last executing test programs: 35m0.039669374s ago: executing program 32 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_open_dev$swradio(&(0x7f0000000740), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x3, 0x5, 0x2, {0xb, @raw_data="076842f2251d4fa1cf56a7b6d2cd8e8589e93c7a7bda39d13d1b6dd3a594361b2487e161b0f5dd9d214aa9a3bbca380dce1a8ed0a0b77c04e4e111d803676b28a8af4d1ede89b4837542d454645b020203f14231273ef1a31caedee3ef867da052d21917a0e7fb45481e70769cacc9462f49158208662e651e2f1516cfa5e0040000000000000048665fd74977b48e2b54f73b0f1dfee85c736622996cb5246a1774636ff0b6a445b56fc8df43ff113ce6354b98b00ebb43e6bf2b548dee13e140d4c0d2d562f402"}, 0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, r4, 0x9a911db71367741f, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}], @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x10b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="d8c4efb8a5ce"}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0xffffffffffffff89}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@filename='./file0\x00', r7, &(0x7f0000000140)) 30m39.757533578s ago: executing program 33 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x18) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r7 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r7, 0x0, 0x0, 0x0, 0x0) lseek(r7, 0x50, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 28m11.935048392s ago: executing program 34 (id=953): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'vlan1\x00', &(0x7f0000001000)=@ethtool_link_settings={0x4c, 0x4, 0x2, 0xf5, 0xf7, 0x7, 0x2, 0x0, 0x6, 0x3, [0x6, 0x4, 0x0, 0x3, 0x2ad, 0x8001, 0x5]}}) 26m48.13565538s ago: executing program 35 (id=1177): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) socket(0x10, 0x803, 0x0) 26m46.909221598s ago: executing program 36 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000340)=@ethtool_sset_info={0x37, 0x2, 0x3}}) 26m46.419980367s ago: executing program 37 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 26m43.912376819s ago: executing program 38 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 24m39.195119594s ago: executing program 0 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x3, 0x9, 0x1, 0x4, 0x2, 0xe, 0xe, 0xfe, 0x9, 0x0, 0x2, 0x8, 0x2, 0x6, 0xa, 0xd], 0x1, [0xbf5, 0x8000, 0x9000, 0x2, 0xf9d6, 0x780, 0x1, 0xc, 0x10, 0x100, 0x7, 0x9, 0x9, 0x1, 0x5, 0x7], [0x2, 0x480, 0x9, 0x4, 0x80, 0x9, 0x8, 0x800, 0x0, 0x101, 0x39b, 0x9, 0x7, 0x8, 0x8cb, 0x3]}}}}]}, 0x88}}, 0x4000010) 24m38.846015534s ago: executing program 0 (id=1254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000000000000001000000000004010500ac1414aa00000000000000000000000000000000330000000000000000000f000000000000000000000000000000000000000000000000000000000040000000fe800000000000000000638a00dcd38e2877e1a90d820b5c0000000000bb000020003c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 24m38.713524723s ago: executing program 0 (id=1255): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltclass={0x24, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff5}, {0x2, 0xfffd}, {0xffe0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a0100000000000000000000000002"], 0x50}, 0x1, 0x7}, 0x20000000) 24m38.592429845s ago: executing program 0 (id=1257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 24m38.511850773s ago: executing program 0 (id=1258): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 24m38.374778105s ago: executing program 0 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0xca}]}) close(r0) 24m23.229788947s ago: executing program 39 (id=1252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, 0x0, 0xffdd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'macvtap0\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socket$kcm(0x10, 0x100000000002, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 24m23.130719474s ago: executing program 40 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0xca}]}) close(r0) 16m28.390877261s ago: executing program 6 (id=2661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16m28.205566629s ago: executing program 6 (id=2664): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 16m26.156310938s ago: executing program 6 (id=2670): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x20, 0x0, 0x4, "000000a0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 16m21.759114249s ago: executing program 6 (id=2677): syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8054, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 16m20.651703443s ago: executing program 6 (id=2682): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38) 16m16.792575962s ago: executing program 6 (id=2689): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 16m8.982616434s ago: executing program 7 (id=2706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a30000000000500074008000000140000001100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16m8.541299332s ago: executing program 7 (id=2707): userfaultfd(0x801) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 16m6.865751186s ago: executing program 7 (id=2710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 16m6.299610727s ago: executing program 7 (id=2711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 16m5.752416477s ago: executing program 7 (id=2713): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 16m4.059285146s ago: executing program 7 (id=2718): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="7c5aa286e479f71eb8dd0489ed5cbf591f222622f4e1fbbe3c9d68656792e782bc20576efb0fc2f4771a3d10e84cbaf03f0e2e29394c78873b90f38e"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 16m1.557936697s ago: executing program 41 (id=2689): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 15m48.9300193s ago: executing program 42 (id=2718): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="7c5aa286e479f71eb8dd0489ed5cbf591f222622f4e1fbbe3c9d68656792e782bc20576efb0fc2f4771a3d10e84cbaf03f0e2e29394c78873b90f38e"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 14m36.383259709s ago: executing program 5 (id=2923): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 14m36.099647775s ago: executing program 5 (id=2924): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x89e1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x145102) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x1010, r2, 0xb000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0xffff, r4, 0x0}]) 14m35.240388766s ago: executing program 5 (id=2929): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000180)={0x0, 0xe, 0x4, "606b7eef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m30.862619945s ago: executing program 5 (id=2941): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0072113b552eaf6f6908000000000000000000bfa2000000000000075a0a00000000000003000008000000b7040000000000008500000059000000950000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @empty}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd700004000000050000000800090002000000000000000000000008000b0000000000060001000700"], 0x34}}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0500000004"], 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r5, 0xc040128b, &(0x7f0000000440)={&(0x7f00000002c0)="faeb4d814038aea1d90ef215d56570541aabe681b45627e92d15e523e30ab0866285903fe20d9769b3c78aeb8ccba078c0", 0x31, &(0x7f0000000300)=""/36, 0x24}) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000000000000000000fdcdae8200a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000001e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d"], 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6e84}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) close_range(r6, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2000, 0x2, &(0x7f0000d24000/0x2000)=nil) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r10, 0xffffffffffffffff, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000028200000ffffff7f", @ANYRES8=r9, @ANYRES8=r9], 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 14m30.668179768s ago: executing program 5 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x0) 14m30.498346492s ago: executing program 5 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r4, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) dup(0xffffffffffffffff) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd05"], 0xfdef) chdir(0x0) 14m14.101158047s ago: executing program 43 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r4, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) dup(0xffffffffffffffff) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd05"], 0xfdef) chdir(0x0) 4m24.562462961s ago: executing program 4 (id=4162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 4m22.844626113s ago: executing program 4 (id=4165): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4044) socket$inet6(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f000024a000/0x1000)=nil) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000005f40), 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980912}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x80003, 0x2) mmap(&(0x7f00002e3000/0x2000)=nil, 0x2000, 0x0, 0x11012, 0xffffffffffffffff, 0x10c000) 4m19.931143572s ago: executing program 4 (id=4168): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01030000030000000008000b00", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 4m15.650546447s ago: executing program 4 (id=4175): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) 4m11.575088506s ago: executing program 4 (id=4177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, 0x0, 0x0) 4m8.150511324s ago: executing program 4 (id=4180): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x40) close(r4) 3m52.027021869s ago: executing program 44 (id=4180): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x40) close(r4) 19.820435604s ago: executing program 3 (id=4614): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r1, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x40}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="4031440000004424a45bdfa21972fcd8029ed66e9c95174b3dba3229a0fc28e0e08efb544d4692c0b01712fa44d1f421e7b6490c3dc5f88c6b5db6e22d597d9a1db509feacfcca53d94c150bf457415c3d15f7a9b90003d863ab970ade1fffba29b41270457959e21aafc51434226601aa0bdbebcdd9b6c1b1dd6fbfdbe702aee373dae79b6ec4479924a0bbb8935ac565d0bab8b413388c14ab8ffa285745109d353da6e52f1e3b335a03ef80ab5c21d7059a8e2f31d8ed2702e6c176ef9fbb5af9e30218ddb8c36a36be3e26881d927c67137cf7d63fa44b8cfd12523ea7403782f780e3e2d26800d9"], &(0x7f0000000580)={0x0, 0x3, 0x41, @string={0x41, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) 19.726492041s ago: executing program 9 (id=4615): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000040)={0x20, 0x0, 0x1, 'Y'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.846750203s ago: executing program 3 (id=4617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.940983478s ago: executing program 8 (id=4620): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000540)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/116, 0x74}], 0x1, &(0x7f0000000340)=""/158, 0x9e}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304948) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0) fcntl$setlease(r4, 0x400, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f800240000000000000020000000100000f0000080008000100000000ff", 0x24) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x1, 0x3, 0x3}, 0x7}}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x2) 14.820405136s ago: executing program 3 (id=4621): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.724368443s ago: executing program 2 (id=4622): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(0x0, 0x4000) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000007000000070000000001000001400200", @ANYRES32, @ANYBLOB="7515000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000900"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x40}, 0xfd1d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 13.901257932s ago: executing program 9 (id=4623): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 13.600892611s ago: executing program 1 (id=4624): syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d00010000"], 0x0) 13.535349362s ago: executing program 8 (id=4625): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) 12.370572722s ago: executing program 8 (id=4626): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000040)={0x20, 0x0, 0x1, 'Y'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.113201711s ago: executing program 2 (id=4627): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r1, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x40}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="4031440000004424a45bdfa21972fcd8029ed66e9c95174b3dba3229a0fc28e0e08efb544d4692c0b01712fa44d1f421e7b6490c3dc5f88c6b5db6e22d597d9a1db509feacfcca53d94c150bf457415c3d15f7a9b90003d863ab970ade1fffba29b41270457959e21aafc51434226601aa0bdbebcdd9b6c1b1dd6fbfdbe702aee373dae79b6ec4479924a0bbb8935ac565d0bab8b413388c14ab8ffa285745109d353da6e52f1e3b335a03ef80ab5c21d7059a8e2f31d8ed2702e6c176ef9fbb5af9e30218ddb8c36a36be3e26881d927c67137cf7d63fa44b8cfd12523ea7403782f780e3e2d26800d9"], &(0x7f0000000580)={0x0, 0x3, 0x43, @string={0x43, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781871c"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xab, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) 10.922932767s ago: executing program 1 (id=4628): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./bus\x00', 0x118) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r1, @ANYRES16=r0], 0x0) 10.674686798s ago: executing program 2 (id=4629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252000000008000300", @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) 10.562817503s ago: executing program 9 (id=4630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 10.52037786s ago: executing program 2 (id=4631): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x36, 0x1, @tid=r3}) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, 0x0) r5 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r6, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000000c0)={0x4, 0x1, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19000000040000000400000002000000000000004f40126eddd682a5f3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000003000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) 8.318766421s ago: executing program 3 (id=4632): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.242328896s ago: executing program 9 (id=4633): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 7.879604617s ago: executing program 1 (id=4634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.277514204s ago: executing program 9 (id=4635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) dup(0xffffffffffffffff) chdir(0x0) 6.214549565s ago: executing program 8 (id=4636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.748172514s ago: executing program 2 (id=4637): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(0x0, 0x4000) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000007000000070000000001000001400200", @ANYRES32, @ANYBLOB="7515000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000000000000900"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x40}, 0xfd1d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x9, 0x1, "11de9933", "91c61031"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xb7, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b04723788f35db15124a1cf72"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x92}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.612544107s ago: executing program 3 (id=4638): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 4.49261735s ago: executing program 8 (id=4639): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r1, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x40}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000016}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000b00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeaa, &(0x7f0000000200)=0x400008bc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="4031440000004424a45bdfa21972fcd8029ed66e9c95174b3dba3229a0fc28e0e08efb544d4692c0b01712fa44d1f421e7b6490c3dc5f88c6b5db6e22d597d9a1db509feacfcca53d94c150bf457415c3d15f7a9b90003d863ab970ade1fffba29b41270457959e21aafc51434226601aa0bdbebcdd9b6c1b1dd6fbfdbe702aee373dae79b6ec4479924a0bbb8935ac565d0bab8b413388c14ab8ffa285745109d353da6e52f1e3b335a03ef80ab5c21d7059a8e2f31d8ed2702e6c176ef9fbb5af9e30218ddb8c36a36be3e26881d927c67137cf7d63fa44b8cfd12523ea7403782f780e3e2d26800d9"], &(0x7f0000000580)={0x0, 0x3, 0x43, @string={0x43, 0x3, "518a3fb9607a79e53b7dd8990e64b6457c8b442e625a6a5959e419e00b95618fb365211f62887874c4841bf3eddccefa1d64ccee93e32ee7bc10e5049a0781871c"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe5, 0x0, 0x0, 0x0, 0x2, 0x6}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000680)={0x20, 0xe, 0xab, "24404366ab1683eec36af6a8faf95bd775bf9228aa72985882a18a8445bd23c6c61a99ce88162776042a48151158d5a611c4071c70b529c641f59f0a5423e729856fa42532a8dd95b96c78ba26a024a9bf9d16aa47b3fac05c5cf79c7bdde18ddfa2247ff4a91a862a1474fb81d81f74dd0f5e50771e6fe8a82f6f407c2392a2990d71001ca7b6094ac8de816d33bb01b7b23072f5880eb61a7b1ae65449e4858e38a926d57d16822b576b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xba}, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "04c1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "22f0"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x38}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0xa0d0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000340)={0x7, 0xc, 0x4, {0x1, @raw_data="de16356387eddc256a189d2d011b044473ca2c257f60a14806fdf60983ab081383ecf98d18e5c6942ea0a0ef969c617274692f60841a2215c4048e4f4a5560718e3013e6a750e0b91f3e948643c28e8056ed069a4d638462a5dfcf5d6b35e1b94263fe728c8371054273c71042a244ff4c12f2ea4c819a7737ac63eba07b07a1b493d31194a08f1c063c696236d4a1543c5dffedb68583e1e30828f0aec11877a302b3a515e8d90da1202b0da7ddea2e3b54c4c7e7312dbf219ec4216212330e4cc38542a39fcea6"}, 0x9}) 1.933027049s ago: executing program 1 (id=4640): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 1.867502505s ago: executing program 3 (id=4641): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 361.442807ms ago: executing program 1 (id=4642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 320.907639ms ago: executing program 2 (id=4643): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000040)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 196.123684ms ago: executing program 9 (id=4644): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 118.106575ms ago: executing program 8 (id=4645): socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)={0x20, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) 0s ago: executing program 1 (id=4646): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][T17415] usb 5-1: Manufacturer: syz [ 1880.466792][T17415] usb 5-1: SerialNumber: syz [ 1880.531064][T17415] usb 5-1: config 0 descriptor?? [ 1880.555223][T17415] smsc75xx v1.0.0 [ 1881.939588][T17415] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1881.939622][T17415] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1881.939644][T17415] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1881.939952][T17415] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1882.133672][T19811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.738082][T19811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.752346][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.752640][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.823590][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.833615][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.923392][ T7272] usb 5-1: USB disconnect, device number 50 [ 1886.073568][T19811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1887.941188][T20176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1888.208102][T20183] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4019'. [ 1888.316772][T19811] veth0_vlan: entered promiscuous mode [ 1888.370175][T19811] veth1_vlan: entered promiscuous mode [ 1888.515424][T20191] netlink: 'syz.8.4021': attribute type 1 has an invalid length. [ 1888.521553][T19811] veth0_macvtap: entered promiscuous mode [ 1888.588117][T19811] veth1_macvtap: entered promiscuous mode [ 1888.665724][T19811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1888.673629][T20193] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4021'. [ 1888.760656][T19811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1888.792996][T15642] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.801287][T15642] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.802492][T15642] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1888.803879][T15642] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.159644][T15642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1889.159663][T15642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1889.246078][T15642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1889.246099][T15642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1889.276697][T20204] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4023'. [ 1891.291309][T16867] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1892.363130][T16867] usb 2-1: Using ep0 maxpacket: 32 [ 1892.365478][T16867] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1892.365507][T16867] usb 2-1: config 0 has no interface number 0 [ 1892.365556][T16867] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1892.403120][T16867] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1892.403150][T16867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.403182][T16867] usb 2-1: Product: syz [ 1892.403195][T16867] usb 2-1: Manufacturer: syz [ 1892.403209][T16867] usb 2-1: SerialNumber: syz [ 1892.460934][T16867] usb 2-1: config 0 descriptor?? [ 1892.475207][T16867] smsc75xx v1.0.0 [ 1892.814213][T18197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1892.842043][T18197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1892.848559][T18197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1892.871641][T18197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1892.872766][T18197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1893.414137][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1893.414169][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1894.195820][ T6028] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1894.366619][ T6028] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1894.366653][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.366675][ T6028] usb 5-1: Product: syz [ 1894.366691][ T6028] usb 5-1: Manufacturer: syz [ 1894.366714][ T6028] usb 5-1: SerialNumber: syz [ 1894.406215][ T6028] usb 5-1: config 0 descriptor?? [ 1894.677857][ T6028] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1894.924496][T20238] chnl_net:caif_netlink_parms(): no params data found [ 1895.133159][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1895.133197][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1895.133220][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1895.133540][T16867] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1896.283542][T18197] Bluetooth: hci4: command tx timeout [ 1896.369437][ T7298] usb 2-1: USB disconnect, device number 76 [ 1896.469368][ T6028] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1897.888067][ T7272] usb 5-1: USB disconnect, device number 51 [ 1899.002112][T20305] kvm: user requested TSC rate below hardware speed [ 1899.285049][T18197] Bluetooth: hci4: command tx timeout [ 1900.352728][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 1900.444145][T20238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.444286][T20238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.444542][T20238] bridge_slave_0: entered allmulticast mode [ 1900.479147][T20238] bridge_slave_0: entered promiscuous mode [ 1900.497995][T20238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.507319][T20238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.507582][T20238] bridge_slave_1: entered allmulticast mode [ 1900.539151][T20314] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 1900.602591][T20238] bridge_slave_1: entered promiscuous mode [ 1900.929567][T20318] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1900.970712][ T6028] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1901.475799][T18197] Bluetooth: hci4: command tx timeout [ 1902.034721][ T6028] usb 5-1: Using ep0 maxpacket: 32 [ 1902.039987][ T6028] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1902.040015][ T6028] usb 5-1: config 0 has no interface number 0 [ 1902.040070][ T6028] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1902.075198][ T6028] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1902.075230][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.075252][ T6028] usb 5-1: Product: syz [ 1902.075266][ T6028] usb 5-1: Manufacturer: syz [ 1902.075281][ T6028] usb 5-1: SerialNumber: syz [ 1902.081494][ T6028] usb 5-1: config 0 descriptor?? [ 1902.120683][ T6028] smsc75xx v1.0.0 [ 1902.984805][T20337] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1903.769897][T18197] Bluetooth: hci4: command tx timeout [ 1903.784047][ T6028] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1903.784079][ T6028] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1903.785722][T20238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.814960][T20238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1904.440960][ T37] audit: type=1326 audit(1761866765.674:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.9.4054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fe623efc9 code=0x0 [ 1905.686209][ T6028] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1905.686245][ T6028] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1905.686283][ T6028] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1905.686692][ T6028] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1905.741125][ T6028] usb 5-1: USB disconnect, device number 52 [ 1905.870469][T20351] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4056'. [ 1905.938051][T20238] team0: Port device team_slave_0 added [ 1905.973217][T20238] team0: Port device team_slave_1 added [ 1906.200824][T10353] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1906.361736][ T6028] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1906.363171][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1906.510733][T10353] usb 2-1: Using ep0 maxpacket: 16 [ 1906.593637][ T6028] usb 4-1: device descriptor read/64, error -32 [ 1906.608327][T10353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.608357][T10353] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1906.615885][T10353] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1906.615916][T10353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.615931][T10353] usb 2-1: Product: syz [ 1906.615942][T10353] usb 2-1: Manufacturer: syz [ 1906.615952][T10353] usb 2-1: SerialNumber: syz [ 1906.803394][T20238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.803414][T20238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.803442][T20238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.808973][T20238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.809225][T20238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.809248][T20238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.853232][ T6028] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1906.923437][T10353] usb 2-1: 0:2 : does not exist [ 1906.933826][T10353] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1906.973288][T10353] usb 2-1: USB disconnect, device number 77 [ 1907.073032][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.073139][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.073555][ T6028] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1907.073650][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.603509][ T6028] usb 4-1: config 0 descriptor?? [ 1907.701669][T20368] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 1907.746375][T20021] udevd[20021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.790063][T20368] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4062'. [ 1908.106771][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106816][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106847][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106877][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106908][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106946][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.106976][ T6028] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1908.117714][ T6028] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1908.178510][T20238] hsr_slave_0: entered promiscuous mode [ 1908.195089][T20238] hsr_slave_1: entered promiscuous mode [ 1908.420501][ T6028] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0xFE [ 1908.424168][T20238] debugfs: 'hsr0' already exists in 'hsr' [ 1908.424199][T20238] Cannot create hsr debugfs directory [ 1909.557329][ T6028] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 1909.921595][ T37] audit: type=1326 audit(1761866770.975:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20370 comm="syz.1.4063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64c30efc9 code=0x0 [ 1910.104921][ T6028] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 1910.354887][ T6028] usb 4-1: USB disconnect, device number 60 [ 1913.285266][T20394] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1913.285314][T20394] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1913.285336][T20394] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1913.528620][T15780] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1913.531803][ T7272] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1913.724740][T20400] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1914.126287][T15780] usb 10-1: device not accepting address 84, error -71 [ 1914.354880][ T7272] usb 5-1: device not accepting address 53, error -71 [ 1915.182405][T15642] bridge_slave_1: left allmulticast mode [ 1915.182435][T15642] bridge_slave_1: left promiscuous mode [ 1915.182684][T15642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.387854][T16867] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1915.438208][ T7272] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1915.495052][T15780] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1915.497984][T15642] bridge_slave_0: left allmulticast mode [ 1915.498005][T15642] bridge_slave_0: left promiscuous mode [ 1915.498257][T15642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.815934][ T7272] usb 5-1: Using ep0 maxpacket: 16 [ 1916.539015][T16867] usb 2-1: Using ep0 maxpacket: 16 [ 1916.541200][ T7272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.541227][ T7272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1916.559000][ T7272] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1916.559096][ T7272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.559121][ T7272] usb 5-1: Product: syz [ 1916.559138][ T7272] usb 5-1: Manufacturer: syz [ 1916.559156][ T7272] usb 5-1: SerialNumber: syz [ 1916.564265][T15780] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.564302][T15780] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.564346][T15780] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1916.564374][T15780] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.573153][T15780] usb 10-1: config 0 descriptor?? [ 1916.647251][T16867] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1916.647283][T16867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.673342][T16867] usb 2-1: config 0 descriptor?? [ 1916.847384][ T7272] usb 5-1: 0:2 : does not exist [ 1916.855456][ T7272] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1916.974740][ T7272] usb 5-1: USB disconnect, device number 54 [ 