last executing test programs: 6m6.358997778s ago: executing program 4 (id=556): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40004) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$setregset(0x4205, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x4c}}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x9000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x60008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}]}, 0x38}}, 0x0) 6m4.450181653s ago: executing program 4 (id=557): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x103000) r1 = syz_open_pts(0xffffffffffffffff, 0xda1) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x4, &(0x7f0000000080)=[0x5, 0x7, 0x8000000000000001, 0x1], 0x4, 0x8}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m3.158083973s ago: executing program 4 (id=560): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_ext_show_extent\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000000), 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r3, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x3b}]) ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000040), 0x1d) 6m2.30079535s ago: executing program 4 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x10000, &(0x7f0000000180)='max') r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000002940)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0xd2, &(0x7f0000000340)="eb2af1a08e9bce20805b71742b33aa27974c99d3e3aa6b95844b0815467ae394caf7dd8b4aeba45950a6f054849cb070d067efe4b0f9b6e86ed5856214324346ea315f4a6792e10be62f4f5e08deefa8da7b88dbb9769a6a8761cde4c7c1d9e874bccca8d31289bb360294ebc7ab12c822458b5a5021713739ac4ef851686e7c119a73767f57ebb8cbf1b5fbf69742db123671ce0000b07bb6f95d7e3ad7acde81f168824916f19e01c423636a80f7e0d3a9cea30781d8099cefdf7e7f2aebb544ca851f5c036b13538ae2d8ad377fa6c19e"}) io_setup(0x8, &(0x7f0000000000)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@getchain={0x4c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0xfff2, 0x7}, {0x8, 0x5}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x180}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040040) r6 = socket$tipc(0x1e, 0x5, 0x0) io_submit(r4, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioperm(0x0, 0x2, 0x7e) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) 5m59.972791621s ago: executing program 4 (id=568): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000440)={0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x400, 0x3, 'lc\x00', 0x4, 0x4, 0x1a}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xa, 0xf}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{0x6, 0x9, 0x80, 0x0, 0x81, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x1c4d68a938bd939b}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1000, 0xffffffffffffffff, 0xc, 0xff, 0x7, 0xe0}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x15a36ac96239b984}, @TCA_NETEM_DELAY_DIST={0x63, 0x2, "6e5c5c3dd424a9ddeb350efb29bfc55865472b99c6c741a53fe159aae019923de16c8f6e7f4a4721f4c34092cf6d796d217b9e25c029d7e31e025c444eb7524949e8481dbccf9165dd0075e1b6849b2be8a804b318945ea87bdbd0a9f446ad"}]}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000400}, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001100010027bd7000fbdbdf256c72776d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200"/224], 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x53, &(0x7f0000000000)=[{0x68b, 0xf, 0x6, 0x6}, {0x2, 0x1, 0x2, 0x40}, {0x8040, 0xbc, 0x9, 0x4}, {0x8, 0x9, 0xe8, 0x7fff}]}, 0x10) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r9, r6, &(0x7f00000000c0)=0x8b, 0x100000500) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) 5m59.470364103s ago: executing program 4 (id=571): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket(0x1, 0x800, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 5m58.510776192s ago: executing program 32 (id=571): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket(0x1, 0x800, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 5m4.94632666s ago: executing program 5 (id=689): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xc3, 0xc9, 0x7}}}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) epoll_pwait(r3, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 4m58.206162595s ago: executing program 5 (id=700): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffeae}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2e, 0x11, 0x7, {0x8, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xc}, {0x0, @broadcast, 0xf3a, 0x4, [0x2, 0xfffffc00]}, @tcp_ip4_spec={@remote, @multicast1, 0x4e24, 0x4e23, 0x2c}, {0x0, @remote, 0x7ffd, 0x8, [0x7, 0x7fffffff]}, 0x10001, 0x9}}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m55.66998692s ago: executing program 5 (id=714): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r4, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x42) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000140)={&(0x7f0000000000)=[{0x47, 0x0, 0xd, &(0x7f00000001c0)="536dad24e3f78f3dbfc2c3caad"}], 0x1}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 4m51.43331537s ago: executing program 5 (id=724): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0) ftruncate(r0, 0x0) 4m50.941871217s ago: executing program 5 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m49.198060756s ago: executing program 5 (id=731): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x82b07000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000280)={r4}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174004c9800000000000000000000000000000000000000000000000000000500000000000000000000232101000000000000000000000000000000000000000000000000000000000000000000000008db5745196397fec2388000"/103], 0x78) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r9, r7, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r12 = socket$pppoe(0x18, 0x1, 0x0) close_range(r9, r12, 0x2) ioctl$TIOCCONS(r0, 0x541d) 4m33.950723263s ago: executing program 33 (id=731): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x82b07000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000280)={r4}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174004c9800000000000000000000000000000000000000000000000000000500000000000000000000232101000000000000000000000000000000000000000000000000000000000000000000000008db5745196397fec2388000"/103], 0x78) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r9, r7, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r12 = socket$pppoe(0x18, 0x1, 0x0) close_range(r9, r12, 0x2) ioctl$TIOCCONS(r0, 0x541d) 4m5.230312653s ago: executing program 1 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}]}, 0x50}}, 0x8000) 4m4.918349648s ago: executing program 1 (id=818): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 4m3.396116033s ago: executing program 1 (id=827): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003840), 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000003880)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getpgrp(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000f00)=ANY=[@ANYBLOB="043e0b06c900060006"], 0xe) 4m3.199831157s ago: executing program 1 (id=829): syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0x1, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000002000)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002800)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4044844) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9000c0007e904"], 0x11) 4m0.922045045s ago: executing program 1 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 4m0.566836131s ago: executing program 1 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1800013, &(0x7f0000000040)={'trans=virtio,', {[{@cache_readahead}], [{@permit_directio}]}}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close(0x3) 3m44.892526049s ago: executing program 34 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1800013, &(0x7f0000000040)={'trans=virtio,', {[{@cache_readahead}], [{@permit_directio}]}}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close(0x3) 20.236866616s ago: executing program 7 (id=1440): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000456000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xf0ffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='C', 0x1}], 0x1}, 0x2c001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 20.088260833s ago: executing program 7 (id=1441): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="10ff7fda8705da74bc83496ee2", 0xd}, {&(0x7f0000002f00)="8515c9b2bf8a5262ae2a49571240d6b92e9fd8d491b60e3b311dece88bcae833e4709cac98d1b7ccd4f8b0537c71a6401d685b376a622c83eff19b0c12b7dce34c7f4a68b72db785939c91e179bccfb4550a283a896c58b3115345b2d14045581d48f1fcba12192229f40b623360a64f573af0e0027e434e6f2ee000c9eaaa905a20c613a3242019451947113e3ac9a3bab46d81b4a8b9b3943a08ba3832d2f924c98c5a05f8002864ab55a66e447ad527c808fb4d59ca00fb10a6570dc3ee6f501f754c73baf7dae7d1fa45fdb5da4061c1333f1834bc0903a76c4b890a56e6a557bc43c3f972cee641bc9bb6125a87eca9ee4a", 0xf4}], 0x2}}], 0x1, 0x8810) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000010240001030000000000000002010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x121}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcba}, 0xa0000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4099, 0x1003}, {&(0x7f0000000640)=""/53, 0x35}, {&(0x7f0000000500)=""/240, 0xf0}], 0x6}}], 0x4, 0x40000020, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x38, r8, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]]}, 0x38}}, 0x0) 17.422874915s ago: executing program 7 (id=1446): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951b290"], 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x207, 0x8401) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1028, 0x1, 0x11, r3, 0x82000000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000640)={0x8, [[0x5, 0x8, 0xf8a, 0x3, 0x8, 0x0, 0x10, 0xa], [0x80000001, 0x1, 0x9, 0x3, 0x1, 0x7f, 0x1ff], [0x7, 0x7, 0x3, 0xb, 0x7f, 0x7, 0x80000001, 0xf]], '\x00', [{0x1, 0x81, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1}, {0x401, 0xfc3, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x26f, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1}, {0x6, 0xffff, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x139, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xe, 0x1, 0x1}, {0x8, 0x4}, {0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x9, 0xe, 0x0, 0x1, 0x1, 0x1}], '\x00', 0xffff9ade}) 11.884268835s ago: executing program 7 (id=1461): prctl$PR_SCHED_CORE(0x3e, 0x1001, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000800000001000000ee700000484100001a6e92ba3a02745b279bfdc324901441251d", @ANYRES32, @ANYBLOB="f4ffffff00"/20, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, 0x0}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) clock_gettime(0x0, 0x0) truncate(&(0x7f0000000000)='./file2\x00', 0x8800000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x125f, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 11.883401438s ago: executing program 6 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x24b1df48a99f2bf, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251e00000008000300", @ANYRES32, @ANYBLOB='(\x00/'], 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="37040000000000000000010000005c03088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe80000000000000000000000000003305000300020000001c000080060001000200000008000200ac1414bb050003000200000028000080060001000a00000014000200fc000000000000000000000000000001050003000000000034000080060001000200000008000200ac1414bb0500030003000000060001000200000008000204e0000002050003000000000088000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe80000000000000000000000000002e0500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200e00000020500030001000000f4000080060001000a00000014000200fe80000000000000000000000000002f0500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200e00000010500030001000000060001000a00000014000200200100000000000000000000000000010500030001000000060001000200000008000200ac1414300500030000000000060001000200000008000200ac1e00010500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fc010000000000000000000000000000050003000200000024000100000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r7], 0x378}}, 0x0) 10.920510917s ago: executing program 0 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c0017800800018004"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) unshare(0x22020c00) r1 = socket(0x2, 0x2, 0x1) bind$tipc(r1, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.134650084s ago: executing program 6 (id=1464): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='C', 0x1}], 0x1}, 0x2c001) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 9.794452825s ago: executing program 6 (id=1465): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x10000802, 0x80, 0x0, 0x8}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x10000802, 0x80, 0x0, 0x8}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 9.338112631s ago: executing program 3 (id=1466): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x3be1f000) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x11, @broadcast, 0x4e24, 0x1, 'sh\x00', 0x0, 0x1df, 0x63}, {@rand_addr=0x64010100, 0x4e20, 0xdf811cad0c154a8a, 0xf8bf, 0x3, 0x1}}, 0x44) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200)=0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4) socket(0x9, 0x2, 0x7) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000300)={0x18, 0x1, 0x0, 0x0, r5, 0x10000}) ioctl$SNDCTL_TMR_SELECT(r4, 0x40045408) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000380), 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xfffffffb}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000400)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[{}], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000740)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x1, 0x4, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000a40)={&(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0xa, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000a80)=[r10, r11, r12, r13, r14, r15], 0x6, 0x80000}) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 8.72612271s ago: executing program 3 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000329000/0x3000)=nil, 0x3000, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000400)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @generic={0xfc, 0x1, 0x3, 0x1, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xe4a7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0xfffffffe, 0x403fbcda}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r3, r3, r7, r3], &(0x7f0000000600)=[{0x1, 0x1, 0x0, 0x3}, {0x5, 0x2, 0x3, 0x6}], 0x10, 0x81}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 