last executing test programs: 8.365903686s ago: executing program 1 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 7.045861467s ago: executing program 2 (id=179): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000080)="bd62ed5cb0bc6e3ee4b95125a490016b5635379ead899c23de2891f9a62c95b33c8e2a63e774b8a724853483f1401f70c5bea33e6204d5f10ff6dd008fc81dcbc86676747a757c4c3e6cecc368f0f4fdac86cdae", 0x54, 0x80000, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000380)="4e81", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) shutdown(r3, 0x1) 6.379087791s ago: executing program 0 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0xf111}) r2 = socket(0x0, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="790000bee04e1c6aee94f80000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x28}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x44c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x41c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x400}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x44c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {0x9, 0x1}, {0xffff, 0x2}}}, 0x24}}, 0x20048010) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x0) semget$private(0x0, 0x4000, 0x409) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c085) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0xfe88) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x2000}) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 6.273185047s ago: executing program 1 (id=181): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0xefed559896f81dcc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac2(0x3, 0xc8, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x6a, 0xc0, 0xdd, {0x8, 0xb, 0x1, 0x0, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x2, 0x34, 0xa}, [@processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x3, 0x1, 0x1, 0x1, 0x0, 0x1]}, @effect_unit={0x13, 0x24, 0x7, 0x6, 0x2, 0x5, [0x3, 0x2, 0x2, 0x3, 0x3, 0x2]}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x26, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x2, 0x0, 0x5, 0x83a, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x55, 0x0, 0x9, {0x8, 0x25, 0x1, 0x82, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x10, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0xf, 0xc, 0x4f7e}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x9, 0x6, 0x8, 0x2}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0xee, &(0x7f0000000400)=@string={0xee, 0x3, "1a567f7204a06f76e675e1585abafe9f1cbd5abbd35f9e9c4a438a17850792bc3268b0f5ceaed2fe38e97e9761b6803950b95a88e33e205fc166384fce9f86015b5bdc242a415efeb7351fb28842fe79b4f8519e52ea5836bd6e41a8f4570745dddb82d2d52fda7e25e848c5d59242e2dbf4509dcbd50474f296fb7d20274bbe13ef2d80e0dd1f3d795ca2450f4fcc63e6aa6237e432910781abf63cb0f0eaa631549dcbbda06bb581c5098098d0bc6ba22d1d33050a12cd5ad58ce5c8d946c4acaa3827b6fccd8af9eb589f03bc31b9761b9058ca2bf801c7f8994bad1bf88cebe054c006db2bd3278deca1"}}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x10}}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000011}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) write$input_event(r8, &(0x7f0000000140)={{}, 0x3, 0x3, 0x5}, 0x10) 5.668625786s ago: executing program 2 (id=183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.754977759s ago: executing program 0 (id=184): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r5, 0xe, 0x5, "8e4a96577b"}, 0xd) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.498442839s ago: executing program 2 (id=186): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x0, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003000000000000080045300000400008019078ac1e0001ac142400004500000000010000fc0100077f000001640100fa4a8122a691f8ee23f224f268aba455fddfd313f14b794945448fec74b84167a0ba790037b9377296a31bed47298862fabc57440a61b547d70368e8105499b42f6ade0c08e1f578b67cf1a61d276445ff95e27bbd59f34065bca1a32db69dab71a1296dd6c3c9eae17d103cf1e3d8dcd6a87f01d5dbb6087e97747b61de5ec3d11d23d4dccb6f80cae943a666c33b3166cd1e0f987a839e81fa6b0e49cb"], 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r2, 0x40000) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r3, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc0002009}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1) 3.788494205s ago: executing program 3 (id=187): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0), 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, 0xffffffffffffffff, 0x0) close_range(r6, r0, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r9, r10+60000000}) 3.565892067s ago: executing program 2 (id=188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008000300d2"], 0x24}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x21, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x105, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.356496896s ago: executing program 3 (id=189): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r3, r5, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r7, r7) 3.276649387s ago: executing program 0 (id=190): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)={r6, 0xe, 0x5, "8e4a96577b"}, 0xd) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.106981624s ago: executing program 2 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 2.953531575s ago: executing program 1 (id=192): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r7, 0xe, 0x5, "8e4a96577b"}, 0xd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.42696808s ago: executing program 3 (id=193): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x15) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r3, r6, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r8, r8) 2.319021695s ago: executing program 1 (id=194): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc", 0xf}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 2.022263671s ago: executing program 0 (id=195): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdir(&(0x7f00000000c0)='./file0\x00', 0x101) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 1.890086299s ago: executing program 1 (id=196): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r7, 0xe, 0x5, "8e4a96577b"}, 0xd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.86884943s ago: executing program 0 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 1.100233257s ago: executing program 2 (id=198): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, 0x0}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000580)=0xc) rt_sigqueueinfo(r3, 0x34, &(0x7f00000005c0)={0xe, 0x4, 0x9}) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r4, 0x3, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000001140)) syz_usb_control_io$rtl8150(r2, &(0x7f00000002c0)={0xc, &(0x7f0000000080)={0x0, 0x7, 0x1b, {0x1b, 0x21, "9ba1d74a770e1b5a8cc5ab37213fa6d3e5aa10c96237656161"}}, &(0x7f0000000180)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}}, &(0x7f00000004c0)={0x18, &(0x7f0000000300)={0x40, 0x6, 0x93, "f2466b3c602ed98efae58343f0b2d1017de0d2ce00e2cee4bba026d2ddb2ccd435b7aca83c12c284be6645081e5e5b7c6fec3e3155e36f307caa5ae4d6b22118780718a10931f069e1bd42c9a64ab74d7a48a97da842d8708aa116b59e4fccb99e01eb74c128e538b086765e0def27216054134034a83688e305aa7b279544aab80f385895da2222604b1e6a3c2f93a06e326c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000440)={0xc0, 0x5, 0x2, "f374"}, &(0x7f0000000480)={0x40, 0x5, 0x1, "c7"}}) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) pread64(r5, 0x0, 0x2f, 0x200000003) 1.082971938s ago: executing program 3 (id=199): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 830.883849ms ago: executing program 1 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 622.408268ms ago: executing program 0 (id=201): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r3, r5, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r7, r7) 110.250023ms ago: executing program 3 (id=202): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 0s ago: executing program 3 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9958' (ED25519) to the list of known hosts. [ 41.920352][ T5689] cgroup: Unknown subsys name 'net' [ 42.057486][ T5689] cgroup: Unknown subsys name 'cpuset' [ 42.061547][ T5689] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.023175][ T5689] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.921779][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.930302][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.935215][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.942282][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.942576][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.943266][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.944503][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.945126][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.945778][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.947057][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.947264][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.947731][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.947873][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.949170][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.953960][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.957051][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.965090][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.967450][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.969244][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.970963][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.598855][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.601846][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.604996][ T5740] bridge_slave_0: entered allmulticast mode [ 47.608980][ T5740] bridge_slave_0: entered promiscuous mode [ 47.613750][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.618060][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.620256][ T5740] bridge_slave_1: entered allmulticast mode [ 47.625549][ T5740] bridge_slave_1: entered promiscuous mode [ 47.681911][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.684374][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.686600][ T5741] bridge_slave_0: entered allmulticast mode [ 47.689130][ T5741] bridge_slave_0: entered promiscuous mode [ 47.692615][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.695002][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.697229][ T5741] bridge_slave_1: entered allmulticast mode [ 47.699821][ T5741] bridge_slave_1: entered promiscuous mode [ 47.718667][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.738201][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.740560][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.742849][ T5750] bridge_slave_0: entered allmulticast mode [ 47.746326][ T5750] bridge_slave_0: entered promiscuous mode [ 47.750052][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.752964][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.755506][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.757709][ T5746] bridge_slave_0: entered allmulticast mode [ 47.760215][ T5746] bridge_slave_0: entered promiscuous mode [ 47.763874][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.766149][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.768373][ T5746] bridge_slave_1: entered allmulticast mode [ 47.770974][ T5746] bridge_slave_1: entered promiscuous mode [ 47.775555][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.778929][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.781226][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.783629][ T5750] bridge_slave_1: entered allmulticast mode [ 47.786389][ T5750] bridge_slave_1: entered promiscuous mode [ 47.813762][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.839823][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.844001][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.848369][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.858174][ T5741] team0: Port device team_slave_0 added [ 47.861307][ T5740] team0: Port device team_slave_0 added [ 47.865177][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.876790][ T5741] team0: Port device team_slave_1 added [ 47.884786][ T5740] team0: Port device team_slave_1 added [ 47.928345][ T5746] team0: Port device team_slave_0 added [ 47.930672][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.934267][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.945166][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.950198][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.952504][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.961282][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.965745][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.967986][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.975988][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.980600][ T5750] team0: Port device team_slave_0 added [ 47.983374][ T5746] team0: Port device team_slave_1 added [ 47.985888][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.988521][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.997875][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.012886][ T5750] team0: Port device team_slave_1 added [ 48.027503][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.029721][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.039297][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.066438][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.068792][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.076942][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.089641][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.091848][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.100141][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.117087][ T5740] hsr_slave_0: entered promiscuous mode [ 48.119430][ T5740] hsr_slave_1: entered promiscuous mode [ 48.123227][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.125622][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.133590][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.140586][ T5741] hsr_slave_0: entered promiscuous mode [ 48.142860][ T5741] hsr_slave_1: entered promiscuous mode [ 48.145148][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.147433][ T5741] Cannot create hsr debugfs directory [ 48.206330][ T5750] hsr_slave_0: entered promiscuous mode [ 48.209043][ T5750] hsr_slave_1: entered promiscuous mode [ 48.211256][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 48.213279][ T5750] Cannot create hsr debugfs directory [ 48.227091][ T5746] hsr_slave_0: entered promiscuous mode [ 48.230112][ T5746] hsr_slave_1: entered promiscuous mode [ 48.232915][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.234795][ T5746] Cannot create hsr debugfs directory [ 48.480049][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.490566][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.494816][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.501744][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.505369][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.511055][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.519687][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.530074][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.571303][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.576127][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.578810][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.583975][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.589847][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.595191][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.597855][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.601658][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.657533][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.664786][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.667626][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.672358][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.675332][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.680610][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.684563][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.689345][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.745868][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.749637][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.755933][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.759596][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.764066][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.768347][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.774802][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.778449][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.783478][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.818398][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.823037][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.840429][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.843236][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.865335][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868134][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.872627][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.887070][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.902147][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.905175][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.916303][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.924990][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.927878][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938278][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.941315][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.947882][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.950875][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.975898][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.992082][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.015038][ T5747] Bluetooth: hci3: command tx timeout [ 49.015046][ T5102] Bluetooth: hci1: command tx timeout [ 49.024163][ T5747] Bluetooth: hci2: command tx timeout [ 49.024261][ T5102] Bluetooth: hci0: command tx timeout [ 49.031184][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.049474][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.052555][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.077930][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.080822][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.317783][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.329660][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.388723][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.391205][ T5741] veth0_vlan: entered promiscuous mode [ 49.395799][ T5740] veth0_vlan: entered promiscuous mode [ 49.401354][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.406053][ T5741] veth1_vlan: entered promiscuous mode [ 49.422365][ T5740] veth1_vlan: entered promiscuous mode [ 49.468170][ T5741] veth0_macvtap: entered promiscuous mode [ 49.472659][ T5741] veth1_macvtap: entered promiscuous mode [ 49.476490][ T5740] veth0_macvtap: entered promiscuous mode [ 49.480798][ T5746] veth0_vlan: entered promiscuous mode [ 49.493005][ T5740] veth1_macvtap: entered promiscuous mode [ 49.496146][ T5750] veth0_vlan: entered promiscuous mode [ 49.505436][ T5746] veth1_vlan: entered promiscuous mode [ 49.516465][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.521535][ T5750] veth1_vlan: entered promiscuous mode [ 49.531216][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.535952][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.566261][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.591661][ T5746] veth0_macvtap: entered promiscuous mode [ 49.612012][ T5746] veth1_macvtap: entered promiscuous mode [ 49.616753][ T5750] veth0_macvtap: entered promiscuous mode [ 49.632685][ T5750] veth1_macvtap: entered promiscuous mode [ 49.652671][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.677480][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.694553][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.716783][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.722274][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.725101][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.727181][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.729011][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.753212][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.758427][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.786919][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.789869][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.834408][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.836978][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.856567][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.865149][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.865698][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.868418][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.870431][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.879927][ T5741] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.884619][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.886047][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.887897][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.890978][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.907427][ T5741] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.914083][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.919775][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.922325][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.954326][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.961482][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.014123][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.018620][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.039006][ T5897] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 50.044127][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.045535][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.047152][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047175][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047195][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047214][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047233][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047257][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047276][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.084216][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.160261][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.163587][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.228926][ T5907] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.233671][ T5907] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.238990][ T5907] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.269262][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.271311][ T5907] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.295400][ T5907] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.477553][ T5913] ref_ctr_offset mismatch. inode: 0x12 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 51.106149][ T5102] Bluetooth: hci2: command tx timeout [ 51.108232][ T5102] Bluetooth: hci3: command tx timeout [ 51.110103][ T5102] Bluetooth: hci0: command tx timeout [ 51.112089][ T5102] Bluetooth: hci1: command tx timeout [ 51.271741][ T5910] siw: device registration error -23 [ 51.363405][ T5926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6'. [ 51.639892][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 51.907196][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 51.914184][ T5946] siw: device registration error -23 [ 52.928642][ T5749] udevd[5749]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 53.053510][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 53.186974][ T5747] Bluetooth: hci1: command tx timeout [ 53.188652][ T5747] Bluetooth: hci0: command tx timeout [ 53.190879][ T5102] Bluetooth: hci3: command tx timeout [ 53.192556][ T5102] Bluetooth: hci2: command tx timeout [ 53.300871][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 53.335571][ T5965] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 53.346038][ T5962] IPVS: stopping backup sync thread 5965 ... [ 53.402764][ T5754] udevd[5754]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 53.408586][ T5964] udevd[5964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 53.462117][ T5967] ref_ctr_offset mismatch. inode: 0x1d offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 53.934012][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 54.484438][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.664135][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 54.695340][ T29] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 54.714380][ T29] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 54.724743][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.731552][ T29] usb 7-1: Product: syz [ 54.737766][ T29] usb 7-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 54.906490][ T29] usb 7-1: SerialNumber: syz [ 55.081130][ T5991] __nla_validate_parse: 1 callbacks suppressed [ 55.081143][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 