1917.098269][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098307][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098339][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098390][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098417][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098436][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.098456][T15780] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1917.107703][T15780] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1917.137665][T20021] udevd[20021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1917.337644][T15780] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 1917.579825][T15780] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 1917.591923][T15780] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -5 [ 1917.834809][T20227] usb 10-1: USB disconnect, device number 85 [ 1918.378687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.465092][T16867] pegasus 2-1:0.0: can't reset MAC [ 1918.465476][T16867] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1918.487599][T16867] usb 2-1: USB disconnect, device number 78 [ 1918.543079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.620566][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1918.662938][T20427] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4079'. [ 1918.743171][T20429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4081'. [ 1918.793902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.853997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.110900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.558660][T16867] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1919.842326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1919.928029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.103420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.468181][T16867] usb 2-1: Using ep0 maxpacket: 32 [ 1920.470607][T16867] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1920.470632][T16867] usb 2-1: config 0 has no interface number 0 [ 1920.470760][T16867] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1920.474226][T16867] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1920.474255][T16867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.474276][T16867] usb 2-1: Product: syz [ 1920.474291][T16867] usb 2-1: Manufacturer: syz [ 1920.474318][T16867] usb 2-1: SerialNumber: syz [ 1920.484645][T16867] usb 2-1: config 0 descriptor?? [ 1920.505566][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.514976][T16867] smsc75xx v1.0.0 [ 1920.601214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.640264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.703541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.880170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.917642][T15642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1920.960816][T15642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1920.982586][T15642] bond0 (unregistering): Released all slaves [ 1921.099504][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.157029][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1921.157062][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1921.218154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.357109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.462635][T20443] kAFS: No cell specified [ 1921.739304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1922.119079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1922.345324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1923.260660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1923.304820][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1923.304868][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 1923.304902][T16867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1923.305265][T16867] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1923.326903][T16867] usb 2-1: USB disconnect, device number 79 [ 1923.359845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1923.448789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1926.387863][ T37] audit: type=1326 audit(1761866786.403:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20468 comm="syz.1.4094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64c30efc9 code=0x0 [ 1926.905658][T20481] kAFS: No cell specified [ 1929.243921][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1930.466628][T20517] kvm: user requested TSC rate below hardware speed [ 1930.720666][T15642] hsr_slave_0: left promiscuous mode [ 1934.934198][T15642] hsr_slave_1: left promiscuous mode [ 1934.945706][T15642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1935.248941][ T37] audit: type=1326 audit(1761866794.677:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20527 comm="syz.4.4107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38188cefc9 code=0x0 [ 1935.472346][T15642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1935.677253][T20533] fuse: Bad value for 'fd' [ 1940.763850][ T37] audit: type=1326 audit(1761866799.902:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20551 comm="syz.9.4114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fe623efc9 code=0x0 [ 1941.954492][ T7272] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1942.125617][ T7272] usb 10-1: Using ep0 maxpacket: 32 [ 1942.127658][ T7272] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1942.127686][ T7272] usb 10-1: config 0 has no interface number 0 [ 1942.130355][ T7272] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1942.130375][ T7272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.130390][ T7272] usb 10-1: Product: syz [ 1942.130401][ T7272] usb 10-1: Manufacturer: syz [ 1942.130411][ T7272] usb 10-1: SerialNumber: syz [ 1942.135001][ T7272] usb 10-1: config 0 descriptor?? [ 1942.170490][ T7272] smsc95xx v2.0.0 [ 1942.236071][T15642] team0 (unregistering): Port device team_slave_1 removed [ 1942.581527][ T7272] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1942.581561][ T7272] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1942.586741][T15642] team0 (unregistering): Port device team_slave_0 removed [ 1942.801884][ T7272] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1942.802162][ T7272] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 1944.677998][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1944.678054][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1944.976057][T20227] usb 10-1: USB disconnect, device number 86 [ 1945.419712][T20227] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1945.601473][T20227] usb 10-1: Using ep0 maxpacket: 32 [ 1945.603504][T20227] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1945.603531][T20227] usb 10-1: config 0 has no interface number 0 [ 1945.604300][T20227] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1945.606659][T20227] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1945.606690][T20227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.606705][T20227] usb 10-1: Product: syz [ 1945.606718][T20227] usb 10-1: Manufacturer: syz [ 1945.606729][T20227] usb 10-1: SerialNumber: syz [ 1945.610996][T20227] usb 10-1: config 0 descriptor?? [ 1945.678340][T20227] smsc75xx v1.0.0 [ 1945.678354][T20227] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1945.678542][T20227] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1947.992677][T20238] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1948.055960][T20238] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1948.237520][T20238] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1948.408065][T20238] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1948.530466][T15780] usb 10-1: USB disconnect, device number 87 [ 1950.667176][T20238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1950.684649][T20238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.709716][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.709945][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1950.985700][T20273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.996989][T20273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1954.423313][T20238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1955.045419][T20665] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1955.937696][ T37] audit: type=1326 audit(1761866814.030:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20669 comm="syz.3.4139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fc2afefc9 code=0x0 [ 1956.499917][T10399] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1956.590962][T15328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1956.614100][T15328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1956.636279][T15328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1956.650057][T15328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1956.653221][T15328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1956.669421][T10399] usb 10-1: Using ep0 maxpacket: 8 [ 1957.204338][T10399] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1957.204369][T10399] usb 10-1: config 0 has no interface number 0 [ 1957.204441][T10399] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1957.204466][T10399] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1957.204493][T10399] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1957.204520][T10399] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1957.204562][T10399] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1957.204586][T10399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.292609][T10399] usb 10-1: config 0 descriptor?? [ 1957.295757][T20688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1957.345121][T10399] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1957.395508][T20685] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1957.602116][T15780] usb 10-1: USB disconnect, device number 88 [ 1957.607798][T15780] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1957.633769][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1959.432818][T20699] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1959.490301][T15328] Bluetooth: hci5: command tx timeout [ 1961.697954][T18197] Bluetooth: hci5: command tx timeout [ 1961.975910][T20741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1962.371512][ T7272] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1962.707690][T20749] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1963.497409][T16867] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1963.503046][T18197] Bluetooth: hci3: command 0x0406 tx timeout [ 1963.675916][ T7272] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1963.675949][ T7272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1963.699629][ T7272] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1963.699664][ T7272] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1963.699699][ T7272] usb 2-1: Product: syz [ 1963.699716][ T7272] usb 2-1: Manufacturer: syz [ 1963.699731][ T7272] usb 2-1: SerialNumber: syz [ 1963.710750][ T7272] usb 2-1: config 0 descriptor?? [ 1963.758590][T20681] chnl_net:caif_netlink_parms(): no params data found [ 1963.785021][ T7272] usb 2-1: selecting invalid altsetting 0 [ 1963.816786][T16867] usb 4-1: Using ep0 maxpacket: 32 [ 1963.821039][T16867] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1963.821064][T16867] usb 4-1: config 0 has no interface number 0 [ 1963.821118][T16867] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1963.826606][T16867] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1963.826639][T16867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.826665][T16867] usb 4-1: Product: syz [ 1963.826683][T16867] usb 4-1: Manufacturer: syz [ 1963.826701][T16867] usb 4-1: SerialNumber: syz [ 1963.858270][T16867] usb 4-1: config 0 descriptor?? [ 1963.868949][T10399] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1963.876882][T16867] smsc75xx v1.0.0 [ 1963.876904][T16867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1963.877219][T16867] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1963.933053][T15328] Bluetooth: hci5: command tx timeout [ 1964.022911][T16867] usb 2-1: USB disconnect, device number 80 [ 1964.044444][T10399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.044477][T10399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.044515][T10399] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1964.044538][T10399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.054192][T10399] usb 10-1: config 0 descriptor?? [ 1964.229944][T20758] udevd[20758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1965.309172][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309214][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309242][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309269][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309295][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309321][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.309347][T10399] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1965.382912][T10399] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1965.431369][T20227] usb 4-1: USB disconnect, device number 61 [ 1965.538895][T10399] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 1965.754594][T10399] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 1965.760704][T10399] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -32 [ 1966.034453][T20767] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1966.148733][T15328] Bluetooth: hci5: command tx timeout [ 1967.039413][ T7272] usb 10-1: USB disconnect, device number 89 [ 1968.835428][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1968.835459][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1971.692641][T20681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.692788][T20681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.693039][T20681] bridge_slave_0: entered allmulticast mode [ 1971.696081][T20681] bridge_slave_0: entered promiscuous mode [ 1971.726766][T20681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.727069][T20681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.727334][T20681] bridge_slave_1: entered allmulticast mode [ 1971.766491][T20811] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1972.101244][T20681] bridge_slave_1: entered promiscuous mode [ 1972.767271][T20227] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1972.930095][T20227] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1972.930132][T20227] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1972.930160][T20227] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1972.930206][T20227] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1972.930253][T20227] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.276105][T20819] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1974.276175][T20819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1974.986968][T20681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.023144][T20681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1978.101321][T20227] usb 10-1: can't set config #17, error -71 [ 1978.115263][T20227] usb 10-1: USB disconnect, device number 90 [ 1981.787435][T20681] team0: Port device team_slave_0 added [ 1981.793973][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4179'. [ 1981.794022][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4179'. [ 1982.363181][T20681] team0: Port device team_slave_1 added [ 1982.747818][T15972] bridge_slave_1: left allmulticast mode [ 1982.747847][T15972] bridge_slave_1: left promiscuous mode [ 1982.748079][T15972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.822673][T15972] bridge_slave_0: left allmulticast mode [ 1982.822703][T15972] bridge_slave_0: left promiscuous mode [ 1982.822959][T15972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.824478][T20852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1984.162906][T20871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4186'. [ 1984.833040][T20884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1986.148008][T15972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.212207][T15972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.259342][T15972] bond0 (unregistering): Released all slaves [ 