last executing test programs: 10.254151705s ago: executing program 2 (id=230): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6, 0x2, 0x1, 0x6, 0x0, [@private2]}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000f333c53c0800000001"], 0x4c}}, 0x4010010) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000005000000000000000000000950004e00000000018010000202070250000000000202020db1af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r7, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7d74bf29336e203d8bd062877f02652df501eee8", @ANYRES16=r9, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r4, 0x0) setreuid(0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x0, 0x7fffffff}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) 10.250046745s ago: executing program 4 (id=231): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x101, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 9.683936474s ago: executing program 2 (id=232): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="262f202cfe252b20253a5d5d2f2002"], 0xf) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @multicast2, @multicast1}, {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x400007, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5ca89a4e6354f05826e2564392c91c9816ec768216436f9dfd65c9419725422b56d4f00", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"623b580608005f00007559c38d00", "951b0c4d673e28b18bcf08ed0b7e3a12"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x40, 0x20, 0x9, 0x0, {{0x1b, 0x4, 0x1, 0x3c, 0x6c, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0x70, 0x0, 0x8, [0x3, 0x2, 0x1, 0x0, 0xfffffff6, 0xc, 0x9]}, @rr={0x7, 0x27, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010102]}, @end, @ssrr={0x89, 0xf, 0xf4, [@empty, @broadcast, @broadcast]}, @noop]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r9}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r11}], 0x1, 0x0, 0x0, 0x0) close(r10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x0, 0x2, {{0xa, 0x4, 0x0, 0x34, 0x28, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0xb, 0x38, [@broadcast, @loopback]}, @generic={0x7, 0x7, "a5080cd641"}]}}}}}) r12 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xbc}}, 0x8000) 9.681917555s ago: executing program 4 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, {}, {}, 0x0, 0x3502, 0x2, 0x1}}, 0xf0}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000001, 0x2, 0x1, 0x0, 0x4}) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 8.668416656s ago: executing program 4 (id=235): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r1, 0x0, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) dup(0xffffffffffffffff) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000200)={0x40, 0xc, 0x2, "8408"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r7 = socket$kcm(0x2d, 0x2, 0x0) (rerun: 64) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x11d, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x43, &(0x7f0000000300)={0x40, 0xa, 0x2, "fdff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.18968581s ago: executing program 4 (id=238): r0 = add_key(&(0x7f00000007c0)='big_key\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="d5", 0x1, 0xfffffffffffffffd) keyctl$reject(0x13, r0, 0x3, 0x5, 0xfffffffffffffff8) keyctl$read(0xb, r0, &(0x7f0000000880)=""/4096, 0x1000) 6.107789245s ago: executing program 0 (id=239): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2000006) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') write$binfmt_aout(r0, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0xfffffffffffffe4f, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000140)=[{0x5, 0x69, 0x0, 0x7ffefffd}]}) getpriority(0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="178be143e0028418740c74c4761439d79435bc8286e0e0ef1d1178bc7d5081dbbe8ab40db89c7f791208034f45d5ca5ed9754198a9418c461fefd198ed651697690a1c8fdd94346451dd4d0a9864a366e7948a7153b7dd2e25703551b507573ff9af994b6e65337361569e7d1f14d889d4bc46838d42b08f28948d92d35756c5c91d022b80b251ad", @ANYRESDEC=r1, @ANYRES64=r2], 0x20) (async) r3 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0x10000, r3, 0x10, {0x8000000000000000, 0x400000008}, 0x1}, 0x1) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) preadv(r3, &(0x7f00000033c0)=[{0x0}], 0x1, 0x6, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast1, 0xe}, 0x1c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000003e000701fefffffffcffffff017c000008004280040008000c0001800621f000800a00000c00028006001780b82f0000c7f7b8d60d19c42e12fac57287783451779d76f990f7081ed0566a75c6706ac0527c651dd594c576ba25ef1055d936aae076cb5f9c48080e79ae6a94fb5e350e95faa2d9f67df8aa0d304fca91fbc209f8562d65837e6b87127f47d3edaa53aef0e3f11d93830a8d5d4433827fbc29b17e1dd699f599b868437f1484fb6dad1077ea4dfcf0369e5c3306c180d213aa60ea9582a94bffca86e5321455d00d5a423a885c12b2643fe3e680a9456e57634c2496d7"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0x20000004) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000006000)=@req={0x28, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711, @my=0x1}}}) (async) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010) (async) writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1) 6.106266674s ago: executing program 4 (id=240): symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='mnt\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000011401"], 0x18}}, 0x0) syz_usb_connect(0x0, 0xe7a, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='mnt\x00', 0x400000, 0x11) statx(r2, &(0x7f00000002c0)='mnt/encrypted_dir\x00', 0x0, 0xaf7, &(0x7f00000001c0)) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x98, 0x4, 0x0, 0x4, r3}, &(0x7f00000000c0)=0x10) 5.614452453s ago: executing program 3 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250001000000000085100000faffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000000c0)={0x10004, 0x240, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98ba, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x0, 0x7, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x5, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffe, 0x5, 0x7, 0x4, 0x1, 0x9, 0x888f, 0x5, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffbfffb7, 0xfffffffffffffffa, 0x2, 0xd, 0x6, 0x24, 0x4000e6, 0x2000000000000ff, 0x5, 0x9, 0x66, 0x6, 0x0, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x24e, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0x100000000, 0x2, 0x4, 0x8ed, 0x80000001, 0x7, 0xdfd4, 0xfffb, 0x10, 0x20005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x35) 4.68778307s ago: executing program 2 (id=243): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x101, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 4.596793349s ago: executing program 1 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000200012800800010073c5830697d1697480140002800500050005000000820c000001000000c9e324db0793b3e811783771f9428cef7045e736557991fb14d5a376d01b2ff08d97cb10f0006f4143444b3e37f1b9248619289cdded4547b7216ad1a10be07d30562cd7fd4461c941c0a3ecd073b6ed8a3482ec832a57bbb61af1f5f7d4b3768b9cda588e3dec13ba1c1247bc71fe73a553e011f82c99c381db2306d434172a10dba60732c63609781415b51920d29fbe6cc6da3e8ab1ae65000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.383763565s ago: executing program 3 (id=245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x4000, 0x6, 0x4b, 0x9}, 'syz1\x00', 0x11}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) r4 = dup3(r3, r2, 0x80000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x800f, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x6, 0x9, 0x6, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x8, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x20000000, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0xe, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x24, 0x400, 0x80, 0x0, 0x5, 0x6, 0x401, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x4, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x2, 0x2, 0x4, 0xb, 0x4, 0x20000009, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x7fffffff], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7ffb, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x5, 0x101, 0x10000, 0x2000007, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x20000006, 0x80000000, 0x5, 0x10, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') read$FUSE(r4, &(0x7f0000002a00)={0x2020}, 0x2020) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) accept4(r5, &(0x7f0000000940)=@nl, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) 4.215575145s ago: executing program 2 (id=246): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x10, r0, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) 3.503030667s ago: executing program 1 (id=247): socket(0x840000000002, 0x5, 0xfa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) close(0x3) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x800000000}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100000000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(r3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0xa2, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x8d, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x2000004, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x100, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x405, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x5, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x2, 0xd, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket(0x840000000002, 0x5, 0xfa) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) close(0x3) (async) close(0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x800000000}) (async) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100000000000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) close(r3) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0xa2, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x8d, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x2000004, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x100, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x405, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x5, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x2, 0xd, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) 3.492399223s ago: executing program 3 (id=248): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x42, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x0, 0x200, 0xe81d, 0xfffffff9, 0x4000, 0xd, r3, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f0000000040)='./file0\x00') (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.227163059s ago: executing program 2 (id=249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x20}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x42, 0x8) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x440c0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) listen(0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x9, 0x8000200, 0x0, 0x7}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r5, r6) socket(0x400000000010, 0x3, 0x0) 2.991266767s ago: executing program 1 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r11, &(0x7f00000000c0)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r13, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8000, 0x700, 0x80000000, 0x7f, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @multicast1, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x6, [0x5, 0x6, 0x1]}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0x2e8, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xd, 0x46, 0x84, 0x7}, {0x3, 0x6, 0x6, 0x101}, {0x7fff, 0xab, 0x2, 0x8000}, {0x9, 0x5, 0x2, 0x54ba}, {0xffff, 0x10, 0x8, 0x7}, {0x7, 0xc, 0x7f, 0x1ff}, {0x3ff, 0x7f, 0x2, 0x3783d7c5}, {0xddfd, 0x0, 0xc, 0x7ff}, {0xa8, 0x6, 0x81, 0x8}, {0x3, 0x0, 0x4, 0x4}]}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r16, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, 0x0, 0x4004800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.964380427s ago: executing program 4 (id=251): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000110) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000200)={'dt2811\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0x5, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x53, 0x8, 0x6, 0x0, 0xffffeff8]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000186"], 0x0, 0x0, 0x0, 0x0}) 2.720169169s ago: executing program 3 