last executing test programs: 4m59.748998631s ago: executing program 2 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x23b6, &(0x7f0000000100)={0x0, 0xb40b, 0x100, 0x1, 0x10f}, &(0x7f0000000000), &(0x7f0000002180)) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000000000000000000800010001000000000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) 4m58.462014319s ago: executing program 2 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000011070000000000000066e707b2a232cf49a7e3458320d5a410d8f053c2d7045a84a1a378da208d3a4edc46b7542020fed6ed63877da5a8d636ce6e2084646db9d4f22d0ea7f1297206b557846c7a95fc7850dc0a4486d407ba39f31397cf4195a6a0bd667b68a1dd3b32bcdec057af", @ANYRES32, @ANYBLOB="000000000000ddff000000100000010000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000000000000000000000000000003003000026120f3843eaf22ec7d41f099dcb916e39b2bb7d9de8f54b5151ed76f3ff07c44043e93097726c9d773b00e824cc2ef9edccf5112ccd044543727a0e66720a67f668114cc7a594410fe027e7ca01ba44d42befd05622b1e4644f84e033440c7c2bf9638a07b8d9bbbb87a7a92ea9aa", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x109502, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)=0x8000) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}}) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet6(r7, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f4800000", 0xbb, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) 4m57.117984272s ago: executing program 2 (id=118): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d02df5d5e5b60fc6653b46012428538bc412aa07c0007df92e8738eeb6f9bfc550861520cc783110dd5527b38698b32c12519f5107b88d3f57306b6d6dc9e086da488ecc6c5bc3f13935a8b7a553301db16c335e18df369400c64c7aaa37d6b7047d2500906b5b0cff077e3a86a"], 0x50) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r1, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TIOCCONS(r6, 0x541d) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2a80, 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000000340)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe6Z\xeaF\r\xc6\xe5P\xaa\xb8\x15w\x7f\xb8O\x106\x19yP\x8d\xc1\xce\xac\xa0\xa1\xa1\x800xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) setpgid(r1, 0x0) r3 = getpgid(r1) setpgid(0x0, r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r5, &(0x7f0000000080)=ANY=[], 0xb0) dup3(r6, r5, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000000c0)) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000001c0)) 4m56.368441356s ago: executing program 2 (id=123): r0 = syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe7, 0x5a, 0x41, 0x20, 0xbb4, 0xa6b, 0x72f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc, 0x0, 0x0, 0x13, 0x92, 0xbd, 0x1, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xffff, 0x7f, 0x5, "eb0577"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x2, "27ee", "e8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0xf9, 0x1, 'L\a'}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xfffb, 0x5, 'R'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x5, "9ae528"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x4, 0xb8, "c614a83a81a65c"}]}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m55.28630128s ago: executing program 2 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x24, &(0x7f0000000580)=""/36, 0x0, 0x40}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$nci(r2, &(0x7f0000000300)=""/254, 0xfe) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="a683152d96fbca80d9c2b318137c94d972bc015f2e2b277edfd2ce743c9f8b6bea96902a81695ed67ff9fa129e3b38e94a7fc5afead3d8bf2f6f8dcfb09b26bdce3deb52426b580454e1f61322b90d67d7dcb2511de4460375db4cb07b96e96fb200392d11b924a04e300c262b29bf06c795c23a4fa2b0ecb9796507f082fcd98b5722c6e3d0b81386421d4b9a9b95b06543ceecf1d6703b3f6f83b584137ee77a91c1ad9260fe2acf911d3a2cd330498874f7270b7414a907834808a52aba6cc03ede9b2e7252f03fbe4ce5896d539ebcbe92abcda53da099fb66fbf67fb42f7442872af3c96f63adb35a28af7f4823e80ffd69f53615514e5349af4bf546e28b39a93e19ac83e985f1dd3c348f8cc9eec2a79bac4d8d59dcd45266c7f3e6", 0x11f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x880) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES8, @ANYRES16=r6, @ANYRES16=r8], 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) 4m54.896073773s ago: executing program 32 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x24, &(0x7f0000000580)=""/36, 0x0, 0x40}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$nci(r2, &(0x7f0000000300)=""/254, 0xfe) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="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", 0x11f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x880) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES8, @ANYRES16=r6, @ANYRES16=r8], 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) 14.659661013s ago: executing program 3 (id=1181): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x114, 0x1}], 0x10}, 0x0, 0x44004}) (async) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x400) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r7 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r6, 0x10000, {0x0, 0x0, 0x0, 0x2eed, 0x7fff, 0x0, 0x0, 0x0, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a6a4274f440000000001000010e200"}}) writev(r8, &(0x7f0000000300)=[{&(0x7f00000000c0)='\b', 0x7e00}], 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14.658659374s ago: executing program 4 (id=1182): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='fusectl\x00', 0x4001, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) (async) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 13.503814677s ago: executing program 4 (id=1190): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x4c0c3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000080)=""/139, &(0x7f0000000140)=""/73, &(0x7f00000001c0)=""/190, 0xdddd0000}) 13.298025155s ago: executing program 4 (id=1192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.205684231s ago: executing program 1 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) (async, rerun: 32) r5 = inotify_init() (rerun: 32) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) (async, rerun: 32) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x124) (async, rerun: 32) r6 = shmget(0x3, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r6, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 12.815709197s ago: executing program 1 (id=1196): r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@rose, @rose, @rose, @rose, @bcast, @null, @bcast, @rose]}, &(0x7f00000000c0)=0x48) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r1 = msgget(0x0, 0x2c4) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x2000, 0x0) msgctl$IPC_RMID(r1, 0x0) connect(r0, &(0x7f0000000100)=@caif=@util={0x25, "8cc03b07c0fef0a0730a612e65aa6b35"}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x991c, 0x9, 0x4020, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xfb1e, 0x0, r3, 0xd, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000007000000000000000400000005830e000000000001400800f0ffffff180000000700000000000000020000009500000000000000900718130131ef127df8fb8a0be831641ecdcc5bfa068a89a2222a1d29724077c8ea473b429b62bf740352dba8943f7c0ca9df8009a21ebb3787aa907225100be94b3a8f5809eac7bda2f8d7f70ff78223a14c61f2afeb72b38fc0348b88a9a93f1037aee9e70b0f3f3419f5"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7ad8d0ca8bb6d00f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@rose, @rose, @rose, @rose, @bcast, @null, @bcast, @rose]}, &(0x7f00000000c0)=0x48) (async) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) msgget(0x0, 0x2c4) (async) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x2000, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) (async) connect(r0, &(0x7f0000000100)=@caif=@util={0x25, "8cc03b07c0fef0a0730a612e65aa6b35"}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0x991c, 0x9, 0x4020, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xfb1e, 0x0, r3, 0xd, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000007000000000000000400000005830e000000000001400800f0ffffff180000000700000000000000020000009500000000000000900718130131ef127df8fb8a0be831641ecdcc5bfa068a89a2222a1d29724077c8ea473b429b62bf740352dba8943f7c0ca9df8009a21ebb3787aa907225100be94b3a8f5809eac7bda2f8d7f70ff78223a14c61f2afeb72b38fc0348b88a9a93f1037aee9e70b0f3f3419f5"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7ad8d0ca8bb6d00f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) 12.577996571s ago: executing program 3 (id=1197): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000400)={0x0, 0xff7c, 0x10100, 0x0, 0x193}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) 12.330342691s ago: executing program 1 (id=1198): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xd8f, 0x42000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000280)=""/198) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg(r3, &(0x7f0000000180)={&(0x7f0000000380)=@nfc_llcp={0x27, r7, 0x1, 0x2, 0x1, 0x6, "485e8533e2fcf8377081c68370cbe42ea1782b65112988eef20cdb71513a26e908f02cf05e20209beac03c059e07a43d685b589a2f6adf6e2f8eebbd0a533e", 0x16}, 0x80, &(0x7f0000000680), 0x5, &(0x7f0000000700)=[{0xfff, 0x1, 0x9, "32638ea0dc4c39b8cd85a1d6321252f0fd535fbc035fdce226a2ae1d97116d246ac860d22408fb0ecf2821e3f875ef6617c9885ac566ef88c2ac267ad6acdfb5a1c22f03f74a8c15403d29cc030890a9f247dc5e886e38eec8b650695787dfa3ee47"}, {0x90, 0x10d, 0x800, "c365534ca5ab9921239daed8b504088eee6fc7d0385fd65734c238a3cbb1f1f82268f013c126f8e0eaf2f1c5379c7848c6cf21ee7568ac7a6f01a414c6e91a61a025e6c7755f0bc373911e228a7631ad613bd9e6b46726abd25034e82ff35f06a32d05cf4d02599d5d56b58c0117cca22066a4f46571201ff2"}, {0x68, 0xe9, 0x0, "1b3fb50d0b71718787437ae3f4680e690c4716d811e0923e3019e4241c84e25b09dcd75ae89a47952f579d28ecba0b2400008be4ecc7b5770cd00c15b29cab1f8c9e50acdd245008d9ec6b3e3f13e537fdd1ed"}, {0xc8, 0x10f, 0x10000009, "fae31a17144a2edad1b1955c014323428cc09c074d8f9d5dac15e94d167947dac66c251c8afd8bccdcc309900993b87c51760d7885437ad39182ff2d3b2430d3e6159501aa9584b059c5d1ea0135db979b4658c7520b5c4a8b41e2b81b32b0110565aa32b3d3162c2f2f0ffe2fd916e800c5de6a0a3f21f45e87ca4c1ae7a5d1f9f70fe4b393fbc00c65e630ecccd63230ed2be26ada0e443f32c402be552dedc667a81d966ffa3948a5a1c604c9f3ce15dec5b220f62a"}], 0x238}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 10.8935875s ago: executing program 1 (id=1200): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000b80)={0x3, 0x1, 0x0, 0x0, 0x9}, 0xc) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb}}}}]}, 0x40}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @initdev}, &(0x7f0000000180)=0xc) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000240)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0xfe, 0xa011, 0x24, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, 0x40, 0x5, 0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) (async) r13 = socket(0x10, 0x803, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x8, 0xfff2}, {0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x3b, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="10030000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="300102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040057a3000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000096bc503dfc32f9782b97ddb3b3c89e040000000000000000000000000000000005e202000600000004000400080006003b041771d28afd0ee17104d1ac74cd4cc0e832f52dc4a021ddaaa054faf6611f60396410dac780e9738f7d67c9aed425757ad1804f8ae75162822b941a1262997ec36cda5dc8a6d085908fc127208063d588acc7c8644015a2339518b38721ad464bd013f82d224f69acd49d806930a4462f42d9ce0badb07c8f17298b7cf7398c0113df2fea9396ea65eb3cbb50496f822bb2f5cd86f401596f0fb1e828a52fce3109", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d706ffff08000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040040000000"], 0x310}, 0x1, 0x0, 0x0, 0x4010}, 0x40) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 10.888640636s ago: executing program 3 (id=1201): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x6, 0x1, 0x0, 0x5, 0x0, 0x3, [{0x2, 0x0, 0x72}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000040)=""/21, 0x34, 0x15, 0x0, 0x5, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000699300000089a72aa43df3b15c7dd8045a0000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x14, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000181200003ae9e4384fb947f9533af936c3eafa0193255098bace3acc06b5d891544459079db1a4e3e7d2a4a4bf0ecc92d45457119651cddee4c9662ac5d6adeed03e23bcae76a37e6b72ae955c2ce802464c48572588300bee417744bcd1df26232a30d8311e25ca1fe196766bbfa49a6ccf58aa3a0b5c078812d837e425d77643a3c2d91506614b2506f5b3a8c7d5ac86e15d03da357a", @ANYRES64=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x11, 0x2, 0x9) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) openat$kvm(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 10.708866338s ago: executing program 4 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x29c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x26c, 0x2, [@TCA_FLOW_EMATCHES={0x268, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x2}, {0xffffffffffffffff, 0x3, 0x2}}}, @TCF_EM_IPT={0x3c, 0x3, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x59, 0x3, 0xd}, {0x9, 0x1, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x78dc, 0x8, 0x7}, {0xffffffffffffffff, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xf1, 0x2, 0xe}, {0xbd3, 0xffffffffffffff7f, 0x1, "5c55ebf407"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7fff, 0x2, 0x9}, {0x4, 0x1, 0x1, '?'}}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x9, 0x0, 0xf6e5}, "f544ede9e8294332226b6830115a8d3776de06b822729c306bb2d5eef391af2b2de5dc84f766ee2bc45b5f21f5d88370dbfb8365633d91031a7c88d2182c6a1e5a017e9e745e87d8b9fee3121c31ef160333ba3f3ef787f9ea5a35218b06b40299768905b4c0cb496359c804cbb2eb05e67266f7965f8c076cbd400f"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x9, 0x9e, 0x0, 0x2400000}}}]}, @TCA_EMATCH_TREE_HDR={0x32}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc4, 0x2e93, 0x0, 0x0, {{0x400}, "9e517a96e257e9ff5da56bab7f3000e0f6d9c7624d23a66c5d9ce4716414227792bfcad14897a45e02ac56514209a7eedd005bc5f72f2c1c5c2b5f87980265f6e13653dbf009ed8e7b9e3139052636a2badaad74cc22c9529a3d0000009c59a2f5b43e5152787f2da8ab898933ac3a32f320375fea4b5e19081548a862eff43e242b29da5dd439ebea94e71e2a81fce4cc46251fca3a8e1a5593a2baf56acd8770c3ef1c46865a97e3054a1da0fd48944e67417489292c"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xea}, {0x4, 0x7, 0x825, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x29c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x24, 0x0, 0x0) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 9.187048446s ago: executing program 4 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="0100b11b700000feffff1a000008180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xfbcbb4d6c9995573) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) fanotify_mark(0xffffffffffffffff, 0x98, 0x1018, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.028767855s ago: executing program 1 (id=1209): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x2a, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000180), 0x1004) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000240)=0x9) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.8941112s ago: executing program 3 (id=1211): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x1021, r1, 0x0) write(r2, &(0x7f0000000240)="e6", 0x1) tee(r1, r0, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x4201, 0x3000a}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, r6}, 0xc) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 8.601879692s ago: executing program 1 (id=1213): socket(0x2, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 6.95352777s ago: executing program 33 (id=1213): socket(0x2, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) 6.929286657s ago: executing program 5 (id=1216): openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x1c2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_ENDIAN(0x13, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000001d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x174, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x413}]}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x700000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2b4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "83d28ff69f62cef9186c8c45"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x4f4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4cc, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x460, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x450, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x320, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "17cca9b768fa7f268020966d066035a60e79f6a0921a90f1999aa82c9c29c7d23a383a665d2adf9c850e06489ef297a5804cc5af1f45f329318388b4fb462273bcd931d29afce85f1d65c43890ebad8950784c3104a3ef2a12f51468b908097625a870a1b52a01991d7f114936887d60c4d7d0745c31ef47ffa0d3c405d509e0a17a56c8a778ed8184"}, @NFTA_DATA_VALUE={0xe8, 0x1, "169b334b1d68ab1f278cb442770b907572917e9b17af4209287473b8710b078823399f7c70f4d33c8fe87bc75f6c66eebd0d5cb70f9c995e1809fade1c6203fb0bb86ee93ab4f3f2237ecba7f6cc7949c8772c603e68c99e0ba53f44d3362b7318afc9215359e5c80e1eba1d79baec8e2e990bef85ba034c4a239d2733982d0e8ee29c26e5e52235d38816730e8af297d5262383ffe0070d2845f05033b4aa095e1aaa9f9afe6c9d17c6c9da7d8397120c05127778be73be05cc41ca57e9ccfea072db52aa92f5f779d783405a41b99a5d2d88a13441c17cb8074107b41601d7cc8690f0"}, @NFTA_DATA_VALUE={0xd2, 0x1, "ba1a1051486062ff91ce98966ecc762d3833d87fc68aa5f2d1a66f91163bce94e4f3d608071812f962db47a1ebf433b1f65cd414da6234153cc02ad8884471ae54c8707cc9bde02a14f6e531745474b9fe4901e3624feecc730216c7734f744cb15e5ba03493f1aa1a3ce25321803848a8b990732505e644183332e37590cc603fa79955fd2dc0aa1d31951e9118b7fdeac2cb82fdf307247fff315bddb444328582f12a8be81c085ac6947308b9b5fcb2760b2582d3d973bc5ce814590001341674094d462606eed8757cb74c38"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "6df047bb7760a9d62429334ed2b31653af6ea4deded31104c1f64e20a415bbeed502b902e8eee0aec541edde8a98fefab5ec2f1ea139477e24a3406b7a765933581d84c1b591688a4694e0ea90160728c55e15dd1e5187dd86de7655d92261f0c09efff8f92981b7fb88521721bc54148dc24ed7ec43f069223caa8fb4f5d3f98b4d4c0d844b2f25f538a58d72480ced8b1fc421e9989765e0"}]}, @NFTA_RANGE_TO_DATA={0x124, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "a843856e4a4a05d3fac5b2b265a64178e9ab35c05fd6cf0f2ccf61805b56ad6561ab00dbb67566ff993b471ffb9c980bc88575985938b2930178dedae4a58e0d7c7b39524c86cc5a23093a5cfaf906a3e3234ee73deebca35bf5babebcdc85c953855115f5f4f3263dff619d906440c40dd6fb1c41ac22d1ce363662f34edc74b35e3e5c13bef02b7bd6a266491e48307a7517b5ead718ce7ca3ef8cb9f11c0bd0ef4858"}, @NFTA_DATA_VALUE={0x23, 0x1, "c1e398ea8c48654114629236c20f91cec1ca8389b8ed61565326964592013c"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8ac}, 0x1, 0x0, 0x0, 0x10}, 0x44080) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 6.893896487s ago: executing program 3 (id=1217): socket$unix(0x1, 0x1, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r4, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) (async) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) (async) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 