55.264608][ T5747] Bluetooth: hci0: command tx timeout [ 55.266413][ T5747] Bluetooth: hci2: command tx timeout [ 55.268355][ T5747] Bluetooth: hci3: command tx timeout [ 55.270139][ T64] Bluetooth: hci1: command tx timeout [ 55.945261][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 56.551018][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.723983][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 56.728401][ T6021] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 56.729744][ T6002] IPVS: stopping backup sync thread 6021 ... [ 56.741928][ T60] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 56.748258][ T60] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 56.751240][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.763339][ T29] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 56.767282][ T60] usb 8-1: Product: syz [ 56.768797][ T60] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 56.783987][ T60] usb 8-1: SerialNumber: syz [ 56.927297][ T29] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.947022][ T29] usb 7-1: USB disconnect, device number 2 [ 57.060842][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.134593][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.146176][ T6033] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 57.162560][ T6030] IPVS: stopping backup sync thread 6033 ... [ 57.201813][ T60] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 57.225491][ T60] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.234906][ T60] usb 8-1: USB disconnect, device number 2 [ 57.251496][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.382403][ T6035] Need at least one configuration in g1. [ 57.386560][ T6035] udc dummy_udc.0: failed to start g1: -22 [ 57.389138][ T6035] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 57.395047][ T6035] UDC core: g1: couldn't find an available UDC or it's busy [ 57.633925][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.831603][ T6043] ======================================================= [ 57.831603][ T6043] WARNING: The mand mount option has been deprecated and [ 57.831603][ T6043] and is ignored by this kernel. Remove the mand [ 57.831603][ T6043] option from the mount to silence this warning. [ 57.831603][ T6043] ======================================================= [ 57.883877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.062837][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 58.261923][ T6035] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 58.272774][ T60] IPVS: starting estimator thread 0... [ 58.384105][ T6049] IPVS: using max 43 ests per chain, 103200 per kthread [ 58.699097][ T5820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 58.702389][ T5820] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 58.704900][ T5820] usb 6-1: can't read configurations, error -71 [ 59.175902][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'. [ 59.927591][ T6077] Need at least one configuration in g1. [ 59.929428][ T6077] udc dummy_udc.0: failed to start g1: -22 [ 59.948128][ T6077] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 59.955183][ T6077] UDC core: g1: couldn't find an available UDC or it's busy [ 60.193956][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.419100][ T6077] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 60.422159][ T5835] IPVS: starting estimator thread 0... [ 60.475838][ T5893] usb 8-1: unable to get BOS descriptor or descriptor too short [ 60.484854][ T5893] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 60.487253][ T5893] usb 8-1: can't read configurations, error -71 [ 60.514002][ T6095] IPVS: using max 43 ests per chain, 103200 per kthread [ 60.854901][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 61.148074][ T6110] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.207068][ T6114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.285091][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36'. [ 61.288202][ T6115] nbd: must specify at least one socket [ 61.924463][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.928392][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.997951][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.004598][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.075513][ T5849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.080308][ T5849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.083996][ T5849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.088122][ T5849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.231566][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 62.440224][ T6134] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 62.445329][ T6128] IPVS: stopping backup sync thread 6134 ... [ 62.564145][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 62.621804][ T6138] siw: device registration error -23 [ 62.625410][ T6140] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 62.633958][ T6140] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 62.727239][ T42] audit: type=1326 audit(1785595687.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.745727][ T42] audit: type=1326 audit(1785595687.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.763993][ T42] audit: type=1326 audit(1785595687.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.781787][ T42] audit: type=1326 audit(1785595687.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.792865][ T42] audit: type=1326 audit(1785595687.903:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.801542][ T42] audit: type=1326 audit(1785595687.903:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.808524][ T42] audit: type=1326 audit(1785595687.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.808550][ T42] audit: type=1326 audit(1785595687.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.808571][ T42] audit: type=1326 audit(1785595687.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.808593][ T42] audit: type=1326 audit(1785595687.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.1.45" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 62.915778][ T6144] syzkaller0: entered promiscuous mode [ 62.923915][ T6144] syzkaller0: entered allmulticast mode [ 62.934109][ T55] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 62.969834][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 62.972531][ T6147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.44'. [ 63.103154][ T6140] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 63.479364][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 63.532916][ T6154] siw: device registration error -23 [ 64.066979][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.081942][ T55] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 64.090367][ T55] usb 8-1: can't read configurations, error -71 [ 64.446168][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.49'. [ 64.448957][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'. [ 64.451677][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.49'. [ 65.316627][ T6164] comedi comedi3: comedi_config --init_data is deprecated [ 65.337449][ T6164] dlm: non-version read from control device 36 [ 65.357229][ T6162] siw: device registration error -23 [ 65.652368][ T6164] fuse: Bad value for 'user_id' [ 65.654074][ T6164] fuse: Bad value for 'user_id' [ 65.684003][ T55] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 65.757323][ T6179] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 65.760788][ T6178] IPVS: stopping backup sync thread 6179 ... [ 65.904126][ T6171] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 65.914709][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 65.919230][ T55] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 65.922619][ T55] usb 8-1: can't read configurations, error -71 [ 66.095656][ T6183] syzkaller1: entered promiscuous mode [ 66.097827][ T6183] syzkaller1: entered allmulticast mode [ 66.225634][ T6187] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 66.226337][ T6186] IPVS: stopping backup sync thread 6187 ... [ 67.187353][ T6194] __nla_validate_parse: 1 callbacks suppressed [ 67.187371][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 67.195081][ T6194] siw: device registration error -23 [ 67.364010][ T55] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 67.430240][ T6199] IPVS: stopping backup sync thread 6198 ... [ 67.604085][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 67.615647][ T55] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 