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) pivot_root(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x100000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f500004d157e98ac1e0001ac1414aa03019078036100004600000000004000002f0009ac141410ac1414bb44440001000086dd00000002ffffffff00000000ac14143200000000000000000000004fe0000002000000007f00000100000000ac1414aa00000004e00000010000000090bce858ae8e3e10d01af3162d6a27013fbb2cf82160390b145eb49e68587281d53ceb06c1f917967b66bc25d777f70b26446591cde1fc424e5db9c8089fb1a6"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e800000000000000d5"}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2f0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x47}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x258, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1000, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x6, 0x0, {0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0x7, 0x55}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}, [{0xdd, 0x86, "b87d1a5f5d99dc361a0cfa0f5b33241770a8d8c2bbd74b8d27fe33ffd102491190be72eed64858813a550b3116881544736616ff3db690908e558cb8d472f1e9cf925de906bbc3a7047ff6c56104f10f7590f6bf43cc8ba454007beea8b23d9ade12163cb786bc7e42b97f370520396008157093f92f1dbda0b2ce180a265daaa20c0c1d2404"}, {0xdd, 0xb5, "3fbefef760847f4d16787ac1ae96e2dfb34ff91517848458bc8efba8441557ddc409abe16e5f742cc21ae461a643722b195fbabf7509e68d274496dadceba58996fe45167218559e0c11dc3a1218314c08f6cae41b4f11b67d8f4a145e81fa266b95f732e976f0d217cb61ec3c4375fb6f82dad5600d61e51f05dd2ed0e7cee1bbbe55317a982934d4034f2da8daa670ff006887dc410509fd69e43b21e828519165e88d3739b6c6a4caa9a61fa155d02531210d7a"}, {0xdd, 0xcb, "5f79e094b5d647b9004cbbb3de439edb4fcdb8b79c50347d9312c3bc974ca862fa49c8b566ac791a1c3302dd77975cc38a326ce20515b7faa78182e86ed6c005fa10c6c3feeb92560775bc6d16d72cb8a34e47f41dfe04202cc611b966070696d3337f6315943836042a418b42c9a40a8730aed16367e8fba1ef866bd69db0f5918104d79925a2d7865a4e9f7f4caadbbe2b6a8a843c8df68e54201289827e2e3fd3bdb0d15caba653ca193766db9737daa874d575859e079bd6411f27c4754e39ca92dec850b1689c66b0"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x58, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "9e5ad9738d4f0772a1fff33003923fcaef532d1043c1fa2a53b0dc37cbf12ef3015d61f8c5f4590950c668b70e8ac71bf0a5c61738a3d00edf10c95b8f6698e0fbfceb508bb4b34c31938e55"}]}]]}, 0x2f0}}, 0x0) 2.719248399s ago: executing program 0 (id=253): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0x1c0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x190, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x15c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070ebd08ccbf"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x5, 0x6, "ebe6c48aa9"}}}, @TCF_EM_CONTAINER={0x44, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.068211147s ago: executing program 0 (id=254): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) (async) r1 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) (async) unshare(0x22020600) (async) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf40000000000000000000007"], 0xf41c}, 0x800) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="080000f607000000000314"], 0x8f) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000440)={r6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)=""/204, 0xcc}], 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1.947011805s ago: executing program 2 (id=255): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000236c02, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) setregid(0xffffffffffffffff, r4) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(r6) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, &(0x7f0000000040)="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"}) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 1.66024207s ago: executing program 1 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r15 = accept4(r14, 0x0, 0x0, 0x0) sendmsg$alg(r15, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18}], 0x18, 0x4040001}, 0x0) (async, rerun: 64) recvmsg$unix(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async, rerun: 64) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r11, @ANYBLOB="05762752530800312d0b5b8461bf06a7c8d4060ac6d17538212a00000000000000005ecc84df9f40e6dd", @ANYRES16=r12, @ANYBLOB="61801850585c9de6ad6581a17e6a60c2084d0ed40a63596f1850d563815eeec1b484ff60b9beda0b79368714714b50dd229ba9e8815385e9358cd54703e8746bcdc8cecf1bd36d4f1d744c64a331e8a465feecb7300c509ef00563f70b1179cd17c0ed98736353fa12a045b14fc89d8df8b584fe34441a673849b02e2c8441519f41d2497c1d3e6e96eca2d5fd4922e8e2697cdde23257caf5927207537380cc2490b540f7f947e6160b97a04c9229531f6d1e5e25c8790085b02806b8c7a0be5528c9eb421b1739edf1308ae97a9446de85895eb832dcd1d81c748b012b8522db47bddced49a4c37340af54f2342b1c1e1ea6db40feb939da"], 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.637274545s ago: executing program 0 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x29, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000940)="051a00000e8000655859204f965b7f9ac6a7af5bb0baa204db6981", 0x1b}], 0x2) 606.157317ms ago: executing program 3 (id=258): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae81fb6b88a800008100000086dd60000000000000000000000000deffffffffffffff00"/62], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae81fb6b88a800008100000086dd60000000000000000000000000deffffffffffffff00"/62], 0x0) syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200001200000000020090780000000369c46dea0006ff0800"/89], 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0xe) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000280)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_open_dev$MSR(0x0, 0x300, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) 512.990522ms ago: executing program 1 (id=259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x44090) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x385010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d8038ef805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f9dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 250.246934ms ago: executing program 0 (id=260): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) (async) read$FUSE(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1d, 0x80805, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x36e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async, rerun: 64) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x6510, 0x2}, 0x18, 0x0) (async, rerun: 64) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6d4000, 0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file2\x00'}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r9}, 0x0) landlock_restrict_self(r8, 0x7) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file3\x00', 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) 124.774839ms ago: executing program 1 (id=261): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prlimit64(r3, 0xf, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x20a, 0xc, 0x7, r4}, &(0x7f0000000080)=0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff02000000000000000000000000000102009078fe00ef7c02564261bfa93a00ff01000000000000000000000000000100000000000000000000ffffac147da0fc370b4c951ee12e2c36771a8ea409c407541c9f6009f84749c620a84ccc"], 0x0) r6 = dup(r0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x6}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 4.432255ms ago: executing program 0 (id=262): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000180001002bbd700000000000020000040003c80900110000060015000200000110001680080001"], 0x34}}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000180001002bbd700000000000020000040003c80900110000060015000200000110001680080001"], 0x34}}, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 0s ago: executing program 3 (id=263): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x4, &(0x7f00000014c0)) (async) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6020, r2, 0x0, 0x60, 0x3, 0x0, 0x2, r2}]) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) (async) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4884}, 0x8011) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xfe9}, {&(0x7f0000003500)=""/4081, 0xff1}], 0x2}, 0x40000020) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffd, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffd, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 91.892072][ T5821] cgroup: Unknown subsys name 'net' [ 92.034720][ T5821] cgroup: Unknown subsys name 'cpuset' [ 92.044240][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.978934][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.845176][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.855910][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.863894][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.864726][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.872411][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.879889][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.886278][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.894426][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.914907][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.915672][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.923692][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.930541][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.940683][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.952658][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.963878][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.974583][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.982443][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.992767][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.001745][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.009632][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.031846][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.053758][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.069952][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.081265][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.094799][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.390694][ T1207] cfg80211: failed to load regulatory.db [ 97.664099][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 97.926471][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 97.940274][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 98.002134][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 98.099200][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.106802][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.115284][ T5841] bridge_slave_0: entered allmulticast mode [ 98.122853][ T5841] bridge_slave_0: entered promiscuous mode [ 98.133069][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.140517][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.147872][ T5841] bridge_slave_1: entered allmulticast mode [ 98.156567][ T5841] bridge_slave_1: entered promiscuous mode [ 98.342640][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.352669][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 98.412673][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.419930][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.427726][ T5835] bridge_slave_0: entered allmulticast mode [ 98.436021][ T5835] bridge_slave_0: entered promiscuous mode [ 98.446984][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.464545][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.472546][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.479842][ T5832] bridge_slave_0: entered allmulticast mode [ 98.487848][ T5832] bridge_slave_0: entered promiscuous mode [ 98.513861][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.521708][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.529578][ T5835] bridge_slave_1: entered allmulticast mode [ 98.537406][ T5835] bridge_slave_1: entered promiscuous mode [ 98.584592][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.592367][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.599770][ T5832] bridge_slave_1: entered allmulticast mode [ 98.609105][ T5832] bridge_slave_1: entered promiscuous mode [ 98.655454][ T5841] team0: Port device team_slave_0 added [ 98.666311][ T5841] team0: Port device team_slave_1 added [ 98.717517][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.727148][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.735810][ T5840] bridge_slave_0: entered allmulticast mode [ 98.743474][ T5840] bridge_slave_0: entered promiscuous mode [ 98.752568][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.759778][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.767402][ T5840] bridge_slave_1: entered allmulticast mode [ 98.775737][ T5840] bridge_slave_1: entered promiscuous mode [ 