8.458299919s ago: executing program 2 (id=1469): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 8.256086726s ago: executing program 2 (id=1470): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050000007000000000000006400824403010e0503ff4f063c040180a91c2d1a02000c0200000000000000000001000f0003030303037107fffeff"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.76646807s ago: executing program 7 (id=1471): syz_usb_connect$cdc_ecm(0x3, 0x52, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x4, 0x80, 0x86, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x8}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x7, "1b"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x24bbc2285140188d, 0x4, 0x5, 0x3, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x2, 0xe0, {0x7, 0x25, 0x1, 0x180, 0x10, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x3e, 0xf, "a292", "95cf"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0xc, 0x9, "45a7", "89b3"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc811, 0x8, 0xef, "8c5752ad"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0xee, 0x8, "e94d33", "a9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x8, 0x4, {0x7, 0x25, 0x1, 0x80, 0x1, 0xc}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x19, 0x8, 0x7, 0xff}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x9, 0x2, 0xc000, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x7, 0x7}, @ptm_cap={0x3}]}, 0x8, [{0x44, &(0x7f0000000200)=@string={0x44, 0x3, "02c7443948e1c11b325df3b9938c15c547d9ed89e2810462b5c1b913d49671f481338f3a7698f451589a64323697db3b6a1932053ee0a29e9fdec8d985a17a1c9565"}}, {0x39, &(0x7f0000000280)=@string={0x39, 0x3, "599244e4101f3704fe87b012491fffc3aecb625fcce7f76b01defec7c52442e8b5035140049d5751a24629978f1cc5b1fe2b2714a163f7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "5b53ead503717cf1afe714094a4920478bc910f9fd4e71c864578be278fd79f34d46c8f9ea5f3b43bc131b7521e5732ade044749bdaf893b545d32b59172b9ab2802451d9533ca231f50aeacd35dd3a2faee7603307fe47a1da737cc6ce98f92a9ed6b167c870a51c90fd204a702643ff6893adcd4dc71bad49992516721e56561c45db06b0eb5c24da9e4e4c0ea5572e9"}}, {0x59, &(0x7f0000000400)=@string={0x59, 0x3, "61befc5c0e6e1b3a83cab9575a57fd1820dd1f3e84545af21dba9b8572263094186ce4c0a4aef011614dd4f257b3379629387467b1503ee8e0867e240ad456e4434f6e6ce8fe3d6f79c19e1473ce5d832defb612d7e52f"}}, {0x52, &(0x7f0000000480)=@string={0x52, 0x3, "1e5daab26cfba45b7e5e5a495cfbbf534ec2781d6f30426b42ccc712e7b2280034c95a029070133b3e66b71c5899c15e80f88c12586bddb155874cee1c7d2148e96a359d37858c2a3705c25477f48387"}}, {0x61, &(0x7f0000000500)=@string={0x61, 0x3, "e4d30e4d5d4081d6ea2c5669be92cd22ce280709479ac941d5f4615b4b7040d80776db904758e25c4069ade5acc653e0510f94cc65ccf4029d23bb775027f24383a4dba05032982016648b31cfe2ffb677d708831c6bf30b87e028eb81c30b"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f00000000c0)) 7.194312551s ago: executing program 2 (id=1472): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) syz_emit_ethernet(0x15b, &(0x7f0000000040)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x2a, 0x4, 0x0, 0x3, 0x149, 0x68, 0x0, 0x1, 0x21, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x9c, 0x3, 0x9, [{@multicast1, 0x3}, {@local}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x6}]}, @rr={0x7, 0x17, 0x71, [@local, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0x8, "3f08117a5945"}, {0x1, 0x9, "3c67ad2fac2c6f"}, {0x7, 0xa, "51a457ab7822245e"}, {0x5, 0xa, "d73b23ed6655b0da"}, {0x0, 0x12, "df9ed585f0ec1dd68f5854bb9d753fdb"}, {0x1, 0x3, 'V'}, {0x7, 0xe, "ef75c9202d7faf91fea4024d"}, {0x1, 0x4, '\x00\a'}]}]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x7, "a54e6f", 0xfa, "846200"}, "f531b9b7685c244d21c5cf9a05bbc0f38cedd4037bb17e46d81bbab07e532bfb062ef3a5d4cadb5342eba66f0b07298849cbfc40d867cf218e60b93f0e81e6bcec3e7ac819224c171d91a9ab3359e8865768a21f1875fd0cb58ab8c2f1ee8d00a3fa356ffb2f203cfe76397aa7f30919ce52d510a91f87fb0bfdf4bbffce1cb4fc1962d0a611b47c9184e3d8054addb838"}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x792, 0xaed, 0x184, 0xb47]}) 7.127651587s ago: executing program 3 (id=1473): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x2152, &(0x7f0000000500)={0x0, 0x96f6, 0x40, 0x6, 0x38b}, &(0x7f0000002000), &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_audit(0x10, 0x3, 0x9) fchown(r0, 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010029bd7000fbdbdf25070000000887c07f492c2df0ed2e1a0c2003962dc5a5571c31a30555995e5f43f9667e0cc2fbb8a32c935470fd3f705878ab4d9e6f18d2ffb483d86e8a347e0647996da531e09b206e91f4f94a4a9f22", @ANYRES32=r3, @ANYBLOB="012200000800000008001d0000010000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8040002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) recvmsg(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000680)={"1b4db8646c2c1008d7ca34ff9b7950e52da2b20ae65ee10eb481f3d43d6226cfe7ddebd1863266c895a51468666102f254abf26eefa360008f8c3d51a01c811ec7c3cd307ed1e6595c06461432fee6a0ceef0e98d32679133edf1b3ab58f20d622a2d4ba5f10bf95e2975b75d9f68008630a557264cbf307ca7e416c98493aeed24498ee2f6867fd6a6a91ff3fd03ea383f99c897498896b61bcae75d69b83a4f0a55e63ae9b70eb32ab600af7be63f8762e575bd964de889cc45fc0b5367b8bcb2f44e1a3bf9879b46f589419ba4ebab6e033863c0fd099cf2bb09bd0a8d75af115ea42963b1ec37b04c261db8a41e9bab68d2905b4c98167ec40927b0238835e2a41b48df887791f340d70cbd53a8a700916f91ca7f97a5bc90c9ba9d9d0063e55dcb8a4689eaf20c9fa96d02c7413c0f0d42cc1fa714bea3debfb15ee77b083205e62383f3ae2374c00a88bd2639f9b7c019ac3aa7dd993f2dd17db1b24c89c20e913f08f6015250b0c92143334e98dc29716cdf286a4ecf50d4d0fa74b135966d1295343ec49b527727f30d78faa8aa13a563fc6b4e972255427ce166bb22fd77aa6d57af7c3ef2de986ec610af32df260782b15f2b886135f5794049514cbb48929007f9c5d4f328cc3838b6bc91e2f539597c117e90e64cca839e426c1787bbe20131060c7c9e00344b0ff2fb7ffb1bb6e14596ea905329aa07f4d11d3786048990a0b2e7c9d6b752d4d4248e3a3f128d43ef6752b634fb4e6fa520c8d4959cdb0e7a22f4ebae181a76bb459d98d342010d4c14a87b71a2cbaf3a53ae31ff8d630391d6b8d782b17f7ea63bdb971a675f3fc0466aa88c1b925edbd2d7eec53e06dc6d3b355a3c8f178912b01516b4f2acf72d29e149618e049f53b021bc679941d4934ba1b4a015d73ae1299a0bf4bd4c0ccb3447cd5f278129bb2f6566d57d1b828262010f0b83a8626b4b63aa13d6f4ecd4f8e36a20a689f160c372d9502adbf88ebabd54fe288394d150df81e2126eef4f38766dc909f250cbd7a3e0db61e82feffbf8153a0640b787888a9ba140432b89d7bc1837856dadf33a4205d5d1569098545a155653d925fe2458802d0bc22fee993ca40fc2b2b63c9cd1413e8d3cb93d770299abbe3cea0490dc36e7de009bfb73cff7a6a7c524f430e4bef7876b74bf384c68b797c0745358ef59aad22dbe5029fd279b8bd93fa23e61be4b35b02eb847d86df963285fb28489e87034dfc15bf4e0f1fb0639a52613240a74707ce381082bede91aeb0766a4ec30c9ba65518bb7fa55835fc736226c21cc01dae0d0007967bc9d69b04e5fe5192d36ff19463a600b403cdd015a24a7d535a8b5160dd2e64b441ae9d7dd24af6c4f02d187ab20e9098cb5d2f98e09928665ff04a7a32e13c3c8e4e0fcffd9c6804df470d5d48b3e931a6a8c73222e42bb7"}) 7.106497345s ago: executing program 6 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='ext4_journal_start_reserved\x00'}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000001000010009080800418e00000304fcff", 0x58}], 0x1) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 6.949605563s ago: executing program 2 (id=1475): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='C', 0x1}], 0x1}, 0x2c001) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) 6.549295638s ago: executing program 2 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x59, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x3b, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x100006, 0x5, 0xa, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x4, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x0, 0x4}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) close(r3) syz_io_uring_setup(0x121c, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x83}, &(0x7f0000000040)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 6.478124302s ago: executing program 3 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000329000/0x3000)=nil, 0x3000, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000400)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @generic={0xfc, 0x1, 0x3, 0x1, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xe4a7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0xfffffffe, 0x403fbcda}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r3, r3, r7, r3], 0x0, 0x10, 0x81}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 5.978692948s ago: executing program 6 (id=1478): socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x102, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4060019}, 0x20000041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.434198978s ago: executing program 0 (id=1479): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mr_alloc\x00', 0xffffffffffffffff, 0x0, 0x66a}, 0x18) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) r2 = gettid() io_setup(0x400, &(0x7f0000001080)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 4.812598886s ago: executing program 3 (id=1480): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x1, 0x0) 4.360186455s ago: executing program 7 (id=1481): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa}, 0x0) r1 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000191c0)={0x0, r1, r1}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xffffffffdfffffff, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) unshare(0x2040400) 1.902354046s ago: executing program 3 (id=1482): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x22, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0xea) 1.639313501s ago: executing program 0 (id=1483): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) 1.472017979s ago: executing program 2 (id=1484): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)=ANY=[@ANYRESOCT], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0xf1d, 0x4, @local, @local, 0x10, 0x8000, 0x705b, 0xfb}}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @rc={0x1f, @none, 0x7}, @can={0x1d, r3}, @vsock={0x28, 0x0, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='tunl0\x00', 0x88f5, 0x0, 0x1}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket(0xa, 0x801, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}}, 0x0) (async) sendmmsg$nfc_llcp(r4, &(0x7f0000001e00)=[{&(0x7f00000003c0)={0x27, r5, 0x1, 0x4, 0x9, 0x2, "59cee8a20f62903e6f1a52e0803db055079e0c6767d099534f2179432a983c1b8d48db34c36db544206da9e725a755eea729ca8533e5215abf487b1916eec3", 0x27}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000440)="1deebf2e3e5c3aacf1d57af78c35e092516c8933488df122527d1ffd783810fc7b31ea0c2f600198280b2bd49294cd028906b88aa0b595", 0x37}, {&(0x7f00000004c0)="6c39ae2830fb0348abe5e0aedf4d0f5351f696d09563a9bef4fdd41b0bff7048dd0e895550da661d52f5e95a018a704999d37b70952c8e3ae9d3745ea181a29bc0cf0641716d7266eaddfba625f35c0f53dca7e11ae73a2ed6d1380b586dbd4f22ce971ca7d826e4774508c68b8b9ebbf6acb88862999c6c919af1d09e77cf06ab08e00ea0b31e7b90a4ec5f8f6baaa509", 0x91}], 0x2, 0x0, 0x0, 0x4}, {&(0x7f00000005c0)={0x27, r7, 0xffffffffffffffff, 0x4, 0x9, 0x4, "4491cc47c1c8e2be07a5dc6638f4a33c7c22e1dbb7e61c24dfd003df506773adf5d68ac406040e7c1a33fcf85f955904d0ace231ec483f2498921856ec276c", 0x3a}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000640)="d37e1d93383e5704f66da7ad69a5307421bed678d133", 0x16}], 0x1, &(0x7f00000006c0)={0x20, 0x3a, 0xabc, "87edc3ed3665e953904f6709794f966a"}, 0x20, 0x48000}, {&(0x7f0000000800)={0x27, r10, 0x0, 0x4, 0x8, 0x7, "2a79779d2281e10aa7a29352abbac8aaa124982819508fb63de33b4e2f9b04a59914014ab9cf00303f7f3c98bcb5d727f329d8404d06c4be011f0b86a100ab", 0x1e}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000880)="04bf2723680583d153bd849b28101c29e5620fedb8f03674fa137c7140399129f8e2336b0ff59caab7b33441f1d1e7a7f2222755e32c2dc5fef8ba27cc592dac526ec6e68dff8df522dc9130590e503a9e6da0616977e0d87319e21c8b7c0bdcda4f9dee30d35fb2ed36fa3c44e18caf8112", 0x72}, {&(0x7f0000000900)="057677273b13b55553ce49a22b4776020caba930a85b2336231b8442c5c4575a3fc8fffc3c869d13b69c91c9f2300b8a927c9fdcb29bd7298c702800087af9723f0a9ea504f194e68ed0790687b2c9840c4540a0f533fbc142e2b4a289f4db6c443b6bf34503274386e506be79cb79d0fa79710ed5833fa03fb01b50187be7903ccd8543fe85a90f234f0fa9426fead612c8b317ee5021046e901d9ad1ab32ad1cf19f7418dd8b5e780850c6634a305b7309375df62e5725428891b998ff1488f60950f7303b0e828ca209eaed7e9cb689dc617e4e4e339501ecfa", 0xdb}], 0x2, &(0x7f0000000a40)={0x1010, 0x10f, 0x5f6cdb2b, "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"}, 0x1010, 0x20040004}, {&(0x7f0000001a80)={0x27, r14, 0x0, 0x3, 0x2f, 0xfd, "9ac8e7747c0d7cf029eca9783ab4dc4339e6b1b053e50cc93e3c59752e13038b50b17d371d41e2ccc34f6e330cd06e508eaf2d5b5e46d365633d3196098bf0", 0x18}, 0x60, &(0x7f0000001dc0)=[{&(0x7f0000001b00)="5a1d4033a2b5fef5d4f99bf2948211eb2382b797a9b87409f4f524e74264f9d6aa843a18ca0d34fc870fa78b97154bb2d1c19181d42a181221071a1f3bf6db25e92b8aaf433d5ca0c3c55af5a7d8eae5099f8c", 0x53}, {&(0x7f0000001b80)="57fd624db0f60d43ae5583d4b37afd815f4982ac9a9d1a7e6cb15f17153ca5f7b98c520bebf92af0ea01190778903e606be612151bcb131ea21a3a6c13ca0f44031999be2c6b263e9ffd7268844e4e7542b48583f13c4c0e0a9a3ad449fac5152f37c9c519e449407dbfbf7407a00f540ec59d704f24c87cff7a7d7f0be60ef17de8d7ec9dda9cb649925d05ef1de3a366c586a8d361c298490dbcb944db654cbb53b081686fadce7004a14805383586e912baf110", 0xb5}, {&(0x7f0000001c40)="3e03e1ea54c288edefc3f20efdfd19027fb0713b05b462c60e01f86d398c95623ccbb252f5958ec4af5c80d56448e0b55cbe440d9fc19117a23ffc07369c0406fe783392ed818157b337ff0119eba320fe5e726b74f4fa1abb3ab0bdab3d6266ac831955f39fc531bce05c3f3c86ed29103c9ff52e7c2577f27806", 0x7b}, {&(0x7f0000001cc0)="00d865ac0af0df2297a4478abbe807402bc97c3ed0e2653cc9f5a8d9f00860351246b3d67d92d7f5d975e042e14eb8682c96342d8c1e56bbb6592d785e0b2e54d5a2729639c59fe4621f8afe289c99f11635036af0fee9ac0f0b108e1f4f890bfed2931af0cb47de0bb80184c73046ae9f58095690af35e4771790f9998fb54b41c3f9972532c544cfcf4ed08636ff8c3ddc67e87b1c9e3006c2d3a17346f40ac7583fd926a04f0940b3788c3915ae1c5858b1aaffbe2264e51d73ddb8df1c37ad", 0xc1}], 0x4, &(0x7f0000002000)={0x1010, 0x104, 0x5, "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"}, 0x1010, 0x240440c5}], 0x4, 0xc048000) (async) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) (async) r15 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r16 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r16, 0x5b02, 0x0) (async) read$char_usb(r15, 0x0, 0x0) syz_usb_disconnect(r0) 1.294264296s ago: executing program 0 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @const, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 998.662869ms ago: executing program 0 (id=1486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2004, @fd, 0x4, 0x20000000, 0x8020, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) waitid(0x1, r0, &(0x7f0000000a80), 0x80000008, &(0x7f0000000b00)) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='pvfs2\x00', 0x200000, 