last executing test programs: 2m59.80818396s ago: executing program 4 (id=135): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000080)=0x6, 0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r5, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc}, 0x14}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000003080)) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) 2m59.081761355s ago: executing program 4 (id=139): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x2a) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000200)=0x800, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r4, 0x0, r2}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="2016032ab21fdf0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x30, 0xe, {0xe, 0x31, "b457f5ce21d7ad19e3efee60"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x12, 0xa5, "69d28dcc8332c87fbe20ab0cad56e9e36cd00504cfb8b6ce6bd83b55cc85f0e7db4fe755c6c1e9ca44cc7d19cad348b48547c0c58e801a341ee1a40e4c0d0d46742ba8630f38832528fdfa53b7a63ca78ac8cf41da1fc9da168f9b3fd457e1fed006208c7f42f77d4e4791f303c5db17f92aae2bf27dfa4a30b727fbdebb51d83be3bc3fe88a4fd844b3d5d4f28f22b15570c9e3a51f73990c80c48daaf8c953627d98efcb"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xe, 0x6, 0xd22, 0x3, 0x8f, 0x2, 0x6, 0x7, 0x5, 0x7, 0x3, 0xb}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x335bc9f1}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xaeb}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="03010020"], 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m55.649645396s ago: executing program 4 (id=149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xab) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008004) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000280)={0x92, "c0f2669bd050b0399270977012f7504b911950a77fab033774a73f0e410f89b26cfddf6d94842b9e7771468ef99ff060cb7514af5501db86d545a6091e23165ad24162b8dd5ca67d0f9296640de6c8a3c6fae3acdc2e087cb3ef61d403019356a6513abc65da05ae0337c928e8e5965e389f1ff8ded23d05f5ebd3957eab61a3269132c6de83b9104b62bb5e218c46682236eae244300075ac293efb6f068c56376ea7d56336a5ef1d88bbe2461bf74c0cc2ff4bb2d85d5145fe82a33c6f329c5b5a03ae92499f0d7c3b7e89cf4cb5622f01716faf3de2702ae18789a89dd7e253612492c3ad615568f6d8f1a07980afb87c1cfdaa3a6c7580791d085b1e1776be39d0c69fa9d19942f39d022c7db4332163d981cf65b05f2a1ab34da10aa7fb8646c143af13e52f5e7dd502c89972c9aa1353c46b01414c39bfc76f2d82e58718b02781616d6157a18847d33ba785ebcd06096fc7ad61881c1c4e49154a77dee8bc8aa38a007a1ede24ee89685240e9d078f9c2cb6a836f6bc4f2b44feb9c51a37d03985fa57b1c12b1fd14190f7a77094be582cf77d4c1dcd1a3db288f66fb9c01e7697e75c78a2a5973aa10d9b9b93f8751100c164c53ca19a7263e5fcfd5be416c47a90450973e149b080da3a578aa9a018c811518d1c202fb3a6fd5609cb6d08aa04792a6c059de6f83823bdd3b25b06650e9fa3a55aafc0b6340e1b588"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7d) 2m55.433081007s ago: executing program 4 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140)={0x77359400}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./bus\x00') mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) bind(r6, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x174, @remote, 0x3ff}}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000001000040026bd7000ffd9df2500000400", @ANYRES32=0x0, @ANYBLOB="ef030000000000000b0024004bbc77a1fa421100080025000200000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x4004850) 2m54.729684678s ago: executing program 4 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setuid(0xee01) ioctl$TCSETSW(r1, 0x4b3c, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="727a6312bd03", 0x6}], 0x1, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}}], 0x2, 0x4040080) 2m52.662282598s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000005c0), 0xca0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0xfe, 0x9, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3c) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xcb, "e10d8b553b29f6e30c2674b1fdba4a1b94463cecd0ed9383925fe9f2cbaf562630d86cd6158bd0276087a7f80ddcc4274a61015ab19734cb738b303b14f4b601a3070b8df4d205b26cdc437e30930488310360850745fbdd8d0b8cc78ed702c58296cb2cafccf107a8d84b19da338f01c54ed4230543a1174124cf0721a5b6c3f8cb7c3a34243699f7e5252a45b064844506c6ae92b9b049799647799caa286b93b0bcbcdaa603cae88ebd45e11537a767f6a15d742114b7fae4a6888d43d2fcac6e331977a017f4a5da6f"}, &(0x7f0000000000)=0xd3) socket$nl_route(0x10, 