98.872490][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.887079][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.897889][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.905053][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.931302][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.965916][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.972540][ T5842] Bluetooth: hci2: command tx timeout [ 98.975919][ T5154] Bluetooth: hci0: command tx timeout [ 98.992802][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.033460][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.040874][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.068466][ T5154] Bluetooth: hci3: command tx timeout [ 99.068477][ T5842] Bluetooth: hci1: command tx timeout [ 99.071549][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.132496][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.146272][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.206429][ T5832] team0: Port device team_slave_0 added [ 99.212319][ T5154] Bluetooth: hci4: command tx timeout [ 99.236769][ T5835] team0: Port device team_slave_0 added [ 99.247321][ T5835] team0: Port device team_slave_1 added [ 99.254908][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.263169][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.270762][ T5847] bridge_slave_0: entered allmulticast mode [ 99.278687][ T5847] bridge_slave_0: entered promiscuous mode [ 99.289347][ T5832] team0: Port device team_slave_1 added [ 99.374907][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.382535][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.389798][ T5847] bridge_slave_1: entered allmulticast mode [ 99.397819][ T5847] bridge_slave_1: entered promiscuous mode [ 99.423358][ T5840] team0: Port device team_slave_0 added [ 99.430644][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.438096][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.465105][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.483402][ T5841] hsr_slave_0: entered promiscuous mode [ 99.490222][ T5841] hsr_slave_1: entered promiscuous mode [ 99.529718][ T5840] team0: Port device team_slave_1 added [ 99.537179][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.544899][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.571581][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.623338][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.634007][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.642560][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.669487][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.683221][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.690269][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.717070][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.765056][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.772666][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.801181][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.832539][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.889382][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.896842][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.923507][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.999691][ T5835] hsr_slave_0: entered promiscuous mode [ 100.009564][ T5835] hsr_slave_1: entered promiscuous mode [ 100.017112][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.025123][ T5835] Cannot create hsr debugfs directory [ 100.115492][ T5847] team0: Port device team_slave_0 added [ 100.144211][ T5832] hsr_slave_0: entered promiscuous mode [ 100.151315][ T5832] hsr_slave_1: entered promiscuous mode [ 100.158123][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.166175][ T5832] Cannot create hsr debugfs directory [ 100.205253][ T5847] team0: Port device team_slave_1 added [ 100.295430][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.303182][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.329752][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.384064][ T5840] hsr_slave_0: entered promiscuous mode [ 100.391447][ T5840] hsr_slave_1: entered promiscuous mode [ 100.398035][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.405815][ T5840] Cannot create hsr debugfs directory [ 100.413789][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.421907][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.470664][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.727554][ T5847] hsr_slave_0: entered promiscuous mode [ 100.734531][ T5847] hsr_slave_1: entered promiscuous mode [ 100.741569][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.749190][ T5847] Cannot create hsr debugfs directory [ 101.050605][ T5154] Bluetooth: hci0: command tx timeout [ 101.050845][ T5842] Bluetooth: hci2: command tx timeout [ 101.087234][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.131009][ T5842] Bluetooth: hci1: command tx timeout [ 101.131183][ T5154] Bluetooth: hci3: command tx timeout [ 101.153022][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.166120][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.202914][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.289127][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.296285][ T5154] Bluetooth: hci4: command tx timeout [ 101.307329][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.318081][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.339914][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.452104][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.484440][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.495371][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.509616][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.614088][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.659828][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.676417][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.694855][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.707217][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.721745][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.815687][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.823037][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.866511][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.875975][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.883372][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.907061][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.924320][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.936053][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.965378][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.037326][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.097053][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.104268][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.129084][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.154307][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.161541][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.216684][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.262071][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.304419][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.311743][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.350385][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.357684][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.406690][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.443890][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.497698][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.504949][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.524859][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.532159][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.570252][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.682950][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.725602][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.732904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.756552][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.763855][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.844719][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.955583][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.107376][ T5841] veth0_vlan: entered promiscuous mode [ 103.137592][ T5154] Bluetooth: hci0: command tx timeout [ 103.137627][ T5842] Bluetooth: hci2: command tx timeout [ 103.158151][ T5841] veth1_vlan: entered promiscuous mode [ 103.204187][ T5835] veth0_vlan: entered promiscuous mode [ 103.212713][ T5842] Bluetooth: hci3: command tx timeout [ 103.215415][ T5154] Bluetooth: hci1: command tx timeout [ 103.352747][ T5835] veth1_vlan: entered promiscuous mode [ 103.370635][ T5154] Bluetooth: hci4: command tx timeout [ 103.379884][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.415508][ T5841] veth0_macvtap: entered promiscuous mode [ 103.490237][ T5841] veth1_macvtap: entered promiscuous mode [ 103.547758][ T5835] veth0_macvtap: entered promiscuous mode [ 103.593788][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.609050][ T5835] veth1_macvtap: entered promiscuous mode [ 103.627254][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.645923][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.676284][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.686048][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.696330][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.707415][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.735303][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.754109][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.779904][ T5832] veth0_vlan: entered promiscuous mode [ 103.832460][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.855170][ T5832] veth1_vlan: entered promiscuous mode [ 103.885946][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.905197][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.914521][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.923899][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.996852][ T5847] veth0_vlan: entered promiscuous mode [ 104.006411][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.028264][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.122972][ T5832] veth0_macvtap: entered promiscuous mode [ 104.155032][ T5847] veth1_vlan: entered promiscuous mode [ 104.185334][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.203919][ T5832] veth1_macvtap: entered promiscuous mode [ 104.225629][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.336699][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.375534][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.403401][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.444340][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.452191][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.476717][ T5847] veth0_macvtap: entered promiscuous mode [ 104.500097][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.514925][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.527708][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.550879][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.578498][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.590380][ T5847] veth1_macvtap: entered promiscuous mode [ 104.608039][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.636612][ T5954] sp0: Synchronizing with TNC [ 104.657905][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.684772][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.696856][ T30] audit: type=1804 audit(1754864177.012:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 104.775321][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.881870][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.911430][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.932496][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.949408][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.986815][ T5840] veth0_vlan: entered promiscuous mode [ 105.009718][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.029099][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.038477][ T5953] [U] [ 105.063244][ T5840] veth1_vlan: entered promiscuous mode [ 105.154320][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.181440][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.189520][ T5909] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.211705][ T5154] Bluetooth: hci0: command tx timeout [ 105.224364][ T5154] Bluetooth: hci2: command tx timeout [ 105.290745][ T5154] Bluetooth: hci1: command tx timeout [ 105.292523][ T5842] Bluetooth: hci3: command tx timeout [ 105.319738][ T5840] veth0_macvtap: entered promiscuous mode [ 105.348482][ T5840] veth1_macvtap: entered promiscuous mode [ 105.380681][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.414347][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.457235][ T5842] Bluetooth: hci4: command tx timeout [ 105.560425][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 105.582127][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.595644][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.611890][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.621848][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.649802][ T5909] usb 4-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 105.687213][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.719964][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.777480][ T5909] usb 4-1: config 0 descriptor?? [ 105.784121][ T5965] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 105.794283][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.834826][ T5967] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 105.865090][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.923069][ T5967] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 105.950443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 105.994695][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.005059][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.021115][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.046237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.315713][ T5909] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 106.560739][ T30] audit: type=1326 audit(1754864178.852:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.602603][ T5909] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 106.619447][ T5909] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 106.627039][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.637432][ T5909] wacom 0003:056A:033D.0001: unknown main item tag 0x0 [ 106.644687][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.657723][ T30] audit: type=1326 audit(1754864178.862:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.712759][ T30] audit: type=1326 audit(1754864178.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.722120][ T5909] usb 4-1: USB disconnect, device number 2 [ 106.751036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.760071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.768938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.778687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 106.788338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.808363][ T30] audit: type=1326 audit(1754864178.902:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.847153][ T30] audit: type=1326 audit(1754864178.902:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.870032][ T30] audit: type=1326 audit(1754864178.902:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.897526][ T30] audit: type=1326 audit(1754864178.902:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 106.972293][ T30] audit: type=1326 audit(1754864178.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1178ebe9 code=0x7ffc0000 [ 107.056018][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.064527][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.073847][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.235039][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 107.283107][ T5902] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.340580][ T5902] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 107.375871][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.394229][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.406539][ T5902] usb 2-1: Product: syz [ 107.420103][ T5902] usb 2-1: Manufacturer: 䄨ꢶૹ⣨粅몘㤿呰橛뜛䩸閒輊髨롙⺆魭唋蕊췞씖᤮侻⇉宂狡轟ⰿщ빰춙搈脮롞╮㭓ᘏஜသ憿箢㱫쵔㻑㨿慦婗烕則ꖿ镗킴䳠孠뒛݉ꔕἥ⍶헀瑨聳棛퐰⭐滗㮙Ƒ뙁晜ꕴ濫넒൫⭓⺃崦缉뿖❾蕞偖㶤⦑렐渏喥㻖嗴鴒珙쥍劃偒劀䊉勢ㄢᡥᇉ闐㊏噪煮ᘤ쵅ॏ [ 107.466762][ T5902] usb 2-1: SerialNumber: syz [ 107.481454][ T5991] can0: slcan on ttyS3. [ 107.563019][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.620817][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.661085][ T1207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.863230][ T1207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.902928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.912864][ T5938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.942724][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.960579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 107.976826][ T5976] veth0_to_batadv: entered allmulticast mode [ 107.990650][ T5902] cdc_ncm 2-1:1.0: bind() failure [ 107.999338][ T5993] can0 (unregistered): slcan off ttyS3. [ 108.049341][ T5993] Falling back ldisc for ttyS3. [ 108.055614][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.070888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.096957][ T5902] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 108.134183][ T5902] cdc_ncm 2-1:1.1: bind() failure [ 108.137400][ T1207] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.160204][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.182361][ T1207] usb 5-1: Product: syz [ 108.196791][ T1207] usb 5-1: Manufacturer: syz [ 108.232192][ T1207] usb 5-1: SerialNumber: syz [ 108.236871][ T5902] usb 2-1: USB disconnect, device number 2 [ 108.286242][ T1207] usb 5-1: config 0 descriptor?? [ 108.722088][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.202760][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.224729][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.384171][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 109.410449][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.461641][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 109.484417][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.544518][ T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 109.586868][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.630536][ T10] usb 3-1: Product: syz [ 109.640592][ T10] usb 3-1: Manufacturer: syz [ 109.673137][ T10] usb 3-1: SerialNumber: syz [ 109.831368][ T10] usb 3-1: config 0 descriptor?? [ 109.986270][ T5836] usb 5-1: USB disconnect, device number 2 [ 110.162732][ T30] audit: type=1326 audit(1754864182.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.2.14" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542b18ebe9 code=0x0 [ 110.355592][ T10] usb 3-1: USB disconnect, device number 2 [ 110.869079][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 111.071901][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 111.675336][ T6045] Trying to write to read-only block-device nullb0 [ 111.856089][ T6047] 9pnet_fd: Insufficient options for proto=fd [ 112.784993][ T6065] pimreg3: entered allmulticast mode [ 113.344661][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.503050][ T6086] program syz.2.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.530951][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.544658][ T30] audit: type=1326 audit(1754864185.852:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.2.37" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f542b18ebe9 code=0x0 [ 113.792700][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.932950][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.960533][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.040783][ T10] usb usb2-port1: attempt power cycle [ 114.100543][ T5916] usb 4-1: device descriptor read/64, error -71 [ 114.351796][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.471855][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 114.510514][ T5916] usb 4-1: device descriptor read/64, error -71 [ 114.579922][ T10] usb 2-1: device descriptor read/8, error -71 [ 114.674295][ T5916] usb usb4-port1: attempt power cycle [ 115.010596][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 115.062018][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.062793][ T10] usb 2-1: device descriptor read/8, error -71 [ 115.114822][ T5916] usb 4-1: device descriptor read/8, error -71 [ 115.124395][ T6109] Zero length message leads to an empty skb [ 115.201868][ T10] usb usb2-port1: unable to enumerate USB device [ 115.298897][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.370890][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.431353][ T5916] usb 4-1: device descriptor read/8, error -71 [ 115.523062][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.643523][ T5916] usb usb4-port1: unable to enumerate USB device [ 115.702828][ T10] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.729728][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.746179][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 115.778409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.896354][ T10] usb 5-1: config 0 descriptor?? [ 116.346964][ T10] logitech 0003:046D:C29C.0002: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 116.470866][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.640452][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 116.655315][ T5916] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 116.663825][ T5938] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.675497][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.702090][ T5916] usb 2-1: config 0 has no interface number 0 [ 116.716276][ T5916] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 116.718611][ T10] logitech 0003:046D:C29C.0002: no inputs found [ 116.740520][ T5916] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 116.770437][ T5916] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.774386][ T10] usb 5-1: USB disconnect, device number 3 [ 116.791143][ T5916] usb 2-1: config 0 interface 52 has no altsetting 0 [ 116.818729][ T5916] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 116.830495][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 116.848060][ T5938] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 116.857741][ T5916] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 116.865499][ T5938] usb 1-1: config 0 has no interface number 0 [ 116.886466][ T5938] usb 1-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=27.80 [ 116.892493][ T5916] usb 2-1: Manufacturer: syz [ 116.896807][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.915919][ T5916] usb 2-1: config 0 descriptor?? [ 116.926693][ T5938] usb 1-1: Product: syz [ 116.932423][ T5938] usb 1-1: Manufacturer: syz [ 116.940170][ T5938] usb 1-1: SerialNumber: syz [ 116.956148][ T5938] usb 1-1: config 0 descriptor?? [ 116.968953][ T5938] pl2303 1-1:0.98: required interrupt-in endpoint missing [ 117.139232][ T5916] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 117.153203][ T5916] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 117.170946][ T5946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.182289][ T5836] usb 1-1: USB disconnect, device number 3 [ 117.269602][ T6154] warning: `syz.2.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.340122][ T5909] usb 2-1: USB disconnect, device number 7 [ 117.401724][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.448248][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.516391][ T6155] input: syz1 as /devices/virtual/input/input6 [ 117.539172][ T5946] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 117.586225][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.766114][ T5946] usb 4-1: config 0 descriptor?? [ 118.310545][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.408497][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 118.471593][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.501652][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 118.520601][ T5946] usb 4-1: USB disconnect, device number 7 [ 118.572010][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.614281][ T5909] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 118.660791][ T5909] usb 1-1: config 13 has no interface number 0 [ 118.676784][ T5909] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 118.688058][ T5909] usb 1-1: config 13 interface 50 has no altsetting 0 [ 118.774919][ T5909] usb 1-1: language id specifier not provided by device, defaulting to English [ 118.814526][ T5909] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 118.867054][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.918515][ T5909] usb 1-1: Product: 쥍ᒧ㍷ᤕ鳸朐۾턠蠡밝ࢸŰ㶓匽྾⤱槾૦쟟ፆ謫収䁳ῢ㷥꼉༒쫾饮寥蛮㵄ꌭ챶ᵺ⚠케潉౐䯍ᷧ䓣꼦㎟䇇诤幣嫏똢盆欵图ऌ喙鸍鲡둫탪ₕ➤ᐿ垻靫귦‘ፓⅾꣽ훰씓빛ᩬ㷟鸽臭뻎駳祭嘌宛ܕ弘悚꽁቏ [ 119.213133][ T5909] usb 1-1: Manufacturer: ᠚ [ 119.217907][ T5909] usb 1-1: SerialNumber: ࡠ [ 119.247617][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.452080][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 121.789961][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.824992][ T5909] usb 1-1: MIDIStreaming interface descriptor not found [ 121.914173][ T6203] vcan0: entered promiscuous mode [ 121.919430][ T6203] vcan0: entered allmulticast mode [ 122.112248][ T5909] usb 1-1: USB disconnect, device number 4 [ 