1986.520311][T20681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1986.520331][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1986.520361][T20681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1986.534780][T20681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1986.534799][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1986.534831][T20681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.358974][T20681] hsr_slave_0: entered promiscuous mode [ 1989.359904][T20681] hsr_slave_1: entered promiscuous mode [ 1989.360536][T20681] debugfs: 'hsr0' already exists in 'hsr' [ 1989.360555][T20681] Cannot create hsr debugfs directory [ 1989.567967][T15972] hsr_slave_0: left promiscuous mode [ 1989.699797][T15972] hsr_slave_1: left promiscuous mode [ 1989.700830][T15972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1989.919439][T15972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1991.075652][T20908] IPv6: addrconf: prefix option has invalid lifetime [ 1995.110381][T15972] team0 (unregistering): Port device team_slave_1 removed [ 1995.345408][T15972] team0 (unregistering): Port device team_slave_0 removed [ 1995.588899][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4200'. [ 1995.588950][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4200'. [ 1995.588963][T20933] nbd: socks must be embedded in a SOCK_ITEM attr [ 1996.966051][T18197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1996.969990][T18197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1996.987296][T18197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1997.029387][T18197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1997.030462][T18197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1998.727300][T20942] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1999.685038][T18197] Bluetooth: hci4: command tx timeout [ 2002.013795][T18197] Bluetooth: hci4: command tx timeout [ 2002.198827][T20973] overlayfs: overlapping lowerdir path [ 2003.341608][T20986] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 2003.428708][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.699689][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.741561][ C0] vkms_vblank_simulate: vblank timer overrun [ 2004.224896][T18197] Bluetooth: hci4: command tx timeout [ 2004.732902][ C0] vkms_vblank_simulate: vblank timer overrun [ 2004.916962][T15780] usb 10-1: new full-speed USB device number 91 using dummy_hcd [ 2005.027657][T20935] chnl_net:caif_netlink_parms(): no params data found [ 2005.164695][ C0] vkms_vblank_simulate: vblank timer overrun [ 2005.167575][T15780] usb 10-1: config 0 has an invalid interface number: 239 but max is 0 [ 2005.167603][T15780] usb 10-1: config 0 has no interface number 0 [ 2005.167652][T15780] usb 10-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 2005.167689][T15780] usb 10-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 2005.171198][T15780] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 2005.171228][T15780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.171249][T15780] usb 10-1: Product: syz [ 2005.171261][T15780] usb 10-1: Manufacturer: syz [ 2005.171272][T15780] usb 10-1: SerialNumber: syz [ 2005.251915][T15780] usb 10-1: config 0 descriptor?? [ 2005.388295][ C0] vkms_vblank_simulate: vblank timer overrun [ 2005.477232][T15780] asix 10-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2005.477499][T15780] asix 10-1:0.239: probe with driver asix failed with error -71 [ 2005.487785][T15780] usb 10-1: USB disconnect, device number 91 [ 2005.947339][ C0] vkms_vblank_simulate: vblank timer overrun [ 2006.339365][T16867] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2006.458414][T18197] Bluetooth: hci4: command tx timeout [ 2006.852811][T16867] usb 2-1: Using ep0 maxpacket: 8 [ 2006.859532][T16867] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2006.859564][T16867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2006.859590][T16867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2006.859615][T16867] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2006.859660][T16867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2006.859684][T16867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.960207][T20935] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.960359][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.960615][T20935] bridge_slave_0: entered allmulticast mode [ 2006.964285][T20935] bridge_slave_0: entered promiscuous mode [ 2006.975146][T20935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2006.975301][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.975553][T20935] bridge_slave_1: entered allmulticast mode [ 2006.992074][T20935] bridge_slave_1: entered promiscuous mode [ 2007.088105][T20227] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 2007.201665][ C0] vkms_vblank_simulate: vblank timer overrun [ 2007.201842][T16867] usb 2-1: usb_control_msg returned -71 [ 2007.201886][T16867] usbtmc 2-1:16.0: can't read capabilities [ 2007.229511][T16867] usb 2-1: USB disconnect, device number 82 [ 2007.253519][T20227] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.253555][T20227] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.253592][T20227] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2007.253616][T20227] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.329221][T20227] usb 10-1: config 0 descriptor?? [ 2007.490032][T20935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2007.549586][ C0] vkms_vblank_simulate: vblank timer overrun [ 2007.612955][T20681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2007.645084][T20935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2007.645973][T20681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2007.775337][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775388][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775415][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775457][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775496][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775517][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.775539][T20227] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2007.812343][T20227] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 2007.834918][T20681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2007.986109][T20227] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 2008.001668][T20681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2008.029440][T10353] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2008.067400][T20935] team0: Port device team_slave_0 added [ 2008.076812][T20935] team0: Port device team_slave_1 added [ 2008.200502][T10353] usb 2-1: Using ep0 maxpacket: 32 [ 2008.204163][T10353] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2008.204190][T10353] usb 2-1: config 0 has no interface number 0 [ 2008.208030][T10353] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2008.208060][T10353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.208081][T10353] usb 2-1: Product: syz [ 2008.208097][T10353] usb 2-1: Manufacturer: syz [ 2008.208111][T10353] usb 2-1: SerialNumber: syz [ 2008.215579][T10353] usb 2-1: config 0 descriptor?? [ 2008.253439][T10353] smsc95xx v2.0.0 [ 2008.503924][T20935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2008.503941][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.503966][T20935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.556316][T20935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.556334][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.556364][T20935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.653212][T20227] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 2008.675675][T20227] usb 10-1: USB disconnect, device number 92 [ 2008.730263][T10353] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2008.730296][T10353] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2009.200214][T20935] hsr_slave_0: entered promiscuous mode [ 2009.201793][T20935] hsr_slave_1: entered promiscuous mode [ 2009.202736][T20935] debugfs: 'hsr0' already exists in 'hsr' [ 2009.202762][T20935] Cannot create hsr debugfs directory [ 2009.349354][T20273] bridge_slave_1: left allmulticast mode [ 2009.349418][T20273] bridge_slave_1: left promiscuous mode [ 2009.349646][T20273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.548557][ T37] audit: type=1326 audit(1761866864.211:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21034 comm="syz.9.4223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fe623efc9 code=0x0 [ 2009.705086][T20273] bridge_slave_0: left allmulticast mode [ 2009.710889][T20273] bridge_slave_0: left promiscuous mode [ 2009.755742][T10353] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2009.810389][T20273] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.892663][T10353] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 2010.387577][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2010.387664][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.147882][T18286] usb 2-1: USB disconnect, device number 83 [ 2012.051409][T20273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2012.115733][T20273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.158718][T20273] bond0 (unregistering): Released all slaves [ 2014.182101][T21059] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4228'. [ 2014.857958][T21067] fuse: Bad value for 'fd' [ 2014.908143][T20273] hsr_slave_0: left promiscuous mode [ 2015.120141][T20273] hsr_slave_1: left promiscuous mode [ 2015.120872][T20273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.163592][T20273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.053201][ T37] audit: type=1326 audit(1761866871.233:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21072 comm="syz.1.4233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64c30efc9 code=0x0 [ 2017.483843][T16867] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2017.646334][T16867] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2017.646366][T16867] usb 2-1: config 0 has no interface number 0 [ 2017.646412][T16867] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2017.646430][T16867] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2017.648829][T16867] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2017.648857][T16867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.648872][T16867] usb 2-1: Product: syz [ 2017.648883][T16867] usb 2-1: Manufacturer: syz [ 2017.648900][T16867] usb 2-1: SerialNumber: syz [ 2017.653969][T16867] usb 2-1: config 0 descriptor?? [ 2017.689854][T16867] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 2018.842689][T20273] team0 (unregistering): Port device team_slave_1 removed [ 2019.120587][T20273] team0 (unregistering): Port device team_slave_0 removed [ 2020.484256][T16867] usb 2-1: USB disconnect, device number 84 [ 2020.554290][T15328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2020.558310][T15328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2020.560808][T15328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2020.562659][T15328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2020.563523][T15328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2021.871481][T21070] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2021.871537][T21070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2021.871566][T21070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2022.478465][T20227] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 2022.646222][T20227] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2022.646259][T20227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.646282][T20227] usb 10-1: Product: syz [ 2022.646300][T20227] usb 10-1: Manufacturer: syz [ 2022.646319][T20227] usb 10-1: SerialNumber: syz [ 2022.688159][T20227] usb 10-1: config 0 descriptor?? [ 2022.767789][T21102] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2023.241285][T18197] Bluetooth: hci2: command tx timeout [ 2023.264020][T20227] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2025.451167][T15328] Bluetooth: hci2: command tx timeout [ 2025.551765][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4243'. [ 2025.552587][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4243'. [ 2025.614941][T20227] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2025.690686][T18286] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2025.893091][T18286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2025.893126][T18286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.893165][T18286] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2025.893189][T18286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.901543][T18286] usb 4-1: config 0 descriptor?? [ 2026.235931][T21085] chnl_net:caif_netlink_parms(): no params data found [ 2026.456720][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.456760][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.456787][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.456816][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.456843][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.492795][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.492838][T18286] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2026.495570][T18286] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2026.708111][T18286] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 2026.737292][T20227] usb 10-1: USB disconnect, device number 93 [ 2026.931200][T18286] cp2112 0003:10C4:EA90.0022: error requesting SMBus config [ 2026.937376][T18286] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -5 [ 2027.045451][T21085] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.045571][T21085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.045875][T21085] bridge_slave_0: entered allmulticast mode [ 2027.048560][T21085] bridge_slave_0: entered promiscuous mode [ 2027.147458][T21085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.147724][T21085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.147928][T21085] bridge_slave_1: entered allmulticast mode [ 2027.188808][T21085] bridge_slave_1: entered promiscuous mode [ 2027.671454][T15328] Bluetooth: hci2: command tx timeout [ 2029.041691][T21155] overlayfs: overlapping lowerdir path [ 2029.065320][T21085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2029.428773][T21085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2029.560184][T20935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2029.930677][T15328] Bluetooth: hci2: command tx timeout [ 2029.998833][T18286] usb 4-1: USB disconnect, device number 62 [ 2030.609436][T20935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2031.123478][T21085] team0: Port device team_slave_0 added [ 2031.340202][T20935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2031.437355][T21085] team0: Port device team_slave_1 added [ 2034.267998][T21182] fuse: Bad value for 'rootmode' [ 2035.720617][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4261'. [ 2035.720657][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'. [ 2035.913103][T20935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2037.695459][T21085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.695478][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.695508][T21085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2037.773959][T21085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2037.773978][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.774018][T21085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2038.452253][T21085] hsr_slave_0: entered promiscuous mode [ 2038.459489][T21085] hsr_slave_1: entered promiscuous mode [ 2038.465590][T21085] debugfs: 'hsr0' already exists in 'hsr' [ 2038.465623][T21085] Cannot create hsr debugfs directory [ 2040.150023][T20273] bridge_slave_1: left allmulticast mode [ 2040.150054][T20273] bridge_slave_1: left promiscuous mode [ 2040.150287][T20273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.157617][T18286] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2040.245428][T20273] bridge_slave_0: left allmulticast mode [ 2040.245461][T20273] bridge_slave_0: left promiscuous mode [ 