0x0) 781.012953ms ago: executing program 6 (id=1487): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x2152, &(0x7f0000000500)={0x0, 0x96f6, 0x40, 0x6, 0x38b}, &(0x7f0000002000), &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_audit(0x10, 0x3, 0x9) fchown(r0, 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010029bd7000fbdbdf25070000000887c07f492c2df0ed2e1a0c2003962dc5a5571c31a30555995e5f43f9667e0cc2fbb8a32c935470fd3f705878ab4d9e6f18d2ffb483d86e8a347e0647996da531e09b206e91f4f94a4a9f22", @ANYRES32=r3, @ANYBLOB="012200000800000008001d0000010000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8040002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) recvmsg(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000680)={"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"}) 0s ago: executing program 0 (id=1488): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x101) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r3 = fsmount(r1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000100)={0x1f, @none}, 0x8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004840) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) kernel console output (not intermixed with test programs): ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.232086][T10268] ? down_read+0x1ad/0x2e0 [ 477.232116][T10268] genl_rcv+0x28/0x40 [ 477.232135][T10268] netlink_unicast+0x75c/0x8e0 [ 477.232178][T10268] netlink_sendmsg+0x805/0xb30 [ 477.232228][T10268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.232269][T10268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.232289][T10268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.232319][T10268] __sock_sendmsg+0x21c/0x270 [ 477.232350][T10268] ____sys_sendmsg+0x505/0x830 [ 477.232391][T10268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.232435][T10268] ? import_iovec+0x74/0xa0 [ 477.232468][T10268] ___sys_sendmsg+0x21f/0x2a0 [ 477.232501][T10268] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.232578][T10268] ? __fget_files+0x2a/0x420 [ 477.232601][T10268] ? __fget_files+0x3a0/0x420 [ 477.232635][T10268] __x64_sys_sendmsg+0x19b/0x260 [ 477.232670][T10268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.232716][T10268] ? rcu_is_watching+0x15/0xb0 [ 477.232745][T10268] ? do_syscall_64+0xbe/0x3b0 [ 477.232774][T10268] do_syscall_64+0xfa/0x3b0 [ 477.232800][T10268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.232819][T10268] ? asm_sysvec_call_function_single+0x1a/0x20 [ 477.232840][T10268] ? clear_bhb_loop+0x60/0xb0 [ 477.232866][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.232887][T10268] RIP: 0033:0x7f121c38ebe9 [ 477.232907][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.232925][T10268] RSP: 002b:00007f121d219038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.232949][T10268] RAX: ffffffffffffffda RBX: 00007f121c5b6090 RCX: 00007f121c38ebe9 [ 477.232965][T10268] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000007 [ 477.232979][T10268] RBP: 00007f121c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 477.232991][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.233004][T10268] R13: 00007f121c5b6128 R14: 00007f121c5b6090 R15: 00007ffd6d0038c8 [ 477.233042][T10268] [ 477.900479][ T5877] usb 3-1: Invalid ep0 maxpacket: 64 [ 477.906379][ T5877] usb usb3-port1: attempt power cycle [ 478.000085][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 478.000105][ T30] audit: type=1326 audit(1755366859.227:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10272 comm="syz.7.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0fb8ebe9 code=0x7fc00000 [ 478.068777][ T30] audit: type=1326 audit(1755366859.227:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10272 comm="syz.7.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc0fb8ebe9 code=0x7fc00000 [ 478.091860][ T30] audit: type=1326 audit(1755366859.227:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10272 comm="syz.7.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0fb8ebe9 code=0x7fc00000 [ 478.564160][ T5877] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 478.750780][ T5877] usb 3-1: Invalid ep0 maxpacket: 64 [ 478.890053][ T5877] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 478.899376][T10296] netlink: 27932 bytes leftover after parsing attributes in process `syz.7.1032'. [ 478.912128][ T5877] usb 3-1: Invalid ep0 maxpacket: 64 [ 478.936809][ T5877] usb usb3-port1: unable to enumerate USB device [ 478.960052][ T5847] Bluetooth: hci2: command 0x0405 tx timeout [ 482.090022][ T24] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 482.124918][T10320] ALSA: mixer_oss: invalid index 40000 [ 483.123422][ T24] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 483.145804][ T24] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 483.186724][ T24] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 483.220418][ T24] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 483.229615][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.276958][T10316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.440148][ T9728] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 483.640992][ T9728] usb 1-1: Using ep0 maxpacket: 8 [ 483.664335][ T9728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 483.682125][ T24] usb 3-1: string descriptor 0 read error: -71 [ 483.712050][ T9728] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.776403][ T9728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.827288][ T9728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.962364][ T24] usb 3-1: USB disconnect, device number 49 [ 483.976771][ T9728] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 484.047916][ T9728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.068212][ T9728] usb 1-1: Product: syz [ 484.110064][ T9728] usb 1-1: Manufacturer: syz [ 484.114745][ T9728] usb 1-1: SerialNumber: syz [ 484.144487][ T9728] usb 1-1: config 0 descriptor?? [ 484.159717][T10327] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 484.392016][ T9728] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 484.426688][ T9728] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 484.650598][T10327] trusted_key: encrypted_key: master key parameter is missing [ 484.829616][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 484.838663][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 485.593720][ T24] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 485.621169][ T43] usb 7-1: config 6 has an invalid interface number: 57 but max is 0 [ 485.632840][ T24] usb 3-1: config 0 has no interface number 0 [ 485.650225][ T43] usb 7-1: config 6 has no interface number 0 [ 485.656516][ T43] usb 7-1: config 6 interface 57 has no altsetting 0 [ 485.671440][ T43] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 485.674921][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.681053][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 485.701137][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.709282][ T43] usb 7-1: Product: syz [ 485.714095][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.723300][ T43] usb 7-1: Manufacturer: syz [ 485.728151][ T43] usb 7-1: SerialNumber: syz [ 485.736683][ T24] usb 3-1: Product: syz [ 485.746688][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.756947][ T24] usb 3-1: Manufacturer: syz [ 485.762393][ T24] usb 3-1: SerialNumber: syz [ 485.784825][ T24] usb 3-1: config 0 descriptor?? [ 485.875676][T10355] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1045'. [ 485.899675][ C1] powermate: config urb returned -71 [ 485.907348][ T24] usb 1-1: USB disconnect, device number 31 [ 485.913448][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 485.992215][ T43] usb-storage 7-1:6.57: USB Mass Storage device detected [ 486.052243][ T9] usb 3-1: USB disconnect, device number 50 [ 486.094878][T10357] team0: Device gtp0 is of different type [ 486.138764][ T43] usb 7-1: USB disconnect, device number 6 [ 486.210366][ T5877] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 486.377800][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 486.402888][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 486.428690][ T5877] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice=73.f1 [ 486.443252][ T5877] usb 4-1: New USB device strings: Mfr=101, Product=222, SerialNumber=207 [ 486.647422][ T5877] usb 4-1: Product: syz [ 486.653251][ T5877] usb 4-1: Manufacturer: syz [ 486.659472][ T5877] usb 4-1: SerialNumber: syz [ 486.669589][ T5877] usb 4-1: config 0 descriptor?? [ 486.684400][ T5877] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 486.693927][ T5877] ftdi_sio ttyUSB0: unknown device type: 0x73f1 [ 487.732630][ T10] usb 4-1: USB disconnect, device number 37 [ 487.781259][ T10] ftdi_sio 4-1:0.0: device disconnected [ 488.322339][T10385] overlayfs: missing 'lowerdir' [ 489.029168][T10402] mkiss: ax0: crc mode is auto. [ 489.361615][ T5925] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 489.587528][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 489.596282][T10409] 9pnet_fd: p9_fd_create_unix (10409): problem connecting socket: ./file0: -111 [ 489.693048][ T5925] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 489.738896][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 489.753257][ T5925] usb 8-1: config 6 has no interface number 0 [ 489.760280][ T5925] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 489.806452][ T5925] usb 8-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.821222][ T5925] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.836403][ T5925] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.875992][ T5925] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 489.889914][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.890186][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 489.897951][ T5925] usb 8-1: Product: syz [ 489.897970][ T5925] usb 8-1: Manufacturer: syz [ 489.897985][ T5925] usb 8-1: SerialNumber: syz [ 489.918090][ T5925] hso 8-1:6.2: Failed to find BULK IN ep [ 489.965208][ T43] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 489.998482][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.064547][ T43] usb 1-1: Product: syz [ 490.068795][ T43] usb 1-1: Manufacturer: syz [ 490.079366][ T43] usb 1-1: SerialNumber: syz [ 490.108955][ T43] usb 1-1: config 0 descriptor?? [ 490.124684][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 490.127889][ T43] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 032 [ 490.164141][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 490.189903][ T10] usb 7-1: config 179 has no interface number 0 [ 490.200617][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 490.229878][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 490.251762][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.285999][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 490.306616][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 490.345020][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 490.390445][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.429926][T10409] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 490.474366][ T10] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 490.527579][ T43] (null): failure reading functionality [ 490.580537][ T43] i2c i2c-1: connected i2c-tiny-usb device [ 490.742881][ T43] usb 1-1: USB disconnect, device number 32 [ 490.826340][ T10] usb 7-1: USB disconnect, device number 7 [ 491.119962][ T5925] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 491.289971][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 491.305333][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 491.326989][ T5925] usb 4-1: config 7 interface 0 has no altsetting 0 [ 491.347566][ T5925] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=8f.26 [ 491.384865][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.404600][ T5925] usb 4-1: Product: syz [ 491.409154][ T5925] usb 4-1: Manufacturer: syz [ 491.427369][ T5925] usb 4-1: SerialNumber: syz [ 491.609980][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 491.717689][ T5925] usb 4-1: USB disconnect, device number 38 [ 491.780743][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 491.789737][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.827673][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 491.846783][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 491.858997][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 491.887284][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.903512][ T10] usb 1-1: config 0 descriptor?? [ 491.925965][T10429] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 491.939488][ T10] hub 1-1:0.0: USB hub found [ 492.016976][ T5925] usb 8-1: USB disconnect, device number 3 [ 492.163724][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 492.511551][ T10] hid-generic 0003:046D:C314.0007: unknown main item tag 0x0 [ 493.073727][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.100997][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.111905][ T10] hid-generic 0003:046D:C314.0007: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 493.135178][T10447] tmpfs: Bad value for 'mpol' [ 493.206134][T10448] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 493.362715][ T10] usb 1-1: USB disconnect, device number 33 [ 494.209680][T10454] fido_id[10454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 501.465545][T10502] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1084'. [ 501.771199][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.778304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.292946][T10505] netlink: 'syz.3.1086': attribute type 21 has an invalid length. [ 502.328484][T10505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1086'. [ 502.404609][T10507] 9pnet: Could not find request transport: f)ŽΨ«ˆ›dñ €‘täúG×%¡eþÚ‚êô­C³÷ÍJR%²MÆÀ–PÛç' [ 554.527883][T11077] CPU: 0 UID: 0 PID: 11077 Comm: syz.3.1234 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 554.527913][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.527925][T11077] Call Trace: [ 554.527936][T11077] [ 554.527945][T11077] dump_stack_lvl+0x189/0x250 [ 554.527968][T11077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.527983][T11077] ? __pfx__printk+0x10/0x10 [ 554.528001][T11077] ? kernfs_path_from_node+0x2c/0x260 [ 554.528020][T11077] ? kernfs_path_from_node+0x2c/0x260 [ 554.528034][T11077] ? kernfs_path_from_node+0x2c/0x260 [ 554.528049][T11077] ? kernfs_path_from_node+0x22c/0x260 [ 554.528064][T11077] ? kernfs_path_from_node+0x2c/0x260 [ 554.528081][T11077] sysfs_warn_dup+0x8e/0xa0 [ 554.528096][T11077] sysfs_do_create_link_sd+0xc0/0x110 [ 554.528113][T11077] device_add_class_symlinks+0x1cf/0x240 [ 554.528136][T11077] device_add+0x475/0xb50 [ 554.528157][T11077] wiphy_register+0x199a/0x26b0 [ 