67.626487][ T55] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 67.634813][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.638395][ T55] usb 8-1: Product: syz [ 67.640354][ T55] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 67.657250][ T55] usb 8-1: SerialNumber: syz [ 68.262902][ T55] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 68.350653][ T55] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.358959][ T55] usb 8-1: USB disconnect, device number 9 [ 68.371140][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.484695][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 68.866859][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 69.122873][ T5964] udevd[5964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 69.250017][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 69.263734][ T5964] udevd[5964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.114693][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 70.118403][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 70.121910][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 70.278163][ T6236] IPVS: stopping backup sync thread 6238 ... [ 70.335795][ T6233] mmap: syz.2.69 (6233) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.339362][ T42] kauditd_printk_skb: 3085 callbacks suppressed [ 70.339374][ T42] audit: type=1326 audit(1785595695.493:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.347832][ T42] audit: type=1326 audit(1785595695.493:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.354166][ T42] audit: type=1326 audit(1785595695.493:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.362540][ T42] audit: type=1326 audit(1785595695.493:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.373231][ T42] audit: type=1326 audit(1785595695.493:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.382042][ T42] audit: type=1326 audit(1785595695.503:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.388986][ T42] audit: type=1326 audit(1785595695.513:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.69" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 70.494821][ T6246] Zero length message leads to an empty skb [ 70.693931][ T5894] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.853920][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 70.862199][ T5894] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 70.867874][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 70.876087][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.881627][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 70.887524][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.891777][ T5894] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.899989][ T5894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.903906][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.954642][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.957676][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.119507][ T5894] usb 7-1: GET_CAPABILITIES returned 0 [ 71.121414][ T5894] usbtmc 7-1:16.0: can't read capabilities [ 71.492213][ T6249] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 73.735120][ T5834] usb 7-1: USB disconnect, device number 3 [ 73.892769][ T6305] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 73.900440][ T6304] IPVS: stopping backup sync thread 6305 ... [ 74.722345][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 74.732482][ T6310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.80'. [ 75.024605][ T6312] ref_ctr_offset mismatch. inode: 0x75 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 75.484034][ T1043] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.644328][ T1043] usb 5-1: Using ep0 maxpacket: 16 [ 75.778237][ T1043] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 75.789355][ T1043] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 75.793120][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.796326][ T1043] usb 5-1: Product: syz [ 75.798004][ T1043] usb 5-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 75.810095][ T1043] usb 5-1: SerialNumber: syz [ 76.270677][ T1043] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 76.315605][ T1043] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.323983][ T1043] usb 5-1: USB disconnect, device number 2 [ 76.334322][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 76.337430][ T6320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.82'. [ 76.350302][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.370507][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 76.504943][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 76.649223][ T6332] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 76.650655][ T6331] IPVS: stopping backup sync thread 6332 ... [ 77.026822][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 77.829216][ T6342] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 77.831691][ T6341] IPVS: stopping backup sync thread 6342 ... [ 77.885938][ T6346] comedi comedi3: comedi_config --init_data is deprecated [ 77.898456][ T6346] dlm: non-version read from control device 36 [ 78.165425][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 78.310015][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 78.312818][ T6340] nbd: must specify at least one socket [ 78.712553][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 78.715939][ T6356] siw: device registration error -23 [ 78.785147][ T6362] overlayfs: missing 'lowerdir' [ 78.821770][ T6362] overlayfs: overlapping lowerdir path [ 78.833000][ T6365] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 78.836578][ T6364] IPVS: stopping backup sync thread 6365 ... [ 79.355070][ T6368] tipc: Enabling of bearer rejected, failed to enable media [ 79.737407][ T5747] Bluetooth: hci1: command 0x0406 tx timeout [ 80.917802][ T6385] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 80.928109][ T6388] IPVS: stopping backup sync thread 6385 ... [ 80.950235][ T6391] IPVS: stopping backup sync thread 6393 ... [ 80.994075][ T5892] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 81.158273][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 81.177298][ T5892] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 81.201239][ T5892] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 81.204343][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.216787][ T5892] usb 8-1: Product: syz [ 81.226826][ T5892] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 81.284225][ T5892] usb 8-1: SerialNumber: syz [ 81.612475][ T40] cfg80211: failed to load regulatory.db [ 82.955892][ T5892] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 83.006027][ T5892] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.021163][ T5892] usb 8-1: USB disconnect, device number 10 [ 83.031179][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.270197][ T6399] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 83.272768][ T6399] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 83.497777][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.598476][ T6410] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 83.600816][ T6410] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 83.663501][ T6399] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 83.669082][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 83.671975][ T60] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 83.674567][ T60] usb 6-1: can't read configurations, error -71 [ 83.735226][ T6418] UDC core: g1: couldn't find an available UDC or it's busy [ 83.864011][ T5894] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.974158][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.045378][ T6410] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 84.126401][ T5894] usb 8-1: unable to get BOS descriptor or descriptor too short [ 84.130758][ T5894] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 84.134440][ T5894] usb 8-1: can't read configurations, error -71 [ 84.196980][ T6418] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 84.197218][ T40] IPVS: starting estimator thread 0... [ 84.242425][ T5893] usb 7-1: unable to get BOS descriptor or descriptor too short [ 84.246755][ T5893] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 84.249817][ T5893] usb 7-1: can't read configurations, error -71 [ 84.283978][ T6428] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.848205][ T6448] comedi comedi3: comedi_config --init_data is deprecated [ 