6.864067419s ago: executing program 4 (id=1218): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x0, 0x2, 0xd1, 0x3, 0x3c, 0x1, 0xff}, &(0x7f0000000000)=0x9c) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001d80)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/132, 0x84}, {&(0x7f0000000ac0)=""/160, 0xa0}], 0x2, &(0x7f00000003c0)=""/46, 0x2e}}, {{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000980)=""/187, 0xbb}, {&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000001e00)=""/4107, 0x100b}, {&(0x7f0000001a80)=""/205, 0xcd}, {&(0x7f0000001b80)=""/130, 0x82}], 0x5, &(0x7f0000001cc0)=""/152, 0x98}, 0x1000}], 0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000180)={0x8, 0xfff, 0xa675, 0x6, 0x9, 0x6060}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0xfffffffffffffea6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f000020d000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000600)={0x3, @sliced={0x4d, [0x9, 0x5, 0x8, 0x3, 0x1, 0x30, 0x6, 0x8001, 0x3, 0x0, 0x859, 0x1, 0xe5, 0x4, 0xfffd, 0x200, 0x2, 0x609f, 0x9, 0x2, 0xfff, 0x1141, 0xf, 0x800, 0xe07, 0x9, 0xa18, 0xa, 0xfff, 0x5, 0x6, 0x7ff, 0x5, 0xfff, 0x8, 0x4, 0xb, 0x0, 0x400, 0xff, 0x3, 0x7, 0x0, 0xc, 0xf, 0x8000, 0x3, 0x9122], 0x4}}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000140)=0x2) 6.510029518s ago: executing program 5 (id=1219): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x80f8d6b5}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) timer_create(0x1, &(0x7f0000000300)={0x0, 0x35, 0x4, @thr={&(0x7f0000000440)="5f3f6d0508493b6f5447c7fde6295191b387d331d3f404dda819b97dcf023a457c49b15c6919a5b07b284b41a5f7ca8d865629c39e1ef82b175811488bd072de57bd4f75b8daf34e24a7a7767e21ffad06ed8c756d7da6948ce75f7e664f1181ac56433779a9b1cf5e41bc563f5cb607f75a83", &(0x7f0000000880)="41262b0a417294e663814033d2373c66171fbcb342e23198d704d6dadee866314790af54a18d014325fa52e472884ce61c05ccadd16cf38925a85a53882aadbc6de5be59bc430d6ac723e9d9a626a06f8da1eb98ed1f094ce66e270c1c49b3234a20c776ebbed992df6a3f8fbb9b81a162e567429d887ff60a8efa8746773ef6b4c5f19848a317cb725deaa68bfb14cd1d77cc00bce5fb2a7f3afa3db8fff110ae6df4533fbc1832e6f40000000000e93f0c2094c6dc7fc81958c0ff900bdead9dcd446b237130a4e1af8eae2adc39aa175fe0f84c85934fe017ee15065713019ae804a975819810e52d18baa64e18343baa79c1c905bdcb25b42db6d7d78da11e3e7eb229d127f56f428b09558707e0555678d25339cacc4a534b06680582c6a5caa4656f28b1c08a3d79732666059e3e8612dc9715f9732f6648e947af4ba79a50df188a75fead00000cf02ee4ad32fe7bea7aa817eeda5b589f6f878f97c7ba74eac0619407eb56905168d5de98f6a478774a0e9e82c6b6b62e8ecca2583486f5ec58fd91040113778987d8034d70203f3a13ac98ed2a1b18d32d8e6145572182a6f7ed3a1b0a3ea64c034eff0d25262f2898984f4be00fab8fa4689e656a563f486868f1cb8d6e6a5b155578cc94b7ca62de35ad2aebfd33ee48d268235cdd9b3d0371a3379040b171acd358c423d41ccbbe201091d19c234925be32f57affd3c836cf995ada33740648202e806a44ac58cd30e9d62deeb05d0ae7209dae4a36d92efc2e7d5f77a3a86e1452f1be3c80b461587a246fbd1d97432c94fbcceeb2becdac40eef3b1363788d5b8d728770e1678c1a5b9023d"}}, &(0x7f0000000540)) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 6.055381489s ago: executing program 3 (id=1220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x1, 0x6, 0x2, 0x2}, {0x0, 0x0, 0x8, 0x2}, {0x9, 0x9, 0x5, 0x3}, {0x9, 0x5, 0x5, 0x1}, {0x9, 0xc0}, {0x9, 0x8, 0x2, 0x6}, {0x5, 0xdf, 0x74, 0x6}, {0x8, 0x94, 0xe, 0x2}]}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x980, 0x0) read$FUSE(r3, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000000240)="379975ac1809dce138c1e57e540484872e3ae7eb27ac54ba48a98d278cb2cb024dc26bd880e59c64bd4197146cd720eb5c57629c2691408422e056bb02295c581f736493fded7c8b5936301516d6890e185c659fc161dedc9c43aad707ecf656387f087084ef841d32d364b89c9f37f9671fe82c4ced14da3234", 0x7a}, {&(0x7f0000000480)}, {&(0x7f0000000540)="7193d5f9961b820f879261c68cf9626d2b3aa3f0d243cc87fb28edb02d77a26ade7050d02ad5c4c80d9685193e538708f90d7641d702f347519c7b6a80e2d1d9f1e5c30d79b19c32a7df864bf205fa320bba7215a4833f43c0b7ed46481166b6dc0b8935a7c912baac890581f3c6cb69f186689f7a70fc7b1c795007a9aaf5bb98bb7ef9ea841751af5fbf3d31412a47b747498be572cc9a9d578ecdf5d4c73b11919d26b7ca55c36c819d2649c5e0", 0xaf}, {&(0x7f0000000480)="666d1287359ac6a8d4cb4f5f02172c69455a3f31eafe32fe07322543c83732c8d899616de1", 0x25}, {&(0x7f0000000600)="48f73d81691e68b9f1c8b33d69a5c533423c2b0f7e52d9e2d9526e841b790475bcca133f88b1eed06b805ec2fb2265b8caf163", 0x33}], 0x6, &(0x7f00000002c0)=[{0x78, 0x111, 0x6, "4ae1f7cc52d651277b51f021dc62837d10c1c0690b425a921efb1eab9f0ae2821267306a4fd58fdf6dd45d7f63d20ddee34a9bcc636f28a41c1c0eb9c9e072aadb6b87552d7143393971f85f0c57f5fc25bdb841eec04252897f24c290f723852b5c885062"}, {0x48, 0x103, 0xffffffff, "361a1b7396fb5b007527e5a08a066b549af5357b08938e8d357a1a3ff254d127cf0c5fc1cbe7d2cfbf8415fe026cda90da57b037b4a1d463"}, {0x60, 0x117, 0xa4e2, "d3af5311663126f2ddf8d700bccbf1031b2824286e4bca6560fbdf8295742451907814db16d95a1bb09c02a9aa59da1376c347ce795a837e7f79c47112fdcdc4f56e895c31434bcd73d547755b"}], 0x120}, 0x0) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000080)={0x7, 'veth1_to_bridge\x00', {0x9}, 0x9}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x200100, 0x0) fcntl$getown(r5, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) 4.918044976s ago: executing program 5 (id=1222): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000181401"], 0x38}, 0x1, 0xf00, 0x0, 0x404884d}, 0x2000004) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) (async) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) 4.880511043s ago: executing program 0 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}], [{@subj_role}, {@dont_appraise}, {@uid_lt={'uid<', r5}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '!&)'}}]}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r7, 0xf10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x32}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@x25={0x805, {0x1, 0x2, 0xf7, "e0afb0d03f57c8236125d4c9d93264902328a6dabe9b0775be389b2604f7b534a995403e9942e965008dbc3737f2ad46df0f3a9724d5c6a45e"}}}}, &(0x7f00000005c0)={0x1, 0x4, [0x692, 0xa84, 0xca2, 0xbe4]}) r9 = dup2(r0, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r9, &(0x7f0000002640)={0x18, 0x0, r10, {0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000002680), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xd, '\x00', r1, r9, 0x1, 0x3, 0x4}, 0x50) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000027c0)={'virt_wifi0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x64, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb3ea}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x840) r14 = syz_genetlink_get_family_id$team(&(0x7f0000002940), r4) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000002980)=0x0, &(0x7f00000029c0)=0x4) getsockname$packet(r4, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000002a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002ac0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002b80)={'gre0\x00', &(0x7f0000002b00)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x7, 0x0, {{0x17, 0x4, 0x1, 0x26, 0x5c, 0x67, 0x0, 0x1a, 0x4, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x95, 0x3, 0x8, [{@multicast1, 0x4d52}, {@multicast2, 0x2}, {@multicast1, 0x10001}, {@loopback, 0x8a59}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6d40}, {@private=0xa010101, 0x7}]}, @cipso={0x86, 0xb, 0x1, [{0x2, 0x5, "b85335"}]}, @lsrr={0x83, 0x7, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000031c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003180)={&(0x7f0000002bc0)={0x594, r14, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xa, 0xa1, 0x0, 0x1c861038}, {0xdde0, 0xfe, 0xd, 0x3}, {0x5, 0x1, 0x0, 0x9}, {0xa7, 0xe, 0xbd, 0x9}, {0x6, 0x1, 0x6, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r13}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xde}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r18}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x240448c5) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003200)={r11, 0xee01, r6}, 0xc) r20 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x1c, r20, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004000) getsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000003380), &(0x7f00000033c0)=0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000003400), &(0x7f0000003440)=0x4) 4.766363536s ago: executing program 0 (id=1224): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) gettid() (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x90}]}, 0x34}}, 0x0) 4.44413443s ago: executing program 0 (id=1225): mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x880) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdfb) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) r4 = dup2(r2, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r6 = getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bond_slave_0\x00', @broadcast}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) connect$nfc_llcp(r4, &(0x7f0000000500)={0x27, 0x0, 0x0, 0x4, 0x9, 0x4, "1c6bfcbb1e59f1fca267fe12762058ec00bfa7dd72f7c8ad0ea80f4c2f376f2b3f4d2bd27646b1718ca7a2d2540fe7f913c120fbb35cabc848976fa57bb34d", 0x1c}, 0x60) 3.445781662s ago: executing program 0 (id=1226): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x1f00000000000000]}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000000c0)={0x1, "758e398260d74ae98d5ca872e9e523d6a61f9204110ed52e96488db0d5e67b5231cce9abd4b5dfdd2b01b0b057b662d810d59dc90f58b7d76795188833b26b68", {0x9, 0x6}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x1200, 0x0, 0x0, 0x40008, 0x2, 0x0, 0x0, 0x10, 0x4, "995e4c8b0ba6f8ed413b1ee5f3a7c862bbf64092868fd6943a428277be3c0fd8c867f86e662e0c2dd39186b32ee0690c16eb180e81ed3e5e2ebe64446497c2fc", "a6fafe5554ac900cc641df63c82e3d2347ef4230f37485c698954b3d8be9b663e59116e54ef137506743aa54d43eeef70999ee41524cf2aef5653e90d68d5ac5", "0286bcec3e402f381e7bfd123ec7d0d13d4c50ed000000000500", [0x0, 0x9]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000340), 0x781400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r6], 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x2c, r8, 0x801, 0xfffffffc, 0x3, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x98}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r7, 0xc01064c4, &(0x7f0000000580)={&(0x7f0000000400)=[r6], 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) 2.710022881s ago: executing program 5 (id=1227): bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) (async) r0 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000800), 0x50080, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000009c0)={r3, &(0x7f00000008c0)=""/203}) (async) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021007fc884c4ed73bfba9f000000000000000000008500000075000000"], &(0x7f0000000540)='GPL\x00'}, 0x94) (async, rerun: 64) r6 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0xff}, &(0x7f0000000240), &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000000c0)={0x0, r6, 0x35, {0xffffffffffffffff, 0xfffffffffffffffc}, 0xfc}, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async, rerun: 32) chmod(0x0, 0x1d5) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 2.342785706s ago: executing program 5 (id=1228): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r7, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x20000000) r9 = dup(r3) write$FUSE_BMAP(r9, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r9, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) 2.221980407s ago: executing program 0 (id=1229): mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$netrom(r0, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'vlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='xprtrdma_err_chunk\x00', r3, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x620400, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) dup2(r4, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f00000004c0)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x1000000000000000) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bond_slave_0\x00', @broadcast}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000062a000/0x2000)=nil, 0x2000, 0x17) 1.650157ms ago: executing program 0 (id=1230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x24044094) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) getrusage(0x0, &(0x7f0000000740)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) write$usbip_server(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@can_delroute={0x64, 0x19, 0x2, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r11}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x2, 0x5, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "103bff010000f20d"}}}, @CGW_DST_IF={0x8, 0xa, r10}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_MOD_UID={0x8, 0xe, r12}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xffffffffffffffff, 0x1, 0x9}}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x64}, 0x1, 0xba01}, 0xc4800) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r13, 0x58, &(0x7f0000000280)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000340)) getsockopt$inet_mreqn(r13, 0x0, 0x24, &(0x7f0000000380)={@broadcast, @multicast2}, &(0x7f00000003c0)=0xc) getsockopt$inet6_mreq(r13, 0x29, 0x15, &(0x7f0000000480)={@loopback}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x20, 0x7, 0x45, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8000, 0x10, 0x9, 0x669}}) 0s ago: executing program 5 (id=1231): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$USERIO_CMD_SET_PORT_TYPE(r3, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f04000404089512eafdee781f5cd4efc84cc6e6ff2b8511d293b9e95302f4a8cab44afad5b00553ad5fab8e4de2904fec0df368160cc71c8f38a8374e2eabb343a0"], 0x7) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x5, 0x81}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x0, 0x8001, 0x2}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 2547.200:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 170.944365][ T30] audit: type=1326 audit(1755502547.200:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 170.967226][ T30] audit: type=1326 audit(1755502547.240:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 171.084058][ T30] audit: type=1326 audit(1755502547.250:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 171.169991][ T30] audit: type=1326 audit(1755502547.250:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 171.199603][ T30] audit: type=1326 audit(1755502547.250:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 171.225113][ T30] audit: type=1326 audit(1755502547.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 171.403464][ T924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.490691][ T7104] binder_alloc: 7103: binder_alloc_buf size 4096 failed, no address space [ 171.554404][ T7104] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 171.581112][ T924] usb 5-1: Using ep0 maxpacket: 8 [ 171.589448][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.640398][ T924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 171.678647][ T924] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 171.701280][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.731764][ T924] usb 5-1: Product: syz [ 171.736748][ T924] usb 5-1: Manufacturer: syz [ 171.752124][ T924] usb 5-1: SerialNumber: syz [ 171.788179][ T924] usb 5-1: config 0 descriptor?? [ 171.987799][ T5854] Bluetooth: hci0: Malformed Event: 0x02 [ 172.402217][ T1217] usb 5-1: USB disconnect, device number 4 [ 176.421489][ T5837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.186010][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 177.199812][ T5837] usb 5-1: config 20 has an invalid interface number: 159 but max is 1 [ 177.276066][ T5837] usb 5-1: config 20 has an invalid interface number: 26 but max is 1 [ 177.342356][ T5837] usb 5-1: config 20 has an invalid descriptor of length 0, skipping remainder of the config [ 177.388239][ T7166] overlay: ./file0 is not a directory [ 177.452710][ T5837] usb 5-1: config 20 has no interface number 0 [ 177.458976][ T5837] usb 5-1: config 20 has no interface number 1 [ 177.704614][ T5837] usb 5-1: config 20 interface 26 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 177.718017][ T5837] usb 5-1: config 20 interface 159 has no altsetting 0 [ 178.707358][ T5837] usb 5-1: string descriptor 0 read error: -71 [ 178.713944][ T5837] usb 5-1: New USB device found, idVendor=19d2, idProduct=1073, bcdDevice=8f.a8 [ 178.724046][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.231778][ T5837] usb 5-1: can't set config #20, error -71 [ 179.253739][ T5837] usb 5-1: USB disconnect, device number 5 [ 179.279492][ T7185] binder: 7184:7185 ioctl c0306201 200000000100 returned -14 [ 179.908302][ T7187] pim6reg: entered allmulticast mode [ 180.009269][ T7190] pim6reg: left allmulticast mode [ 180.806649][ T10] Process accounting resumed [ 180.884433][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 181.151466][ T7216] 9pnet_fd: Insufficient options for proto=fd [ 181.231136][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.381161][ T10] usb 5-1: device descriptor read/64, error -71 [ 182.693138][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.861082][ T10] usb 5-1: device descriptor read/64, error -71 [ 182.981703][ T10] usb usb5-port1: attempt power cycle [ 183.105497][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 183.362119][ T7249] netlink: 'syz.0.288': attribute type 6 has an invalid length. [ 183.372591][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.403086][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 183.403100][ T30] audit: type=1326 audit(1755502560.580:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7241 comm="syz.5.