffc0000000000 R08: ffffffff824b05ea R09: ffffffff8e75d6a0 [ 669.730417][T13180] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 669.738714][T13180] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888028d9e600 [ 669.746959][T13180] FS: 00007f4ebf8fc6c0(0000) GS:ffff888125537000(0000) knlGS:0000000000000000 [ 669.756638][T13180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.764121][T13180] CR2: 00007fc5e763dff8 CR3: 0000000025ea2000 CR4: 00000000003526f0 [ 669.772254][T13180] Kernel panic - not syncing: Fatal exception [ 669.778941][T13180] Kernel Offset: disabled [ 669.783270][T13180] Rebooting in 86400 seconds..