122.314258][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.230696][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.304800][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.496397][ T6241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 124.503267][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.540502][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 124.541199][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 124.563514][ T6241] vhci_hcd vhci_hcd.0: Device attached [ 124.588667][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 124.590990][ T5909] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 124.620848][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.653308][ T5909] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.654325][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 124.690142][ T5909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.718044][ T5909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.738371][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.756934][ T5909] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.760360][ T10] usb 5-1: Product: syz [ 124.782948][ T6242] vhci_hcd: connection closed [ 124.790427][ T3537] vhci_hcd: stop threads [ 124.804974][ T10] usb 5-1: Manufacturer: syz [ 124.809673][ T10] usb 5-1: SerialNumber: syz [ 124.810537][ T5836] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 124.825114][ T5909] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.844462][ T3537] vhci_hcd: release socket [ 124.849278][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.859575][ T10] usb 5-1: config 0 descriptor?? [ 124.861447][ T3537] vhci_hcd: disconnect device [ 125.103365][ T5909] usb 4-1: usb_control_msg returned -32 [ 125.121530][ T5909] usbtmc 4-1:16.0: can't read capabilities [ 125.193097][ T10] usb 5-1: USB disconnect, device number 4 [ 125.238657][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 125.277290][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.471587][ T6233] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 125.504414][ T5909] usb 4-1: USB disconnect, device number 8 [ 125.539225][ T6253] process 'syz.1.76' launched './file1' with NULL argv: empty string added [ 125.768808][ T6261] overlayfs: failed to resolve './file1': -2 [ 126.000489][ T1207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.170431][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 126.193426][ T1207] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.220022][ T1207] usb 5-1: config 0 has no interface number 0 [ 126.239532][ T1207] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.259273][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.287983][ T1207] usb 5-1: Product: syz [ 126.304921][ T1207] usb 5-1: Manufacturer: syz [ 126.319675][ T1207] usb 5-1: SerialNumber: syz [ 126.352190][ T1207] usb 5-1: config 0 descriptor?? [ 126.419777][ T1207] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.737324][ T1207] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 126.756707][ T1207] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 126.949547][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210 [ 127.522356][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.523724][ T5909] usb 5-1: USB disconnect, device number 5 [ 127.704542][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.777086][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.846301][ T5909] quatech2 5-1:0.51: device disconnected [ 128.375014][ T6305] netlink: 'syz.4.89': attribute type 39 has an invalid length. [ 128.392134][ T5916] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.663201][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.690850][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.711279][ T5916] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 128.731046][ T5909] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.738863][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.762568][ T5916] usb 2-1: config 0 descriptor?? [ 128.894544][ T5909] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 128.918249][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 128.952647][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.970462][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.991432][ T5909] usb 5-1: Product: syz [ 129.000742][ T5909] usb 5-1: Manufacturer: syz [ 129.010437][ T5909] usb 5-1: SerialNumber: syz [ 129.042643][ T5909] cdc_ether 5-1:1.0: skipping garbage [ 129.064480][ T5909] usb 5-1: bad CDC descriptors [ 129.189195][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.209421][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.231973][ T6301] netlink: 195524 bytes leftover after parsing attributes in process `syz.1.88'. [ 129.249703][ T6301] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 129.278761][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.304313][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.327375][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.351311][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.579984][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.601546][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.639014][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 129.647118][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.667726][ T5916] usb 2-1: USB disconnect, device number 8 [ 129.770779][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.920627][ T5836] vhci_hcd: vhci_device speed not set [ 129.960495][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 130.036551][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 130.063133][ T10] usb 1-1: config 0 has no interface number 0 [ 130.138243][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 130.186862][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.223269][ T10] usb 1-1: Product: syz [ 130.247513][ T10] usb 1-1: Manufacturer: syz [ 130.267110][ T10] usb 1-1: SerialNumber: syz [ 130.328950][ T10] usb 1-1: config 0 descriptor?? [ 130.439450][ T6320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.607488][ T6323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 130.614125][ T6323] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.622581][ T6323] vhci_hcd vhci_hcd.0: Device attached [ 130.851505][ T5836] vhci_hcd: vhci_device speed not set [ 131.262426][ T6324] vhci_hcd: connection closed [ 131.281489][ T10] radio-si470x 1-1:0.35: this is not a si470x device. [ 131.335886][ T5916] usb 5-1: USB disconnect, device number 6 [ 131.349047][ T36] vhci_hcd: stop threads [ 131.363909][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.388554][ T36] vhci_hcd: release socket [ 131.419552][ T36] vhci_hcd: disconnect device [ 131.432176][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 131.451506][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.481151][ T5836] vhci_hcd: vhci_device speed not set [ 131.539606][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.541271][ T6332] program syz.4.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.558758][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.571436][ T10] usb 1-1: USB disconnect, device number 5 [ 131.622327][ T6333] program syz.4.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.043011][ T6346] vivid-004: disconnect [ 132.480720][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 132.652464][ T5917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.661501][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.687197][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 132.701882][ T10] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 132.719561][ T10] usb 5-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.759936][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 132.771780][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.781533][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.801560][ T10] usb 5-1: Product: syz [ 132.810392][ T10] usb 5-1: Manufacturer: syz [ 132.811105][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 132.820394][ T10] usb 5-1: SerialNumber: syz [ 132.834280][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.834832][ T6351] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.858438][ T5917] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 132.885332][ T5917] usb 3-1: config 0 has no interface number 0 [ 132.900538][ T5917] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.920714][ T5917] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.944749][ T5917] usb 3-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 132.964686][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.984113][ T5917] usb 3-1: Product: syz [ 132.998966][ T5917] usb 3-1: Manufacturer: syz [ 133.005192][ T5917] usb 3-1: SerialNumber: syz [ 133.013117][ T5938] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.020464][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 133.027049][ T5917] usb 3-1: config 0 descriptor?? [ 133.042086][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.059802][ T5917] spcp8x5 3-1:0.191: SPCP8x5 converter detected [ 133.077006][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.100435][ T5917] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 133.108642][ T5916] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 133.144302][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.156382][ T5916] usb 4-1: config 0 descriptor?? [ 133.225910][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 133.242612][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.438334][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 133.464510][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 133.514779][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.682899][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.714226][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.723658][ T6366] sp0: Synchronizing with TNC [ 133.751290][ T5916] usb 4-1: USB disconnect, device number 9 [ 133.895833][ T5938] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 134.418419][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.429899][ T10] usb 5-1: bad CDC descriptors [ 134.457476][ T5836] usb 3-1: USB disconnect, device number 3 [ 134.637216][ T6345] vivid-004: reconnect [ 134.669583][ T5836] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 134.672009][ T5938] usb 1-1: config 0 descriptor?? [ 134.683453][ T10] usb 5-1: USB disconnect, device number 7 [ 134.696570][ T5836] spcp8x5 3-1:0.191: device disconnected [ 134.946290][ T5938] usb 1-1: USB disconnect, device number 6 [ 135.022656][ T5946] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.350392][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 135.366935][ T5946] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 135.420400][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.460645][ T5946] usb 4-1: Product: syz [ 135.464938][ T5946] usb 4-1: Manufacturer: syz [ 135.469568][ T5946] usb 4-1: SerialNumber: syz [ 135.488145][ T5946] usb 4-1: config 0 descriptor?? [ 135.764687][ T6393] trusted_key: encrypted_key: insufficient parameters specified [ 135.783737][ T6393] vcan0: MTU too low for tipc bearer [ 135.789318][ T6393] tipc: Enabling of bearer rejected, failed to enable media [ 135.823557][ T6394] mmap: syz.1.108 (6394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.918182][ T5946] airspy 4-1:0.0: Board ID: 00 [ 136.040405][ T5946] airspy 4-1:0.0: Firmware version: [ 136.325860][ T6377] netlink: 68 bytes leftover after parsing attributes in process `syz.3.104'. [ 137.221560][ T5946] airspy 4-1:0.0: usb_control_msg() failed -110 request 0e [ 137.235137][ T5946] airspy 4-1:0.0: Registered as swradio24 [ 137.270678][ T5946] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 137.451397][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 137.702378][ T5938] usb 4-1: USB disconnect, device number 10 [ 137.719989][ T10] usb 2-1: config 0 has an invalid interface number: 108 but max is 1 [ 137.769033][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.839877][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.880004][ T10] usb 2-1: config 0 has no interface number 0 [ 137.915041][ T10] usb 2-1: config 0 interface 108 altsetting 11 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 137.962284][ T10] usb 2-1: config 0 interface 108 altsetting 11 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 137.996209][ T10] usb 2-1: config 0 interface 108 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 138.069302][ T10] usb 2-1: config 0 interface 108 altsetting 11 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 138.085591][ T10] usb 2-1: config 0 interface 108 has no altsetting 0 [ 138.112801][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1029, bcdDevice=57.c1 [ 