2040.245828][T20273] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.275226][T15780] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2040.329123][T18286] usb 2-1: Using ep0 maxpacket: 32 [ 2040.331357][T18286] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2040.331379][T18286] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2040.334258][T18286] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2040.334288][T18286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.334309][T18286] usb 2-1: Product: syz [ 2040.334326][T18286] usb 2-1: Manufacturer: syz [ 2040.334341][T18286] usb 2-1: SerialNumber: syz [ 2040.346729][T18286] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 2040.346759][T18286] usb 2-1: no configuration chosen from 1 choice [ 2040.446659][T15780] usb 4-1: Using ep0 maxpacket: 16 [ 2040.450638][T15780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.450672][T15780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2040.454292][T15780] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2040.454325][T15780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.454350][T15780] usb 4-1: Product: syz [ 2040.454369][T15780] usb 4-1: Manufacturer: syz [ 2040.454387][T15780] usb 4-1: SerialNumber: syz [ 2040.712319][T15780] usb 4-1: 0:2 : does not exist [ 2040.772611][T15780] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2040.881757][T15780] usb 4-1: USB disconnect, device number 63 [ 2040.976018][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2041.341506][T21249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4274'. [ 2041.464731][T21253] fuse: Bad value for 'rootmode' [ 2041.805352][T20273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2042.982756][T20273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.070235][T20273] bond0 (unregistering): Released all slaves [ 2043.148205][T16867] usb 2-1: USB disconnect, device number 85 [ 2043.743944][T16867] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2043.920402][T16867] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2043.920437][T16867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.920460][T16867] usb 2-1: Product: syz [ 2043.920476][T16867] usb 2-1: Manufacturer: syz [ 2043.920493][T16867] usb 2-1: SerialNumber: syz [ 2044.146945][T20273] hsr_slave_0: left promiscuous mode [ 2044.168328][T20273] hsr_slave_1: left promiscuous mode [ 2044.169353][T20273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2044.201331][T20273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2044.441770][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2044.441836][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2045.104822][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 2045.104873][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2045.105533][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2045.200086][T16867] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2045.623818][T20273] team0 (unregistering): Port device team_slave_1 removed [ 2045.796667][T20273] team0 (unregistering): Port device team_slave_0 removed [ 2046.577259][ T6028] usb 2-1: USB disconnect, device number 86 [ 2046.774935][T20935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2047.552553][T20935] 8021q: adding VLAN 0 to HW filter on device team0 [ 2047.830986][T15780] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2048.931799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2048.932046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2048.944342][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2048.944484][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.335823][T15780] usb 2-1: Using ep0 maxpacket: 32 [ 2049.348037][T15780] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2049.348072][T15780] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2049.406465][T15780] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2049.406496][T15780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.406517][T15780] usb 2-1: Product: syz [ 2049.406532][T15780] usb 2-1: Manufacturer: syz [ 2049.406546][T15780] usb 2-1: SerialNumber: syz [ 2049.424926][T15780] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 2049.424959][T15780] usb 2-1: no configuration chosen from 1 choice [ 2050.222106][T15780] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2050.323663][T20935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.379333][T21085] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2050.382386][T15780] usb 4-1: Using ep0 maxpacket: 16 [ 2050.397458][T15780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2050.397487][T15780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2050.473200][T15780] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2050.473236][T15780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.473258][T15780] usb 4-1: Product: syz [ 2050.473273][T15780] usb 4-1: Manufacturer: syz [ 2050.473290][T15780] usb 4-1: SerialNumber: syz [ 2050.551332][T21085] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2050.619872][T21085] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2050.668802][T21085] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2050.760429][T16867] usb 2-1: USB disconnect, device number 87 [ 2050.839560][T15780] usb 4-1: 0:2 : does not exist [ 2050.974107][T20935] veth0_vlan: entered promiscuous mode [ 2051.009476][T20935] veth1_vlan: entered promiscuous mode [ 2051.094757][T20935] veth0_macvtap: entered promiscuous mode [ 2051.135060][T20935] veth1_macvtap: entered promiscuous mode [ 2051.138847][T15780] usb 4-1: USB disconnect, device number 64 [ 2051.314332][T21333] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2051.858802][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2051.889925][T21085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2051.913830][T20935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.939554][T20935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.977389][ T6403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.981335][T21085] 8021q: adding VLAN 0 to HW filter on device team0 [ 2051.982489][ T6403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.983685][ T6403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.983739][ T6403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.051401][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.051961][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2052.200499][T16867] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2052.229360][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 2052.235497][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2052.394820][T16867] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2052.394853][T16867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.394873][T16867] usb 2-1: Product: syz [ 2052.394887][T16867] usb 2-1: Manufacturer: syz [ 2052.394902][T16867] usb 2-1: SerialNumber: syz [ 2053.178366][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2053.178427][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2053.606389][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.606413][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.760762][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.760785][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.838860][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 2053.838920][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2053.839713][T16867] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2053.882845][T16867] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2054.056991][T21085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.033701][T10353] usb 2-1: USB disconnect, device number 88 [ 2055.228749][T21373] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2055.237472][T21085] veth0_vlan: entered promiscuous mode [ 2055.297515][T21085] veth1_vlan: entered promiscuous mode [ 2055.347178][T21085] veth0_macvtap: entered promiscuous mode [ 2055.353142][T21085] veth1_macvtap: entered promiscuous mode [ 2055.389293][T21085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2055.395385][T21085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2055.848159][ T1413] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.853584][ T1413] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.855397][ T1413] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2055.927026][ T1413] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.289527][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.289548][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.419118][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.419139][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.448826][T21420] IPv6: addrconf: prefix option has invalid lifetime [ 2062.254608][ C1] vkms_vblank_simulate: vblank timer overrun [ 2062.699101][ C1] vkms_vblank_simulate: vblank timer overrun [ 2062.997573][ C1] vkms_vblank_simulate: vblank timer overrun [ 2063.475252][ C1] vkms_vblank_simulate: vblank timer overrun [ 2064.098806][T21437] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2064.198482][ C1] vkms_vblank_simulate: vblank timer overrun [ 2064.434884][ C1] vkms_vblank_simulate: vblank timer overrun [ 2064.702733][ C1] vkms_vblank_simulate: vblank timer overrun [ 2064.704417][T20227] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 2065.243716][ C1] vkms_vblank_simulate: vblank timer overrun [ 2065.357746][T20227] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2065.357778][T20227] usb 9-1: config 0 has no interface number 0 [ 2065.357833][T20227] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2065.361651][T20227] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2065.361683][T20227] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.361706][T20227] usb 9-1: Product: syz [ 2065.361722][T20227] usb 9-1: Manufacturer: syz [ 2065.361739][T20227] usb 9-1: SerialNumber: syz [ 2065.385145][T20227] usb 9-1: config 0 descriptor?? [ 2065.440222][T21451] fuse: Bad value for 'rootmode' [ 2069.135627][T21462] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2069.246692][T20227] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 2069.247428][T20227] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 2069.287180][T20227] usb 9-1: USB disconnect, device number 69 [ 2069.925262][T21474] fuse: Bad value for 'rootmode' [ 2075.855640][T21499] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2076.143623][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4328'. [ 2076.174478][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2076.174579][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2079.962041][T21529] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2080.692395][T20227] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2081.086161][T20227] usb 9-1: Using ep0 maxpacket: 32 [ 2081.303912][T20227] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2081.303943][T20227] usb 9-1: config 0 has no interface number 0 [ 2081.303995][T20227] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2081.317342][T20227] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2081.317385][T20227] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.317411][T20227] usb 9-1: Product: syz [ 2081.317429][T20227] usb 9-1: Manufacturer: syz [ 2081.317447][T20227] usb 9-1: SerialNumber: syz [ 2081.352133][T20227] usb 9-1: config 0 descriptor?? [ 2081.357639][T20227] smsc75xx v1.0.0 [ 2081.366269][T21347] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 2082.077617][T21347] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 2082.077640][T21347] usb 2-1: config 0 has no interface number 0 [ 2082.080046][T21347] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 2082.080070][T21347] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 2082.127230][T21347] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 2082.127253][T21347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.127268][T21347] usb 2-1: Product: syz [ 2082.127279][T21347] usb 2-1: Manufacturer: syz [ 2082.127329][T21347] usb 2-1: SerialNumber: syz [ 2082.278123][T21537] IPv6: addrconf: prefix option has invalid lifetime [ 2082.439221][T21347] usb 2-1: config 0 descriptor?? [ 2082.704696][T20227] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2082.704780][T20227] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2082.732816][T21347] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2082.733239][T21347] asix 2-1:0.239: probe with driver asix failed with error -71 [ 2082.781343][T21347] usb 2-1: USB disconnect, device number 89 [ 2082.924024][T20227] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2082.924049][T20227] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2082.924064][T20227] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2082.924276][T20227] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 2083.023908][T15780] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2083.030030][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 2083.168053][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. [ 2083.168084][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. [ 2083.227485][T15780] usb 4-1: Using ep0 maxpacket: 32 [ 2083.714470][T15780] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2083.714502][T15780] usb 4-1: config 0 has no interface number 0 [ 2083.714554][T15780] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2083.763114][T15780] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2083.763146][T15780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.763166][T15780] usb 4-1: Product: syz [ 2083.763181][T15780] usb 4-1: Manufacturer: syz [ 2083.763196][T15780] usb 4-1: SerialNumber: syz [ 2083.811726][T15780] usb 4-1: config 0 descriptor?? [ 2083.823207][T15780] smsc75xx v1.0.0 [ 2084.599901][ T6028] usb 9-1: USB disconnect, device number 70 [ 2084.789005][T15780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2084.789038][T15780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2085.039029][T15780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2085.039062][T15780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2085.039085][T15780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2085.039387][T15780] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 2086.115267][ C0] vkms_vblank_simulate: vblank timer overrun [ 2086.286476][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4348'. [ 2086.481663][T20227] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 2086.655792][T20227] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2086.655827][T20227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.655849][T20227] usb 10-1: Product: syz [ 2086.655866][T20227] usb 10-1: Manufacturer: syz [ 2086.655881][T20227] usb 10-1: SerialNumber: syz [ 2087.046513][T15780] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 2087.151074][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2087.151140][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2087.219840][T15780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.219873][T15780] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2087.223517][T15780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2087.223568][T15780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.223589][T15780] usb 2-1: Product: syz [ 2087.223621][T15780] usb 2-1: Manufacturer: syz [ 2087.223647][T15780] usb 2-1: SerialNumber: syz [ 2087.246412][T15780] usb 2-1: config 0 descriptor?? [ 2087.345591][T10399] usb 4-1: USB disconnect, device number 65 [ 2088.854462][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4353'. [ 2089.155904][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 2089.156943][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2089.157711][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2089.157766][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2089.158701][T20227] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2089.233520][T20227] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2089.263409][T20227] usb 10-1: USB disconnect, device number 94 [ 