554.528173][T11077] ? trace_irq_disable+0x37/0x110 [ 554.528203][T11077] ? __pfx_wiphy_register+0x10/0x10 [ 554.528231][T11077] ieee80211_register_hw+0x33e1/0x4120 [ 554.528261][T11077] ? ieee80211_register_hw+0x1471/0x4120 [ 554.528285][T11077] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 554.528307][T11077] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.528332][T11077] ? __hrtimer_setup+0x187/0x210 [ 554.528345][T11077] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 554.528367][T11077] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 554.528406][T11077] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 554.528423][T11077] ? trace_kmalloc+0x1f/0xd0 [ 554.528434][T11077] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 554.528448][T11077] ? kstrndup+0xbf/0x160 [ 554.528470][T11077] hwsim_new_radio_nl+0xea4/0x1b10 [ 554.528490][T11077] ? __pfx___nla_validate_parse+0x10/0x10 [ 554.528516][T11077] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.528543][T11077] ? __nla_parse+0x40/0x60 [ 554.528560][T11077] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 554.528582][T11077] genl_family_rcv_msg_doit+0x215/0x300 [ 554.528601][T11077] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 554.528624][T11077] ? bpf_lsm_capable+0x9/0x20 [ 554.528639][T11077] ? security_capable+0x7e/0x2e0 [ 554.528661][T11077] genl_rcv_msg+0x60e/0x790 [ 554.528679][T11077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.528692][T11077] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.528719][T11077] netlink_rcv_skb+0x205/0x470 [ 554.528738][T11077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.528753][T11077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.528791][T11077] ? down_read+0x1ad/0x2e0 [ 554.528807][T11077] genl_rcv+0x28/0x40 [ 554.528819][T11077] netlink_unicast+0x75c/0x8e0 [ 554.528843][T11077] netlink_sendmsg+0x805/0xb30 [ 554.528860][T11077] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.528879][T11077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.528903][T11077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.528915][T11077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.528933][T11077] __sock_sendmsg+0x21c/0x270 [ 554.528951][T11077] ____sys_sendmsg+0x505/0x830 [ 554.528975][T11077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.529000][T11077] ? ___sys_sendmsg+0x205/0x2a0 [ 554.529025][T11077] ___sys_sendmsg+0x21f/0x2a0 [ 554.529046][T11077] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.529095][T11077] ? __x64_sys_sendmsg+0x180/0x260 [ 554.529118][T11077] __x64_sys_sendmsg+0x19b/0x260 [ 554.529139][T11077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.529165][T11077] ? rcu_is_watching+0x15/0xb0 [ 554.529183][T11077] ? do_syscall_64+0xbe/0x3b0 [ 554.529200][T11077] do_syscall_64+0xfa/0x3b0 [ 554.529215][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.529227][T11077] ? asm_sysvec_call_function_single+0x1a/0x20 [ 554.529240][T11077] ? clear_bhb_loop+0x60/0xb0 [ 554.529256][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.529269][T11077] RIP: 0033:0x7f17d7d8ebe9 [ 554.529282][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.529293][T11077] RSP: 002b:00007f17d5fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.529307][T11077] RAX: ffffffffffffffda RBX: 00007f17d7fb6090 RCX: 00007f17d7d8ebe9 [ 554.529316][T11077] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000007 [ 554.529325][T11077] RBP: 00007f17d7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 554.529333][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.529340][T11077] R13: 00007f17d7fb6128 R14: 00007f17d7fb6090 R15: 00007fff1035c128 [ 554.529361][T11077] [ 555.013588][ T5847] Bluetooth: hci2: command 0x0405 tx timeout [ 555.167612][ T10] usb 3-1: USB disconnect, device number 55 [ 555.499904][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 555.544603][ T9733] udevd[9733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.565532][T11089] netlink: 'syz.7.1238': attribute type 10 has an invalid length. [ 555.584366][T11089] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.599885][T11089] bond0: (slave team0): Enslaving as an active interface with an up link [ 555.609181][T11089] netlink: 'syz.7.1238': attribute type 10 has an invalid length. [ 555.685782][T11089] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 555.705500][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 555.837462][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 555.881503][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 555.881679][ T30] audit: type=1326 audit(1755366937.187:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz.3.1241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17d7d8ebe9 code=0x0 [ 555.913228][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.933553][T11089] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 555.942233][ T24] usb 7-1: Product: syz [ 555.950359][ T5925] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 555.971354][ T24] usb 7-1: Manufacturer: syz [ 555.987835][ T24] usb 7-1: SerialNumber: syz [ 556.024526][ T24] usb 7-1: config 0 descriptor?? [ 556.089890][ T5925] usb 3-1: device descriptor read/64, error -71 [ 556.117595][ T55] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 556.180017][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 556.330031][ T5925] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 556.342032][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.352762][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 556.368876][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.379230][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.387461][ T10] usb 4-1: Product: syz [ 556.391836][ T10] usb 4-1: Manufacturer: syz [ 556.396492][ T10] usb 4-1: SerialNumber: syz [ 556.550517][ T24] gs_usb 7-1:0.0: Configuring for 208 interfaces [ 556.557082][ T5925] usb 3-1: device descriptor read/64, error -71 [ 556.580198][ T24] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 556.588099][ T24] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 556.666083][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 556.700310][ T5925] usb usb3-port1: attempt power cycle [ 556.705915][ T10] usb 4-1: USB disconnect, device number 42 [ 556.737194][ T5993] usb 7-1: USB disconnect, device number 15 [ 556.927412][T11114] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 557.070270][ T5925] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 557.109594][ T5925] usb 3-1: device descriptor read/8, error -71 [ 557.602903][ T5925] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 557.692294][ T5925] usb 3-1: device descriptor read/8, error -71 [ 557.861736][ T5925] usb usb3-port1: unable to enumerate USB device [ 557.878727][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1247'. [ 558.034039][T11130] syz.3.1248: attempt to access beyond end of device [ 558.034039][T11130] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 558.047775][T11130] syz.3.1248: attempt to access beyond end of device [ 558.047775][T11130] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 558.061006][T11130] Mount JFS Failure: -5 [ 559.716695][T11146] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp(@Ož>ÆÀ–PÛç' [ 559.731748][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.2.1253 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 559.731785][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.731797][T11146] Call Trace: [ 559.731806][T11146] [ 559.731815][T11146] dump_stack_lvl+0x189/0x250 [ 559.731847][T11146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.731872][T11146] ? __pfx__printk+0x10/0x10 [ 559.731901][T11146] ? kernfs_path_from_node+0x2c/0x260 [ 559.731928][T11146] ? kernfs_path_from_node+0x2c/0x260 [ 559.731950][T11146] ? kernfs_path_from_node+0x2c/0x260 [ 559.731977][T11146] ? kernfs_path_from_node+0x22c/0x260 [ 559.731999][T11146] ? kernfs_path_from_node+0x2c/0x260 [ 559.732026][T11146] sysfs_warn_dup+0x8e/0xa0 [ 559.732051][T11146] sysfs_do_create_link_sd+0xc0/0x110 [ 559.732079][T11146] device_add_class_symlinks+0x1cf/0x240 [ 559.732116][T11146] device_add+0x475/0xb50 [ 559.732152][T11146] wiphy_register+0x199a/0x26b0 [ 559.732202][T11146] ? __pfx_wiphy_register+0x10/0x10 [ 559.732229][T11146] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 559.732270][T11146] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 559.732308][T11146] ieee80211_register_hw+0x33e1/0x4120 [ 559.732364][T11146] ? ieee80211_register_hw+0x1471/0x4120 [ 559.732407][T11146] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 559.732446][T11146] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 559.732491][T11146] ? __hrtimer_setup+0x187/0x210 [ 559.732512][T11146] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 559.732550][T11146] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 559.732622][T11146] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 559.732651][T11146] ? trace_kmalloc+0x1f/0xd0 [ 559.732669][T11146] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 559.732691][T11146] ? kstrndup+0xbf/0x160 [ 559.732731][T11146] hwsim_new_radio_nl+0xea4/0x1b10 [ 559.732775][T11146] ? __pfx___nla_validate_parse+0x10/0x10 [ 559.732821][T11146] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 559.732870][T11146] ? __nla_parse+0x40/0x60 [ 559.732901][T11146] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 559.732937][T11146] genl_family_rcv_msg_doit+0x215/0x300 [ 559.732971][T11146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 559.733012][T11146] ? bpf_lsm_capable+0x9/0x20 [ 559.733038][T11146] ? security_capable+0x7e/0x2e0 [ 559.733075][T11146] genl_rcv_msg+0x60e/0x790 [ 559.733108][T11146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.733129][T11146] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 559.733167][T11146] ? netlink_rcv_skb+0xaa/0x470 [ 559.733205][T11146] netlink_rcv_skb+0x205/0x470 [ 559.733236][T11146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.733262][T11146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.733315][T11146] ? down_read+0x1ad/0x2e0 [ 559.733345][T11146] genl_rcv+0x28/0x40 [ 559.733365][T11146] netlink_unicast+0x75c/0x8e0 [ 559.733408][T11146] netlink_sendmsg+0x805/0xb30 [ 559.733436][T11146] ? rcu_is_watching+0x15/0xb0 [ 559.733472][T11146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.733515][T11146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.733535][T11146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.733568][T11146] __sock_sendmsg+0x21c/0x270 [ 559.733600][T11146] ____sys_sendmsg+0x505/0x830 [ 559.733641][T11146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.733687][T11146] ? import_iovec+0x74/0xa0 [ 559.733722][T11146] ___sys_sendmsg+0x21f/0x2a0 [ 559.733770][T11146] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.733853][T11146] ? __fget_files+0x2a/0x420 [ 559.733876][T11146] ? __fget_files+0x3a0/0x420 [ 559.733915][T11146] __x64_sys_sendmsg+0x19b/0x260 [ 559.733952][T11146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.734000][T11146] ? rcu_is_watching+0x15/0xb0 [ 559.734030][T11146] ? do_syscall_64+0xbe/0x3b0 [ 559.734060][T11146] do_syscall_64+0xfa/0x3b0 [ 559.734086][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.734106][T11146] ? asm_sysvec_call_function_single+0x1a/0x20 [ 559.734127][T11146] ? clear_bhb_loop+0x60/0xb0 [ 559.734155][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.734175][T11146] RIP: 0033:0x7f3ba338ebe9 [ 559.734196][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.734214][T11146] RSP: 002b:00007f3ba41ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.734239][T11146] RAX: ffffffffffffffda RBX: 00007f3ba35b6090 RCX: 00007f3ba338ebe9 [ 559.734254][T11146] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000007 [ 559.734269][T11146] RBP: 00007f3ba3411e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.734282][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.734294][T11146] R13: 00007f3ba35b6128 R14: 00007f3ba35b6090 R15: 00007ffe77905f58 [ 559.734332][T11146] [ 560.980163][ T5918] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 561.074605][T11161] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 561.109560][T11161] macvtap1: entered allmulticast mode [ 561.142417][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.155427][T11161] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 561.160088][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.206260][T11161] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 561.213937][ T5918] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 561.219288][T11161] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 561.236959][T11166] tmpfs: Bad value for 'mpol' [ 561.239915][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.243978][T11166] tmpfs: Bad value for 'mpol' [ 561.732890][ T5918] usb 4-1: config 0 descriptor?? [ 562.164282][T11149] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 562.172463][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1257'. [ 563.176863][T11178] xt_CT: No such helper "snmp" [ 563.240661][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.042239][T11248] Smack: duplicate mount options [ 565.202459][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1268'. [ 565.526825][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 565.539741][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 565.585878][ T5918] usb 4-1: USB disconnect, device number 43 [ 574.891104][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1281'. [ 574.891400][T11305] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1281'. [ 575.305261][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 575.735337][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1286'. [ 575.792958][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 575.802033][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 575.804062][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.819206][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1287'. [ 575.882331][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.907207][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.942256][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 575.957406][T11318] loop6: detected capacity change from 0 to 63 [ 575.961935][ T43] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 575.973711][T11318] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.004878][T11318] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.018876][ T43] usb 7-1: Product: syz [ 576.024014][T11318] Buffer I/O error on dev loop6, logical block 2, async page read [ 576.040973][ T43] usb 7-1: Manufacturer: syz [ 576.046130][ T43] usb 7-1: SerialNumber: syz [ 576.054944][T11318] Buffer I/O error on dev loop6, logical block 3, async page read [ 576.065817][ T9733] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.074765][ T5993] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 576.078067][ T43] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input21 [ 576.123311][ T9733] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.147489][ T9733] Buffer I/O error on dev loop6, logical block 2, async page read [ 576.162312][ T9733] Buffer I/O error on dev loop6, logical block 3, async page read [ 576.177793][ T9733] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.190962][ T9733] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.248638][ T5993] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 576.260179][ T5918] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 576.265596][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.303015][ T5993] usb 3-1: Product: syz [ 576.323827][ T5993] usb 3-1: Manufacturer: syz [ 576.336442][ T5993] usb 3-1: SerialNumber: syz [ 576.351165][ T5993] usb 3-1: config 0 descriptor?? [ 576.452344][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 576.472562][T11326] 9pnet_virtio: no channels available for device 127.0.0.1 [ 576.681924][ T5993] usb-storage 3-1:0.0: USB Mass Storage device detected [ 578.119651][ T5918] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 578.139230][ T5918] usb 4-1: config 0 has no interface number 0 [ 578.165608][ T5918] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.204920][ T5993] usb 3-1: USB disconnect, device number 60 [ 578.220113][ T5925] usb 7-1: USB disconnect, device number 16 [ 578.258424][ T5918] usb 4-1: config 0 interface 85 has no altsetting 0 [ 578.312814][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 578.331840][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.351133][ T5925] appletouch 7-1:1.0: input: appletouch disconnected [ 578.382310][ T5918] usb 4-1: Product: syz [ 578.391729][ T5918] usb 4-1: Manufacturer: syz [ 578.396756][ T5918] usb 4-1: SerialNumber: syz [ 578.415896][ T5918] usb 4-1: config 0 descriptor?? [ 578.426902][T11332] overlayfs: missing 'lowerdir' [ 578.670087][ T5925] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 578.800244][T11337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.872290][ T5925] usb 7-1: device descriptor read/64, error -71 [ 578.937699][T11340] bridge0: port 3(0!) entered disabled state [ 578.944404][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.952366][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.964003][T11340] bridge0: entered allmulticast mode [ 579.036367][T11337] !: left allmulticast mode [ 579.046811][T11337] bridge0: port 3(0!) entered disabled state [ 579.130274][ T5925] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 579.153204][T11337] bridge_slave_1: left allmulticast mode [ 579.160797][T11337] bridge_slave_1: left promiscuous mode [ 579.167554][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.300415][ T5925] usb 7-1: device descriptor read/64, error -71 [ 579.314352][T11337] bridge_slave_0: left allmulticast mode [ 579.320442][T11337] bridge_slave_0: left promiscuous mode [ 579.326615][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.580524][ T5925] usb usb7-port1: attempt power cycle [ 579.834150][ T5918] appletouch 4-1:0.85: Failed to request geyser raw mode [ 579.866109][ T5918] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 579.900188][ T5993] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 579.944245][ T5918] usb 4-1: USB disconnect, device number 44 [ 579.961084][ T5925] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 580.010741][ T5925] usb 7-1: device descriptor read/8, error -71 [ 580.099958][ T5993] usb 8-1: Using ep0 maxpacket: 8 [ 580.190707][ T5993] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.223524][ T5993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.300188][ T5993] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 580.895289][ T5993] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 580.979869][ T5925] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 581.016586][ T5993] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.036932][ T5993] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 581.063060][ T5925] usb 7-1: device descriptor read/8, error -71 [ 581.072160][ T5993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.200746][ T5925] usb usb7-port1: unable to enumerate USB device [ 581.309160][ T5206] udevd[5206]: worker [9654] terminated by signal 33 (Unknown signal 33) [ 581.376412][ T5206] udevd[5206]: worker [9654] failed while handling '/devices/virtual/misc/kvm' [ 581.396191][ T5993] usb 8-1: GET_CAPABILITIES returned 0 [ 581.406091][ T5993] usbtmc 8-1:16.0: can't read capabilities [ 581.436572][ T5206] udevd[5206]: worker [9733] terminated by signal 33 (Unknown signal 33) [ 581.454280][ T5206] udevd[5206]: worker [9733] failed while handling '/devices/platform/dummy_hcd.7/usb8/8-1/8-1:16.0' [ 581.609110][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.652610][ T5993] usb 8-1: USB disconnect, device number 13 [ 583.059012][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 583.197648][T11371] cgroup: fork rejected by pids controller in /syz2 [ 583.230519][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 583.294094][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 583.328904][ T9] usb 4-1: config 0 has no interface number 0 [ 583.375338][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 583.398257][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.430028][ T9] usb 4-1: Product: syz [ 583.448446][ T9] usb 4-1: Manufacturer: syz [ 583.480157][ T9] usb 4-1: SerialNumber: syz [ 583.523961][ T9] usb 4-1: config 0 descriptor?? [ 583.569057][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 583.780522][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 583.820235][ T43] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 583.828302][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 584.010970][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 584.052511][ T43] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 584.102899][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.134300][ T43] usb 8-1: config 0 descriptor?? [ 584.190164][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 584.362570][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.386604][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.411130][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 584.564042][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.584615][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.369680][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1309'. [ 585.458000][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.471892][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.481716][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.493248][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.508228][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.635115][ T43] usb 8-1: USB disconnect, device number 14 [ 585.720726][T11487] lo speed is unknown, defaulting to 1000 [ 585.939665][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 585.955445][ T5887] usb 4-1: USB disconnect, device number 45 [ 585.965083][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 585.995052][T11492] tipc: Started in network mode [ 586.000534][T11492] tipc: Node identity 7, cluster identity 5 [ 586.006482][T11492] tipc: Node number set to 7 [ 586.074483][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1311'. [ 586.116126][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 586.242960][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 586.357169][ T5887] quatech2 4-1:0.51: device disconnected [ 586.840135][ T5887] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 586.971877][T11487] chnl_net:caif_netlink_parms(): no params data found [ 587.049954][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 587.078187][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.134124][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.186928][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 587.269685][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 587.363311][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.458700][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 587.489820][ T5887] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 587.497938][ T5887] usb 4-1: Manufacturer: syz [ 587.571008][ T5887] usb 4-1: config 0 descriptor?? [ 587.600044][ T5839] Bluetooth: hci3: command tx timeout [ 587.611693][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1316'. [ 587.830378][T11510] hsr_slave_0: left promiscuous mode [ 587.870009][T11510] hsr_slave_1: left promiscuous mode [ 588.029905][ T5887] rc_core: IR keymap rc-hauppauge not found [ 588.036185][ T5887] Registered IR keymap rc-empty [ 588.055289][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.060663][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.140244][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.140353][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.189142][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 588.371718][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 588.472740][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.542563][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 588.561341][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.595317][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.723098][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.790032][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.870117][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 588.950085][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.047600][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.139251][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.230361][ T5887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 589.281028][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 589.339916][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8428, setting to 64 [ 589.365746][ T5887] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 589.380344][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 589.436092][ T5887] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 589.480098][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.572594][ T24] usb 1-1: config 0 descriptor?? [ 589.655359][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 589.690121][ T5839] Bluetooth: hci3: command tx timeout [ 589.690221][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 589.832240][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 589.963994][ T24] usb 1-1: USB disconnect, device number 38 [ 590.530104][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.537323][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.728676][T11487] bridge_slave_0: entered allmulticast mode [ 590.797927][T11487] bridge_slave_0: entered promiscuous mode [ 590.808603][ T9] usb 4-1: USB disconnect, device number 46 [ 591.131469][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.160274][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.185239][T11487] bridge_slave_1: entered allmulticast mode [ 591.232082][T11487] bridge_slave_1: entered promiscuous mode [ 591.403547][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 591.642068][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.664891][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.760155][ T5839] Bluetooth: hci3: command tx timeout [ 591.872248][T11555] binder: 11554:11555 ioctl 4018620d 0 returned -22 [ 591.882523][T11555] binder: 11554:11555 ioctl c0306201 0 returned -14 [ 591.947344][T11487] team0: Port device team_slave_0 added [ 591.955613][T11555] syzkaller1: entered promiscuous mode [ 591.961476][T11555] syzkaller1: entered allmulticast mode [ 591.968772][T11555] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 591.972146][T11487] team0: Port device team_slave_1 added [ 592.264076][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.290294][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.347598][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.440206][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.447313][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.514169][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.560932][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1329'. [ 592.581445][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1329'. [ 592.673179][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1329'. [ 593.060650][T11577] syz.0.1332: attempt to access beyond end of device [ 593.060650][T11577] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 593.075517][T11577] syz.0.1332: attempt to access beyond end of device [ 593.075517][T11577] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 593.089448][T11577] Mount JFS Failure: -5 [ 593.841472][ T5839] Bluetooth: hci3: command tx timeout [ 593.924849][T11581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.954047][T11581] batadv_slave_0: entered promiscuous mode [ 594.102283][T11487] hsr_slave_0: entered promiscuous mode [ 594.134596][T11487] hsr_slave_1: entered promiscuous mode [ 594.169882][ T5918] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 594.180091][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.180184][T11487] Cannot create hsr debugfs directory [ 594.439875][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 594.447076][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.482059][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.534702][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.575242][ T5918] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 594.639629][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.805336][T11580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 594.811935][T11580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 594.911511][T11580] vhci_hcd vhci_hcd.0: Device attached [ 594.918673][ T5918] usb 1-1: config 0 descriptor?? [ 595.377826][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 595.385876][ T43] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 595.817146][ T5918] ryos 0003:1E7D:31CE.0008: unbalanced delimiter at end of report description [ 595.845659][ T5918] ryos 0003:1E7D:31CE.0008: parse failed [ 595.857640][ T5918] ryos 0003:1E7D:31CE.0008: probe with driver ryos failed with error -22 [ 595.866594][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 595.884497][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.921824][ T24] usb 4-1: config 127 has an invalid interface number: 36 but max is 1 [ 595.950034][ T24] usb 4-1: config 127 has an invalid interface number: 51 but max is 1 [ 595.966115][ T24] usb 4-1: config 127 has no interface number 0 [ 595.973166][ T24] usb 4-1: config 127 has no interface number 1 [ 595.979677][ T24] usb 