138.134077][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.151789][ T10] usb 2-1: Product: syz [ 138.178286][ T10] usb 2-1: Manufacturer: syz [ 138.217674][ T10] usb 2-1: SerialNumber: syz [ 138.269102][ T10] usb 2-1: config 0 descriptor?? [ 138.285217][ T6411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.340463][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.390468][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.881068][ T6428] netlink: 'syz.4.119': attribute type 39 has an invalid length. [ 138.921397][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.023532][ T10] snd-usb-audio 2-1:0.108: probe with driver snd-usb-audio failed with error -2 [ 139.150977][ T10] usb 2-1: USB disconnect, device number 9 [ 139.259929][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.470403][ T6441] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 139.578732][ T6441] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 139.598219][ T6441] team0: Port device virt_wifi0 added [ 139.710409][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.874251][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 139.882013][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 139.904662][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.917916][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.203912][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 140.221022][ T10] usb 4-1: Product: syz [ 140.239416][ T10] usb 4-1: Manufacturer: syz [ 140.244137][ T10] usb 4-1: SerialNumber: syz [ 140.900466][ T5836] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.902969][ T10] usb 4-1: config 0 descriptor?? [ 140.916438][ T6440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.931095][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 141.091882][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 141.285511][ T5836] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.382850][ T10] usb 4-1: USB disconnect, device number 11 [ 141.388878][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 141.410250][ T1207] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.413068][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.474761][ T5836] usb 3-1: Product: syz [ 141.512112][ T5836] usb 3-1: Manufacturer: syz [ 141.526942][ T5836] usb 3-1: SerialNumber: syz [ 141.579908][ T5836] r8152-cfgselector 3-1: Unknown version 0x0000 [ 141.609994][ T1207] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 141.630638][ T5836] r8152-cfgselector 3-1: config 0 descriptor?? [ 141.640400][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.700684][ T1207] usb 2-1: config 0 has no interface number 0 [ 141.722509][ T1207] usb 2-1: config 0 interface 25 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 141.768346][ T1207] usb 2-1: config 0 interface 25 has no altsetting 0 [ 141.790757][ T1207] usb 2-1: New USB device found, idVendor=28bd, idProduct=0142, bcdDevice= 0.00 [ 141.815276][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.858717][ T1207] usb 2-1: config 0 descriptor?? [ 141.887793][ T1207] usbhid 2-1:0.25: couldn't find an input interrupt endpoint [ 142.033047][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.076500][ T6467] binder: 6431:6467 unknown command 0 [ 142.099651][ T5909] usb 2-1: USB disconnect, device number 10 [ 142.109855][ T6467] binder: 6431:6467 ioctl c0306201 200000000080 returned -22 [ 142.284583][ T6471] unsupported nlmsg_type 40 [ 142.395939][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 142.807395][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.839177][ T10] usb 4-1: config 0 has no interfaces? [ 142.856711][ T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 142.868373][ T6467] binder: 6431:6467 ioctl c0189374 2000000001c0 returned -22 [ 142.884227][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.925871][ T10] usb 4-1: config 0 descriptor?? [ 143.091542][ T10] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 143.298585][ T6466] bond_slave_0: entered promiscuous mode [ 143.304636][ T6466] bond_slave_1: entered promiscuous mode [ 143.481580][ T6466] vlan2: entered promiscuous mode [ 144.206410][ T6466] bond0: entered promiscuous mode [ 144.676933][ T5909] usb 4-1: USB disconnect, device number 12 [ 145.439022][ T6506] kvm: MONITOR instruction emulated as NOP! [ 146.660458][ T5946] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.841761][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 146.856249][ T5946] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 146.889828][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.924965][ T5946] usb 4-1: Product: syz [ 146.939527][ T5946] usb 4-1: Manufacturer: syz [ 146.949939][ T5946] usb 4-1: SerialNumber: syz [ 146.985694][ T5946] r8152-cfgselector 4-1: Unknown version 0x0000 [ 147.009642][ T5946] r8152-cfgselector 4-1: config 0 descriptor?? [ 147.279393][ T5909] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 147.366854][ T6537] syz.4.148: attempt to access beyond end of device [ 147.366854][ T6537] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 147.400556][ T6537] gfs2: error -5 reading superblock [ 147.440540][ T5909] usb 1-1: Invalid ep0 maxpacket: 32 [ 147.751947][ T5909] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 147.920928][ T5909] usb 1-1: Invalid ep0 maxpacket: 32 [ 147.955363][ T5909] usb usb1-port1: attempt power cycle [ 148.442873][ T6545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.686160][ T5946] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 148.850471][ T5909] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 148.901194][ T5909] usb 1-1: Invalid ep0 maxpacket: 32 [ 149.040435][ T5909] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 149.047965][ T6552] bridge0: entered promiscuous mode [ 149.057129][ T6552] macvlan2: entered promiscuous mode [ 149.101302][ T5909] usb 1-1: Invalid ep0 maxpacket: 32 [ 149.110841][ T5909] usb usb1-port1: unable to enumerate USB device [ 149.140799][ T5938] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 149.160477][ T5946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.302747][ T5938] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 149.322101][ T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 149.329966][ T5938] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 149.340976][ T5946] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.349065][ T5946] usb 4-1: config 0 has no interface number 0 [ 149.359398][ T5938] usb 5-1: config 0 has no interface number 0 [ 149.365843][ T5946] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.378770][ T5938] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.390617][ T5946] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.400505][ T5938] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.411829][ T5946] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.425851][ T5938] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.436052][ T5938] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 149.445219][ T5946] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 149.454600][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.463133][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.478643][ T5938] usb 5-1: config 0 descriptor?? [ 149.484165][ T10] usb 2-1: device descriptor read/64, error -71 [ 149.492839][ T5946] usb 4-1: config 0 descriptor?? [ 149.731379][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 149.879609][ T10] usb 2-1: device descriptor read/64, error -71 [ 149.942974][ T5946] hid (null): report_id 35660 is invalid [ 149.965047][ T5938] usb 5-1: USB disconnect, device number 8 [ 150.011268][ T10] usb usb2-port1: attempt power cycle [ 150.165939][ T5946] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0003/input/input9 [ 150.301170][ T5946] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 150.334217][ T5946] usb 4-1: USB disconnect, device number 14 [ 150.380905][ T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 150.402214][ T10] usb 2-1: device descriptor read/8, error -71 [ 150.523900][ T6564] fido_id[6564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.658037][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 150.993135][ T10] usb 2-1: device descriptor read/8, error -71 [ 151.200894][ T10] usb usb2-port1: unable to enumerate USB device [ 153.475725][ T6604] 9pnet_fd: Insufficient options for proto=fd [ 153.599511][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 153.649924][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 155.031377][ T6623] hsr0: entered promiscuous mode [ 155.640999][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.682033][ T6637] sp0: Synchronizing with TNC [ 155.810423][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 155.828968][ T6637] _Z`Ԁ@: entered promiscuous mode [ 155.865426][ T5909] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.910198][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.938489][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.960249][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.979831][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.000662][ T30] audit: type=1326 audit(1754864228.312:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542b18ebe9 code=0x7ffc0000 [ 156.040453][ T5909] usb 5-1: Product: syz [ 156.044705][ T5909] usb 5-1: Manufacturer: syz [ 156.060802][ T5909] usb 5-1: SerialNumber: syz [ 156.102414][ T30] audit: type=1326 audit(1754864228.312:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542b18ebe9 code=0x7ffc0000 [ 156.190423][ T30] audit: type=1326 audit(1754864228.362:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f542b18ebe9 code=0x7ffc0000 [ 157.920747][ T6654] random: crng reseeded on system resumption [ 157.944043][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 158.278488][ T6649] loop6: detected capacity change from 0 to 2560 [ 158.302689][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.319783][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.340701][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.376641][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.392986][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 158.402796][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 158.421916][ C0] I/O error, dev loop6, sector 2048 op 0x1:(WRITE) flags 0x8800 phys_seg 35 prio class 0 [ 158.431900][ C0] I/O error, dev loop6, sector 2048 op 0x1:(WRITE) flags 0x8800 phys_seg 35 prio class 0 [ 158.479562][ T5909] usb 5-1: 0:2 : does not exist [ 158.500232][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.539454][ T5909] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 158.563753][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.633490][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.666005][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.726508][ T6649] ldm_validate_partition_table(): Disk read failed. [ 158.780726][ T5909] usb 5-1: USB disconnect, device number 9 [ 158.797066][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.098313][ T6649] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.478789][ T6649] Dev loop6: unable to read RDB block 0 [ 159.490993][ T6649] loop6: unable to read partition table [ 159.495636][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.512922][ T6649] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 159.736437][ T6678] netlink: 248 bytes leftover after parsing attributes in process `syz.3.189'. [ 160.658285][ T6696] netlink: 'syz.3.192': attribute type 4 has an invalid length. [ 161.572421][ T6706] input: syz0 as /devices/virtual/input/input11 [ 162.200530][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 162.380506][ T6732] netlink: 'syz.1.201': attribute type 2 has an invalid length. [ 162.394931][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.429868][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.465353][ T6732] bridge: entered promiscuous mode [ 162.476656][ T10] usb 4-1: Product: syz [ 162.505339][ T10] usb 4-1: Manufacturer: syz [ 162.544583][ T10] usb 4-1: SerialNumber: syz [ 162.574749][ T10] usb 4-1: config 0 descriptor?? [ 162.785454][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.341031][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 164.254815][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.200'. [ 164.326104][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 164.361046][ T10] usb 4-1: USB disconnect, device number 15 [ 164.670443][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.718759][ T6785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.761535][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 164.795607][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 165.024765][ T5938] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 