2089.621031][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.731460][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.751981][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.813913][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.879058][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.994401][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.102140][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.389446][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.490336][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.577144][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.719677][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.973834][T15780] usb 2-1: USB disconnect, device number 90 [ 2091.484234][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.586619][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.596762][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.665182][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.764887][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.871986][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.974919][ C0] vkms_vblank_simulate: vblank timer overrun [ 2091.983623][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.159696][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.245901][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.308674][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.353314][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.519163][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.593687][ C0] vkms_vblank_simulate: vblank timer overrun [ 2092.806765][T21627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 2092.806789][T21627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 2092.959752][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.227264][ C0] vkms_vblank_simulate: vblank timer overrun [ 2093.576317][ C0] vkms_vblank_simulate: vblank timer overrun [ 2094.929836][ C0] vkms_vblank_simulate: vblank timer overrun [ 2095.153296][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4365'. [ 2095.526805][T21347] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 2095.551065][T21656] fuse: Bad value for 'rootmode' [ 2097.206122][T21347] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.206162][T21347] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2097.213846][T21347] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2097.213878][T21347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.213900][T21347] usb 10-1: Product: syz [ 2097.213917][T21347] usb 10-1: Manufacturer: syz [ 2097.213932][T21347] usb 10-1: SerialNumber: syz [ 2098.240850][T21347] usb 10-1: config 0 descriptor?? [ 2098.338867][T21668] fuse: Bad value for 'rootmode' [ 2099.091121][T20227] usb 10-1: USB disconnect, device number 95 [ 2099.194994][T10399] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2099.355360][T10399] usb 2-1: Using ep0 maxpacket: 32 [ 2099.358169][T10399] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2099.358197][T10399] usb 2-1: config 0 has no interface number 0 [ 2099.358252][T10399] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2099.362062][T10399] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2099.362090][T10399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.362130][T10399] usb 2-1: Product: syz [ 2099.362148][T10399] usb 2-1: Manufacturer: syz [ 2099.362164][T10399] usb 2-1: SerialNumber: syz [ 2099.442480][T10399] usb 2-1: config 0 descriptor?? [ 2099.446914][T10399] smsc75xx v1.0.0 [ 2101.186180][T21683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4380'. [ 2101.344936][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4379'. [ 2101.344968][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4379'. [ 2101.865429][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2101.865464][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2101.891412][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2101.891447][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2101.891469][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2101.891491][T10399] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2101.891827][T10399] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 2102.339383][T10399] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 2103.084820][T10399] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2103.084856][T10399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.084879][T10399] usb 10-1: Product: syz [ 2103.084895][T10399] usb 10-1: Manufacturer: syz [ 2103.084912][T10399] usb 10-1: SerialNumber: syz [ 2103.438949][T21347] usb 2-1: USB disconnect, device number 91 [ 2103.595698][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2103.595761][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2103.792661][T21727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4391'. [ 2104.475309][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 2104.475372][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2104.476341][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2104.514041][T10399] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 2106.429781][T10399] usb 10-1: USB disconnect, device number 96 [ 2113.015026][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4411'. [ 2113.015055][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4411'. [ 2113.462943][T15780] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2113.636540][T15780] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2113.636573][T15780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.636595][T15780] usb 2-1: Product: syz [ 2113.636611][T15780] usb 2-1: Manufacturer: syz [ 2113.636625][T15780] usb 2-1: SerialNumber: syz [ 2113.955083][ T7272] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2114.114871][ T7272] usb 9-1: Using ep0 maxpacket: 32 [ 2114.125139][T15780] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2114.125608][T15780] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2114.208633][ T7272] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2114.208661][ T7272] usb 9-1: config 0 has no interface number 0 [ 2114.328994][ T7272] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2114.329867][ T7272] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.329890][ T7272] usb 9-1: Product: syz [ 2114.329905][ T7272] usb 9-1: Manufacturer: syz [ 2114.329919][ T7272] usb 9-1: SerialNumber: syz [ 2114.501993][ T7272] usb 9-1: config 0 descriptor?? [ 2114.588545][ T7272] smsc95xx v2.0.0 [ 2114.993462][ T7272] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2114.993496][ T7272] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2115.091170][T15780] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 2115.091230][T15780] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2115.092058][T15780] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2115.242627][T15780] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2116.850868][ T7272] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2116.868125][ T7272] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 2117.537753][T21347] usb 2-1: USB disconnect, device number 92 [ 2118.798318][T21833] IPv6: addrconf: prefix option has invalid lifetime [ 2119.058844][T15780] usb 9-1: USB disconnect, device number 71 [ 2119.254417][T21844] netlink: 'syz.8.4421': attribute type 4 has an invalid length. [ 2122.842320][T20439] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 2122.884823][T21347] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2123.054269][T20439] usb 10-1: Using ep0 maxpacket: 32 [ 2123.431865][T20439] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2123.431897][T20439] usb 10-1: config 0 has no interface number 0 [ 2123.432016][T20439] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2123.545270][T21347] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2123.545378][T21347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.545402][T21347] usb 4-1: Product: syz [ 2123.545418][T21347] usb 4-1: Manufacturer: syz [ 2123.545434][T21347] usb 4-1: SerialNumber: syz [ 2123.555017][T20439] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2123.555057][T20439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.555085][T20439] usb 10-1: Product: syz [ 2123.555102][T20439] usb 10-1: Manufacturer: syz [ 2123.555120][T20439] usb 10-1: SerialNumber: syz [ 2123.612150][T20439] usb 10-1: config 0 descriptor?? [ 2123.720388][T21871] IPv6: addrconf: prefix option has invalid lifetime [ 2123.766879][T20439] smsc75xx v1.0.0 [ 2124.444387][T21347] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2124.444505][T21347] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2125.041818][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2125.041844][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2125.044406][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2125.044427][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2125.044500][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2125.044515][T20439] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2125.044824][T20439] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 2126.166363][ T7272] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2126.614408][T21347] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 2126.614461][T21347] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2126.615230][T21347] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2126.812009][T21347] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 2126.852235][T10353] usb 10-1: USB disconnect, device number 97 [ 2126.946091][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4434'. [ 2127.208637][ T7272] usb 9-1: Using ep0 maxpacket: 16 [ 2127.211302][ T7272] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.211361][ T7272] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2127.214272][ T7272] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2127.214298][ T7272] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.214317][ T7272] usb 9-1: Product: syz [ 2127.214331][ T7272] usb 9-1: Manufacturer: syz [ 2127.214344][ T7272] usb 9-1: SerialNumber: syz [ 2128.355417][T15780] usb 4-1: USB disconnect, device number 66 [ 2128.421127][ T7272] usb 9-1: 0:2 : does not exist [ 2128.432143][ T7272] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2128.469239][ T7272] usb 9-1: USB disconnect, device number 72 [ 2128.693111][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2132.471430][T21964] netlink: 'syz.8.4449': attribute type 4 has an invalid length. [ 2132.998622][T15780] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 2133.077496][T21938] Bluetooth: hci4: command 0x0406 tx timeout [ 2133.447353][T15780] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2133.447525][T15780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.447546][T15780] usb 10-1: Product: syz [ 2133.447727][T15780] usb 10-1: Manufacturer: syz [ 2133.447743][T15780] usb 10-1: SerialNumber: syz [ 2134.243089][ C0] vkms_vblank_simulate: vblank timer overrun [ 2135.056128][T15780] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2135.056188][T15780] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2135.227333][T21347] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2135.427816][T21347] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2135.427852][T21347] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2135.427882][T21347] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2135.427927][T21347] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2135.427953][T21347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.479538][T21982] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2136.188314][T15780] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2136.188376][T15780] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2136.189157][T15780] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2136.286934][T15780] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 2137.270498][T21347] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 2137.279028][T21347] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input22 [ 2137.536598][T21347] usb 9-1: USB disconnect, device number 73 [ 2137.536688][ C0] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2137.577930][T20227] usb 10-1: USB disconnect, device number 98 [ 2142.105584][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2142.105655][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2142.265846][T22024] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2142.265878][T22024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2142.265894][T22024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2144.635235][T22043] fuse: Bad value for 'rootmode' [ 2144.733336][T22048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2146.071966][ T7298] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2147.214724][ T7298] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2147.214747][ T7298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.214762][ T7298] usb 4-1: Product: syz [ 2147.214772][ T7298] usb 4-1: Manufacturer: syz [ 2147.214782][ T7298] usb 4-1: SerialNumber: syz [ 2149.249993][ T7298] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2149.250058][ T7298] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2149.259239][ T7298] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2149.259294][ T7298] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2149.260102][ T7298] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2149.353646][ T7298] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2149.384359][ T7298] usb 4-1: USB disconnect, device number 67 [ 2155.955932][ T7298] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2156.728138][ T7298] usb 9-1: Using ep0 maxpacket: 8 [ 2156.769863][ T7298] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.769924][ T7298] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2156.769950][ T7298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.758730][T15328] Bluetooth: hci2: command 0x0406 tx timeout [ 2158.504701][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4489'. [ 2158.504764][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4489'. [ 2158.504781][T22135] nbd: socks must be embedded in a SOCK_ITEM attr [ 2158.981077][ T7298] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2159.144207][ T7298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.144232][ T7298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.144260][ T7298] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2159.144276][ T7298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.150061][ T7298] usb 4-1: config 0 descriptor?? [ 2159.416783][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4495'. [ 2159.470034][T15780] usb 9-1: USB disconnect, device number 74 [ 2160.095152][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.097707][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.100994][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.104206][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.104619][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.108889][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.109016][ T7298] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2160.258608][ T7298] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2160.420332][T22165] IPv6: addrconf: prefix option has invalid lifetime [ 2160.644159][ T7298] cp2112 0003:10C4:EA90.0023: Part Number: 0x00 Device Version: 0x00 [ 2160.855638][ T7298] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 2160.857906][ T7298] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 2160.887089][ T7298] usb 4-1: USB disconnect, device number 68 [ 2160.967085][T22168] fido_id[22168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2161.102374][T22170] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4497'. [ 2161.102408][T22170] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4497'. [ 2161.223176][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4499'. [ 2161.886644][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 2161.886714][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 2161.886730][T22181] nbd: socks must be embedded in a SOCK_ITEM attr [ 2162.403538][ T7298] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2162.791133][ T7298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.791176][ T7298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.791222][ T7298] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2162.791263][ T7298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.796410][ T7298] usb 9-1: config 0 descriptor?? [ 2162.901885][T22191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.902612][T22191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.002498][T21347] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2163.162979][T21347] usb 4-1: Using ep0 maxpacket: 8 [ 2163.165258][T21347] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.165313][T21347] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2163.165432][T21347] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2163.165457][T21347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.193103][T21347] usbtmc 4-1:16.0: bulk endpoints not found [ 2163.256663][ T7298] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 2163.256703][ T7298] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 2163.256732][ T7298] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 2163.287995][ T7298] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2163.366249][T22191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.376203][T22191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.455910][ T7298] cp2112 0003:10C4:EA90.0024: Part Number: 0x00 Device Version: 0x00 [ 2163.671206][ T7298] cp2112 0003:10C4:EA90.0024: error requesting SMBus config [ 2163.675193][ T7298] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -32 [ 2163.700485][ T7298] usb 9-1: USB disconnect, device number 75 [ 2166.648804][T10353] usb 4-1: USB disconnect, device number 69 [ 2167.516776][T22213] IPv6: addrconf: prefix option has invalid lifetime [ 2167.987123][T22215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'. [ 2168.223294][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.242247][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.242303][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.242346][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2171.792002][T22246] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2172.810623][T22251] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4520'. [ 2172.831490][ T6028] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2173.072150][ T6028] usb 3-1: Using ep0 maxpacket: 32 [ 2173.096791][ T6028] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2173.096822][ T6028] usb 3-1: config 0 has no interface number 0 [ 2173.096873][ T6028] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2173.132873][ T6028] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2173.132907][ T6028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.132929][ T6028] usb 3-1: Product: syz [ 2173.132944][ T6028] usb 3-1: Manufacturer: syz [ 2173.132960][ T6028] usb 3-1: SerialNumber: syz [ 2173.189820][ T6028] usb 3-1: config 0 descriptor?? [ 2173.229527][ T6028] smsc75xx v1.0.0 [ 2174.160252][T22262] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4523'. [ 2174.359596][ T6028] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2174.359631][ T6028] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2174.912562][ T6028] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2174.912594][ T6028] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2174.912610][ T6028] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2174.912818][ T6028] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 2176.191604][T22287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4530'. [ 2176.263963][ T7298] usb 3-1: USB disconnect, device number 2 [ 2176.396509][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 2177.021711][T22296] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2178.596104][ T7298] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2178.874720][ T7298] usb 4-1: Using ep0 maxpacket: 16 [ 2178.883698][ T7298] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 2178.883731][ T7298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.918215][ T7298] usb 4-1: config 0 descriptor?? [ 2181.248502][T20439] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2181.419704][T20439] usb 9-1: Using ep0 maxpacket: 32 [ 2181.425325][T20439] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2181.425354][T20439] usb 9-1: config 0 has no interface number 0 [ 2181.425506][T20439] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2181.430006][T20439] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2181.467067][T20439] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.467154][T20439] usb 9-1: Product: syz [ 2181.467172][T20439] usb 9-1: Manufacturer: syz [ 2181.467188][T20439] usb 9-1: SerialNumber: syz [ 2181.562948][T20439] usb 9-1: config 0 descriptor?? [ 2181.577986][T20439] smsc75xx v1.0.0 [ 2181.605764][ T7298] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 2181.620590][ T7298] usb 4-1: USB disconnect, device number 70 [ 2182.268054][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2182.268090][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2182.270973][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2182.271007][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2182.271029][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2182.271050][T20439] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2182.342576][T20439] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 2182.472683][T22326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4542'. [ 2182.907893][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4545'. [ 2183.141498][T20439] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2183.261772][T22338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4547'. [ 2183.261803][T22338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4547'. [ 2183.334006][T20439] usb 3-1: Using ep0 maxpacket: 16 [ 2183.347509][T20439] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.347530][T20439] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.350329][T20439] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2183.350359][T20439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.350381][T20439] usb 3-1: Product: syz [ 2183.350397][T20439] usb 3-1: Manufacturer: syz [ 2183.350413][T20439] usb 3-1: SerialNumber: syz [ 2183.587426][T20439] usb 3-1: 0:2 : does not exist [ 2183.664336][T20439] usb 3-1: USB disconnect, device number 3 [ 2183.762849][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2184.275126][ T6028] usb 9-1: USB disconnect, device number 76 [ 2185.256729][T22370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4553'. [ 2185.783828][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4556'. [ 2187.194273][T22396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4560'. [ 2187.292201][T20439] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2187.458388][T20439] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2187.458421][T20439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.458443][T20439] usb 3-1: Product: syz [ 2187.458459][T20439] usb 3-1: Manufacturer: syz [ 2187.458474][T20439] usb 3-1: SerialNumber: syz [ 2187.569317][ T7298] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2187.661912][T22408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4565'. [ 2187.743942][ T7298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.744040][ T7298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.744082][ T7298] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2187.744111][ T7298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.806598][ T7298] usb 4-1: config 0 descriptor?? [ 2187.946714][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2187.946855][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2188.310469][ T7298] hid_parser_main: 4 callbacks suppressed [ 2188.310498][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.310782][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.310815][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.310846][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.311304][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.311336][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.311366][ T7298] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 2188.384574][ T7298] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2188.420459][T22414] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4567'. [ 2188.478487][ T7298] cp2112 0003:10C4:EA90.0025: error requesting version [ 2188.501178][ T7298] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -5 [ 2188.981161][ T7298] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 2189.141682][ T7298] usb 10-1: Using ep0 maxpacket: 16 [ 2189.148849][ T7298] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.148876][ T7298] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2189.178215][ T7298] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2189.178638][ T7298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.178662][ T7298] usb 10-1: Product: syz [ 2189.178678][ T7298] usb 10-1: Manufacturer: syz [ 2189.178694][ T7298] usb 10-1: SerialNumber: syz [ 2189.284519][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2189.289834][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2189.290445][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2189.290500][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2189.291441][T20439] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2189.391497][T20439] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2189.437613][T20439] usb 3-1: USB disconnect, device number 4 [ 2189.520491][ T7298] usb 10-1: 0:2 : does not exist [ 2189.552570][ T7298] usb 10-1: USB disconnect, device number 99 [ 2189.683381][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2190.040063][T15780] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2190.109785][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 2190.497509][T15780] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2190.497538][T15780] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.497555][T15780] usb 9-1: Product: syz [ 2190.497567][T15780] usb 9-1: Manufacturer: syz [ 2190.497579][T15780] usb 9-1: SerialNumber: syz [ 2190.704139][ T7298] usb 4-1: USB disconnect, device number 71 [ 2192.223875][T15780] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2192.223931][T15780] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2192.489121][ T7272] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 2193.715144][T15780] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 2193.715173][T15780] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2193.716000][T15780] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2193.718997][ T7272] usb 10-1: Using ep0 maxpacket: 32 [ 2193.721461][ T7272] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2193.721494][ T7272] usb 10-1: config 0 has no interface number 0 [ 2193.721552][ T7272] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2193.724790][ T7272] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2193.724822][ T7272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.724847][ T7272] usb 10-1: Product: syz [ 2193.724865][ T7272] usb 10-1: Manufacturer: syz [ 2193.724882][ T7272] usb 10-1: SerialNumber: syz [ 2193.742311][ T7272] usb 10-1: config 0 descriptor?? [ 2193.748250][ T7272] smsc75xx v1.0.0 [ 2193.832378][T15780] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -110 [ 2194.061439][ T6028] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2194.233066][ T6028] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2194.233099][ T6028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.233120][ T6028] usb 3-1: Product: syz [ 2194.233137][ T6028] usb 3-1: Manufacturer: syz [ 2194.233400][ T6028] usb 3-1: SerialNumber: syz [ 2194.404280][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2194.404319][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2194.407013][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2194.407120][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2194.407145][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2194.407167][ T7272] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2194.407907][ T7272] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 2194.489807][T15780] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2194.683008][T15780] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2194.683316][T15780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.683340][T15780] usb 4-1: Product: syz [ 2194.683356][T15780] usb 4-1: Manufacturer: syz [ 2194.683603][T15780] usb 4-1: SerialNumber: syz [ 2194.744019][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2194.744153][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2195.156031][ T7298] usb 9-1: USB disconnect, device number 77 [ 2195.181127][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2195.181963][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2195.793688][ T7272] usb 10-1: USB disconnect, device number 100 [ 2195.992494][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4586'. [ 2196.070130][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2196.070846][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2196.071523][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2196.071639][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2196.087048][ T6028] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2196.161014][ T6028] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2196.179461][ T6028] usb 3-1: USB disconnect, device number 5 [ 2196.350249][ T7272] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 2196.490680][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2196.493230][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2196.497199][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2196.497259][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2196.498091][T15780] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2196.560391][ T7272] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2196.560425][ T7272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.560441][ T7272] usb 10-1: Product: syz [ 2196.560452][ T7272] usb 10-1: Manufacturer: syz [ 2196.560464][ T7272] usb 10-1: SerialNumber: syz [ 2196.600697][ T7272] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2196.612924][T15780] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2196.652293][ T6028] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2196.690562][T15780] usb 4-1: USB disconnect, device number 72 [ 2197.030080][T22492] IPv6: addrconf: prefix option has invalid lifetime [ 2199.214707][ T7298] usb 10-1: USB disconnect, device number 101 [ 2199.351475][ T6028] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2199.351669][ T6028] ath9k_htc: Failed to initialize the device [ 2199.394429][ T7298] usb 10-1: ath9k_htc: USB layer deinitialized [ 2199.842987][T22523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4597'. [ 2200.101800][T15780] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2201.335430][T15780] usb 9-1: Using ep0 maxpacket: 32 [ 2201.621967][T15780] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2201.622230][T15780] usb 9-1: config 0 has no interface number 0 [ 2201.629504][T15780] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2201.897131][T15780] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2201.897164][T15780] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.897185][T15780] usb 9-1: Product: syz [ 2201.897200][T15780] usb 9-1: Manufacturer: syz [ 2201.897215][T15780] usb 9-1: SerialNumber: syz [ 2201.904648][T15780] usb 9-1: config 0 descriptor?? [ 2201.917674][T15780] smsc75xx v1.0.0 [ 2202.670934][ T7298] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2202.676938][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2202.676970][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2202.677737][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2202.677757][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2202.677771][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2202.677785][T15780] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2202.677988][T15780] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 