85.004167][ T6454] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 85.009851][ T6452] IPVS: stopping backup sync thread 6454 ... [ 85.263635][ T6457] fuse: Bad value for 'user_id' [ 85.275755][ T6457] fuse: Bad value for 'user_id' [ 86.123212][ T6464] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 86.135163][ T6464] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 86.139792][ T6465] __nla_validate_parse: 5 callbacks suppressed [ 86.139848][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 86.381672][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 86.583969][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.774617][ T5892] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 87.113272][ T6464] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.120476][ T6475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 87.124146][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 87.127541][ T6475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 87.127553][ T1043] IPVS: starting estimator thread 0... [ 87.164641][ T5892] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.174090][ T5892] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.177837][ T5892] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.208888][ T5892] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.213741][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.219366][ T5892] usb 8-1: Product: syz [ 87.220718][ T5892] usb 8-1: Manufacturer: syz [ 87.222165][ T5892] usb 8-1: SerialNumber: syz [ 87.243171][ T6477] IPVS: using max 43 ests per chain, 103200 per kthread [ 87.406983][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.410148][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 87.412605][ T5894] usb 5-1: can't read configurations, error -71 [ 87.477780][ T6482] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 87.480095][ T6482] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 87.480693][ T6480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.123'. [ 87.490256][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 87.496110][ T6480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.123'. [ 87.904983][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.066165][ T6485] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 88.068421][ T6485] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 88.114320][ T5894] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 88.122316][ T5894] usb usb5-port1: attempt power cycle [ 88.144210][ T6482] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 88.158818][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 88.163150][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 88.166111][ T10] usb 6-1: can't read configurations, error -71 [ 88.464006][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.482531][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 88.489446][ T6489] siw: device registration error -23 [ 88.501244][ T6485] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 88.620668][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.627188][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 88.629839][ T5894] usb 5-1: can't read configurations, error -71 [ 88.632835][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 88.922437][ T6498] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 88.926082][ T6497] IPVS: stopping backup sync thread 6498 ... [ 89.254387][ T5892] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.261474][ T5892] usb 8-1: USB disconnect, device number 13 [ 89.266282][ T5892] usblp0: removed [ 89.733913][ T5530] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.081305][ T6510] siw: device registration error -23 [ 90.216410][ T5530] usb 7-1: Using ep0 maxpacket: 16 [ 90.468957][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.473574][ T5530] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.478887][ T5530] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.482604][ T5530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.488366][ T5530] usb 7-1: config 0 descriptor?? [ 90.762749][ T6526] siw: device registration error -23 [ 90.946099][ T6529] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 91.086518][ T6537] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 91.089503][ T6536] IPVS: stopping backup sync thread 6537 ... [ 91.290774][ T6542] Bluetooth: MGMT ver 1.23 [ 91.789921][ T5530] usbhid 7-1:0.0: can't add hid device: -71 [ 91.791888][ T5530] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 92.353420][ T6546] __nla_validate_parse: 4 callbacks suppressed [ 92.353472][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 92.368693][ T6546] siw: device registration error -23 [ 92.671461][ T5530] usb 7-1: USB disconnect, device number 6 [ 92.800888][ T6532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 92.803164][ T6532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.807237][ T6532] vhci_hcd vhci_hcd.0: Device attached [ 92.846010][ T6549] vhci_hcd: connection closed [ 92.846773][ T5849] vhci_hcd vhci_hcd.3: stop threads [ 92.850700][ T5849] vhci_hcd vhci_hcd.3: release socket [ 92.852647][ T5849] vhci_hcd vhci_hcd.3: disconnect device [ 93.254825][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 93.255931][ T5102] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.334026][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 93.334093][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.334118][ T6541] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 93.336067][ T6541] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 93.338077][ T5747] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.129668][ T6541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.136421][ T6541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.139021][ T6541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.143249][ T6541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.147899][ T6541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.149939][ T6541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.154187][ T6541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.232979][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 94.253278][ T6556] siw: device registration error -23 [ 94.297412][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 94.404047][ T5892] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 94.563579][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.570296][ T5892] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 94.579035][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.645626][ T40] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.648054][ T5892] as10x_usb: device has been detected [ 94.659037][ T5892] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 94.793241][ T5892] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 94.886554][ T5892] as10x_usb: error during firmware upload part1 [ 94.892322][ T5892] Registered device Abilis Systems DVB-Titan [ 95.297303][ T6573] process 'syz.3.139' launched '/dev/fd/10' with NULL argv: empty string added [ 95.379436][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'. [ 95.415520][ T5747] Bluetooth: hci1: command 0x0406 tx timeout [ 96.069562][ T6558] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 96.092706][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.097422][ T40] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 96.099929][ T40] usb 5-1: can't read configurations, error -71 [ 96.223968][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.226285][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.398413][ T5964] udevd[5964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 97.252792][ T6595] comedi comedi3: comedi_config --init_data is deprecated [ 97.494006][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 97.497749][ T6595] fuse: Bad value for 'user_id' [ 97.499896][ T6595] fuse: Bad value for 'user_id' [ 97.636853][ T55] usb 8-1: USB disconnect, device number 14 [ 97.682008][ T55] Unregistered device Abilis Systems DVB-Titan [ 97.689311][ T55] as10x_usb: device has been disconnected [ 97.707460][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 97.809625][ T6607] IPVS: stopping backup sync thread 6609 ... [ 97.827096][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 97.830039][ T6608] nbd: must specify at least one socket [ 97.839871][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 