165.041053][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 165.049686][ T5938] usb 1-1: Product: syz [ 165.060374][ T5938] usb 1-1: Manufacturer: syz [ 165.065054][ T5938] usb 1-1: SerialNumber: syz [ 165.084147][ T5938] usb 1-1: config 0 descriptor?? [ 165.199837][ T5938] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 165.302824][ T5938] usb 1-1: USB disconnect, device number 11 [ 165.624093][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 165.665887][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 166.244740][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 166.291955][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 167.473504][ T6840] netlink: 260 bytes leftover after parsing attributes in process `syz.4.227'. [ 167.843978][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 168.138580][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 168.370427][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 168.417699][ T5909] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.529749][ T5909] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 169.020005][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.030801][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.041413][ T5909] usb 4-1: config 1 has no interface number 0 [ 169.048045][ T5909] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 169.077137][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.139696][ T5909] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 169.317911][ T30] audit: type=1800 audit(1754864241.632:16): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.233" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 169.957474][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.966918][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.150990][ T5946] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.316653][ T5909] snd_usb_pod 4-1:1.1: set_interface failed [ 170.332996][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 170.348378][ T5909] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 170.364113][ T6855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.383766][ T5909] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 170.387394][ T5946] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 170.408972][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.417800][ T5909] usb 4-1: USB disconnect, device number 16 [ 170.438913][ T5946] usb 5-1: Product: syz [ 170.459679][ T5946] usb 5-1: Manufacturer: syz [ 170.479033][ T6855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.479492][ T5946] usb 5-1: SerialNumber: syz [ 170.543740][ T5946] usb 5-1: config 0 descriptor?? [ 170.567282][ T5946] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 170.607876][ T5946] usb 5-1: Detected FT232H [ 170.776323][ T5946] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 170.847220][ T5946] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 170.872340][ T5946] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 170.920580][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 170.932197][ T5946] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.109611][ T5946] usb 5-1: USB disconnect, device number 10 [ 171.501129][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.697078][ T5946] ftdi_sio 5-1:0.0: device disconnected [ 171.889144][ T6855] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.985438][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 171.985504][ T6855] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.062206][ T6855] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.133581][ T6855] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.310690][ T5946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.455691][ T5946] usb 5-1: device descriptor read/64, error -71 [ 172.725923][ T6904] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 172.733929][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.241'. [ 172.772675][ T6904] batman_adv: batadv0: Adding interface: virt_wifi0 [ 172.779471][ T6904] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.805701][ T6904] batman_adv: batadv0: Interface activated: virt_wifi0 [ 172.925430][ T5946] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.290106][ T5946] usb 5-1: device descriptor read/64, error -71 [ 173.411222][ T5946] usb usb5-port1: attempt power cycle [ 173.755948][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 173.771102][ T5946] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 173.806778][ T5946] usb 5-1: device descriptor read/8, error -71 [ 173.904263][ T6914] input: syz1 as /devices/virtual/input/input12 [ 174.494236][ T5946] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.521360][ T5946] usb 5-1: device descriptor read/8, error -71 [ 174.654527][ T5946] usb usb5-port1: unable to enumerate USB device [ 175.595377][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.859236][ T6937] tipc: Started in network mode [ 175.864650][ T6941] netlink: 'syz.0.253': attribute type 7 has an invalid length. [ 175.876340][ T6937] tipc: Node identity 321cf4ea701a, cluster identity 4711 [ 175.883751][ T6941] netlink: 'syz.0.253': attribute type 3 has an invalid length. [ 175.901366][ T6937] tipc: Enabled bearer , priority 0 [ 175.908631][ T6941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.253'. [ 175.925554][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.927479][ T6937] syzkaller0: entered promiscuous mode [ 175.946974][ T6937] syzkaller0: entered allmulticast mode [ 175.997701][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 176.014728][ T5902] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 176.050383][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.093811][ T5902] usb 5-1: config 0 descriptor?? [ 176.097764][ T6937] tipc: Resetting bearer [ 176.137425][ T6935] tipc: Resetting bearer [ 176.218881][ T6935] tipc: Disabling bearer [ 176.256915][ T6948] syzkaller1: entered promiscuous mode [ 176.268369][ T6948] syzkaller1: entered allmulticast mode [ 176.382798][ T6956] comedi: valid board names for 8255 driver are: [ 176.382849][ T6956] 8255 [ 176.382859][ T6956] comedi: valid board names for vmk80xx driver are: [ 176.382871][ T6956] vmk80xx [ 176.382881][ T6956] comedi: valid board names for usbduxsigma driver are: [ 176.382892][ T6956] usbduxsigma [ 176.384601][ T6956] comedi: valid board names for usbduxfast driver are: [ 176.384616][ T6956] usbduxfast [ 176.384627][ T6956] comedi: valid board names for usbdux driver are: [ 176.384639][ T6956] usbdux [ 176.384648][ T6956] comedi: valid board names for ni6501 driver are: [ 176.384659][ T6956] ni6501 [ 176.384668][ T6956] comedi: valid board names for dt9812 driver are: [ 176.384679][ T6956] dt9812 [ 176.384689][ T6956] comedi: valid board names for ni_labpc_cs driver are: [ 176.384701][ T6956] ni_labpc_cs [ 176.384710][ T6956] comedi: valid board names for ni_daq_700 driver are: [ 176.384722][ T6956] ni_daq_700 [ 176.384731][ T6956] comedi: valid board names for labpc_pci driver are: [ 176.384742][ T6956] labpc_pci [ 176.384751][ T6956] comedi: valid board names for adl_pci9118 driver are: [ 176.384763][ T6956] pci9118dg [ 176.384772][ T6956] pci9118hg [ 176.384781][ T6956] pci9118hr [ 176.384791][ T6956] comedi: valid board names for 8255_pci driver are: [ 176.384802][ T6956] 8255_pci [ 176.384811][ T6956] comedi: valid board names for s526 driver are: [ 176.384822][ T6956] s526 [ 176.384831][ T6956] comedi: valid board names for multiq3 driver are: [ 176.384842][ T6956] multiq3 [ 176.384851][ T6956] comedi: valid board names for pcmuio driver are: [ 176.384863][ T6956] pcmuio48 [ 176.384872][ T6956] pcmuio96 [ 176.384881][ T6956] comedi: valid board names for pcmmio driver are: [ 176.384892][ T6956] pcmmio [ 176.384901][ T6956] comedi: valid board names for pcmda12 driver are: [ 176.384912][ T6956] pcmda12 [ 176.384921][ T6956] comedi: valid board names for pcmad driver are: [ 176.384939][ T6956] pcmad12 [ 176.384948][ T6956] pcmad16 [ 176.384957][ T6956] comedi: valid board names for ni_labpc driver are: [ 176.384968][ T6956] lab-pc-1200 [ 176.384977][ T6956] lab-pc-1200ai [ 176.384986][ T6956] lab-pc+ [ 176.384995][ T6956] comedi: valid board names for atmio16 driver are: [ 176.385007][ T6956] atmio16 [ 176.385016][ T6956] atmio16d [ 176.385025][ T6956] comedi: valid board names for ni_at_ao driver are: [ 176.385036][ T6956] at-ao-6 [ 176.385044][ T6956] at-ao-10 [ 176.385054][ T6956] comedi: valid board names for ni_at_a2150 driver are: [ 176.385065][ T6956] ni_at_a2150 [ 176.385075][ T6956] comedi: valid board names for adq12b driver are: [ 176.385086][ T6956] adq12b [ 176.385095][ T6956] comedi: valid board names for mpc624 driver are: [ 176.385107][ T6956] mpc624 [ 176.385116][ T6956] comedi: valid board names for c6xdigio driver are: [ 176.385127][ T6956] c6xdigio [ 176.385136][ T6956] comedi: valid board names for aio_iiro_16 driver are: [ 176.385147][ T6956] aio_iiro_16 [ 176.385157][ T6956] comedi: valid board names for aio_aio12_8 driver are: [ 176.385168][ T6956] aio_aio12_8 [ 176.385177][ T6956] aio_ai12_8 [ 176.385186][ T6956] aio_ao12_4 [ 176.385195][ T6956] comedi: valid board names for fl512 driver are: [ 176.385207][ T6956] fl512 [ 176.385215][ T6956] comedi: valid board names for dmm32at driver are: [ 176.385226][ T6956] dmm32at [ 176.385235][ T6956] comedi: valid board names for dt282x driver are: [ 176.385247][ T6956] dt2821 [ 176.385256][ T6956] dt2821-f [ 176.385265][ T6956] dt2821-g [ 176.385274][ T6956] dt2823 [ 176.385284][ T6956] dt2824-pgh [ 176.385293][ T6956] dt2824-pgl [ 176.385302][ T6956] dt2825 [ 176.385310][ T6956] dt2827 [ 176.385319][ T6956] dt2828 [ 176.385328][ T6956] dt2829 [ 176.385336][ T6956] dt21-ez [ 176.385345][ T6956] dt23-ez [ 176.385354][ T6956] dt24-ez [ 176.385362][ T6956] dt24-ez-pgl [ 176.385372][ T6956] comedi: valid board names for dt2817 driver are: [ 176.385383][ T6956] dt2817 [ 176.385391][ T6956] comedi: valid board names for dt2815 driver are: [ 176.385402][ T6956] dt2815 [ 176.385411][ T6956] comedi: valid board names for dt2814 driver are: [ 176.385422][ T6956] dt2814 [ 176.385431][ T6956] comedi: valid board names for dt2811 driver are: [ 176.385443][ T6956] dt2811-pgh [ 176.385452][ T6956] dt2811-pgl [ 176.385461][ T6956] comedi: valid board names for dt2801 driver are: [ 176.385472][ T6956] dt2801 [ 176.385481][ T6956] comedi: valid board names for das6402 driver are: [ 176.385492][ T6956] das6402-12 [ 176.385501][ T6956] das6402-16 [ 176.385511][ T6956] comedi: valid board names for das1800 driver are: [ 176.385522][ T6956] das-1701st [ 176.385531][ T6956] das-1701st-da [ 176.385540][ T6956] das-1702st [ 176.385549][ T6956] das-1702st-da [ 176.385558][ T6956] das-1702hr [ 176.385568][ T6956] das-1702hr-da [ 176.385577][ T6956] das-1701ao [ 176.385586][ T6956] das-1702ao [ 176.385595][ T6956] das-1801st [ 176.385604][ T6956] das-1801st-da [ 176.385613][ T6956] das-1802st [ 176.385622][ T6956] das-1802st-da [ 176.385631][ T6956] das-1802hr [ 176.385640][ T6956] das-1802hr-da [ 176.385650][ T6956] das-1801hc [ 176.385659][ T6956] das-1802hc [ 176.385679][ T6956] das-1801ao [ 176.385688][ T6956] das-1802ao [ 176.385697][ T6956] comedi: valid board names for das800 driver are: [ 176.385708][ T6956] das-800 [ 176.385716][ T6956] cio-das800 [ 176.385725][ T6956] das-801 [ 176.385733][ T6956] cio-das801 [ 176.385742][ T6956] das-802 [ 176.385750][ T6956] cio-das802 [ 176.385759][ T6956] cio-das802/16 [ 176.385768][ T6956] comedi: valid board names for isa-das08 driver are: [ 176.385779][ T6956] isa-das08 [ 176.385788][ T6956] das08-pgm [ 176.385797][ T6956] das08-pgh [ 176.385805][ T6956] das08-pgl [ 176.385814][ T6956] das08-aoh [ 176.385822][ T6956] das08-aol [ 176.385831][ T6956] das08-aom [ 176.385840][ T6956] das08/jr-ao [ 176.385849][ T6956] das08jr-16-ao [ 176.385858][ T6956] pc104-das08 [ 176.385867][ T6956] das08jr/16 [ 176.385875][ T6956] comedi: valid board names for das16m1 driver are: [ 176.385886][ T6956] das16m1 [ 176.385895][ T6956] comedi: valid board names for dac02 driver are: [ 176.385906][ T6956] dac02 [ 176.385914][ T6956] comedi: valid board names for rti802 driver are: [ 176.385925][ T6956] rti802 [ 176.385940][ T6956] comedi: valid board names for rti800 driver are: [ 176.385951][ T6956] rti800 [ 176.385959][ T6956] rti815 [ 176.385967][ T6956] comedi: valid board names for pcm3724 driver are: [ 176.385978][ T6956] pcm3724 [ 176.385987][ T6956] comedi: valid board names for pcl818 driver are: [ 176.385998][ T6956] pcl818l [ 176.386007][ T6956] pcl818h [ 176.386015][ T6956] pcl818hd [ 176.386024][ T6956] pcl818hg [ 176.386032][ T6956] pcl818 [ 176.386041][ T6956] pcl718 [ 176.386049][ T6956] pcm3718 [ 