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a458ebe9 code=0x0 [ 183.421890][ T10] usb 5-1: device descriptor read/8, error -71 [ 183.472650][ T7253] syz.0.288 (7253): attempted to duplicate a private mapping with mremap. This is not supported. [ 183.722260][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.752003][ T10] usb 5-1: device descriptor read/8, error -71 [ 183.861452][ T10] usb usb5-port1: unable to enumerate USB device [ 184.273664][ T7265] mmap: syz.4.292 (7265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.915126][ T7275] xt_nat: multiple ranges no longer supported [ 184.928715][ T7271] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.293'. [ 185.245449][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.325640][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.404732][ T7293] n (unregistering): Released all slaves [ 185.414895][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 185.484279][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 185.512741][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 185.532671][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.555814][ T10] usb 4-1: config 0 descriptor?? [ 185.577063][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 186.627387][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.308'. [ 186.677051][ T7321] unsupported nlmsg_type 40 [ 186.716736][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 187.165041][ T5854] Bluetooth: hci0: unexpected event for opcode 0x200a [ 187.294842][ T10] gspca_nw80x: reg_w err -110 [ 187.300571][ T10] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 188.619206][ T7341] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.310'. [ 188.868908][ T924] usb 4-1: USB disconnect, device number 18 [ 193.137749][ T7395] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 195.511344][ T7421] sit0: entered promiscuous mode [ 195.541194][ T7421] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 195.568380][ T7421] netlink: 1 bytes leftover after parsing attributes in process `syz.4.329'. [ 195.585384][ T7423] syzkaller0: entered promiscuous mode [ 195.591456][ T7423] syzkaller0: entered allmulticast mode [ 195.609148][ T7420] tipc: Started in network mode [ 195.635900][ T7420] tipc: Node identity 1e7985c7234e, cluster identity 4711 [ 195.675081][ T7420] tipc: Enabled bearer , priority 0 [ 195.964526][ T7418] tipc: Resetting bearer [ 196.155182][ T7418] tipc: Disabling bearer [ 197.282160][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.342'. [ 197.646864][ T7480] overlayfs: failed to clone upperpath [ 197.699307][ T7473] Invalid ELF header magic: != ELF [ 198.144678][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 198.209485][ T7494] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 198.303751][ T7494] team0: Port device wlan1 added [ 198.561363][ T5910] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 198.586072][ T7510] overlayfs: failed to resolve './file0': -2 [ 198.731245][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 198.745475][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.756437][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 198.769897][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.780074][ T5924] IPVS: starting estimator thread 0... [ 198.790352][ T5910] usb 4-1: config 0 descriptor?? [ 198.828848][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 198.871599][ T7515] IPVS: using max 25 ests per chain, 60000 per kthread [ 199.128091][ T5190] bcm5974 4-1:0.0: could not read from device [ 199.178822][ T5190] bcm5974 4-1:0.0: could not read from device [ 199.222661][ T5190] bcm5974 4-1:0.0: could not read from device [ 199.260370][ T5910] usb 4-1: USB disconnect, device number 19 [ 199.297699][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.357'. [ 199.526074][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.541310][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.915315][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.996932][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.518172][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 201.289023][ T7557] afs: Bad value for 'source' [ 201.427341][ T7565] program syz.5.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.588217][ T7569] netlink: 'syz.0.371': attribute type 8 has an invalid length. [ 202.892735][ T7580] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 202.984401][ T7597] fuse: Bad value for 'group_id' [ 203.027697][ T7597] fuse: Bad value for 'group_id' [ 203.073736][ T7610] overlayfs: failed to clone upperpath [ 205.372370][ T7647] tipc: Started in network mode [ 205.511145][ T7647] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 205.529779][ T7641] xt_CT: No such helper "snmp" [ 205.536937][ T7649] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 205.568309][ T7647] tipc: Enabled bearer , priority 10 [ 205.581175][ T7649] netlink: 'syz.3.393': attribute type 5 has an invalid length. [ 205.662005][ T7649] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.393'. [ 205.685115][ T7652] macvlan0: entered promiscuous mode [ 205.749187][ T7652] macvlan1: entered promiscuous mode [ 205.793820][ T7630] mmap: syz.0.390 (7630): VmData 25841664 exceed data ulimit 1194. Update limits or use boot option ignore_rlimit_data. [ 205.853189][ T7652] hsr1: entered promiscuous mode [ 206.925152][ T5910] tipc: Node number set to 1 [ 208.976808][ T7703] xt_hashlimit: size too large, truncated to 1048576 [ 209.003911][ T7702] xt_hashlimit: size too large, truncated to 1048576 [ 209.085969][ T7702] syz.0.407: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 209.121357][ T7692] xt_CT: No such helper "pptp" [ 209.136436][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.0.407 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 209.136466][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.136487][ T7702] Call Trace: [ 209.136500][ T7702] [ 209.136511][ T7702] dump_stack_lvl+0x189/0x250 [ 209.136553][ T7702] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 209.136593][ T7702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.136618][ T7702] ? __pfx__printk+0x10/0x10 [ 209.136647][ T7702] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.136678][ T7702] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.136714][ T7702] warn_alloc+0x214/0x310 [ 209.136753][ T7702] ? __pfx_warn_alloc+0x10/0x10 [ 209.136789][ T7702] ? __get_vm_area_node+0x28f/0x300 [ 209.136814][ T7702] ? htable_create+0xfc/0x7a0 [ 209.136840][ T7702] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 209.136900][ T7702] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.136933][ T7702] ? rcu_is_watching+0x15/0xb0 [ 209.136959][ T7702] ? htable_create+0xfc/0x7a0 [ 209.136979][ T7702] ? htable_create+0xfc/0x7a0 [ 209.136999][ T7702] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 209.137017][ T7702] ? htable_create+0xfc/0x7a0 [ 209.137030][ T7702] ? hashlimit_pernet+0x23/0x240 [ 209.137051][ T7702] htable_create+0xfc/0x7a0 [ 209.137071][ T7702] hashlimit_mt_check_common+0x719/0xa10 [ 209.137095][ T7702] xt_check_match+0x3ce/0xab0 [ 209.137119][ T7702] ? __pfx___mutex_lock+0x10/0x10 [ 209.137140][ T7702] ? __pfx_xt_check_match+0x10/0x10 [ 209.137166][ T7702] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 209.137190][ T7702] ? xt_find_match+0x1f7/0x250 [ 209.137219][ T7702] translate_table+0x1553/0x2040 [ 209.137259][ T7702] ? __pfx_translate_table+0x10/0x10 [ 209.137284][ T7702] ? __might_fault+0xb0/0x130 [ 209.137314][ T7702] ? _copy_from_user+0x94/0xb0 [ 209.137340][ T7702] do_ip6t_set_ctl+0x970/0xce0 [ 209.137368][ T7702] ? rcu_is_watching+0x15/0xb0 [ 209.137384][ T7702] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 209.137421][ T7702] ? __pfx___mutex_lock+0x10/0x10 [ 209.137439][ T7702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.137464][ T7702] ? __lock_acquire+0xab9/0xd20 [ 209.137483][ T7702] nf_setsockopt+0x26c/0x290 [ 209.137512][ T7702] rawv6_setsockopt+0x23b/0x5b0 [ 209.137530][ T7702] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 209.137547][ T7702] ? sock_common_setsockopt+0x36/0xc0 [ 209.137567][ T7702] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 209.137595][ T7702] do_sock_setsockopt+0x179/0x1b0 [ 209.137622][ T7702] __x64_sys_setsockopt+0x13f/0x1b0 [ 209.137649][ T7702] do_syscall_64+0xfa/0x3b0 [ 209.137666][ T7702] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.137682][ T7702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.137697][ T7702] ? clear_bhb_loop+0x60/0xb0 [ 209.137716][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.137730][ T7702] RIP: 0033:0x7f883458ebe9 [ 209.137748][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.137761][ T7702] RSP: 002b:00007f88353bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.137777][ T7702] RAX: ffffffffffffffda RBX: 00007f88347b5fa0 RCX: 00007f883458ebe9 [ 209.137788][ T7702] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 209.137797][ T7702] RBP: 00007f8834611e19 R08: 0000000000000588 R09: 0000000000000000 [ 209.137806][ T7702] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 209.137816][ T7702] R13: 00007f88347b6038 R14: 00007f88347b5fa0 R15: 00007ffeaa9ca758 [ 209.137842][ T7702] [ 209.505730][ T7702] Mem-Info: [ 209.509106][ T7702] active_anon:3214 inactive_anon:4802 isolated_anon:0 [ 209.509106][ T7702] active_file:5457 inactive_file:43418 isolated_file:0 [ 209.509106][ T7702] unevictable:768 dirty:75 writeback:0 [ 209.509106][ T7702] slab_reclaimable:10290 slab_unreclaimable:98216 [ 209.509106][ T7702] mapped:29793 shmem:4325 pagetables:1086 [ 209.509106][ T7702] sec_pagetables:0 bounce:0 [ 209.509106][ T7702] kernel_misc_reclaimable:0 [ 209.509106][ T7702] free:1317278 free_pcp:16031 free_cma:0 [ 209.567734][ T7702] Node 0 active_anon:12856kB inactive_anon:19508kB active_file:21624kB inactive_file:173672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119372kB dirty:300kB writeback:0kB shmem:15964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12224kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 209.603393][ T7702] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 209.635787][ T7702] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.664895][ T7702] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 209.670722][ T7702] Node 0 DMA32 free:1360104kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12852kB inactive_anon:24660kB active_file:19848kB inactive_file:173612kB unevictable:1536kB writepending:300kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:37268kB local_pcp:17964kB free_cma:0kB [ 209.704988][ T7702] lowmem_reserve[]: 0 0 1 1 1 [ 209.709786][ T7702] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 209.739040][ T7702] lowmem_reserve[]: 0 0 0 0 0 [ 209.745391][ T7702] Node 1 Normal free:3893640kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21536kB local_pcp:8128kB free_cma:0kB [ 210.551278][ T7702] lowmem_reserve[]: 0 0 0 0 0 [ 210.556097][ T7702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.584294][ T7702] Node 0 DMA32: 1105*4kB (UM) 899*8kB (UME) 613*16kB (UME) 250*32kB (UME) 25*64kB (UME) 53*128kB (UM) 23*256kB (UM) 9*512kB (UM) 11*1024kB (UME) 5*2048kB (UME) 315*4096kB (M) = 1360044kB [ 210.612120][ T7702] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 210.631137][ T7702] Node 1 Normal: 194*4kB (UME) 56*8kB (UME) 44*16kB (UME) 96*32kB (UME) 38*64kB (UME) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893640kB [ 210.649666][ T7702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.659414][ T7702] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.668948][ T7702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.793507][ T7702] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.896400][ T7702] 56049 total pagecache pages [ 210.922140][ T7702] 0 pages in swap cache [ 210.931349][ T7702] Free swap = 124996kB [ 210.941814][ T7702] Total swap = 124996kB [ 210.946330][ T7702] 2097051 pages RAM [ 210.950242][ T7702] 0 pages HighMem/MovableOnly [ 210.960284][ T7702] 424695 pages reserved [ 210.966577][ T7702] 0 pages cma reserved [ 211.641882][ T7726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.413'. [ 211.799167][ T7732] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 211.799193][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 211.799446][ T7732] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 211.799486][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 212.332953][ T7748] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 212.332953][ T7748] The task syz.4.414 (7748) triggered the difference, watch for misbehavior. [ 213.605342][ T5837] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 213.762151][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 213.773352][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.801002][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.823411][ T5837] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 213.846810][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.859238][ T5837] usb 4-1: config 0 descriptor?? [ 214.192671][ T7770] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 214.211158][ T7770] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 214.229979][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 214.239882][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 214.294289][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 214.300463][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.340847][ T5837] usb 4-1: USB disconnect, device number 20 [ 214.398368][ T7774] xt_TCPMSS: Only works on TCP SYN packets [ 214.881679][ T7782] overlayfs: failed to clone upperpath [ 215.251083][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.491187][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 215.518906][ T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 215.564732][ T10] usb 5-1: config 0 has no interface number 0 [ 216.212718][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 216.224975][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.234425][ T10] usb 5-1: Product: syz [ 216.238642][ T10] usb 5-1: Manufacturer: syz [ 216.249497][ T10] usb 5-1: SerialNumber: syz [ 216.270479][ T10] usb 5-1: config 0 descriptor?? [ 216.665497][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.674865][ T10] radio-si470x 5-1:0.35: this is not a si470x device. [ 216.711652][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.755493][ T10] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 216.809094][ T10] usb 5-1: USB disconnect, device number 10 [ 216.897364][ T7812] fuse: Unknown parameter 'd' [ 217.046725][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.046750][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 217.055846][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.060079][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 217.336451][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.440'. [ 217.864068][ T7827] Can't find a SQUASHFS superblock on nullb0 [ 218.081842][ T7828] : entered promiscuous mode [ 218.263607][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 218.561797][ T7831] tmpfs: Bad value for 'mpol' [ 218.616311][ T7830] xt_hashlimit: max too large, truncated to 1048576 [ 218.801313][ T7831] xt_connbytes: Forcing CT accounting to be enabled [ 218.809623][ T7831] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 219.741183][ T5924] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 220.168982][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.447'. [ 220.365104][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.434770][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 220.467005][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 220.595195][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 220.614475][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.684758][ T5924] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 220.694769][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 220.703318][ T5924] usb 4-1: Product: syz [ 220.707594][ T5924] usb 4-1: Manufacturer: syz [ 220.712454][ T5924] usb 4-1: SerialNumber: syz [ 220.720805][ T5924] usb 4-1: config 0 descriptor?? [ 220.976700][ T5924] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 221.009225][ T5924] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 221.023957][ T7867] hsr0: entered promiscuous mode [ 221.038219][ T5924] usb 4-1: USB disconnect, device number 21 [ 221.146834][ T7876] Cannot find add_set index 0 as target [ 222.656803][ T7900] overlayfs: unescaped trailing colons in lowerdir mount option. [ 223.395635][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 224.420024][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 225.705470][ T7964] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.479'. [ 225.731804][ T7964] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 225.961904][ T7976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 226.019583][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 226.063280][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 226.073102][ T7980] netlink: 'syz.0.483': attribute type 6 has an invalid length. [ 226.077194][ T7976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 226.711371][ T5923] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 226.810759][ T924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 227.535987][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.551164][ T5923] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 227.560910][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.594234][ T5923] usb 4-1: config 0 descriptor?? [ 227.605178][ T924] usb 5-1: Using ep0 maxpacket: 16 [ 227.620532][ T924] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 227.629383][ T924] usb 5-1: config 8 has no interface number 0 [ 227.640387][ T924] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 227.661030][ T924] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 227.676147][ T924] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 227.700394][ T924] usb 5-1: config 8 interface 206 has no altsetting 0 [ 227.715505][ T924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 227.752760][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.769814][ T924] usb 5-1: Product: syz [ 227.778587][ T924] usb 5-1: Manufacturer: syz [ 227.785670][ T924] usb 5-1: SerialNumber: syz [ 227.843788][ T8005] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 227.910173][ T8005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.949489][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.020112][ T30] audit: type=1400 audit(1755502605.190:93): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7988 comm="syz.4.485" src=1 dest=20000 [ 228.057887][ T924] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 228.192874][ T924] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 228.214860][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 228.221049][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.234859][ T5923] usb 4-1: USB disconnect, device number 22 [ 228.953781][ T924] usb 5-1: USB disconnect, device number 11 [ 228.988937][ T924] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 229.024836][ T924] garmin_gps 5-1:8.206: device disconnected [ 229.138376][ T8015] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 229.197614][ T8017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.205299][ T8017] IPv6: NLM_F_CREATE should be set when creating new route [ 229.223653][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 229.257707][ T8022] vti0: entered allmulticast mode [ 229.621088][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 229.811231][ T5923] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.830261][ T8034] netlink: 136 bytes leftover after parsing attributes in process `syz.1.499'. [ 229.839894][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.853331][ T5923] usb 5-1: Product: syz [ 229.857674][ T5923] usb 5-1: Manufacturer: syz [ 229.863305][ T5923] usb 5-1: SerialNumber: syz [ 229.926639][ T5923] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.993563][ T5924] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.025102][ T8037] bridge_slave_0: left allmulticast mode [ 230.040432][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.425392][ T44] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.451391][ T44] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 230.472616][ T44] usb 6-1: USB disconnect, device number 2 [ 231.139976][ T5924] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 231.545153][ T5924] ath9k_htc: Failed to initialize the device [ 232.606440][ T5924] usb 5-1: ath9k_htc: USB layer deinitialized [ 232.716790][ T5924] usb 5-1: USB disconnect, device number 12 [ 232.867120][ T8057] qrtr: Invalid version 0 [ 233.040858][ T8069] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 233.060238][ T8069] netlink: 'syz.1.509': attribute type 8 has an invalid length. [ 233.071427][ T8069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.509'. [ 233.077051][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'. [ 233.094029][ T5978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.265676][ T5978] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.274828][ T5978] usb 6-1: config 1 has no interface number 1 [ 233.296157][ T5978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.306567][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.315231][ T5978] usb 6-1: Product: syz [ 233.319455][ T5978] usb 6-1: Manufacturer: syz [ 233.325802][ T5978] usb 6-1: SerialNumber: syz [ 233.641513][ T5978] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 233.661072][ T5978] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 234.320114][ T5978] usb 6-1: USB disconnect, device number 3 [ 234.594809][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.194332][ T8097] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.515'. [ 236.031112][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 236.950514][ T10] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 237.081301][ T10] usb 6-1: config 0 has no interface number 0 [ 237.087616][ T10] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 237.179386][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 237.231325][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.239389][ T10] usb 6-1: Product: syz [ 237.289558][ T10] usb 6-1: Manufacturer: syz [ 237.323291][ T10] usb 6-1: SerialNumber: syz [ 237.375104][ T10] usb 6-1: config 0 descriptor?? [ 237.410179][ T8094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.425503][ T10] usb-storage 6-1:0.20: USB Mass Storage device detected [ 237.795264][ T10] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 238.558169][ T10] scsi host1: usb-storage 6-1:0.20 [ 238.616852][ T10] usb 6-1: USB disconnect, device number 4 [ 238.965911][ T8132] xt_hashlimit: size too large, truncated to 1048576 [ 241.328422][ T8166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.031245][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.243963][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.771098][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.931718][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.944529][ T8190] loop6: detected capacity change from 0 to 7 [ 244.009522][ T7363] Dev loop6: unable to read RDB block 7 [ 244.032070][ T7363] loop6: AHDI p1 p2 p3 [ 244.036417][ T7363] loop6: partition table partially beyond EOD, truncated [ 244.059767][ T7363] loop6: p1 start 1405162169 is beyond EOD, truncated [ 244.081739][ T10] usb usb5-port1: attempt power cycle [ 244.088079][ T7363] loop6: p2 size 46 extends beyond EOD, truncated [ 244.160104][ T8195] batadv0: entered promiscuous mode [ 244.293990][ T8195] bond0: entered promiscuous mode [ 244.385272][ T8190] Dev loop6: unable to read RDB block 7 [ 244.401723][ T8190] loop6: AHDI p1 p2 p3 [ 244.407585][ T8195] bond_slave_0: entered promiscuous mode [ 244.429500][ T8190] loop6: partition table partially beyond EOD, truncated [ 244.441847][ T8195] bond_slave_1: entered promiscuous mode [ 244.458393][ T8190] loop6: p1 start 1405162169 is beyond EOD, truncated [ 244.469357][ T8195] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 244.479415][ T8190] loop6: p2 size 46 extends beyond EOD, truncated [ 244.486871][ T8195] Cannot create hsr debugfs directory [ 244.508629][ T8195] hsr1: entered allmulticast mode [ 244.526538][ T8195] batadv0: entered allmulticast mode [ 244.547244][ T8195] bond0: entered allmulticast mode [ 244.575390][ T8195] bond_slave_0: entered allmulticast mode [ 244.611436][ T8195] bond_slave_1: entered allmulticast mode [ 244.628726][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 244.698758][ T8195] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 244.721311][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.754547][ T7363] udevd[7363]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 244.944885][ T7363] udevd[7363]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 245.085150][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 245.132555][ T10] usb 5-1: device descriptor read/8, error -71 [ 245.241966][ T10] usb usb5-port1: unable to enumerate USB device [ 245.908871][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 245.949226][ T8223] 9pnet_fd: Insufficient options for proto=fd [ 246.069961][ T8227] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 246.146318][ T8231] overlay: ./file0 is not a directory [ 246.231104][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 246.413401][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.429453][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.907196][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 246.916781][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.062427][ T10] usb 5-1: config 0 descriptor?? [ 247.198958][ T8250] dlm: no locking on control device [ 247.345523][ T8254] comedi comedi4: comedi_config --init_data is deprecated [ 247.365686][ T8254] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 247.437439][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.565'. [ 247.450362][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.565'. [ 247.460273][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.565'. [ 247.552499][ T10] stadia 0003:18D1:9400.0006: unexpected long global item [ 247.560447][ T10] stadia 0003:18D1:9400.0006: parse failed [ 247.571105][ T10] stadia 0003:18D1:9400.0006: probe with driver stadia failed with error -22 [ 247.755214][ T10] usb 5-1: USB disconnect, device number 17 [ 248.041391][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.570'. [ 248.491583][ T8292] overlayfs: missing 'lowerdir' [ 249.821048][ T44] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 250.585678][ T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.599068][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.615600][ T44] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.625508][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.634202][ T44] usb 6-1: Product: syz [ 250.639099][ T44] usb 6-1: Manufacturer: syz [ 250.644385][ T44] usb 6-1: SerialNumber: syz [ 250.715033][ T8305] delete_channel: no stack [ 250.878981][ T44] usb 6-1: 0:2 : does not exist [ 250.902589][ T44] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 250.986818][ T44] usb 6-1: USB disconnect, device number 5 [ 251.098530][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.981198][ T5924] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 253.352823][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.813590][ T5924] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.844051][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.859303][ T8353] overlayfs: failed to clone upperpath [ 253.882115][ T5924] usb 4-1: config 0 descriptor?? [ 254.145801][ T8357] fuse: Unknown parameter 'useHr_id' [ 254.390225][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.571055][ T10] usb 6-1: device descriptor read/64, error -71 [ 254.828651][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 254.971166][ T10] usb 6-1: device descriptor read/64, error -71 [ 255.082705][ T10] usb usb6-port1: attempt power cycle [ 255.435879][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.481970][ T10] usb 6-1: device descriptor read/8, error -71 [ 255.486977][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 255.794317][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.807315][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 255.823985][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.869291][ T10] usb 6-1: device descriptor read/8, error -71 [ 255.886314][ T5924] usb 4-1: USB disconnect, device number 23 [ 256.001422][ T8389] pimreg1: tun_chr_ioctl cmd 1074025677 [ 256.007291][ T8389] pimreg1: linktype set to 769 [ 256.027923][ T10] usb usb6-port1: unable to enumerate USB device [ 256.067870][ T8388] pimreg1: tun_chr_ioctl cmd 1074025677 [ 256.113734][ T8388] pimreg1: linktype set to 769 [ 256.255989][ T8392] netlink: 76 bytes leftover after parsing attributes in process `syz.1.603'. [ 256.765498][ T30] audit: type=1326 audit(1755502633.940:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8395 comm="syz.3.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x0 [ 258.139156][ T8436] overlayfs: missing 'lowerdir' [ 258.169160][ T8437] fuse: Unknown parameter 'rtmode' [ 260.435123][ T8458] netlink: 'syz.1.624': attribute type 21 has an invalid length. [ 261.421689][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.218427][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.276911][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.636588][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 263.811157][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 263.833248][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.847422][ T5891] usb 6-1: config 1 has an invalid interface number: 26 but max is 1 [ 263.881057][ T5891] usb 6-1: config 1 has an invalid interface number: 89 but max is 1 [ 263.893264][ T5891] usb 6-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 263.915450][ T5891] usb 6-1: config 1 has no interface number 0 [ 263.929934][ T5891] usb 6-1: config 1 has no interface number 1 [ 263.943003][ T5891] usb 6-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.972299][ T5891] usb 6-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.008969][ T5891] usb 6-1: config 1 interface 26 has no altsetting 0 [ 264.043269][ T5891] usb 6-1: config 1 interface 89 has no altsetting 0 [ 264.075305][ T5891] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 264.101035][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.131052][ T5891] usb 6-1: Product: syz [ 264.135290][ T5891] usb 6-1: Manufacturer: syz [ 264.151193][ T5891] usb 6-1: SerialNumber: syz [ 264.409144][ T5891] usb 6-1: unknown interface protocol 0x7d, assuming v1 [ 264.424273][ T5891] usb 6-1: 26:2 : does not exist [ 264.459951][ T5891] usb 6-1: unknown interface protocol 0x13, assuming v1 [ 264.469995][ T5891] usb 6-1: 89:2 : does not exist [ 264.522073][ T5891] usb 6-1: USB disconnect, device number 10 [ 264.600442][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.776426][ T8498] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.818160][ T8498] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 266.241367][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 266.411156][ T5891] usb 5-1: device descriptor read/64, error -71 [ 266.592822][ T8520] random: crng reseeded on system resumption [ 266.701177][ T5891] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 266.861076][ T5891] usb 5-1: device descriptor read/64, error -71 [ 266.971820][ T5891] usb usb5-port1: attempt power cycle [ 267.401179][ T5891] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 268.025251][ T5891] usb 5-1: device descriptor read/8, error -71 [ 268.478197][ T5891] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.514081][ T5891] usb 5-1: device descriptor read/8, error -71 [ 269.541497][ T1217] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 269.591344][ T5891] usb usb5-port1: unable to enumerate USB device [ 269.828655][ T1217] usb 6-1: Using ep0 maxpacket: 8 [ 269.873907][ T8558] tmpfs: Unknown parameter 'usrquota@' [ 269.886961][ T8553] netlink: 724 bytes leftover after parsing attributes in process `syz.4.648'. [ 269.887002][ T8553] netlink: 724 bytes leftover after parsing attributes in process `syz.4.648'. [ 270.968260][ T1217] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.002812][ T1217] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 271.010475][ T1217] usb 6-1: can't read configurations, error -71 [ 271.271784][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.279475][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.728615][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 271.971245][ T924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 272.574396][ T924] usb 5-1: device descriptor read/64, error -71 [ 272.627463][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.657'. [ 272.642122][ T8594] usb usb8: usbfs: process 8594 (syz.5.657) did not claim interface 0 before use [ 272.841040][ T924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.084152][ T924] usb 5-1: device descriptor read/64, error -71 [ 273.204263][ T924] usb usb5-port1: attempt power cycle [ 273.571204][ T5924] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.714084][ T5924] usb 4-1: device descriptor read/64, error -71 [ 273.721120][ T924] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.871208][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 273.976254][ T5924] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 274.122359][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 274.153148][ T5924] usb 4-1: device descriptor read/64, error -71 [ 274.161116][ T10] usb 6-1: no configurations [ 274.188258][ T10] usb 6-1: can't read configurations, error -22 [ 274.312284][ T5924] usb usb4-port1: attempt power cycle [ 274.391052][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 274.492637][ T924] usb 5-1: device descriptor read/8, error -71 [ 274.561419][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 274.601470][ T10] usb 6-1: no configurations [ 274.606141][ T10] usb 6-1: can't read configurations, error -22 [ 274.633593][ T10] usb usb6-port1: attempt power cycle [ 274.681107][ T5924] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 274.682920][ T8643] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 274.711718][ T5924] usb 4-1: device descriptor read/8, error -71 [ 274.845775][ T8647] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 274.961591][ T5924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 274.981964][ T5924] usb 4-1: device descriptor read/8, error -71 [ 275.001102][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 275.022699][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 275.031712][ T10] usb 6-1: no configurations [ 275.037194][ T10] usb 6-1: can't read configurations, error -22 [ 275.092928][ T5924] usb usb4-port1: unable to enumerate USB device [ 275.143838][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 275.171365][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 275.192090][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 275.199717][ T10] usb 6-1: no configurations [ 275.205588][ T10] usb 6-1: can't read configurations, error -22 [ 275.212883][ T10] usb usb6-port1: unable to enumerate USB device [ 276.870747][ T8668] overlayfs: failed to clone upperpath [ 279.261081][ T5978] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 279.299140][ T8700] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0 [ 279.424462][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 279.437400][ T5978] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.459699][ T5978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.473108][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.536923][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.547523][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.562282][ T5978] usb 4-1: Product: syz [ 279.566684][ T5978] usb 4-1: Manufacturer: syz [ 279.576230][ T5978] usb 4-1: SerialNumber: syz [ 279.603176][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 279.711152][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 279.771095][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 279.800145][ T10] usb 6-1: config 0 has an invalid interface number: 112 but max is 1 [ 279.827578][ T10] usb 6-1: config 0 has an invalid interface number: 17 but max is 1 [ 279.851229][ T10] usb 6-1: config 0 has no interface number 0 [ 279.867651][ T10] usb 6-1: config 0 has no interface number 1 [ 279.874651][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.891046][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 279.903410][ T10] usb 6-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 279.921067][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.939561][ T10] usb 6-1: Product: syz [ 279.945131][ T10] usb 6-1: Manufacturer: syz [ 279.957109][ T10] usb 6-1: SerialNumber: syz [ 279.985582][ T10] usb 6-1: config 0 descriptor?? [ 280.005067][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 280.017044][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.206246][ T8694] netlink: 'syz.3.686': attribute type 13 has an invalid length. [ 280.220590][ T10] usb 6-1: USB disconnect, device number 17 [ 280.251526][ T5910] usb 5-1: config 0 descriptor?? [ 280.281720][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 280.309946][ T5910] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 280.336921][ T5910] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 280.366696][ T8694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.544792][ T5910] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 280.630153][ T5910] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 280.639816][ T5910] em28xx 5-1:0.0: board has no eeprom [ 280.711396][ T5910] em28xx 5-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 280.720032][ T5910] em28xx 5-1:0.0: dvb set to bulk mode. [ 280.726545][ T5891] em28xx 5-1:0.0: Binding DVB extension [ 280.754631][ T5910] usb 5-1: USB disconnect, device number 26 [ 280.769159][ T5910] em28xx 5-1:0.0: Disconnecting em28xx [ 281.304628][ T5891] DVB: Unable to find symbol drxk_attach() [ 281.344786][ T8720] overlay: Unknown parameter 'context' [ 282.122776][ T5891] em28xx 5-1:0.0: Registering input extension [ 282.148887][ T5910] em28xx 5-1:0.0: Closing input extension [ 282.245576][ T5910] em28xx 5-1:0.0: Freeing device [ 282.456596][ T5978] usb 4-1: 0:2 : does not exist [ 282.491518][ T5978] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 282.608207][ T5978] usb 4-1: USB disconnect, device number 28 [ 282.614472][ T5910] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 282.652581][ T8735] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 282.861382][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.984664][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.002072][ T5910] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 283.012279][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.153323][ T5910] usb 5-1: config 0 descriptor?? [ 287.405947][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 287.707230][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.720656][ T5910] usb 5-1: USB disconnect, device number 27 [ 288.172423][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 290.456249][ T8827] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 290.456353][ T8827] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.717'. [ 290.531571][ T5978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 