4-1: config 127 interface 36 has no altsetting 0 [ 596.010144][ T24] usb 4-1: config 127 interface 51 has no altsetting 0 [ 596.021736][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.035790][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.070438][T11599] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 596.093508][ T5887] usb 1-1: USB disconnect, device number 39 [ 596.136735][ T24] usb 4-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 596.181127][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.211818][ T24] usb 4-1: Product: syz [ 596.437732][ T24] usb 4-1: Manufacturer: syz [ 596.491575][ T24] usb 4-1: SerialNumber: syz [ 597.094858][T11594] vhci_hcd: connection reset by peer [ 597.137355][T11233] vhci_hcd: stop threads [ 597.149984][T11233] vhci_hcd: release socket [ 597.176135][ T24] usb 4-1: unknown number of interfaces: 2 [ 597.179926][T11233] vhci_hcd: disconnect device [ 597.228220][ T24] usb 4-1: USB disconnect, device number 47 [ 597.359926][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 597.521535][ T9] usb 7-1: device descriptor read/64, error -71 [ 597.809924][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 597.960047][ T9] usb 7-1: device descriptor read/64, error -71 [ 598.118216][T11487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 598.192154][T11622] orangefs_mount: mount request failed with -4 [ 598.201931][ T9] usb usb7-port1: attempt power cycle [ 598.235315][T11487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 598.276120][T11487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 598.295998][T11487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 598.390583][ T5918] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 598.399939][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 598.523663][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.562096][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 598.570828][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 598.578865][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.594117][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.610442][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.621268][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 598.627947][ T5918] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 598.633323][ T9] usb 7-1: device descriptor read/8, error -71 [ 598.653703][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.661011][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.676069][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.681696][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.683343][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.723347][ T5918] usb 4-1: config 0 descriptor?? [ 598.850325][ T5887] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 598.910576][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 598.932435][ T9] usb 7-1: device descriptor read/8, error -71 [ 599.012029][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 599.042317][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 599.059386][ T9] usb usb7-port1: unable to enumerate USB device [ 599.090113][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 599.110240][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.118346][ T5887] usb 1-1: Product: syz [ 599.130376][ T5887] usb 1-1: Manufacturer: syz [ 599.135067][ T5887] usb 1-1: SerialNumber: syz [ 599.153597][ T5887] usb 1-1: config 0 descriptor?? [ 599.181506][ T5887] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 599.200750][ T5887] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 599.367779][ T5918] hid (null): unknown global tag 0xd [ 599.378574][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.399858][ T5918] hid (null): unknown global tag 0xe [ 599.422425][ T5918] hid (null): invalid report_count -737188303 [ 599.443280][ T5918] hid (null): unknown global tag 0xd [ 599.456546][ T5918] hid (null): global environment stack underflow [ 599.543297][ T5918] cougar 0003:060B:500A.0009: unexpected long global item [ 599.598317][T11487] veth0_vlan: entered promiscuous mode [ 599.661007][ T5918] cougar 0003:060B:500A.0009: parse failed [ 599.770828][ T5887] em28xx 1-1:0.0: chip ID is em2710/2820 [ 599.830416][ T5918] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 599.944915][T11487] veth1_vlan: entered promiscuous mode [ 600.288919][T11487] veth0_macvtap: entered promiscuous mode [ 600.325338][T11487] veth1_macvtap: entered promiscuous mode [ 600.387793][ T5887] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 600.439647][ T5887] em28xx 1-1:0.0: board has no eeprom [ 600.481396][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.569860][ T5887] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 600.584607][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.606294][ T5887] em28xx 1-1:0.0: dvb set to bulk mode. [ 600.949652][T11487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.949692][T11487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.949722][T11487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.966187][ T5993] em28xx 1-1:0.0: Binding DVB extension [ 600.974847][T11487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.020496][ T43] vhci_hcd: vhci_device speed not set [ 601.079507][ T5887] usb 1-1: USB disconnect, device number 40 [ 601.080659][ T5887] em28xx 1-1:0.0: Disconnecting em28xx [ 602.273695][ T5993] em28xx 1-1:0.0: Registering input extension [ 602.331966][ T5887] em28xx 1-1:0.0: Closing input extension [ 602.459279][ T5887] em28xx 1-1:0.0: Freeing device [ 602.564168][T11660] can: request_module (can-proto-5) failed. [ 602.597642][T11237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.671156][T11237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.722329][ T43] usb 4-1: USB disconnect, device number 48 [ 602.789869][ T30] audit: type=1326 audit(1755366984.077:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd990585ba7 code=0x7ffc0000 [ 602.939888][ T30] audit: type=1326 audit(1755366984.077:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd99052add9 code=0x7ffc0000 [ 603.018073][T11233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.042856][T11233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.061788][ T30] audit: type=1326 audit(1755366984.077:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd990585ba7 code=0x7ffc0000 [ 603.128808][ T30] audit: type=1326 audit(1755366984.077:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd99052add9 code=0x7ffc0000 [ 603.160286][ T30] audit: type=1326 audit(1755366984.077:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd990585ba7 code=0x7ffc0000 [ 603.214908][ T30] audit: type=1326 audit(1755366984.087:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd99052add9 code=0x7ffc0000 [ 603.260146][ T30] audit: type=1326 audit(1755366984.087:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd990585ba7 code=0x7ffc0000 [ 603.327751][ T30] audit: type=1326 audit(1755366984.087:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd99052add9 code=0x7ffc0000 [ 603.566355][ T30] audit: type=1326 audit(1755366984.087:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd990585ba7 code=0x7ffc0000 [ 603.651278][ T30] audit: type=1326 audit(1755366984.087:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11665 comm="syz.0.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd99052add9 code=0x7ffc0000 [ 604.913162][T11689] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1359'. [ 604.923185][T11689] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1359'. [ 604.934649][T11689] netlink: 584 bytes leftover after parsing attributes in process `syz.2.1359'. [ 605.031716][T11693] netlink: 'syz.0.1360': attribute type 4 has an invalid length. [ 605.660040][ T5993] lo speed is unknown, defaulting to 1000 [ 605.667656][ T5993] s: Port: 1 Link DOWN [ 606.610204][T11706] binder: 11704:11706 ioctl c0306201 2000000001c0 returned -22 [ 607.760077][ T5918] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 607.825171][T11721] nfs4: Unknown parameter 'noacly^ÿ' [ 607.931563][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 607.960969][ T5918] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 608.079078][ T5918] usb 4-1: config 1 interface 0 has no altsetting 0 [ 608.233963][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 608.331627][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.380189][ T5918] usb 4-1: Product: à ‰ [ 608.392754][T11725] af_packet: tpacket_rcv: packet too big, clamped from 65253 to 4294967272. macoff=96 [ 608.394665][ T5918] usb 4-1: Manufacturer: У [ 608.418686][ T5918] usb 4-1: SerialNumber: syz [ 608.444905][T11715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.712084][ T5918] usbhid 4-1:1.0: can't add hid device: -71 [ 608.820512][ T5926] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 608.834578][ T928] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 608.838677][ T5918] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 608.858500][ T5918] usb 4-1: USB disconnect, device number 49 [ 609.100910][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.222828][ T5926] usb 1-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 609.251109][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 609.260559][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 609.270906][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.307626][ T5926] usb 1-1: config 0 descriptor?? [ 609.469959][ T928] usb 3-1: Using ep0 maxpacket: 32 [ 609.489017][ T928] usb 3-1: config 2 has an invalid interface number: 248 but max is 2 [ 609.510735][ T928] usb 3-1: config 2 has an invalid interface number: 6 but max is 2 [ 609.519304][ T928] usb 3-1: config 2 has an invalid interface number: 78 but max is 2 [ 609.542766][ T928] usb 3-1: config 2 has an invalid interface number: 212 but max is 2 [ 609.570086][ T5926] usb 1-1: string descriptor 0 read error: -71 [ 609.577824][ T928] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 609.595177][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 609.605570][ T928] usb 3-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 609.622628][ T928] usb 3-1: config 2 has no interface number 0 [ 609.631079][ T5191] bcm5974 1-1:0.0: could not read from device [ 609.645233][ T928] usb 3-1: config 2 has no interface number 1 [ 609.654280][ T5191] bcm5974 1-1:0.0: could not read from device [ 609.662350][ T928] usb 3-1: config 2 has no interface number 2 [ 609.668567][ T928] usb 3-1: config 2 has no interface number 3 [ 609.700614][ T928] usb 3-1: config 2 interface 6 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 609.732348][ T5191] bcm5974 1-1:0.0: could not read from device [ 609.734596][ T5926] usb 1-1: USB disconnect, device number 41 [ 609.751757][ T5191] bcm5974 1-1:0.0: could not read from device [ 609.788201][ T928] usb 3-1: config 2 interface 6 altsetting 6 has a duplicate endpoint with address 0x87, skipping [ 609.900274][ T5918] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 610.010528][ T928] usb 3-1: config 2 interface 78 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 610.044568][ T928] usb 3-1: config 2 interface 78 altsetting 5 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 610.059908][ T928] usb 3-1: config 2 interface 78 altsetting 5 has a duplicate endpoint with address 0x8F, skipping [ 610.111589][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.111773][ T928] usb 3-1: config 2 interface 78 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 610.146944][ T928] usb 3-1: config 2 interface 78 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 610.159871][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.163021][ T928] usb 3-1: too many endpoints for config 2 interface 212 altsetting 240: 161, using maximum allowed: 30 [ 610.175841][ T5918] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 610.181885][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0x7, skipping [ 610.200687][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.201873][ T928] usb 3-1: config 2 interface 212 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 610.343338][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0xA, skipping [ 610.347494][ T5918] usb 8-1: config 0 descriptor?? [ 610.355199][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0x8, skipping [ 610.355233][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0x7, skipping [ 610.355262][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0x9, skipping [ 610.355285][ T928] usb 3-1: config 2 interface 212 altsetting 240 has a duplicate endpoint with address 0x8, skipping [ 610.355308][ T928] usb 3-1: config 2 interface 212 altsetting 240 has 11 endpoint descriptors, different from the interface descriptor's value: 161 [ 610.355337][ T928] usb 3-1: config 2 interface 248 has no altsetting 0 [ 610.355358][ T928] usb 3-1: config 2 interface 6 has no altsetting 0 [ 610.355377][ T928] usb 3-1: config 2 interface 78 has no altsetting 0 [ 610.355396][ T928] usb 3-1: config 2 interface 212 has no altsetting 0 [ 610.358594][ T928] usb 3-1: string descriptor 0 read error: -22 [ 610.711891][ T5918] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.7-1/input0 [ 610.823190][ T928] usb 3-1: Dual-Role OTG device on HNP port [ 610.829598][ T928] usb 3-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=62.ce [ 610.838890][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.900437][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1373'. [ 610.917373][T11745] xfrm1: entered promiscuous mode [ 610.923160][T11745] xfrm1: entered allmulticast mode [ 610.929723][ T43] usb 8-1: USB disconnect, device number 15 [ 611.020152][ T5918] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 611.070796][ T5926] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 611.369945][T11769] syz.3.1378: attempt to access beyond end of device [ 611.369945][T11769] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 611.384371][T11769] syz.3.1378: attempt to access beyond end of device [ 611.384371][T11769] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 611.398198][T11769] Mount JFS Failure: -5 [ 611.996354][ T5918] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 612.008217][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.019709][ T5918] usb 1-1: config 0 has no interface number 0 [ 612.027601][ T5926] usb 7-1: config 4 has an invalid interface number: 92 but max is 3 [ 612.042572][ T5918] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 612.053055][ T5926] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 612.061880][ T5918] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 612.071743][ T5926] usb 7-1: config 4 has an invalid interface descriptor of length 5, skipping [ 612.082080][ T5918] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 612.094126][ T5926] usb 7-1: config 4 has an invalid interface number: 29 but max is 3 [ 612.104940][ T5926] usb 7-1: config 4 has an invalid interface number: 10 but max is 3 [ 612.113609][ T5926] usb 7-1: config 4 has an invalid descriptor of length 240, skipping remainder of the config [ 612.131997][ T5918] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 612.149843][ T5926] usb 7-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 612.158848][ T5926] usb 7-1: config 4 has no interface number 0 [ 612.164313][ T928] usb 3-1: USB disconnect, device number 61 [ 612.165100][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.179411][ T5918] usb 1-1: Product: syz [ 612.190034][ T5918] usb 1-1: Manufacturer: syz [ 612.190634][ T5887] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 612.201747][ T5926] usb 7-1: config 4 has no interface number 1 [ 612.212948][ T5918] usb 1-1: SerialNumber: syz [ 612.223954][ T5926] usb 7-1: config 4 has no interface number 2 [ 612.233441][ T5926] usb 7-1: config 4 interface 92 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 612.254625][ T5918] usb 1-1: config 0 descriptor?? [ 612.268677][T11764] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 612.276558][ T5926] usb 7-1: config 4 interface 92 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 612.313339][ T5926] usb 7-1: config 4 interface 92 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 612.338186][ T5918] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 612.345998][ T5918] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 612.354128][ T5926] usb 7-1: config 4 interface 92 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 612.381678][ T5926] usb 7-1: config 4 interface 92 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 612.401666][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 612.404032][ T5926] usb 7-1: config 4 interface 92 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 612.409177][ T5887] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 612.418342][ T5926] usb 7-1: config 4 interface 92 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 612.440754][ T5926] usb 7-1: config 4 interface 10 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 612.485279][ T5926] usb 7-1: config 4 interface 10 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 612.546755][ T5926] usb 7-1: config 4 interface 29 has no altsetting 0 [ 612.546866][ T5926] usb 7-1: config 4 interface 10 has no altsetting 0 [ 612.581224][ T5926] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=8c.6a [ 612.581337][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.581696][ T5926] usb 7-1: Product: syz [ 612.581792][ T5926] usb 7-1: Manufacturer: syz [ 612.581881][ T5926] usb 7-1: SerialNumber: syz [ 612.621848][ T5887] usb 8-1: config 0 has no interface number 0 [ 612.715808][T11780] syzkaller0: entered promiscuous mode [ 612.715945][T11780] syzkaller0: entered allmulticast mode [ 612.920247][ T5887] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.920393][ T5887] usb 8-1: config 0 interface 85 has no altsetting 0 [ 613.029428][ T5887] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 613.030217][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.030351][ T5887] usb 8-1: Product: syz [ 613.030503][ T5887] usb 8-1: Manufacturer: syz [ 613.030637][ T5887] usb 8-1: SerialNumber: syz [ 613.138173][ T5887] usb 8-1: config 0 descriptor?? [ 613.185505][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 613.213256][T11759] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 613.214362][T11759] macvtap1: entered allmulticast mode [ 613.214423][T11759] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 613.322403][T11787] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 613.398926][ T5926] usb 7-1: bad CDC descriptors [ 613.484227][ T5926] usb 7-1: USB disconnect, device number 25 [ 613.512028][T11787] hsr0: entered promiscuous mode [ 613.898974][ T5993] usb 1-1: USB disconnect, device number 42 [ 613.900214][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 613.900231][ T30] audit: type=1326 audit(1755366994.927:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 613.943286][T11787] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 613.975642][ T30] audit: type=1326 audit(1755366994.927:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 613.997596][T11787] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 614.012504][ T30] audit: type=1326 audit(1755366994.937:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.055886][ T30] audit: type=1326 audit(1755366994.937:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.056427][T11787] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 614.090891][ T30] audit: type=1326 audit(1755366994.937:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.092198][ T5887] appletouch 8-1:0.85: Geyser mode initialized. [ 614.137816][ T5887] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input27 [ 614.158743][ T30] audit: type=1326 audit(1755366994.937:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.190763][ T30] audit: type=1326 audit(1755366994.937:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.228502][ T30] audit: type=1326 audit(1755366994.947:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.254813][ T30] audit: type=1326 audit(1755366994.947:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.280146][ T30] audit: type=1326 audit(1755366994.957:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d7d8ebe9 code=0x7ffc0000 [ 614.486128][ T5926] usb 8-1: USB disconnect, device number 16 [ 614.647988][ T5926] appletouch 8-1:0.85: input: appletouch disconnected [ 614.758868][T11802] netlink: 248 bytes leftover after parsing attributes in process `syz.7.1386'. [ 614.768209][T11802] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1386'. [ 614.835604][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 614.836633][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 615.186960][T11810] netlink: 'syz.7.1386': attribute type 2 has an invalid length. [ 615.561613][ T5993] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 615.617221][T11802] netlink: 'syz.7.1386': attribute type 7 has an invalid length. [ 615.635490][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1386'. [ 615.742417][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 615.770484][ T5993] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 615.812145][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.836636][ T5993] usb 7-1: Product: syz [ 615.859891][ T5993] usb 7-1: Manufacturer: syz [ 615.869945][ T5993] usb 7-1: SerialNumber: syz [ 615.895146][ T5993] usb 7-1: config 0 descriptor?? [ 615.916648][ T5993] kalmia 7-1:0.0: probe with driver kalmia failed with error -22 [ 615.960679][T11819] fuse: Unknown parameter 'ft}0x0000000000000003' [ 616.519821][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.140723][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.306695][ T10] usb 7-1: USB disconnect, device number 26 [ 618.630042][ T5993] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 619.698265][ T5993] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 619.710847][ T5993] usb 8-1: config 0 has no interface number 0 [ 619.727664][ T5993] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 619.747591][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.767902][ T5993] usb 8-1: Product: syz [ 619.792777][ T5993] usb 8-1: Manufacturer: syz [ 619.816000][ T5993] usb 8-1: SerialNumber: syz [ 619.833801][ T5993] usb 8-1: config 0 descriptor?? [ 620.066972][T11832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.094998][T11832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.124823][ T5993] usb 8-1: Found UVC 0.08 device syz (046d:0823) [ 620.138332][ T5993] usb 8-1: No valid video chain found. [ 620.155519][ T5993] usb 8-1: USB disconnect, device number 17 [ 620.510082][ T928] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 620.670062][ T928] usb 1-1: Using ep0 maxpacket: 32 [ 620.705996][ T928] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 620.748954][ T928] usb 1-1: config 0 has no interface number 0 [ 620.797236][ T928] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 620.849240][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.864948][ T928] usb 1-1: Product: syz [ 620.869276][ T928] usb 1-1: Manufacturer: syz [ 620.918997][ T928] usb 1-1: SerialNumber: syz [ 621.171927][ T928] usb 1-1: config 0 descriptor?? [ 621.187000][ T928] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 621.215470][ T5993] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 621.402469][ T928] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 621.420302][ T5993] usb 4-1: Using ep0 maxpacket: 8 [ 621.445671][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 621.461695][ T928] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 621.476501][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.505852][ T5993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.525953][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 621.543881][ T5993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 621.583459][ T5993] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 621.659936][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.751455][ T5993] usb 4-1: config 0 descriptor?? [ 621.803214][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.814099][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.932087][T11871] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 622.290983][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.298296][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.306689][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.313951][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.321448][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.328404][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.336032][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.343363][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.350690][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.357728][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.364957][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.372045][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.379221][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.386424][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.393551][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.400705][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.407801][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.417259][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.439177][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.446469][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.453769][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.460898][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.468002][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.475094][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.482213][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 622.654428][T11899] syz.6.1411: attempt to access beyond end of device [ 622.654428][T11899] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 622.668120][T11899] syz.6.1411: attempt to access beyond end of device [ 622.668120][T11899] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 622.681668][T11899] Mount JFS Failure: -5 [ 622.993916][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 623.114021][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 623.121424][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 623.128365][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 623.139994][ T5839] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 623.301245][T11902] overlayfs: failed to resolve './file1': -2 [ 623.422720][ T9728] usb 1-1: USB disconnect, device number 43 [ 623.510714][ T9728] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 623.724809][ T9728] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 623.782015][ T43] usb 4-1: USB disconnect, device number 50 [ 623.823511][ T5847] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 623.862843][ T9728] quatech2 1-1:0.51: device disconnected [ 624.069576][T11914] macsec1: entered allmulticast mode [ 624.077860][T11914] macvlan1: entered allmulticast mode [ 624.084044][T11914] veth1_vlan: entered allmulticast mode [ 624.631586][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.635444][T11920] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 624.679333][T11914] macvlan1: left allmulticast mode [ 624.685224][T11914] veth1_vlan: left allmulticast mode [ 624.857093][ T30] audit: type=1326 audit(1755367006.067:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 625.007071][ T30] audit: type=1326 audit(1755367006.067:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 625.330080][ T30] audit: type=1326 audit(1755367006.267:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 625.360000][ T30] audit: type=1326 audit(1755367006.267:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 625.538397][T11931] netlink: 'syz.6.1418': attribute type 8 has an invalid length. [ 626.159357][ T30] audit: type=1326 audit(1755367006.267:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 626.504112][ T30] audit: type=1326 audit(1755367006.267:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 626.527162][ T30] audit: type=1326 audit(1755367006.267:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 626.549554][ T30] audit: type=1326 audit(1755367006.267:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11915 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabcb8ebe9 code=0x7ffc0000 [ 627.765721][T11931] tipc: Enabling of bearer rejected, failed to enable media [ 628.752674][ T5887] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 629.760986][T11965] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 629.952125][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 630.121030][ T5887] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 630.139827][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.147884][ T5887] usb 7-1: Product: syz [ 630.169831][ T5887] usb 7-1: Manufacturer: syz [ 630.174529][ T5887] usb 7-1: SerialNumber: syz [ 630.196709][ T5887] r8152-cfgselector 7-1: Unknown version 0x0000 [ 630.220370][ T5887] r8152-cfgselector 7-1: config 0 descriptor?? [ 630.599884][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 631.402427][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1433'. [ 631.482593][T11987] netlink: 'syz.7.1433': attribute type 6 has an invalid length. [ 631.613370][T11989] syz.7.1433 (11989): attempted to duplicate a private mapping with mremap. This is not supported. [ 631.693713][ T30] audit: type=1326 audit(1755367012.937:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11982 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0fb8ebe9 code=0x7ffc0000 [ 631.779893][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 631.890078][ T10] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 631.979863][ T30] audit: type=1326 audit(1755367012.937:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11982 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fcc0fb8ebe9 code=0x7ffc0000 [ 632.004277][ T10] usb 3-1: config 0 has no interface number 0 [ 632.014601][ T10] usb 3-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 632.030994][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.039168][ T30] audit: type=1326 audit(1755367013.337:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11982 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0fb8ebe9 code=0x7ffc0000 [ 632.070922][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.092880][ T30] audit: type=1326 audit(1755367013.337:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11982 comm="syz.7.