176.386058][ T6956] comedi: valid board names for pcl816 driver are: [ 176.386069][ T6956] pcl816 [ 176.386077][ T6956] pcl814b [ 176.386086][ T6956] comedi: valid board names for pcl812 driver are: [ 176.386097][ T6956] pcl812 [ 176.386105][ T6956] pcl812pg [ 176.386114][ T6956] acl8112pg [ 176.386122][ T6956] acl8112dg [ 176.386131][ T6956] acl8112hg [ 176.386140][ T6956] a821pgl [ 176.386148][ T6956] a821pglnda [ 176.386157][ T6956] a821pgh [ 176.386165][ T6956] a822pgl [ 176.386174][ T6956] a822pgh [ 176.386182][ T6956] a823pgl [ 176.386190][ T6956] a823pgh [ 176.386198][ T6956] pcl813 [ 176.386207][ T6956] pcl813b [ 176.386215][ T6956] acl8113 [ 176.386224][ T6956] iso813 [ 176.386232][ T6956] acl8216 [ 176.386241][ T6956] a826pg [ 176.386249][ T6956] comedi: valid board names for pcl730 driver are: [ 176.386260][ T6956] pcl730 [ 176.386269][ T6956] iso730 [ 176.386278][ T6956] acl7130 [ 176.386286][ T6956] pcm3730 [ 176.386295][ T6956] pcl725 [ 176.386303][ T6956] p8r8dio [ 176.386311][ T6956] acl7225b [ 176.386320][ T6956] p16r16dio [ 176.386328][ T6956] pcl733 [ 176.386337][ T6956] pcl734 [ 176.386345][ T6956] opmm-1616-xt [ 176.386354][ T6956] pearl-mm-p [ 176.386363][ T6956] ir104-pbf [ 176.386371][ T6956] comedi: valid board names for pcl726 driver are: [ 176.386382][ T6956] pcl726 [ 176.386391][ T6956] pcl727 [ 176.386399][ T6956] pcl728 [ 176.386408][ T6956] acl6126 [ 176.386416][ T6956] acl6128 [ 176.386425][ T6956] comedi: valid board names for pcl724 driver are: [ 176.386436][ T6956] pcl724 [ 176.386444][ T6956] pcl722 [ 176.386453][ T6956] pcl731 [ 176.386461][ T6956] acl7122 [ 176.386470][ T6956] acl7124 [ 176.386478][ T6956] pet48dio [ 176.386487][ T6956] pcmio48 [ 176.386495][ T6956] onyx-mm-dio [ 176.386504][ T6956] comedi: valid board names for pcl711 driver are: [ 176.386515][ T6956] pcl711 [ 176.386523][ T6956] pcl711b [ 176.386532][ T6956] acl8112hg [ 176.386541][ T6956] acl8112dg [ 176.386550][ T6956] comedi: valid board names for amplc_pc263 driver are: [ 176.386561][ T6956] pc263 [ 176.386569][ T6956] comedi: valid board names for amplc_pc236 driver are: [ 176.386599][ T6956] pc36at [ 176.386608][ T6956] comedi: valid board names for amplc_dio200 driver are: [ 176.386619][ T6956] pc212e [ 176.386628][ T6956] pc214e [ 176.386637][ T6956] pc215e [ 176.386646][ T6956] pc218e [ 176.386655][ T6956] pc272e [ 176.386663][ T6956] comedi: valid board names for comedi_parport driver are: [ 176.386675][ T6956] comedi_parport [ 176.386684][ T6956] comedi: valid board names for comedi_test driver are: [ 176.386696][ T6956] comedi_test [ 176.386706][ T6956] comedi: valid board names for comedi_bond driver are: [ 176.386717][ T6956] comedi_bond [ 177.878878][ T6986] serio: Serial port ttynull [ 178.172421][ T6993] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 178.227415][ T6996] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 178.284481][ T6993] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 178.993824][ T6936] ================================================================== [ 178.993844][ T6936] BUG: KASAN: global-out-of-bounds in bit_putcs+0x135b/0x1a50 [ 178.993892][ T6936] Read of size 1 at addr ffffffff8be44830 by task syz.4.251/6936 [ 178.993910][ T6936] [ 178.993944][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.4.251 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 178.993969][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.993986][ T6936] Call Trace: [ 178.993997][ T6936] [ 178.994009][ T6936] dump_stack_lvl+0x189/0x250 [ 178.994029][ T6936] ? __kasan_check_byte+0x12/0x40 [ 178.994047][ T6936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.994070][ T6936] ? lock_release+0x4b/0x3e0 [ 178.994096][ T6936] ? __virt_addr_valid+0x4a5/0x5c0 [ 178.994124][ T6936] print_report+0xca/0x240 [ 178.994157][ T6936] ? bit_putcs+0x135b/0x1a50 [ 178.994179][ T6936] kasan_report+0x118/0x150 [ 178.994194][ T6936] ? queue_work_on+0x1ed/0x270 [ 178.994217][ T6936] ? bit_putcs+0x135b/0x1a50 [ 178.994254][ T6936] bit_putcs+0x135b/0x1a50 [ 178.994304][ T6936] ? __pfx_bit_putcs+0x10/0x10 [ 178.994331][ T6936] ? __pfx_bit_cursor+0x10/0x10 [ 178.994352][ T6936] ? do_raw_spin_lock+0x121/0x290 [ 178.994386][ T6936] fbcon_putcs+0x3e2/0x5f0 [ 178.994417][ T6936] ? __pfx_bit_putcs+0x10/0x10 [ 178.994446][ T6936] hide_cursor+0x352/0x480 [ 178.994471][ T6936] ? __pfx_hide_cursor+0x10/0x10 [ 178.994492][ T6936] do_con_write+0x193/0x5200 [ 178.994516][ T6936] ? desc_read+0x1b8/0x3f0 [ 178.994546][ T6936] ? prb_first_seq+0xfd/0x1a0 [ 178.994582][ T6936] ? __pfx_prb_first_seq+0x10/0x10 [ 178.994608][ T6936] ? __lock_acquire+0xab9/0xd20 [ 178.994627][ T6936] ? __mutex_trylock_common+0x153/0x260 [ 178.994647][ T6936] ? __pfx___mutex_trylock_common+0x10/0x10 [ 178.994666][ T6936] ? __pfx_do_con_write+0x10/0x10 [ 178.994712][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.994735][ T6936] ? trace_contention_end+0x39/0x120 [ 178.994777][ T6936] ? __mutex_lock+0x330/0xe80 [ 178.994799][ T6936] ? n_tty_write+0xd45/0x11d0 [ 178.994816][ T6936] ? n_tty_write+0xdcd/0x11d0 [ 178.994838][ T6936] ? prb_read_valid+0x3c/0x60 [ 178.994862][ T6936] ? __pfx___mutex_lock+0x10/0x10 [ 178.994885][ T6936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.994912][ T6936] con_write+0x24/0x40 [ 178.994937][ T6936] do_output_char+0x647/0x970 [ 178.994956][ T6936] n_tty_write+0xde3/0x11d0 [ 178.994985][ T6936] ? __pfx_n_tty_write+0x10/0x10 [ 178.995008][ T6936] ? __pfx_woken_wake_function+0x10/0x10 [ 178.995041][ T6936] ? file_tty_write+0x2e8/0x990 [ 178.995069][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.995086][ T6936] ? kfree+0x4d/0x440 [ 178.995110][ T6936] ? __pfx_n_tty_write+0x10/0x10 [ 178.995126][ T6936] file_tty_write+0x500/0x990 [ 178.995163][ T6936] vfs_write+0x54b/0xa90 [ 178.995185][ T6936] ? __pfx_tty_write+0x10/0x10 [ 178.995212][ T6936] ? __pfx_vfs_write+0x10/0x10 [ 178.995235][ T6936] ? __fget_files+0x2a/0x420 [ 178.995256][ T6936] ksys_write+0x145/0x250 [ 178.995270][ T6936] ? __pfx_ksys_write+0x10/0x10 [ 178.995284][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.995312][ T6936] ? do_syscall_64+0xbe/0x3b0 [ 178.995339][ T6936] do_syscall_64+0xfa/0x3b0 [ 178.995362][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.995384][ T6936] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 178.995399][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 178.995417][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.995433][ T6936] RIP: 0033:0x7f7c5fb8ebe9 [ 178.995461][ T6936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.995481][ T6936] RSP: 002b:00007f7c60a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.995503][ T6936] RAX: ffffffffffffffda RBX: 00007f7c5fdb5fa0 RCX: 00007f7c5fb8ebe9 [ 178.995518][ T6936] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 178.995534][ T6936] RBP: 00007f7c5fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 178.995544][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.995553][ T6936] R13: 00007f7c5fdb6038 R14: 00007f7c5fdb5fa0 R15: 00007ffe985bea28 [ 178.995571][ T6936] [ 178.995576][ T6936] [ 178.995581][ T6936] The buggy address belongs to the variable: [ 178.995587][ T6936] fontdata_8x16+0x1210/0x1480 [ 178.995609][ T6936] [ 178.995615][ T6936] The buggy address belongs to the physical page: [ 178.995632][ T6936] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbe44 [ 178.995651][ T6936] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 178.995690][ T6936] raw: 00fff00000002000 ffffea00002f9108 ffffea00002f9108 0000000000000000 [ 178.995705][ T6936] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 178.995713][ T6936] page dumped because: kasan: bad access detected [ 178.995721][ T6936] page_owner info is not present (never set?) [ 178.995731][ T6936] [ 178.995735][ T6936] Memory state around the buggy address: [ 178.995744][ T6936] ffffffff8be44700: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 178.995762][ T6936] ffffffff8be44780: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 178.995779][ T6936] >ffffffff8be44800: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 178.995791][ T6936] ^ [ 178.995803][ T6936] ffffffff8be44880: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 178.995817][ T6936] ffffffff8be44900: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 178.995829][ T6936] ================================================================== [ 178.995844][ T6936] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.995858][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.4.251 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 178.995876][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.995886][ T6936] Call Trace: [ 178.995892][ T6936] [ 178.995898][ T6936] dump_stack_lvl+0x99/0x250 [ 178.995927][ T6936] ? __asan_memcpy+0x40/0x70 [ 178.995958][ T6936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.995982][ T6936] ? __pfx__printk+0x10/0x10 [ 178.996013][ T6936] panic+0x2db/0x790 [ 178.996032][ T6936] ? __pfx_panic+0x10/0x10 [ 178.996048][ T6936] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 178.996088][ T6936] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.996123][ T6936] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.996157][ T6936] ? print_memory_metadata+0x314/0x400 [ 178.996183][ T6936] ? bit_putcs+0x135b/0x1a50 [ 178.996205][ T6936] check_panic_on_warn+0x89/0xb0 [ 178.996243][ T6936] ? bit_putcs+0x135b/0x1a50 [ 178.996273][ T6936] end_report+0x78/0x160 [ 178.996293][ T6936] kasan_report+0x129/0x150 [ 178.996313][ T6936] ? queue_work_on+0x1ed/0x270 [ 178.996332][ T6936] ? bit_putcs+0x135b/0x1a50 [ 178.996357][ T6936] bit_putcs+0x135b/0x1a50 [ 178.996411][ T6936] ? __pfx_bit_putcs+0x10/0x10 [ 178.996444][ T6936] ? __pfx_bit_cursor+0x10/0x10 [ 178.996471][ T6936] ? do_raw_spin_lock+0x121/0x290 [ 178.996497][ T6936] fbcon_putcs+0x3e2/0x5f0 [ 178.996522][ T6936] ? __pfx_bit_putcs+0x10/0x10 [ 178.996557][ T6936] hide_cursor+0x352/0x480 [ 178.996581][ T6936] ? __pfx_hide_cursor+0x10/0x10 [ 178.996611][ T6936] do_con_write+0x193/0x5200 [ 178.996636][ T6936] ? desc_read+0x1b8/0x3f0 [ 178.996655][ T6936] ? prb_first_seq+0xfd/0x1a0 [ 178.996685][ T6936] ? __pfx_prb_first_seq+0x10/0x10 [ 178.996716][ T6936] ? __lock_acquire+0xab9/0xd20 [ 178.996740][ T6936] ? __mutex_trylock_common+0x153/0x260 [ 178.996768][ T6936] ? __pfx___mutex_trylock_common+0x10/0x10 [ 178.996788][ T6936] ? __pfx_do_con_write+0x10/0x10 [ 178.996811][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.996835][ T6936] ? trace_contention_end+0x39/0x120 [ 178.996864][ T6936] ? __mutex_lock+0x330/0xe80 [ 178.996889][ T6936] ? n_tty_write+0xd45/0x11d0 [ 178.996914][ T6936] ? n_tty_write+0xdcd/0x11d0 [ 178.996930][ T6936] ? prb_read_valid+0x3c/0x60 [ 178.996947][ T6936] ? __pfx___mutex_lock+0x10/0x10 [ 178.996964][ T6936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.996994][ T6936] con_write+0x24/0x40 [ 178.997026][ T6936] do_output_char+0x647/0x970 [ 178.997051][ T6936] n_tty_write+0xde3/0x11d0 [ 178.997082][ T6936] ? __pfx_n_tty_write+0x10/0x10 [ 178.997098][ T6936] ? __pfx_woken_wake_function+0x10/0x10 [ 178.997123][ T6936] ? file_tty_write+0x2e8/0x990 [ 178.997154][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.997178][ T6936] ? kfree+0x4d/0x440 [ 178.997210][ T6936] ? __pfx_n_tty_write+0x10/0x10 [ 178.997231][ T6936] file_tty_write+0x500/0x990 [ 178.997255][ T6936] vfs_write+0x54b/0xa90 [ 178.997271][ T6936] ? __pfx_tty_write+0x10/0x10 [ 178.997301][ T6936] ? __pfx_vfs_write+0x10/0x10 [ 178.997329][ T6936] ? __fget_files+0x2a/0x420 [ 178.997357][ T6936] ksys_write+0x145/0x250 [ 178.997378][ T6936] ? __pfx_ksys_write+0x10/0x10 [ 178.997392][ T6936] ? rcu_is_watching+0x15/0xb0 [ 178.997411][ T6936] ? do_syscall_64+0xbe/0x3b0 [ 178.997432][ T6936] do_syscall_64+0xfa/0x3b0 [ 178.997461][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.997483][ T6936] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 178.997504][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 178.997529][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.997545][ T6936] RIP: 0033:0x7f7c5fb8ebe9 [ 178.997558][ T6936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.997571][ T6936] RSP: 002b:00007f7c60a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.997591][ T6936] RAX: ffffffffffffffda RBX: 00007f7c5fdb5fa0 RCX: 00007f7c5fb8ebe9 [ 178.997609][ T6936] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 178.997625][ T6936] RBP: 00007f7c5fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 178.997639][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.997652][ T6936] R13: 00007f7c5fdb6038 R14: 00007f7c5fdb5fa0 R15: 00007ffe985bea28 [ 178.997683][ T6936] [ 178.997957][ T6936] Kernel Offset: disabled