290.761609][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 290.862176][ T5978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.862228][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.862252][ T5978] usb 6-1: Product: syz [ 290.862277][ T5978] usb 6-1: Manufacturer: syz [ 290.862294][ T5978] usb 6-1: SerialNumber: syz [ 290.883981][ T5978] usb 6-1: config 0 descriptor?? [ 291.130336][ T5978] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.241668][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.718'. [ 291.241732][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 291.396978][ T5978] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 291.543006][ T8846] overlayfs: failed to resolve '/@': -2 [ 291.849017][ T5978] usb 6-1: USB disconnect, device number 18 [ 292.251057][ T5978] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 292.392163][ T5978] usb 6-1: device descriptor read/64, error -71 [ 292.522261][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 292.531782][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 292.550838][ T924] libceph: connect (1)[c::]:6789 error -101 [ 292.558475][ T924] libceph: mon0 (1)[c::]:6789 connect error [ 292.681162][ T5978] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 292.871446][ T5978] usb 6-1: device descriptor read/64, error -71 [ 292.931900][ T924] libceph: connect (1)[c::]:6789 error -101 [ 292.938502][ T924] libceph: mon0 (1)[c::]:6789 connect error [ 293.001503][ T5978] usb usb6-port1: attempt power cycle [ 293.471618][ T924] libceph: connect (1)[c::]:6789 error -101 [ 293.477854][ T924] libceph: mon0 (1)[c::]:6789 connect error [ 293.534036][ T5978] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 293.554088][ T8861] ceph: No mds server is up or the cluster is laggy [ 293.576014][ T5978] usb 6-1: device descriptor read/8, error -71 [ 294.336683][ T5978] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 294.371792][ T5978] usb 6-1: device descriptor read/8, error -71 [ 294.495210][ T5978] usb usb6-port1: unable to enumerate USB device [ 295.637246][ T8888] @: renamed from veth0_vlan (while UP) [ 296.010558][ T8906] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 296.024248][ T8906] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 296.676657][ T8904] pim6reg: entered allmulticast mode [ 296.851108][ T8905] pim6reg: left allmulticast mode [ 297.397555][ T8940] trusted_key: syz.5.741 sent an empty control message without MSG_MORE. [ 297.481018][ T924] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 297.489618][ T8934] batman_adv: batadv0: Adding interface: ipvlan2 [ 297.505501][ T8934] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.536453][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.547709][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.559731][ T8934] batman_adv: batadv0: Interface activated: ipvlan2 [ 297.631472][ T924] usb 4-1: device descriptor read/64, error -71 [ 297.967448][ T924] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 298.021103][ T5891] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 298.033045][ T8955] fuse: Bad value for 'fd' [ 298.047700][ T8955] macsec1: entered promiscuous mode [ 298.053161][ T8955] macsec1: entered allmulticast mode [ 298.111169][ T924] usb 4-1: device descriptor read/64, error -71 [ 298.181399][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 298.191004][ T5891] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 298.200336][ T5891] usb 6-1: config 0 has no interface number 0 [ 298.212205][ T5891] usb 6-1: config 0 interface 12 has no altsetting 0 [ 298.221845][ T924] usb usb4-port1: attempt power cycle [ 298.229150][ T5891] usb 6-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=87.ac [ 298.240689][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.249960][ T5891] usb 6-1: Product: syz [ 298.254779][ T5891] usb 6-1: Manufacturer: syz [ 298.259765][ T5891] usb 6-1: SerialNumber: syz [ 298.268811][ T5891] usb 6-1: config 0 descriptor?? [ 298.336296][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 298.581222][ T924] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 298.614002][ T924] usb 4-1: device descriptor read/8, error -71 [ 298.851155][ T924] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 298.894552][ T924] usb 4-1: device descriptor read/8, error -71 [ 298.919767][ T5891] usb 6-1: USB disconnect, device number 23 [ 299.011640][ T924] usb usb4-port1: unable to enumerate USB device [ 299.326271][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 299.496794][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 299.969158][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 299.983756][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 300.518458][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 300.665113][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 301.979071][ T30] audit: type=1326 audit(1755502679.150:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.5.760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a458ebe9 code=0x0 [ 302.017866][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 302.028199][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 302.248249][ T8978] ceph: No mds server is up or the cluster is laggy [ 302.370078][ T9015] xt_hashlimit: Unknown mode mask 500, kernel too old? [ 304.141393][ T9028] netlink: 'syz.5.766': attribute type 11 has an invalid length. [ 304.361055][ T5924] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 304.521030][ T5978] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 304.541152][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 304.556203][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.594262][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.613458][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.667674][ T5924] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 304.691188][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.734055][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 304.851995][ T5924] usb 5-1: config 0 descriptor?? [ 304.859759][ T5978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 304.869202][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.883504][ T5978] usb 6-1: Product: syz [ 304.891253][ T5978] usb 6-1: Manufacturer: syz [ 305.248974][ T5978] usb 6-1: SerialNumber: syz [ 305.258541][ T5978] usb 6-1: config 0 descriptor?? [ 305.378303][ T5924] hid-multitouch 0003:0457:07DA.0007: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 305.485318][ T5978] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 305.498559][ T5978] eb aa 00 00 00 00 00 00 [ 305.512735][ T5978] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 305.564562][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.579864][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.697403][ T5978] usb 6-1: USB disconnect, device number 25 [ 306.471594][ T9058] netlink: 48 bytes leftover after parsing attributes in process `syz.5.773'. [ 306.491594][ T9058] netlink: 48 bytes leftover after parsing attributes in process `syz.5.773'. [ 306.674101][ T9062] syz.1.774 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.696289][ T5978] usb 5-1: USB disconnect, device number 28 [ 306.971151][ T5891] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 307.761963][ T5891] usb 6-1: device descriptor read/64, error -71 [ 308.233081][ T51] Bluetooth: Frame is too long (len 18, expected len 4) [ 309.107050][ T5891] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 310.491022][ T5891] usb 6-1: device descriptor read/64, error -71 [ 310.651488][ T5891] usb usb6-port1: attempt power cycle [ 310.653579][ T9090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.781'. [ 310.836446][ T9094] overlayfs: invalid redirect (./file0) [ 310.843991][ T9094] overlayfs: invalid redirect (./file0) [ 311.731068][ T5891] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 311.751827][ T5891] usb 6-1: device descriptor read/8, error -71 [ 311.991109][ T5891] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 312.021900][ T5891] usb 6-1: device descriptor read/8, error -71 [ 312.131971][ T5891] usb usb6-port1: unable to enumerate USB device [ 312.191174][ T6005] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 312.350477][ T9121] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 312.451724][ T6005] usb 5-1: device descriptor read/64, error -71 [ 312.770574][ T9123] overlayfs: failed to clone upperpath [ 312.788164][ T6005] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 312.875076][ T9124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.792'. [ 312.935963][ T6005] usb 5-1: device descriptor read/64, error -71 [ 312.972864][ T30] audit: type=1326 audit(1755502690.140:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.029182][ T30] audit: type=1326 audit(1755502690.140:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.067806][ T9130] IPVS: length: 4096 != 8 [ 313.077932][ T6005] usb usb5-port1: attempt power cycle [ 313.087559][ T9131] binder: BINDER_SET_CONTEXT_MGR already set [ 313.097132][ T9131] binder: 9127:9131 ioctl 4018620d 200000000040 returned -16 [ 313.105706][ T30] audit: type=1326 audit(1755502690.150:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.150010][ T30] audit: type=1326 audit(1755502690.150:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.176537][ T30] audit: type=1326 audit(1755502690.150:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.208195][ T30] audit: type=1326 audit(1755502690.150:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.242706][ T30] audit: type=1326 audit(1755502690.150:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.265142][ T30] audit: type=1326 audit(1755502690.150:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.286987][ T30] audit: type=1326 audit(1755502690.150:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.315397][ T30] audit: type=1326 audit(1755502690.150:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe1ab78ebe9 code=0x7ffc0000 [ 313.467396][ T6005] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 313.510238][ T6005] usb 5-1: device descriptor read/8, error -71 [ 313.615622][ T9142] netlink: 'syz.3.798': attribute type 3 has an invalid length. [ 313.761623][ T6005] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 313.789300][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.800'. [ 313.799176][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.800'. [ 313.811639][ T6005] usb 5-1: device descriptor read/8, error -71 [ 313.893757][ T9152] netlink: 'syz.0.799': attribute type 58 has an invalid length. [ 313.922684][ T6005] usb usb5-port1: unable to enumerate USB device [ 314.141424][ T5891] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 314.311033][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 314.318402][ T5891] usb 4-1: config index 0 descriptor too short (expected 61180, got 36) [ 314.327323][ T5891] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 314.336551][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.361021][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 314.384137][ T5891] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9804, bcdDevice=d1.9a [ 314.393751][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.402662][ T5891] usb 4-1: Product: syz [ 314.407023][ T5891] usb 4-1: Manufacturer: syz [ 314.412236][ T5891] usb 4-1: SerialNumber: syz [ 314.427207][ T5891] usb 4-1: config 0 descriptor?? [ 314.821189][ T6005] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 314.854840][ T5891] usb 4-1: USB disconnect, device number 33 [ 315.009395][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 315.047471][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.070995][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.098415][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 315.121011][ T6005] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 315.131885][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.179570][ T6005] usb 6-1: config 0 descriptor?? [ 315.377230][ T9185] QAT: Device 7 not found [ 315.710837][ T9183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.061394][ T6005] lg-g15 0003:046D:C227.0008: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.5-1/input0 [ 317.132456][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 317.666846][ T9194] syz.0.812 (9194) used greatest stack depth: 17992 bytes left [ 317.843895][ T6005] usb 6-1: USB disconnect, device number 30 [ 318.158145][ T9202] fido_id[9202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 319.031092][ T5891] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 319.291559][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 319.317217][ T5891] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 319.353457][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.405529][ T5891] usb 4-1: Product: syz [ 319.409847][ T5891] usb 4-1: Manufacturer: syz [ 319.451473][ T5891] usb 4-1: SerialNumber: syz [ 319.511570][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'. [ 319.552552][ T5891] r8152-cfgselector 4-1: Unknown version 0x0000 [ 319.558971][ T5891] r8152-cfgselector 4-1: config 0 descriptor?? [ 321.527101][ T9242] tmpfs: Unknown parameter 'sizeC3W' [ 321.555907][ T5978] r8152-cfgselector 4-1: USB disconnect, device number 34 [ 321.836339][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.344670][ T9265] x_tables: duplicate entry at hook 2 [ 322.408509][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.506197][ T6248] wlan1: Trigger new scan to find an IBSS to join [ 323.912964][ T9282] fuse: Bad value for 'fd' [ 324.504037][ T6240] wlan1: Creating new IBSS network, BSSID ae:eb:d7:4f:e1:ee [ 324.868817][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 324.868835][ T30] audit: type=1326 audit(1755502702.040:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9293 comm="syz.5.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a458ebe9 code=0x0 [ 326.093940][ T9309] team0: Port device team_slave_0 removed [ 326.109571][ T9309] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 328.777903][ T9340] overlayfs: failed to clone upperpath [ 330.431025][ T9357] binder: 9354:9357 ioctl c0306201 0 returned -14 [ 332.591123][ T6005] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 332.771308][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 332.806415][ T9382] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 332.812200][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.879474][ T9382] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 332.901469][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.947496][ T6005] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 332.997317][ T9385] tipc: Enabled bearer , priority 0 [ 333.051032][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.121992][ T6005] usb 5-1: config 0 descriptor?? [ 333.125951][ T9385] tipc: Disabling bearer [ 333.539083][ T9395] netlink: 428 bytes leftover after parsing attributes in process `syz.5.866'. [ 333.594584][ T6005] apple 0003:05AC:024B.0009: unknown main item tag 0x6 [ 333.610969][ T6005] apple 0003:05AC:024B.0009: ignoring exceeding usage max [ 333.640223][ T6005] apple 0003:05AC:024B.0009: invalid report_size 16640 [ 333.679828][ T6005] apple 0003:05AC:024B.0009: item 0 2 1 7 parsing failed [ 333.696526][ T6005] apple 0003:05AC:024B.0009: parse failed [ 333.721102][ T6005] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22 [ 333.793425][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.842274][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.121093][ T5924] usb 5-1: USB disconnect, device number 33 [ 334.389486][ T9417] syz.5.870: attempt to access beyond end of device [ 334.389486][ T9417] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 334.402902][ T9417] efs: cannot read volume header [ 334.576666][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 334.922724][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 335.082965][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 335.286334][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.523181][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 335.582752][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.651045][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.758810][ T10] usb 4-1: Product: syz [ 335.786303][ T10] usb 4-1: Manufacturer: syz [ 335.810997][ T10] usb 4-1: SerialNumber: syz [ 335.846776][ T9419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.952101][ T9443] sctp: [Deprecated]: syz.4.877 (pid 9443) Use of int in maxseg socket option. [ 335.952101][ T9443] Use struct sctp_assoc_value instead [ 336.115220][ T10] usb 4-1: 0:2 : does not exist [ 336.181132][ T10] usb 4-1: USB disconnect, device number 35 [ 336.389167][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.468781][ T9461] binder: 9453:9461 ioctl c0306201 0 returned -14 [ 337.322450][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.346821][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.443529][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.521536][ T5924] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 337.536450][ T9474] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 337.571980][ T9474] fuse: Bad value for 'fd' [ 337.799996][ T6005] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 337.807625][ T10] Process accounting resumed [ 337.841298][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 337.863024][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.874232][ T9488] overlay: Unknown parameter '/' [ 338.041220][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 338.092880][ T6005] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 338.126860][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.187836][ T6005] usb 6-1: Product: syz [ 338.188384][ T5924] usb 4-1: config 0 has no interfaces? [ 338.224491][ T6005] usb 6-1: Manufacturer: syz [ 338.332855][ T6005] usb 6-1: SerialNumber: syz [ 338.480080][ T6005] usb 6-1: config 0 descriptor?? [ 338.516597][ T6005] gspca_main: sq930x-2.14.0 probing 2770:930c [ 338.530398][ T9474] Process accounting resumed [ 338.616684][ T5924] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.629458][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.643807][ T5924] usb 4-1: Product: syz [ 338.652530][ T5924] usb 4-1: Manufacturer: syz [ 338.658291][ T5924] usb 4-1: SerialNumber: syz [ 338.676015][ T5924] usb 4-1: config 0 descriptor?? [ 339.278405][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.283017][ T6005] gspca_sq930x: reg_r 001f failed -110 [ 339.295940][ T6005] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 339.324999][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.359105][ T10] usb 4-1: USB disconnect, device number 36 [ 339.438990][ T9504] tipc: Enabling of bearer rejected, already enabled [ 339.882446][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 340.491647][ T9522] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 341.038795][ T10] usb 4-1: device descriptor read/all, error -71 [ 341.647366][ T9536] Illegal XDP return value 4294967262 on prog (id 238) dev N/A, expect packet loss! [ 