98.294903][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.297272][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.838390][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.891793][ T6618] siw: device registration error -23 [ 98.971404][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 99.009844][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 99.107828][ T6623] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 99.111703][ T6623] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 99.129477][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.136105][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.141915][ T6623] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.276422][ T6626] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 99.279868][ T6626] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 99.426333][ T6630] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 99.426959][ T6629] IPVS: stopping backup sync thread 6630 ... [ 99.544925][ T5530] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 99.731016][ T6626] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.755103][ T5530] usb 8-1: unable to get BOS descriptor or descriptor too short [ 99.775381][ T5530] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 99.784215][ T5530] usb 8-1: can't read configurations, error -71 [ 100.013939][ T1043] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 100.187993][ T1043] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.195314][ T1043] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 100.198244][ T1043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 100.201022][ T1043] usb 7-1: Product: syz [ 100.202343][ T1043] usb 7-1: Manufacturer: syz [ 100.203818][ T1043] usb 7-1: SerialNumber: syz [ 100.384444][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.386996][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.470453][ T6636] IPVS: stopping backup sync thread 6637 ... [ 100.574749][ T6641] comedi comedi3: comedi_config --init_data is deprecated [ 100.618742][ T1043] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.726842][ T6641] fuse: Bad value for 'user_id' [ 100.728488][ T6641] fuse: Bad value for 'user_id' [ 100.873944][ T5530] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 101.040236][ T6639] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.116205][ T5530] usb 8-1: unable to get BOS descriptor or descriptor too short [ 101.122792][ T5530] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 101.128564][ T5530] usb 8-1: can't read configurations, error -71 [ 101.133191][ T5530] usb usb8-port1: attempt power cycle [ 101.533960][ T1043] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.684057][ T1043] usb 5-1: Using ep0 maxpacket: 16 [ 101.737382][ T1043] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 101.748467][ T1043] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 101.771213][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.774964][ T1043] usb 5-1: Product: syz [ 101.776690][ T1043] usb 5-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 101.789304][ T1043] usb 5-1: SerialNumber: syz [ 101.812690][ T6652] syzkaller0: entered promiscuous mode [ 101.816572][ T6652] syzkaller0: entered allmulticast mode [ 102.054061][ T5834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.054977][ T1043] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 102.085739][ T1043] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.093532][ T1043] usb 5-1: USB disconnect, device number 9 [ 102.108078][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.209960][ T6657] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.218552][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.223658][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 102.226356][ T5834] usb 6-1: can't read configurations, error -71 [ 102.751863][ T1043] usb 7-1: USB disconnect, device number 7 [ 102.880804][ T1043] usblp0: removed [ 102.892437][ T6666] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 102.898361][ T6665] IPVS: stopping backup sync thread 6666 ... [ 102.961092][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 104.006714][ T6669] netlink: 84 bytes leftover after parsing attributes in process `syz.0.174'. [ 104.019366][ T6669] tipc: Enabling of bearer rejected, failed to enable media [ 104.072367][ T6674] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 104.140731][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 104.147906][ T6679] siw: device registration error -23 [ 104.148274][ T6680] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 104.154259][ T6678] IPVS: stopping backup sync thread 6680 ... [ 104.504724][ T6674] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 105.120332][ T40] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.304853][ T40] usb 5-1: Dual-Role OTG device on HNP port [ 105.310138][ T40] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 105.316667][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.346279][ T6689] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 105.348951][ T6689] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 105.351285][ T40] gspca_main: spca501-2.14.0 probing 0000:0000 [ 105.355752][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.358764][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.366538][ T6689] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.375554][ T40] gspca_spca501: reg write: error -71 [ 105.377603][ T40] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 105.390873][ T40] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 105.411090][ T40] usb 5-1: USB disconnect, device number 10 [ 105.414216][ T5530] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.461697][ T6694] syzkaller0: entered promiscuous mode [ 105.463581][ T6694] syzkaller0: entered allmulticast mode [ 105.570286][ T6674] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.577980][ T5530] usb 6-1: unable to get BOS descriptor or descriptor too short [ 105.581083][ T5530] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 105.583501][ T5530] usb 6-1: can't read configurations, error -71 [ 105.644032][ T29] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 105.802021][ T6687] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.810461][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 105.814038][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 105.816793][ T29] usb 8-1: can't read configurations, error -71 [ 106.429779][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 106.831535][ T5530] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 107.172095][ T6709] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 107.176417][ T6708] IPVS: stopping backup sync thread 6709 ... [ 107.625337][ T5530] usb 6-1: Using ep0 maxpacket: 16 [ 107.986477][ T6718] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 107.987028][ T6717] IPVS: stopping backup sync thread 6718 ... [ 108.188572][ T5530] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 108.407508][ T5530] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 108.411572][ T5530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.414964][ T5530] usb 6-1: Product: syz [ 108.416598][ T5530] usb 6-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 108.429072][ T5530] usb 6-1: SerialNumber: syz [ 108.708682][ T5530] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 108.716066][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 108.734325][ T5530] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.741733][ T5530] usb 6-1: USB disconnect, device number 11 [ 108.759691][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.844868][ T6736] ip6_vti0: entered allmulticast mode [ 108.866919][ T6736] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 108.869538][ T6736] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 108.872017][ T6736] netlink: 228 bytes leftover after parsing attributes in process `syz.2.188'. [ 108.990244][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 108.993444][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.189'. [ 108.997489][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.212458][ T6743] IPVS: stopping backup sync thread 6744 ... [ 109.878181][ T6748] IPVS: stopping backup sync thread 6749 ... [ 109.938966][ T6751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.193'. [ 109.942858][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 109.948105][ T6751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.076173][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 