2202.929639][ T7298] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2202.929676][ T7298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2202.932298][ T7298] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2202.932325][ T7298] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2202.932340][ T7298] usb 2-1: Product: syz [ 2202.932351][ T7298] usb 2-1: Manufacturer: syz [ 2202.932362][ T7298] usb 2-1: SerialNumber: syz [ 2202.939254][ T7298] usb 2-1: config 0 descriptor?? [ 2202.981338][ T7298] usb 2-1: selecting invalid altsetting 0 [ 2203.149490][T22547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4603'. [ 2203.197763][ T7298] usb 2-1: USB disconnect, device number 93 [ 2203.282496][T10399] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 2203.467415][T10399] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2203.467446][T10399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.467468][T10399] usb 10-1: Product: syz [ 2203.467480][T10399] usb 10-1: Manufacturer: syz [ 2203.467491][T10399] usb 10-1: SerialNumber: syz [ 2203.973611][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2203.973677][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2205.080202][ T7272] usb 9-1: USB disconnect, device number 78 [ 2207.430635][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2207.430774][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2207.431768][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2207.506156][T10399] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2207.525497][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2207.525573][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2208.043349][T22576] IPv6: addrconf: prefix option has invalid lifetime [ 2208.076659][T10399] usb 10-1: USB disconnect, device number 102 [ 2208.096458][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4611'. [ 2209.453492][T10399] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 2210.405658][T10399] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2210.405693][T10399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.405715][T10399] usb 10-1: Product: syz [ 2210.405730][T10399] usb 10-1: Manufacturer: syz [ 2210.405746][T10399] usb 10-1: SerialNumber: syz [ 2211.313921][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2211.313966][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2213.527081][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2213.527490][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2213.527885][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2213.527922][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2213.528491][T10399] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2213.564395][T22612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4618'. [ 2213.611543][T10399] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2213.697644][T10399] usb 10-1: USB disconnect, device number 103 [ 2213.839092][T22620] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4620'. [ 2214.222099][ T6028] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2214.774398][ T6028] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2214.774427][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.774442][ T6028] usb 4-1: Product: syz [ 2214.774453][ T6028] usb 4-1: Manufacturer: syz [ 2214.774464][ T6028] usb 4-1: SerialNumber: syz [ 2214.959770][ T7272] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 2215.277792][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2215.277838][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2215.291293][ T7272] usb 10-1: Using ep0 maxpacket: 8 [ 2215.295778][ T7272] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2215.295877][ T7272] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2215.295909][ T7272] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2215.295936][ T7272] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2215.296059][ T7272] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2215.296089][ T7272] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.004208][ T7272] usbtmc 10-1:16.0: bulk endpoints not found [ 2216.018511][T10353] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2216.178940][T10353] usb 2-1: Using ep0 maxpacket: 32 [ 2216.185816][T10353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.185855][T10353] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2216.200565][T10353] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2216.200671][T10353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.200698][T10353] usb 2-1: Product: syz [ 2216.200716][T10353] usb 2-1: Manufacturer: syz [ 2216.200735][T10353] usb 2-1: SerialNumber: syz [ 2216.336093][T10353] usb 2-1: config 0 descriptor?? [ 2217.025260][T10353] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2217.081328][T10399] usb 2-1: USB disconnect, device number 94 [ 2217.211211][T10353] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2217.211293][T10353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.211309][T10353] usb 9-1: Product: syz [ 2217.211320][T10353] usb 9-1: Manufacturer: syz [ 2217.211331][T10353] usb 9-1: SerialNumber: syz [ 2217.694975][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2217.710296][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2217.710624][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2217.710822][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2217.714421][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2217.714483][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2217.716010][ T6028] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2217.810476][ T6028] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2217.846576][ T6028] usb 4-1: USB disconnect, device number 73 [ 2217.963376][T22650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 2217.969265][T10399] usb 10-1: USB disconnect, device number 104 [ 2217.973488][T20439] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2218.136612][T20439] usb 2-1: Using ep0 maxpacket: 16 [ 2218.139519][T20439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.139547][T20439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2218.142973][T20439] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2218.143006][T20439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.143028][T20439] usb 2-1: Product: syz [ 2218.143044][T20439] usb 2-1: Manufacturer: syz [ 2218.143061][T20439] usb 2-1: SerialNumber: syz [ 2218.406577][T20439] usb 2-1: 0:2 : does not exist [ 2218.406685][T20439] usb 2-1: unit 10 not found! [ 2218.439638][T20439] usb 2-1: USB disconnect, device number 95 [ 2220.690427][T21178] udevd[21178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2220.695581][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2220.696113][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2220.696688][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2220.696752][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2220.697555][T10353] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2220.809942][T20439] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2220.998502][T10353] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 2221.739156][T10353] usb 9-1: USB disconnect, device number 79 [ 2222.136829][T20439] usb 4-1: Using ep0 maxpacket: 16 [ 2222.139687][T20439] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2222.139721][T20439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2222.143127][T20439] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2222.143157][T20439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.143178][T20439] usb 4-1: Product: syz [ 2222.143193][T20439] usb 4-1: Manufacturer: syz [ 2222.143207][T20439] usb 4-1: SerialNumber: syz [ 2222.291245][T20439] usb 4-1: config 0 descriptor?? [ 2222.360281][T20439] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2222.360338][T20439] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2223.900107][T20439] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2223.900831][T20439] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2223.901362][T20439] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 2223.901398][T20439] em28xx 4-1:0.0: No AC97 audio processor [ 2223.985363][T20439] usb 4-1: USB disconnect, device number 74 [ 2224.006555][T20439] em28xx 4-1:0.0: Disconnecting em28xx [ 2224.017556][T20439] em28xx 4-1:0.0: Freeing device [ 2227.098709][T10399] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2228.370663][T10399] usb 4-1: Using ep0 maxpacket: 8 [ 2228.376933][T10399] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2228.376966][T10399] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2228.376998][T10399] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2228.377022][T10399] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.377069][T10399] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.377103][T10399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.400716][T10399] usbtmc 4-1:16.0: bulk endpoints not found [ 2228.717426][T10399] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2228.882201][T10399] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2228.882235][T10399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.882256][T10399] usb 3-1: Product: syz [ 2228.882275][T10399] usb 3-1: Manufacturer: syz [ 2228.882290][T10399] usb 3-1: SerialNumber: syz [ 2230.030267][ C0] ------------[ cut here ]------------ [ 2230.030283][ C0] refcount_t: addition on 0; use-after-free. [ 2230.030813][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 2230.030857][ C0] Modules linked in: [ 2230.030882][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2230.030904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2230.030916][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2230.030939][ C0] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7 [ 2230.030968][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 2230.030986][ C0] RAX: 615ce56707441500 RBX: 0000000000000002 RCX: ffff88801b2d5a00 [ 2230.031000][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2230.031013][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2230.031025][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 2230.031040][ C0] R13: ffff88803ccdde60 R14: ffff88803ccdda80 R15: dffffc0000000000 [ 2230.031055][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 2230.031071][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2230.031085][ C0] CR2: 0000200000000802 CR3: 0000000025e46000 CR4: 00000000003526f0 [ 2230.031103][ C0] Call Trace: [ 2230.031111][ C0] [ 2230.031123][ C0] mptcp_schedule_work+0x164/0x1a0 [ 2230.031148][ C0] mptcp_tout_timer+0x21/0xa0 [ 2230.031174][ C0] call_timer_fn+0x17e/0x5f0 [ 2230.031201][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2230.031224][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2230.031250][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2230.031290][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2230.031315][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2230.031339][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2230.031364][ C0] __run_timer_base+0x648/0x970 [ 2230.031405][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2230.031446][ C0] run_timer_softirq+0xb7/0x180 [ 2230.031471][ C0] handle_softirqs+0x22f/0x710 [ 2230.031506][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2230.031541][ C0] run_ktimerd+0xcf/0x190 [ 2230.031568][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2230.031592][ C0] ? schedule+0x91/0x360 [ 2230.031623][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2230.031647][ C0] smpboot_thread_fn+0x542/0xa60 [ 2230.031674][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2230.031707][ C0] kthread+0x711/0x8a0 [ 2230.031752][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2230.031783][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.031816][ C0] ? rt_spin_unlock+0x150/0x200 [ 2230.031847][ C0] ? rt_spin_unlock+0x161/0x200 [ 2230.031869][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.031907][ C0] ret_from_fork+0x4bc/0x870 [ 2230.031941][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2230.031983][ C0] ? __switch_to_asm+0x39/0x70 [ 2230.032002][ C0] ? __switch_to_asm+0x33/0x70 [ 2230.032020][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.032050][ C0] ret_from_fork_asm+0x1a/0x30 [ 2230.032088][ C0] [ 2230.032107][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2230.032123][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2230.032145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2230.032157][ C0] Call Trace: [ 2230.032165][ C0] [ 2230.032173][ C0] dump_stack_lvl+0x99/0x250 [ 2230.032204][ C0] ? __asan_memcpy+0x40/0x70 [ 2230.032227][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2230.032257][ C0] ? __pfx__printk+0x10/0x10 [ 2230.032294][ C0] vpanic+0x237/0x6d0 [ 2230.032313][ C0] ? __pfx_vpanic+0x10/0x10 [ 2230.032343][ C0] panic+0xb9/0xc0 [ 2230.032361][ C0] ? __pfx_panic+0x10/0x10 [ 2230.032397][ C0] __warn+0x31b/0x4b0 [ 2230.032414][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2230.032439][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2230.032460][ C0] report_bug+0x2be/0x4f0 [ 2230.032484][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2230.032506][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 2230.032526][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 2230.032548][ C0] handle_bug+0x84/0x160 [ 2230.032577][ C0] exc_invalid_op+0x1a/0x50 [ 2230.032605][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2230.032624][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 2230.032646][ C0] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7 [ 2230.032663][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 2230.032680][ C0] RAX: 615ce56707441500 RBX: 0000000000000002 RCX: ffff88801b2d5a00 [ 2230.032695][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2230.032707][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 2230.032721][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 2230.032740][ C0] R13: ffff88803ccdde60 R14: ffff88803ccdda80 R15: dffffc0000000000 [ 2230.032782][ C0] mptcp_schedule_work+0x164/0x1a0 [ 2230.032809][ C0] mptcp_tout_timer+0x21/0xa0 [ 2230.032841][ C0] call_timer_fn+0x17e/0x5f0 [ 2230.032874][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2230.032903][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2230.032934][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2230.032988][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2230.033020][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2230.033047][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 2230.033077][ C0] __run_timer_base+0x648/0x970 [ 2230.033122][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2230.033170][ C0] run_timer_softirq+0xb7/0x180 [ 2230.033199][ C0] handle_softirqs+0x22f/0x710 [ 2230.033237][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2230.033277][ C0] run_ktimerd+0xcf/0x190 [ 2230.033307][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2230.033334][ C0] ? schedule+0x91/0x360 [ 2230.033370][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2230.033396][ C0] smpboot_thread_fn+0x542/0xa60 [ 2230.033426][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2230.033465][ C0] kthread+0x711/0x8a0 [ 2230.033502][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2230.033530][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.033560][ C0] ? rt_spin_unlock+0x150/0x200 [ 2230.033588][ C0] ? rt_spin_unlock+0x161/0x200 [ 2230.033609][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.033642][ C0] ret_from_fork+0x4bc/0x870 [ 2230.033672][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2230.033708][ C0] ? __switch_to_asm+0x39/0x70 [ 2230.033727][ C0] ? __switch_to_asm+0x33/0x70 [ 2230.033744][ C0] ? __pfx_kthread+0x10/0x10 [ 2230.033781][ C0] ret_from_fork_asm+0x1a/0x30 [ 2230.033825][ C0] [ 2230.034197][ C0] Kernel Offset: disabled