342.816598][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.872765][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.842659][ T30] audit: type=1326 audit(1755502721.020:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 343.893804][ T30] audit: type=1326 audit(1755502721.020:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 343.989434][ T30] audit: type=1326 audit(1755502721.020:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.029904][ T30] audit: type=1326 audit(1755502721.020:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.051425][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.059498][ T30] audit: type=1326 audit(1755502721.020:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.111388][ T30] audit: type=1326 audit(1755502721.020:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.132779][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.163439][ T30] audit: type=1326 audit(1755502721.020:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.184968][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.226101][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'. [ 344.345761][ T30] audit: type=1326 audit(1755502721.020:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 344.434383][ T9577] binder: 9570:9577 ioctl c0306201 0 returned -14 [ 345.039519][ T30] audit: type=1326 audit(1755502721.020:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 345.066053][ T30] audit: type=1326 audit(1755502721.020:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aaaf8ebe9 code=0x7ffc0000 [ 346.785130][ T9608] netlink: 'syz.5.917': attribute type 1 has an invalid length. [ 346.895293][ T9608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.042220][ T9612] vlan2: entered allmulticast mode [ 347.061159][ T9612] macvtap0: entered allmulticast mode [ 347.079141][ T9612] veth0_macvtap: entered allmulticast mode [ 347.117561][ T9612] bond1: (slave vlan2): making interface the new active one [ 347.134108][ T9612] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 347.163944][ T9615] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 347.688833][ T6005] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 347.865084][ T6005] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 347.874611][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.883136][ T6005] usb 5-1: Product: syz [ 347.903374][ T6005] usb 5-1: Manufacturer: syz [ 347.922881][ T6005] usb 5-1: SerialNumber: syz [ 347.962890][ T6005] usb 5-1: config 0 descriptor?? [ 347.980153][ T6005] hub 5-1:0.0: bad descriptor, ignoring hub [ 347.986914][ T6005] hub 5-1:0.0: probe with driver hub failed with error -5 [ 347.996299][ T6005] f81232 5-1:0.0: f81534a converter detected [ 348.212206][ T6005] usb 5-1: f81534a converter now attached to ttyUSB0 [ 348.521449][ T6005] usb 5-1: USB disconnect, device number 34 [ 348.559469][ T6005] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 348.576148][ T6005] f81232 5-1:0.0: device disconnected [ 348.980745][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.007069][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.761246][ T924] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 350.039523][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.060804][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.142283][ T924] usb 4-1: Using ep0 maxpacket: 16 [ 350.149740][ T924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.164254][ T924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.175455][ T924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 350.186693][ T924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.198539][ T924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.263514][ T9684] netlink: 92 bytes leftover after parsing attributes in process `syz.0.940'. [ 350.871912][ T924] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.908263][ T924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.937039][ T924] usb 4-1: Manufacturer: syz [ 350.992653][ T924] usb 4-1: config 0 descriptor?? [ 351.233752][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 351.242901][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.941'. [ 351.312895][ T9682] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.323143][ T9682] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.332421][ T9682] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.341232][ T9682] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.361038][ T924] rc_core: IR keymap rc-hauppauge not found [ 351.363096][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 351.378793][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.941'. [ 351.386093][ T924] Registered IR keymap rc-empty [ 351.421543][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.461151][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.494052][ T924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 351.510006][ T924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 351.537148][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.561172][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.605208][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.664607][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.701487][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.739246][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.787515][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.788893][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 351.851424][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 351.985921][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.044085][ T924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 352.137444][ T924] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 352.214463][ T924] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 352.339063][ T924] usb 4-1: USB disconnect, device number 39 [ 352.621168][ T6005] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 354.053221][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 354.059367][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.954'. [ 354.082608][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.096290][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.954'. [ 354.109457][ T6005] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 354.265463][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.274266][ T6005] usb 5-1: Product: syz [ 354.278697][ T6005] usb 5-1: Manufacturer: syz [ 354.285283][ T6005] usb 5-1: SerialNumber: syz [ 354.301840][ T6005] usb 5-1: config 0 descriptor?? [ 354.314584][ T6005] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 354.688980][ T6005] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 355.096208][ T5924] usb 5-1: USB disconnect, device number 35 [ 355.361505][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 356.312836][ T9776] binder: 9765:9776 ioctl c0306201 0 returned -14 [ 356.800162][ T6005] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 357.151373][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 357.173872][ T6005] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.184045][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 357.184063][ T30] audit: type=1326 audit(1755502734.360:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1ab78ebe9 code=0x0 [ 357.212158][ T6005] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.224403][ T6005] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.234196][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.248661][ T6005] usb 5-1: Product: syz [ 357.266382][ T6005] usb 5-1: Manufacturer: syz [ 357.274525][ T6005] usb 5-1: SerialNumber: syz [ 357.595559][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.609726][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.634979][ T6225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.654850][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.673263][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.309967][ T6005] usb 5-1: 0:2 : does not exist [ 358.370710][ T6005] usb 5-1: USB disconnect, device number 36 [ 358.934645][ T9815] netlink: zone id is out of range [ 358.977749][ T9815] netlink: zone id is out of range [ 359.000995][ T9815] netlink: zone id is out of range [ 359.033253][ T9815] netlink: zone id is out of range [ 359.038487][ T9815] netlink: zone id is out of range [ 359.043947][ T9815] netlink: zone id is out of range [ 359.049121][ T9815] netlink: zone id is out of range [ 359.054388][ T9815] netlink: zone id is out of range [ 359.081804][ T9815] netlink: zone id is out of range [ 359.086994][ T9815] netlink: zone id is out of range [ 359.171459][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.209230][ T9816] xt_CT: No such helper "netbios-ns" [ 359.226509][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.428788][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 361.826656][ T9838] netlink: 160 bytes leftover after parsing attributes in process `syz.4.976'. [ 362.388962][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 362.399299][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 362.399324][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.399335][ T51] Workqueue: hci0 hci_rx_work [ 362.399366][ T51] Call Trace: [ 362.399374][ T51] [ 362.399382][ T51] dump_stack_lvl+0x189/0x250 [ 362.399402][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 362.399424][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.399442][ T51] ? __pfx__printk+0x10/0x10 [ 362.399465][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 362.399483][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 362.399503][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 362.399522][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 362.399544][ T51] sysfs_create_dir_ns+0x259/0x280 [ 362.399565][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 362.399585][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 362.399610][ T51] kobject_add_internal+0x59f/0xb40 [ 362.399639][ T51] kobject_add+0x155/0x220 [ 362.399662][ T51] ? __pfx_kobject_add+0x10/0x10 [ 362.399682][ T51] ? _raw_spin_unlock+0x28/0x50 [ 362.399710][ T51] ? get_device_parent+0x366/0x3a0 [ 362.399738][ T51] device_add+0x408/0xb50 [ 362.399766][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 362.399794][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 362.399826][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 362.399847][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 362.399868][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 362.399886][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.399903][ T51] ? skb_pull_data+0xfb/0x200 [ 362.399924][ T51] hci_le_enh_conn_complete_evt+0x189/0x470 [ 362.399947][ T51] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 362.399972][ T51] hci_event_packet+0x78c/0x1200 [ 362.399991][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 362.400012][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 362.400030][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 362.400053][ T51] ? lockdep_hardirqs_on+0x90/0x150 [ 362.400072][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 362.400104][ T51] hci_rx_work+0x46a/0xe80 [ 362.400127][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 362.400147][ T51] process_scheduled_works+0xade/0x17b0 [ 362.400187][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.400218][ T51] worker_thread+0x8a0/0xda0 [ 362.400256][ T51] kthread+0x70e/0x8a0 [ 362.400281][ T51] ? __pfx_worker_thread+0x10/0x10 [ 362.400298][ T51] ? __pfx_kthread+0x10/0x10 [ 362.400320][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.400335][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.400349][ T51] ? __pfx_kthread+0x10/0x10 [ 362.400371][ T51] ret_from_fork+0x3fc/0x770 [ 362.400390][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 362.400411][ T51] ? __switch_to_asm+0x39/0x70 [ 362.400434][ T51] ? __switch_to_asm+0x33/0x70 [ 362.400452][ T51] ? __pfx_kthread+0x10/0x10 [ 362.400474][ T51] ret_from_fork_asm+0x1a/0x30 [ 362.400507][ T51] [ 362.400558][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 362.708983][ T51] Bluetooth: hci0: failed to register connection device [ 363.350754][ T9870] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 364.645007][ T9883] net_ratelimit: 187 callbacks suppressed [ 364.645028][ T9883] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 365.185986][ T9907] Device name cannot be null; rc = [-22] [ 367.125503][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1000'. [ 367.259098][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1000'. [ 367.275092][ T9938] IPVS: Error connecting to the multicast addr [ 367.357789][ T9946] x_tables: duplicate underflow at hook 1 [ 367.783754][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1006'. [ 367.826817][ T9954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1009'. [ 368.082976][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1010'. [ 368.191093][ T5910] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 368.352742][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 368.370493][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.391458][ T5910] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 368.411041][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 368.479747][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.513788][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.533895][ T5910] usb 4-1: Product: syz [ 368.547094][ T5910] usb 4-1: Manufacturer: syz [ 368.572400][ T5910] usb 4-1: SerialNumber: syz [ 369.035362][ T5910] usb 4-1: bad CDC descriptors [ 369.428546][ T9981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 369.572207][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.609013][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.634353][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.647264][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.665408][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.696644][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.727568][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.748028][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.762395][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.775125][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.837948][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.856131][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.760537][ T5924] usb 4-1: USB disconnect, device number 40 [ 372.300780][T10022] tipc: Enabled bearer , priority 10 [ 373.645400][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.663519][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.780575][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.817827][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.866901][T10046] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1033'. [ 373.891755][T10045] bond2: entered allmulticast mode [ 373.898665][T10045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.911986][T10045] bridge0: port 3(bond2) entered blocking state [ 373.920783][T10045] bridge0: port 3(bond2) entered disabled state [ 373.935049][T10045] bond2: entered promiscuous mode [ 373.941673][T10045] bridge0: port 3(bond2) entered blocking state [ 373.949512][T10045] bridge0: port 3(bond2) entered forwarding state [ 374.697687][ T6233] bridge0: port 3(bond2) entered disabled state [ 374.709007][ T5924] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 375.241037][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 375.252386][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 375.310175][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 375.334330][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 375.347307][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.364104][T10074] x_tables: unsorted underflow at hook 3 [ 375.376265][ T5924] usb 4-1: Product: syz [ 375.381705][ T5924] usb 4-1: Manufacturer: syz [ 375.386368][ T5924] usb 4-1: SerialNumber: syz [ 375.394788][ T5924] usb 4-1: config 0 descriptor?? [ 375.415187][ T5924] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 375.441554][ T5924] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 375.467205][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.470634][T10079] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 375.478515][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.517867][T10079] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.539095][T10081] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 375.549620][T10079] bond0: (slave team0): Enslaving as an active interface with an up link [ 375.662628][T10079] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 375.703294][T10079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 376.187514][ T5924] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 376.242059][ T5924] em28xx 4-1:0.0: Config register raw data: 0xbd [ 376.248561][ T5924] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 376.258255][ T5924] em28xx 4-1:0.0: No AC97 audio processor [ 377.367511][ T5924] usb 4-1: USB disconnect, device number 41 [ 377.573917][T10103] dlm: non-version read from control device 31 [ 377.646166][T10109] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1051'. [ 378.938423][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 379.258313][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.309577][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.325268][T10130] overlayfs: failed to clone upperpath [ 379.547028][T10143] lo speed is unknown, defaulting to 1000 [ 380.261484][T10143] lo speed is unknown, defaulting to 1000 [ 380.268219][T10143] lo speed is unknown, defaulting to 1000 [ 380.447069][T10158] comedi comedi2: aio_iiro_16: I/O port conflict (0x3,8) [ 380.459012][T10149] overlay: filesystem on ./bus not supported as upperdir [ 380.589579][T10148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.749804][T10161] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 380.756719][T10161] syzkaller0: ignored: set checksum disabled [ 381.063857][ T44] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 381.159494][T10148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.282767][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 381.329399][T10148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.368469][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.379688][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 381.391795][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.407175][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 381.434869][ T44] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 381.448593][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.457351][ T44] usb 4-1: Product: syz [ 381.461208][ T1217] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 381.462439][ T44] usb 4-1: Manufacturer: syz [ 381.475728][ T44] usb 4-1: SerialNumber: syz [ 381.526257][ T44] usb 4-1: config 0 descriptor?? [ 381.537205][T10148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.643054][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.700997][ T1217] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 381.729100][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.748985][ T1217] usb 5-1: config 0 descriptor?? [ 381.772266][T10178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.448853][T10143] infiniband syz2: set active [ 382.476445][ T44] cxacru 4-1:0.0: cxacru_bind: interface has incorrect endpoints [ 382.485520][T10143] infiniband syz2: added lo [ 382.502123][T10143] syz2: rxe_create_cq: returned err = -12 [ 382.510552][T10143] infiniband syz2: Couldn't create ib_mad CQ [ 382.519037][T10143] infiniband syz2: Couldn't open port 1 [ 382.564248][ T44] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 382.586364][ T44] usb 4-1: USB disconnect, device number 42 [ 382.619410][T10143] RDS/IB: syz2: added [ 382.626256][T10143] smc: adding ib device syz2 with port count 1 [ 382.635465][T10143] smc: ib device syz2 port 1 has pnetid [ 382.722992][ T10] lo speed is unknown, defaulting to 1000 [ 382.766855][T10143] lo speed is unknown, defaulting to 1000 [ 382.821217][ T10] lo speed is unknown, defaulting to 1000 [ 382.944254][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.004391][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.036425][T10148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.089662][T10148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.115828][T10148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.140343][T10148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.348491][T10143] lo speed is unknown, defaulting to 1000 [ 383.847789][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.576294][ T1217] usbhid 5-1:0.0: can't add hid device: -71 [ 384.583529][ T1217] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 384.637547][ T1217] usb 5-1: USB disconnect, device number 37 [ 386.851101][ T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 386.885406][T10221] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 386.899222][T10143] lo speed is unknown, defaulting to 1000 [ 387.041221][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 387.059057][ T44] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 387.074514][ T44] usb 5-1: config 0 has no interface number 0 [ 387.117646][ T44] usb 5-1: New USB device found, idVendor=157d, idProduct=0410, bcdDevice=68.96 [ 387.181135][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.189299][ T44] usb 5-1: Product: syz [ 387.203606][ T44] usb 5-1: Manufacturer: syz [ 387.208636][ T44] usb 5-1: SerialNumber: syz [ 387.231753][ T44] usb 5-1: config 0 descriptor?? [ 387.295368][T10143] lo speed is unknown, defaulting to 1000 [ 387.509392][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 387.717096][T10143] lo speed is unknown, defaulting to 1000 [ 387.745459][T10236] comedi comedi2: aio_iiro_16: I/O port conflict (0x3,8) [ 387.796906][ T30] audit: type=1326 audit(1755502764.970:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 387.841831][ T30] audit: type=1326 audit(1755502764.970:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 387.873127][ T30] audit: type=1326 audit(1755502764.970:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.011453][ T44] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 388.043380][ T30] audit: type=1326 audit(1755502765.210:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.069223][ T5891] usb 5-1: USB disconnect, device number 38 [ 388.113522][ T30] audit: type=1326 audit(1755502765.210:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.191259][ T30] audit: type=1326 audit(1755502765.220:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.220039][T10143] lo speed is unknown, defaulting to 1000 [ 388.227588][ T30] audit: type=1326 audit(1755502765.220:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.249960][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 388.256365][ T30] audit: type=1326 audit(1755502765.250:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f883458d550 code=0x7ffc0000 [ 388.284623][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.295989][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 388.309648][ T30] audit: type=1326 audit(1755502765.250:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.339481][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 388.360202][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.360295][ T30] audit: type=1326 audit(1755502765.260:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10242 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 388.398128][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 388.409642][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.418975][ T44] usb 4-1: Product: syz [ 388.425367][ T44] usb 4-1: Manufacturer: syz [ 388.437036][ T44] usb 4-1: SerialNumber: syz [ 388.463905][ T44] usb 4-1: config 0 descriptor?? [ 388.701036][ T44] rc_core: IR keymap rc-xbox-dvd not found [ 388.745850][ T44] Registered IR keymap rc-empty [ 388.779629][ T44] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 388.791218][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 388.842743][ T44] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 389.016905][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 389.053416][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.086139][ T10] usb 5-1: Product: syz [ 389.115671][ T10] usb 5-1: Manufacturer: syz [ 389.120345][ T10] usb 5-1: SerialNumber: syz [ 389.208883][ T10] usb 5-1: config 0 descriptor?? [ 389.265191][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 389.866066][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 389.927397][T10245] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 389.971021][T10245] netlink: 'syz.4.1085': attribute type 2 has an invalid length. [ 390.000788][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 390.045963][T10264] overlayfs: failed to clone upperpath [ 390.052894][T10265] overlayfs: failed to clone upperpath [ 390.132293][ T10] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 390.800800][ T10] usb 4-1: USB disconnect, device number 43 [ 390.800851][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 390.996363][T10285] overlayfs: workdir and upperdir must reside under the same mount [ 391.543837][ T44] usb 5-1: USB disconnect, device number 39 [ 391.574752][ T44] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 391.618212][ T44] ch341 5-1:0.0: device disconnected [ 391.913603][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.940237][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.979923][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.025386][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.411129][ T44] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 392.563783][T10341] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 392.563783][T10341] program syz.3.1110 not setting count and/or reply_len properly [ 392.571202][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 392.595030][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 392.613343][ T44] usb 5-1: no configurations [ 392.627532][ T44] usb 5-1: can't read configurations, error -22 [ 392.771175][ T44] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 393.012618][T10355] macvlan1: entered promiscuous mode [ 393.020119][T10354] macvlan1: left promiscuous mode [ 393.100026][ T30] audit: type=1326 audit(1755502770.270:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10357 comm="syz.0.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883458ebe9 code=0x7ffc0000 [ 393.111212][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 393.130071][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.143376][ T44] usb 5-1: no configurations [ 393.148285][ T44] usb 5-1: can't read configurations, error -22 [ 393.187737][ T44] usb usb5-port1: attempt power cycle [ 393.661490][ T44] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 393.806599][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 393.828678][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.857192][ T44] usb 5-1: no configurations [ 394.099436][ T44] usb 5-1: can't read configurations, error -22 [ 394.242015][ T44] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 394.304344][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 394.332472][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.357215][ T44] usb 5-1: no configurations [ 394.379669][ T44] usb 5-1: can't read configurations, error -22 [ 394.409675][ T44] usb usb5-port1: unable to enumerate USB device [ 394.624826][T10382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1123'. [ 394.651372][T10382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1123'. [ 395.256204][T10393] netlink: zone id is out of range [ 395.306520][T10393] netlink: zone id is out of range [ 395.312835][T10390] 9pnet_fd: Insufficient options for proto=fd [ 395.337081][T10393] netlink: zone id is out of range [ 395.377392][T10393] netlink: zone id is out of range [ 395.401057][T10393] netlink: zone id is out of range [ 395.406346][T10393] netlink: zone id is out of range [ 395.481270][T10393] netlink: zone id is out of range [ 395.486470][T10393] netlink: zone id is out of range [ 395.492426][T10393] netlink: zone id is out of range [ 395.531310][T10393] netlink: zone id is out of range [ 395.788026][T10405] No control pipe specified [ 395.797478][T10405] overlayfs: failed to resolve './file0': -2 [ 397.231259][ T5978] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 397.399402][T10427] Cannot find add_set index 0 as target [ 397.491484][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 397.510359][ T5978] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 397.546619][ T5978] usb 5-1: config 0 has no interface number 0 [ 397.614677][ T5978] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 397.647450][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.665382][ T5978] usb 5-1: Product: syz [ 397.676028][ T5978] usb 5-1: Manufacturer: syz [ 397.686909][ T5978] usb 5-1: SerialNumber: syz [ 397.704083][ T5978] usb 5-1: config 0 descriptor?? [ 397.734159][ T5978] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 397.993257][ T5978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 398.054233][ T5978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 398.449300][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 398.451962][ T5910] usb 5-1: USB disconnect, device number 44 [ 398.877965][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 398.897858][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 398.909924][ T5910] quatech2 5-1:0.51: device disconnected [ 398.993548][ T5846] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 399.019209][T10441] dummy0: entered promiscuous mode [ 399.124037][T10441] dummy0: left promiscuous mode [ 399.561412][T10448] bond0: Unable to set down delay as MII monitoring is disabled [ 400.107313][T10474] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 401.169057][T10481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.301656][ T5910] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 401.523836][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 401.628962][ T5910] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 401.820605][ T5910] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 401.834195][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.860927][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.869097][ T5910] usb 4-1: Product: ࠧ [ 401.879384][ T5910] usb 4-1: Manufacturer: с [ 401.889540][ T5910] usb 4-1: SerialNumber: ఄ [ 401.967145][T10500] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1147'. [ 402.826163][ T5910] cdc_ncm 4-1:1.0: bind() failure [ 402.837145][ T5910] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 402.891398][ T5910] cdc_ncm 4-1:1.1: bind() failure [ 402.944436][ T5910] usb 4-1: USB disconnect, device number 44 [ 403.282473][T10511] IPVS: Scheduler module ip_vs_sip not found [ 405.480619][ T1217] libceph: connect (1)[c::]:6789 error -101 [ 406.451066][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 406.522673][T10523] ceph: No mds server is up or the cluster is laggy [ 406.713093][ T1217] libceph: connect (1)[c::]:6789 error -101 [ 406.776151][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 406.880634][T10540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.244974][T10541] netlink: 'syz.5.1156': attribute type 1 has an invalid length. [ 407.253218][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'. [ 408.295812][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 408.710996][ T5978] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 408.871506][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 409.493694][ T5978] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.541837][ T5978] usb 5-1: config 1 has no interface number 1 [ 409.585482][ T5978] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 409.606602][ T5978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.625746][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.636418][ T5978] usb 5-1: Product: syz [ 409.651049][ T5978] usb 5-1: Manufacturer: syz [ 409.664824][ T5978] usb 5-1: SerialNumber: syz [ 409.735400][T10570] 9pnet_virtio: no channels available for device 127.0.0.1 [ 409.787706][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.809800][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.967211][T10575] pim6reg: entered allmulticast mode [ 410.017184][ T30] audit: type=1800 audit(1755502787.170:217): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1168" name="nullb0" dev="tmpfs" ino=109 res=0 errno=0 [ 410.212180][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 410.433325][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 410.572251][ T5978] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 410.580142][ T5978] usb 5-1: 2:1 : invalid channels 0 [ 410.867233][ T5978] usb 5-1: USB disconnect, device number 45 [ 410.951308][T10596] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1173'. [ 410.986057][T10596] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1173'. [ 411.282524][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.758814][T10614] overlayfs: failed to clone lowerpath [ 413.007349][T10640] overlayfs: failed to clone upperpath [ 414.159881][T10680] overlayfs: failed to clone upperpath [ 414.359921][T10683] netlink: 'syz.5.1193': attribute type 1 has an invalid length. [ 414.368631][T10683] netlink: 'syz.5.1193': attribute type 2 has an invalid length. [ 414.376997][T10683] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.1193'. [ 416.426158][T10709] warn_alloc: 3 callbacks suppressed [ 416.426177][T10709] syz.1.1200: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.607903][T10709] CPU: 0 UID: 0 PID: 10709 Comm: syz.1.1200 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 416.607930][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.607942][T10709] Call Trace: [ 416.607950][T10709] [ 416.607958][T10709] dump_stack_lvl+0x189/0x250 [ 416.607988][T10709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.608009][T10709] ? __pfx__printk+0x10/0x10 [ 416.608034][T10709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.608058][T10709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.608083][T10709] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 416.608109][T10709] warn_alloc+0x214/0x310 [ 416.608137][T10709] ? __pfx_warn_alloc+0x10/0x10 [ 416.608167][T10709] ? __get_vm_area_node+0x28f/0x300 [ 416.608188][T10709] ? xskq_create+0xbf/0x170 [ 416.608211][T10709] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 416.608261][T10709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.608289][T10709] ? __kasan_kmalloc+0x93/0xb0 [ 416.608314][T10709] vmalloc_user_noprof+0xad/0xf0 [ 416.608338][T10709] ? xskq_create+0xbf/0x170 [ 416.608362][T10709] xskq_create+0xbf/0x170 [ 416.608394][T10709] xsk_init_queue+0xb0/0x110 [ 416.608416][T10709] xsk_setsockopt+0x4de/0x710 [ 416.608448][T10709] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.608480][T10709] ? __fget_files+0x2a/0x420 [ 416.608510][T10709] ? __fget_files+0x2a/0x420 [ 416.608530][T10709] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.608549][T10709] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.608579][T10709] do_sock_setsockopt+0x179/0x1b0 [ 416.608614][T10709] __x64_sys_setsockopt+0x13f/0x1b0 [ 416.608651][T10709] do_syscall_64+0xfa/0x3b0 [ 416.608673][T10709] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.608696][T10709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.608718][T10709] ? clear_bhb_loop+0x60/0xb0 [ 416.608745][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.608766][T10709] RIP: 0033:0x7f7aaaf8ebe9 [ 416.608785][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.608805][T10709] RSP: 002b:00007f7aabd15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.608828][T10709] RAX: ffffffffffffffda RBX: 00007f7aab1b5fa0 RCX: 00007f7aaaf8ebe9 [ 416.608844][T10709] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 416.608857][T10709] RBP: 00007f7aab011e19 R08: 0000000000000004 R09: 0000000000000000 [ 416.608870][T10709] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 416.608884][T10709] R13: 00007f7aab1b6038 R14: 00007f7aab1b5fa0 R15: 00007fff0ad84c38 [ 416.608919][T10709] [ 416.609294][T10709] Mem-Info: [ 416.918193][T10719] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1204'. [ 417.106716][T10709] active_anon:9056 inactive_anon:6999 isolated_anon:0 [ 417.106716][T10709] active_file:13573 inactive_file:39583 isolated_file:0 [ 417.106716][T10709] unevictable:768 dirty:52 writeback:0 [ 417.106716][T10709] slab_reclaimable:10566 slab_unreclaimable:114575 [ 417.106716][T10709] mapped:32132 shmem:11136 pagetables:1258 [ 417.106716][T10709] sec_pagetables:0 bounce:0 [ 417.106716][T10709] kernel_misc_reclaimable:0 [ 417.106716][T10709] free:1284812 free_pcp:19035 free_cma:0 [ 417.170334][T10709] Node 0 active_anon:35924kB inactive_anon:23896kB active_file:54088kB inactive_file:158332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128828kB dirty:208kB writeback:0kB shmem:43008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12348kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.207552][T10709] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.247348][T10709] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.288635][T10709] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 417.319510][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.333192][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.342006][T10709] Node 0 DMA32 free:1227652kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31320kB inactive_anon:25548kB active_file:52312kB inactive_file:158272kB unevictable:1536kB writepending:208kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:64568kB local_pcp:27872kB free_cma:0kB [ 417.382557][T10725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1205'. [ 417.395953][T10709] lowmem_reserve[]: 0 0 1 1 1 [ 417.400781][T10709] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 417.483265][T10709] lowmem_reserve[]: 0 0 0 0 0 [ 417.496112][T10709] Node 1 Normal free:3896260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:7104kB free_cma:0kB [ 417.542052][T10709] lowmem_reserve[]: 0 0 0 0 0 [ 417.547043][T10709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 