110.154894][ T6746] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 110.159206][ T6746] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 110.193453][ T6758] ref_ctr_offset mismatch. inode: 0x12b offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 110.483956][ T6691] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 110.532226][ T6764] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 110.536049][ T6764] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 110.590499][ T6766] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 110.591401][ T6765] IPVS: stopping backup sync thread 6766 ... [ 110.641499][ T6746] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.700109][ T6691] usb 7-1: unable to get BOS descriptor or descriptor too short [ 110.705645][ T6691] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 110.708852][ T6691] usb 7-1: can't read configurations, error -71 [ 110.933913][ T5530] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.093492][ T6764] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.103478][ T5530] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.117268][ T5530] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 111.120946][ T5530] usb 5-1: can't read configurations, error -71 [ 111.657510][ T6773] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 111.662457][ T6773] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 111.803410][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 111.843971][ T6691] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.934683][ T5835] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 112.121547][ T6691] usb 7-1: Using ep0 maxpacket: 16 [ 112.158138][ T6773] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.264609][ T6691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.270068][ T6691] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.272996][ T6691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.275551][ T6691] usb 7-1: Product: syz [ 112.276955][ T6691] usb 7-1: Manufacturer: syz [ 112.278477][ T6691] usb 7-1: SerialNumber: syz [ 112.309411][ T6691] usb 7-1: config 0 descriptor?? [ 112.325613][ T6691] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.328567][ T6691] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 112.389011][ T6782] ------------[ cut here ]------------ [ 112.393202][ T6782] refcount_t: addition on 0; use-after-free. [ 112.395320][ T6782] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#0: syz.3.203/6782 [ 112.398555][ T6782] Modules linked in: [ 112.400620][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 112.404407][ T6782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.407821][ T6782] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 112.410412][ T6782] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 112.418412][ T6782] RSP: 0018:ffffc90022197c78 EFLAGS: 00010283 [ 112.420959][ T6782] RAX: 0000000000000f3e RBX: ffff888029d0c41c RCX: ffffc9000d021000 [ 112.424310][ T6782] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 112.426926][ T6782] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 112.429424][ T6782] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029d0c41c [ 112.432025][ T6782] R13: ffff88802af89d58 R14: ffffc90022197d28 R15: ffff88801e8b9800 [ 112.435188][ T6782] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5475b40 [ 112.438942][ T6782] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 112.441036][ T6783] Config c/1 of g1 needs at least one function. [ 112.441517][ T6782] CR2: 00000000f5474ff4 CR3: 000000004fdc7000 CR4: 0000000000352ef0 [ 112.443786][ T6783] udc dummy_udc.0: failed to start g1: -22 [ 112.446908][ T6782] Call Trace: [ 112.449075][ T6783] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 112.450240][ T6782] [ 112.450252][ T6782] config_item_get+0x8c/0xb0 [ 112.450287][ T6782] configfs_symlink+0x390/0x11f0 [ 112.454002][ T6783] UDC core: g1: couldn't find an available UDC or it's busy [ 112.454299][ T6782] ? bpf_lsm_inode_permission+0x9/0x10 [ 112.461471][ T6782] ? security_inode_permission+0xbf/0x250 [ 112.463281][ T6782] ? __pfx_configfs_symlink+0x10/0x10 [ 112.465060][ T6782] vfs_symlink+0x178/0x4d0 [ 112.466481][ T6782] filename_symlinkat+0x2a6/0x560 [ 112.468072][ T6782] ? __pfx_filename_symlinkat+0x10/0x10 [ 112.469812][ T6782] ? strncpy_from_user+0x19d/0x2d0 [ 112.471784][ T6782] ? do_getname+0x191/0x390 [ 112.473266][ T6782] __ia32_sys_symlinkat+0x9b/0xe0 [ 112.474919][ T6782] __do_fast_syscall_32+0xe7/0x970 [ 112.476552][ T6782] do_fast_syscall_32+0x32/0x70 [ 112.478098][ T6782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.480106][ T6782] RIP: 0023:0xf7fd3fec [ 112.481487][ T6782] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 112.483626][ T6782] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 112.486314][ T6782] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 112.488791][ T6782] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.491445][ T6782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.493965][ T6782] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.496434][ T6782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.498895][ T6782] [ 112.499885][ T6782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.502381][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 112.505239][ T6782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.508355][ T6782] Call Trace: [ 112.509413][ T6782] [ 112.510390][ T6782] dump_stack_lvl+0x100/0x190 [ 112.511875][ T6782] vpanic+0x552/0x970 [ 112.513159][ T6782] ? __pfx_vpanic+0x10/0x10 [ 112.514635][ T6782] panic+0xd1/0xe0 [ 112.515825][ T6782] ? __pfx_panic+0x10/0x10 [ 112.517249][ T6782] check_panic_on_warn.cold+0x19/0x34 [ 112.518927][ T6782] ? refcount_warn_saturate+0x111/0x130 [ 112.520694][ T6782] __warn.cold+0x191/0x318 [ 112.522084][ T6782] __report_bug+0x30f/0x440 [ 112.523473][ T6782] ? refcount_warn_saturate+0x111/0x130 [ 112.525230][ T6782] ? __pfx___report_bug+0x10/0x10 [ 112.526817][ T6782] ? refcount_warn_saturate+0x10a/0x130 [ 112.528559][ T6782] report_bug_entry+0xe1/0x290 [ 112.530100][ T6782] ? refcount_warn_saturate+0x111/0x130 [ 112.531953][ T6782] handle_bug+0x1cd/0x2a0 [ 112.533459][ T6782] exc_invalid_op+0x17/0x50 [ 112.534981][ T6782] asm_exc_invalid_op+0x1a/0x20 [ 112.536732][ T6782] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 112.538813][ T6782] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 112.546681][ T6782] RSP: 0018:ffffc90022197c78 EFLAGS: 00010283 [ 112.549273][ T6782] RAX: 0000000000000f3e RBX: ffff888029d0c41c RCX: ffffc9000d021000 [ 112.552564][ T6782] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 112.555852][ T6782] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 112.559131][ T6782] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029d0c41c [ 112.562423][ T6782] R13: ffff88802af89d58 R14: ffffc90022197d28 R15: ffff88801e8b9800 [ 112.565698][ T6782] ? refcount_warn_saturate+0x10a/0x130 [ 112.568030][ T6782] ? refcount_warn_saturate+0x10a/0x130 [ 112.570323][ T6782] config_item_get+0x8c/0xb0 [ 112.571768][ T6782] configfs_symlink+0x390/0x11f0 [ 112.573260][ T6782] ? bpf_lsm_inode_permission+0x9/0x10 [ 112.574923][ T6782] ? security_inode_permission+0xbf/0x250 [ 112.576714][ T6782] ? __pfx_configfs_symlink+0x10/0x10 [ 112.578394][ T6782] vfs_symlink+0x178/0x4d0 [ 112.579800][ T6782] filename_symlinkat+0x2a6/0x560 [ 112.581545][ T6782] ? __pfx_filename_symlinkat+0x10/0x10 [ 112.583526][ T6782] ? strncpy_from_user+0x19d/0x2d0 [ 112.585039][ T6782] ? do_getname+0x191/0x390 [ 112.586334][ T6782] __ia32_sys_symlinkat+0x9b/0xe0 [ 112.587888][ T6782] __do_fast_syscall_32+0xe7/0x970 [ 112.589507][ T6782] do_fast_syscall_32+0x32/0x70 [ 112.591209][ T6782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.593187][ T6782] RIP: 0023:0xf7fd3fec [ 112.594458][ T6782] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 112.596916][ T6782] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 112.599801][ T6782] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 112.602386][ T6782] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.604925][ T6782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.608006][ T6782] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.611085][ T6782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.613711][ T6782] [ 112.615320][ T6782] Kernel Offset: disabled [ 112.616723][ T6782] Rebooting in 86400 seconds..