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0fb8ebe9 code=0x7ffc0000 [ 632.117201][ T10] usb 3-1: config 0 descriptor?? [ 632.124123][ T10] usb-storage 3-1:0.63: USB Mass Storage device detected [ 632.849134][ T5918] r8152-cfgselector 7-1: USB disconnect, device number 27 [ 633.096939][ T9728] usb 3-1: USB disconnect, device number 62 [ 633.501921][T12016] x_tables: ip_tables: osf match: only valid for protocol 6 [ 633.750069][ T5918] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 634.510238][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 634.982953][ T5918] usb 7-1: config 0 has an invalid interface descriptor of length 4, skipping [ 635.332058][ T5918] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 635.410125][ T5918] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.552719][ T5918] usb 7-1: New USB device found, idVendor=05ac, idProduct=7c19, bcdDevice=f0.72 [ 635.569191][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.584603][ T5918] usb 7-1: Product: syz [ 635.595287][ T5918] usb 7-1: Manufacturer: syz [ 635.604784][ T5918] usb 7-1: SerialNumber: syz [ 635.699959][ T5993] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 635.703826][ T5918] usb 7-1: config 0 descriptor?? [ 635.821127][T12031] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 635.828924][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'. [ 635.865812][ T5993] usb 4-1: Using ep0 maxpacket: 8 [ 635.902985][ T5993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 635.933882][ T5993] usb 4-1: config 3 has an invalid interface number: 182 but max is 0 [ 635.953167][ T5993] usb 4-1: config 3 has an invalid descriptor of length 58, skipping remainder of the config [ 635.972558][ T5993] usb 4-1: config 3 has no interface number 0 [ 635.978915][ T5993] usb 4-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 636.009590][ T5993] usb 4-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 636.044874][ T5847] Bluetooth: hci2: Malformed Event: 0x02 [ 636.050945][ T5993] usb 4-1: config 3 interface 182 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 636.064931][ T5993] usb 4-1: config 3 interface 182 has no altsetting 0 [ 636.075065][ T5993] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 636.089817][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.108194][ T5993] usb 4-1: Product: syz [ 636.113035][ T5993] usb 4-1: Manufacturer: syz [ 636.117671][ T5993] usb 4-1: SerialNumber: syz [ 636.422070][T12039] program syz.3.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.748605][T12043] ip6gretap0: entered promiscuous mode [ 636.800254][T12043] vlan2: entered promiscuous mode [ 637.030794][ T10] usb 7-1: USB disconnect, device number 28 [ 639.519667][ T5993] usbtest 4-1:3.182: couldn't get endpoints, -71 [ 639.545868][ T5993] usbtest 4-1:3.182: probe with driver usbtest failed with error -71 [ 639.672600][ T5993] usb 4-1: USB disconnect, device number 51 [ 640.029860][ T5918] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 640.089890][ T5993] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 640.457187][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 640.940775][T12079] orangefs_mount: mount request failed with -4 [ 641.029838][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 641.036639][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.073049][ T5993] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 641.075204][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 641.090601][ T5993] usb 4-1: config 0 has no interface number 0 [ 641.103735][ T5993] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 641.152931][ T5918] usb 3-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 641.172409][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.189870][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.211124][ T5918] usb 3-1: Product: syz [ 641.225702][ T5993] usb 4-1: Product: syz [ 641.225719][ T5918] usb 3-1: Manufacturer: syz [ 641.225739][ T5918] usb 3-1: SerialNumber: syz [ 641.252139][ T5993] usb 4-1: Manufacturer: syz [ 641.256900][ T5993] usb 4-1: SerialNumber: syz [ 641.299367][ T5993] usb 4-1: config 0 descriptor?? [ 641.306491][ T5918] usb 3-1: config 0 descriptor?? [ 641.335671][ T5993] smsc95xx v2.0.0 [ 641.343904][ T5918] gspca_main: spca501-2.14.0 probing 0733:0402 [ 641.441445][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 642.061272][ T5918] gspca_spca501: reg write: error -110 [ 642.067343][ T5918] spca501 3-1:0.0: Reg write failed for 0x00,0x02,0x01 [ 642.490394][ T5918] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 643.151417][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.334989][ T5993] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 643.581988][ T928] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 644.130136][ T5918] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 644.233631][ T5926] usb 3-1: USB disconnect, device number 63 [ 644.337209][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 644.377407][ T5918] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 644.429206][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.506688][ T5918] usb 7-1: Product: syz [ 644.519325][ T5918] usb 7-1: Manufacturer: syz [ 644.546422][ T5918] usb 7-1: SerialNumber: syz [ 644.595729][ T5918] usb 7-1: config 0 descriptor?? [ 644.841810][ T5993] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 644.860144][ T5993] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 644.880111][ T5993] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 644.893668][ T5993] usb 4-1: USB disconnect, device number 52 [ 645.027088][ T5918] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 645.207288][ T928] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 645.229855][ T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.258605][ T928] usb 1-1: config 0 descriptor?? [ 645.470744][T12115] syz.3.1468: attempt to access beyond end of device [ 645.470744][T12115] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 645.484653][T12115] syz.3.1468: attempt to access beyond end of device [ 645.484653][T12115] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 645.498320][T12115] Mount JFS Failure: -5 [ 645.607222][ T928] gspca_main: spca508-2.14.0 probing 8086:0110 [ 646.106691][ T928] gspca_spca508: reg_read err -32 [ 646.118402][ T928] gspca_spca508: reg_read err -32 [ 646.147038][ T928] gspca_spca508: reg_read err -32 [ 646.175795][ T5918] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 646.200208][ T5918] usb 7-1: USB disconnect, device number 29 [ 646.290126][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 646.355971][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 646.638058][ T928] gspca_spca508: reg_read err -71 [ 646.648735][ T928] gspca_spca508: reg write: error -71 [ 646.664236][ T928] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 646.678283][ T928] usb 1-1: USB disconnect, device number 44 [ 646.720002][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 646.732253][ T10] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 646.752022][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 646.778795][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 646.798453][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 646.823215][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 646.858748][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.921434][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 646.948682][ T10] usb 8-1: SerialNumber: syz [ 647.033881][T12120] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 647.222788][ T10] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 647.234182][ T30] audit: type=1326 audit(1755367028.447:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 647.324305][ T10] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 647.398656][ T10] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 647.444937][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.489205][ T30] audit: type=1326 audit(1755367028.447:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 647.567332][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.760245][ T30] audit: type=1326 audit(1755367028.447:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 647.763149][ T10] usb 8-1: USB disconnect, device number 18 [ 647.963589][T12140] syz.3.1477: attempt to access beyond end of device [ 647.963589][T12140] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 647.977399][T12140] syz.3.1477: attempt to access beyond end of device [ 647.977399][T12140] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 647.990874][T12140] Mount JFS Failure: -5 [ 650.446244][T12150] No such timeout policy "syz0" [ 651.285416][ T30] audit: type=1326 audit(1755367028.447:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 651.307680][ T30] audit: type=1326 audit(1755367028.447:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 651.333181][ T30] audit: type=1326 audit(1755367028.447:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12125 comm="syz.6.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121c38ebe9 code=0x7fc00000 [ 651.495133][T12155] xt_connbytes: Forcing CT accounting to be enabled [ 651.630110][T12155] Cannot find set identified by id 0 to match [ 652.156364][T12166] macsec1: entered promiscuous mode [ 652.165033][ T5926] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 652.213837][T12166] macsec1: entered allmulticast mode [ 652.510952][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 652.521844][ T5926] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 652.560474][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.649399][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 653.208141][T12170] orangefs_mount: mount request failed with -4 [ 653.305194][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.316294][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.330156][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 653.354299][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.736480][ T5839] non-paged memory [ 653.741305][ T5839] list_del corruption, ffff8880281e3c80->next is LIST_POISON1 (dead000000000100) [ 653.751463][ T5839] ------------[ cut here ]------------ [ 653.756964][ T5839] kernel BUG at lib/list_debug.c:58! [ 653.762935][ T5839] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 653.769379][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 653.779438][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.789579][ T5839] Workqueue: hci3 hci_conn_timeout [ 653.794705][ T5839] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 653.801734][ T5839] Code: c0 bd e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 20 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 80 be e1 8b 48 89 de 4c 89 [ 653.821460][ T5839] RSP: 0018:ffffc900040ff980 EFLAGS: 00010246 [ 653.827651][ T5839] RAX: 000000000000004e RBX: ffff8880281e3c80 RCX: a46e35a3650c6e00 [ 653.835673][ T5839] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 653.843653][ T5839] RBP: ffffffff8a759c60 R08: 0000000000000003 R09: 0000000000000004 [ 653.851639][ T5839] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 653.859732][ T5839] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 653.867800][ T5839] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 653.876734][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.883343][ T5839] CR2: 00007faabd952d58 CR3: 00000000579cc000 CR4: 00000000003526f0 [ 653.891331][ T5839] Call Trace: [ 653.894627][ T5839] [ 653.897649][ T5839] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 653.903374][ T5839] hci_cancel_connect_sync+0xc8/0x120 [ 653.908840][ T5839] hci_abort_conn+0x191/0x330 [ 653.913521][ T5839] ? process_scheduled_works+0x9ef/0x17b0 [ 653.919366][ T5839] process_scheduled_works+0xade/0x17b0 [ 653.925151][ T5839] ? __pfx_process_scheduled_works+0x10/0x10 [ 653.931178][ T5839] worker_thread+0x8a0/0xda0 [ 653.935811][ T5839] kthread+0x70e/0x8a0 [ 653.939907][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 653.945031][ T5839] ? __pfx_kthread+0x10/0x10 [ 653.949632][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.954841][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.960073][ T5839] ? __pfx_kthread+0x10/0x10 [ 653.964802][ T5839] ret_from_fork+0x3fc/0x770 [ 653.969404][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 653.974530][ T5839] ? __switch_to_asm+0x39/0x70 [ 653.979317][ T5839] ? __switch_to_asm+0x33/0x70 [ 653.984092][ T5839] ? __pfx_kthread+0x10/0x10 [ 653.988791][ T5839] ret_from_fork_asm+0x1a/0x30 [ 653.993571][ T5839] [ 653.996595][ T5839] Modules linked in: [ 654.001572][ T5839] ---[ end trace 0000000000000000 ]--- [ 654.069985][ T5839] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 654.127947][ T5839] Code: c0 bd e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 20 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 80 be e1 8b 48 89 de 4c 89 [ 654.148013][ T5839] RSP: 0018:ffffc900040ff980 EFLAGS: 00010246 [ 654.155172][ T5839] RAX: 000000000000004e RBX: ffff8880281e3c80 RCX: a46e35a3650c6e00 [ 654.163576][ T5839] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 654.172544][ T5839] RBP: ffffffff8a759c60 R08: 0000000000000003 R09: 0000000000000004 [ 654.181644][ T5839] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 654.190422][ T5839] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 654.200363][ T5839] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 654.210430][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.214635][ T5926] usb 3-1: usb_control_msg returned -71 [ 654.217839][ T5839] CR2: 00007f121d218f98 CR3: 00000000579cc000 CR4: 00000000003526f0 [ 654.235353][ T5839] Kernel panic - not syncing: Fatal exception [ 654.241623][ T5839] Kernel Offset: disabled [ 654.245945][ T5839] Rebooting in 86400 seconds..