417.567020][T10709] Node 0 DMA32: 747*4kB (ME) 377*8kB (UME) 125*16kB (ME) 412*32kB (UME) 203*64kB (UME) 8*128kB (UME) 8*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (M) 289*4096kB (UM) = 1227652kB [ 417.590793][T10709] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 417.608748][T10709] Node 1 Normal: 193*4kB (UME) 56*8kB (UME) 44*16kB (UME) 138*32kB (UME) 50*64kB (UME) 7*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3896260kB [ 417.634007][T10709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.646538][T10709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.658197][T10709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.676919][T10709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.688141][T10709] 63364 total pagecache pages [ 417.712712][T10709] 0 pages in swap cache [ 417.718129][T10709] Free swap = 124996kB [ 417.725602][T10709] Total swap = 124996kB [ 417.816440][T10709] 2097051 pages RAM [ 417.820531][T10709] 0 pages HighMem/MovableOnly [ 417.871097][T10709] 424695 pages reserved [ 417.885508][T10709] 0 pages cma reserved [ 418.104936][T10732] ip6erspan0: entered allmulticast mode [ 418.501591][T10741] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 418.694620][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.563069][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.909984][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.044597][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.360159][T10759] 9pnet_fd: Insufficient options for proto=fd [ 421.106153][ T12] bridge_slave_0: left allmulticast mode [ 421.140964][ T12] bridge_slave_0: left promiscuous mode [ 421.146913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.691490][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.798201][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.807026][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.894262][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.903608][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.303361][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1222'. [ 423.782710][ T12] bridge0 (unregistering): left allmulticast mode [ 424.002668][ T51] Bluetooth: hci2: command tx timeout [ 424.300291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.349354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.368057][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 424.394016][ T12] bond0 (unregistering): Released all slaves [ 424.430661][ T12] bond1 (unregistering): Released all slaves [ 424.468602][T10782] lo speed is unknown, defaulting to 1000 [ 424.766945][T10790] lo speed is unknown, defaulting to 1000 [ 424.976418][ T12] tipc: Disabling bearer [ 424.992312][ T12] tipc: Disabling bearer [ 425.015862][ T12] tipc: Left network mode [ 426.877409][ T51] Bluetooth: hci2: command tx timeout [ 427.146257][ T12] [ 427.148657][ T12] ====================================================== [ 427.155708][ T12] WARNING: possible circular locking dependency detected [ 427.162766][ T12] 6.16.0-syzkaller #0 Not tainted [ 427.167824][ T12] ------------------------------------------------------ [ 427.174880][ T12] kworker/u8:0/12 is trying to acquire lock: [ 427.180898][ T12] ffff88802f0ece00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 427.190347][ T12] [ 427.190347][ T12] but task is already holding lock: [ 427.197719][ T12] ffff8880282d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 427.208128][ T12] [ 427.208128][ T12] which lock already depends on the new lock. [ 427.208128][ T12] [ 427.218541][ T12] [ 427.218541][ T12] the existing dependency chain (in reverse order) is: [ 427.227570][ T12] [ 427.227570][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 427.235595][ T12] lock_acquire+0x120/0x360 [ 427.240634][ T12] __mutex_lock+0x182/0xe80 [ 427.245688][ T12] ieee80211_open+0xed/0x1f0 [ 427.250810][ T12] __dev_open+0x470/0x880 [ 427.255690][ T12] netif_open+0xaa/0x170 [ 427.260467][ T12] dev_open+0x125/0x260 [ 427.265158][ T12] team_add_slave+0xb36/0x2840 [ 427.270547][ T12] do_set_master+0x530/0x6d0 [ 427.275674][ T12] do_setlink+0xcf0/0x41c0 [ 427.280648][ T12] rtnl_newlink+0x160b/0x1c70 [ 427.285863][ T12] rtnetlink_rcv_msg+0x7cc/0xb70 [ 427.291606][ T12] netlink_rcv_skb+0x205/0x470 [ 427.296945][ T12] netlink_unicast+0x75c/0x8e0 [ 427.302253][ T12] netlink_sendmsg+0x805/0xb30 [ 427.307575][ T12] __sock_sendmsg+0x21c/0x270 [ 427.312797][ T12] ____sys_sendmsg+0x505/0x830 [ 427.318104][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 427.323319][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 427.328803][ T12] do_syscall_64+0xfa/0x3b0 [ 427.333924][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.340348][ T12] [ 427.340348][ T12] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 427.348447][ T12] validate_chain+0xb9b/0x2140 [ 427.353751][ T12] __lock_acquire+0xab9/0xd20 [ 427.358961][ T12] lock_acquire+0x120/0x360 [ 427.363991][ T12] __mutex_lock+0x182/0xe80 [ 427.369026][ T12] team_del_slave+0x32/0x1c0 [ 427.374173][ T12] team_device_event+0x285/0xa20 [ 427.379698][ T12] notifier_call_chain+0x1b3/0x3e0 [ 427.385386][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 427.392509][ T12] unregister_netdevice_queue+0x33c/0x380 [ 427.398850][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 427.405030][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 427.411380][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 427.417295][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 427.423390][ T12] hwsim_exit_net+0x584/0x640 [ 427.428603][ T12] ops_undo_list+0x497/0x990 [ 427.433734][ T12] cleanup_net+0x4c5/0x800 [ 427.438691][ T12] process_scheduled_works+0xade/0x17b0 [ 427.444768][ T12] worker_thread+0x8a0/0xda0 [ 427.449904][ T12] kthread+0x70e/0x8a0 [ 427.454520][ T12] ret_from_fork+0x3fc/0x770 [ 427.459656][ T12] ret_from_fork_asm+0x1a/0x30 [ 427.464956][ T12] [ 427.464956][ T12] other info that might help us debug this: [ 427.464956][ T12] [ 427.475199][ T12] Possible unsafe locking scenario: [ 427.475199][ T12] [ 427.482838][ T12] CPU0 CPU1 [ 427.488225][ T12] ---- ---- [ 427.493852][ T12] lock(&rdev->wiphy.mtx); [ 427.498407][ T12] lock(team->team_lock_key); [ 427.505796][ T12] lock(&rdev->wiphy.mtx); [ 427.512832][ T12] lock(team->team_lock_key); [ 427.518133][ T12] [ 427.518133][ T12] *** DEADLOCK *** [ 427.518133][ T12] [ 427.526280][ T12] 5 locks held by kworker/u8:0/12: [ 427.531598][ T12] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 427.542601][ T12] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 427.553188][ T12] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 427.562558][ T12] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 427.572448][ T12] #4: ffff8880282d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 427.583377][ T12] [ 427.583377][ T12] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 427.589292][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 427.589314][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.589326][ T12] Workqueue: netns cleanup_net [ 427.589359][ T12] Call Trace: [ 427.589369][ T12] [ 427.589376][ T12] dump_stack_lvl+0x189/0x250 [ 427.589398][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.589417][ T12] ? __pfx__printk+0x10/0x10 [ 427.589439][ T12] ? print_lock_name+0xde/0x100 [ 427.589461][ T12] print_circular_bug+0x2ee/0x310 [ 427.589483][ T12] check_noncircular+0x134/0x160 [ 427.589506][ T12] validate_chain+0xb9b/0x2140 [ 427.589528][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.589550][ T12] __lock_acquire+0xab9/0xd20 [ 427.589569][ T12] ? team_del_slave+0x32/0x1c0 [ 427.589591][ T12] lock_acquire+0x120/0x360 [ 427.589604][ T12] ? team_del_slave+0x32/0x1c0 [ 427.589635][ T12] ? __mutex_trylock_common+0x153/0x260 [ 427.589657][ T12] __mutex_lock+0x182/0xe80 [ 427.589675][ T12] ? team_del_slave+0x32/0x1c0 [ 427.589697][ T12] ? rcu_is_watching+0x15/0xb0 [ 427.589719][ T12] ? team_del_slave+0x32/0x1c0 [ 427.589741][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 427.589760][ T12] ? bond_netdev_event+0xd9/0xe80 [ 427.589786][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 427.589804][ T12] ? __pfx_bond_netdev_event+0x10/0x10 [ 427.589833][ T12] team_del_slave+0x32/0x1c0 [ 427.589857][ T12] team_device_event+0x285/0xa20 [ 427.589875][ T12] notifier_call_chain+0x1b3/0x3e0 [ 427.589900][ T12] unregister_netdevice_many_notify+0x15d8/0x2320 [ 427.589933][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 427.589960][ T12] ? __lock_acquire+0xab9/0xd20 [ 427.589991][ T12] unregister_netdevice_queue+0x33c/0x380 [ 427.590016][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 427.590042][ T12] _cfg80211_unregister_wdev+0x165/0x590 [ 427.590068][ T12] ieee80211_remove_interfaces+0x49a/0x6d0 [ 427.590089][ T12] ? __pfx_synchronize_rcu+0x10/0x10 [ 427.590110][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 427.590130][ T12] ? rcu_is_watching+0x15/0xb0 [ 427.590150][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 427.590178][ T12] mac80211_hwsim_del_radio+0x275/0x460 [ 427.590205][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 427.590235][ T12] hwsim_exit_net+0x584/0x640 [ 427.590258][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 427.590288][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 427.590322][ T12] ops_undo_list+0x497/0x990 [ 427.590354][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 427.590389][ T12] cleanup_net+0x4c5/0x800 [ 427.590413][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 427.590437][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.590451][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 427.590469][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 427.590487][ T12] process_scheduled_works+0xade/0x17b0 [ 427.590516][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 427.590540][ T12] worker_thread+0x8a0/0xda0 [ 427.590569][ T12] kthread+0x70e/0x8a0 [ 427.590592][ T12] ? __pfx_worker_thread+0x10/0x10 [ 427.590610][ T12] ? __pfx_kthread+0x10/0x10 [ 427.590641][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.590656][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.590672][ T12] ? __pfx_kthread+0x10/0x10 [ 427.590693][ T12] ret_from_fork+0x3fc/0x770 [ 427.590710][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 427.590728][ T12] ? __switch_to_asm+0x39/0x70 [ 427.590748][ T12] ? __switch_to_asm+0x33/0x70 [ 427.590768][ T12] ? __pfx_kthread+0x10/0x10 [ 427.590790][ T12] ret_from_fork_asm+0x1a/0x30 [ 427.590817][ T12] [ 428.392524][ T5910] IPVS: starting estimator thread 0... [ 428.435849][ T10] usb 6-1: USB disconnect, device number 31 [ 428.441726][ T12] team0: Port device wlan1 removed [ 428.480966][T10832] IPVS: using max 39 ests per chain, 93600 per kthread [ 428.566921][T10783] lo speed is unknown, defaulting to 1000 [ 428.961196][ T51] Bluetooth: hci2: command tx timeout [ 429.225558][ T12] hsr_slave_0: left promiscuous mode [ 429.250647][ T12] hsr_slave_1: left promiscuous mode [ 429.270742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.278341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.300417][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.308073][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.318283][ T12] veth1_macvtap: left promiscuous mode [ 429.323922][ T12] veth0_macvtap: left promiscuous mode [ 429.329517][ T12] veth1_vlan: left promiscuous mode [ 429.334985][ T12] veth0_vlan: left promiscuous mode [ 429.386027][ T12] pim6reg (unregistering): left allmulticast mode [ 429.664946][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.702225][ T12] team0 (unregistering): Port device team_slave_0 removed [ 430.035660][ T36] smc: removing ib device syz2 [ 430.087175][ T5924] lo speed is unknown, defaulting to 1000 [ 430.103452][ T5924] syz2: Port: 1 Link DOWN [ 430.745973][ T12] IPVS: stop unused estimator thread 0... [ 430.859009][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.923605][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.977282][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.035477][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.131674][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.142039][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.186042][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.196378][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.226314][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.236970][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.295493][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.305961][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.394552][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.445507][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.505649][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.556498][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.638506][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.675729][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.725336][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.792680][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.874885][ T12] bridge_slave_1: left allmulticast mode [ 431.882014][ T12] bridge_slave_1: left promiscuous mode [ 431.887862][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.896292][ T12] bridge_slave_0: left allmulticast mode [ 431.903432][ T12] bridge_slave_0: left promiscuous mode [ 431.909259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.924420][ T12] bridge_slave_1: left allmulticast mode [ 431.930089][ T12] bridge_slave_1: left promiscuous mode [ 431.936049][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.945225][ T12] bridge_slave_0: left allmulticast mode [ 431.951118][ T12] bridge_slave_0: left promiscuous mode [ 431.956790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.966334][ T12] bridge_slave_1: left allmulticast mode [ 431.972258][ T12] bridge_slave_1: left promiscuous mode [ 431.977930][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.988160][ T12] bond2: left promiscuous mode [ 431.993279][ T12] bridge0: port 3(bond2) entered disabled state [ 432.000628][ T12] bridge_slave_1: left allmulticast mode [ 432.007126][ T12] bridge_slave_1: left promiscuous mode [ 432.013193][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.022812][ T12] bridge_slave_0: left allmulticast mode [ 432.028617][ T12] bridge_slave_0: left promiscuous mode [ 432.034853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.441017][ T12] bond0 (unregistering): left promiscuous mode [ 432.447246][ T12] bond_slave_0: left promiscuous mode [ 432.452938][ T12] bond_slave_1: left promiscuous mode [ 432.459439][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.468590][ T12] bond_slave_0: left allmulticast mode [ 432.476227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.485955][ T12] bond_slave_1: left allmulticast mode [ 432.492557][ T12] bond0 (unregistering): Released all slaves [ 432.597030][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.607362][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.617112][ T12] bond0 (unregistering): Released all slaves [ 432.630378][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 432.641071][ T12] bond1 (unregistering): Released all slaves [ 432.924436][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.934767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.944763][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 432.955556][ T12] bond0 (unregistering): Released all slaves [ 432.966047][ T12] bond1 (unregistering): Released all slaves [ 433.068061][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.078932][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.089615][ T12] bond0 (unregistering): Released all slaves [ 433.184240][ T12] bond1 (unregistering): Released all slaves [ 433.278296][ T12] bond2 (unregistering): Released all slaves [ 433.363083][ T12] : left promiscuous mode [ 433.409043][ T12] tipc: Left network mode [ 433.420145][ T12] tipc: Left network mode [ 433.432806][ T12] IPVS: stopping backup sync thread 6304 ... [ 433.439656][ T12] IPVS: stopping backup sync thread 8700 ... [ 433.976642][ T12] batadv0: left promiscuous mode [ 433.984565][ T12] hsr_slave_0: left promiscuous mode [ 433.990270][ T12] hsr_slave_1: left promiscuous mode [ 433.996770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.004927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.014049][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.021654][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.032704][ T12] hsr_slave_0: left promiscuous mode [ 434.038463][ T12] hsr_slave_1: left promiscuous mode [ 434.044575][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.052175][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.059970][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.067781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.076054][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 434.083181][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 434.093245][ T12] hsr_slave_0: left promiscuous mode [ 434.098944][ T12] hsr_slave_1: left promiscuous mode [ 434.105281][ T12] macvlan0: left promiscuous mode [ 434.111913][ T12] macvlan1: left promiscuous mode [ 434.119869][ T12] hsr_slave_0: left promiscuous mode [ 434.126555][ T12] hsr_slave_1: left promiscuous mode [ 434.132553][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.139989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.148358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.155905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.173657][ T12] veth1_macvtap: left promiscuous mode [ 434.179247][ T12] veth0_macvtap: left promiscuous mode [ 434.185000][ T12] veth1_vlan: left promiscuous mode [ 434.190390][ T12] veth0_vlan: left promiscuous mode [ 434.197099][ T12] veth1_macvtap: left promiscuous mode [ 434.202790][ T12] veth0_macvtap: left allmulticast mode [ 434.208480][ T12] veth0_macvtap: left promiscuous mode [ 434.214125][ T12] veth1_vlan: left promiscuous mode [ 434.219430][ T12] veth0_vlan: left promiscuous mode [ 434.225685][ T12] veth1_macvtap: left promiscuous mode [ 434.231544][ T12] veth0_macvtap: left promiscuous mode [ 434.237202][ T12] veth1_vlan: left promiscuous mode [ 434.244281][ T12] veth0_vlan: left promiscuous mode [ 434.250263][ T12] veth1_macvtap: left promiscuous mode [ 434.256273][ T12] veth0_macvtap: left promiscuous mode [ 434.262015][ T12] veth1_vlan: left promiscuous mode [ 434.267314][ T12] @: left promiscuous mode [ 434.557879][ T12] team0 (unregistering): Port device team_slave_1 removed [ 434.860024][ T12] team0 (unregistering): Port device team_slave_1 removed [ 434.875979][ T12] team0 (unregistering): Port device team_slave_0 removed [ 435.085214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 435.108498][ T12] team0 (unregistering): Port device team_slave_0 removed [ 435.324992][ T12] team0 (unregistering): Port device team_slave_1 removed [ 435.353234][ T12] team0 (unregistering): Port device team_slave_0 removed [ 436.395460][ T12] IPVS: stop unused estimator thread 0... [ 436.402715][ T12] IPVS: stop unused estimator thread 0...