0x3, 0x0) 2m52.061417506s ago: executing program 32 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000005c0), 0xca0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0xfe, 0x9, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3c) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xcb, "e10d8b553b29f6e30c2674b1fdba4a1b94463cecd0ed9383925fe9f2cbaf562630d86cd6158bd0276087a7f80ddcc4274a61015ab19734cb738b303b14f4b601a3070b8df4d205b26cdc437e30930488310360850745fbdd8d0b8cc78ed702c58296cb2cafccf107a8d84b19da338f01c54ed4230543a1174124cf0721a5b6c3f8cb7c3a34243699f7e5252a45b064844506c6ae92b9b049799647799caa286b93b0bcbcdaa603cae88ebd45e11537a767f6a15d742114b7fae4a6888d43d2fcac6e331977a017f4a5da6f"}, &(0x7f0000000000)=0xd3) socket$nl_route(0x10, 0x3, 0x0) 1m16.3338021s ago: executing program 5 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000100013070000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000a05e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000001000000000040000000000000000020000002abd700000000000020004000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1m15.437878667s ago: executing program 5 (id=374): r0 = syz_usb_connect$hid(0x3, 0xfffffffffffffea6, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x750, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xe, 0x0, 0x1, {0x22, 0x1005}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x3, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xb, "ef"}, @global=@item_012={0x2, 0x1, 0x6, "8619"}]}}, 0x0}, 0x0) 1m12.922502339s ago: executing program 5 (id=384): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@private=0xa010101, @private=0xa010101, @remote}, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180c200e0ae621a00000800450000240000e0000011907800000000000000000000000000109078a20c0001"], 0x0) syz_emit_ethernet(0x131, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10f, 0x0, @opaque="edf1df4edc119cb3d0b8ad66bf21898f56dea225ccb2d8ed7e491f7a300b0b38fe69e2910f6158f4cf4d2bf792d3758d8173e85e1bf7fa7eeba490c2cf30bb231e806bfabcabdc0213d969b0b9434fa01623fc23c249a85e8258d584625788fafd9c12f510d09598f6dd6fabf6ac7a2dfe649fa04122d102e69784c8d78a65b1b9bf29114e5c2d5f1e7ae1e4338cfa45917f69e5ceac119ad400a552d4c840f0d3c4f7e64b2b88abb9c9c351dd84a30149d52caf718c64395eecb782880e012c6aeb368f429df66a611d773911057c7c0f854721c9c6eb45f1dd169791ee6e69c774608cb5b27a72fe02901efeec8f0533af0d040309cc15790df5450f1436129bf90da1eaa17f"}}}}}, 0x0) 1m12.491876671s ago: executing program 5 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000002c0)=0x1, 0x4) r8 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff08, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1, 0x0, 0x3}, 0x10}, {&(0x7f0000000200)={0x10, 0x101a, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x101, 0x2, 0x10000, 0x800004, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0x6, 0x1001, 0xffffffff, 0x800800, 0xa237, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000300)=0x63, 0x2) 1m10.945753619s ago: executing program 5 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000a401400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x38}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000200)) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x45004) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.937972043s ago: executing program 5 (id=395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0xb6, 0xffffff5f, 0x42, @mcast2, @empty, 0x80, 0x1, 0x2, 0x80000001}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x3, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', r1, @netfilter=0x2d, r2, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x3, 0xea51}, 0x10, r3, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x5, 0x3, 0x8, 0x1}, {0x1, 0x3, 0x1, 0xf}, {0x3, 0x4, 0xa, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x4, 0xc, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r5 = openat$incfs(r4, &(0x7f0000000840)='.log\x00', 0x800, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xbc}}, 0x40) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getpeername$inet6(r5, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', r1, 0x8766, 0x80, 0x9, 0x7, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0xf1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2}}}}) finit_module(r5, &(0x7f0000000b40)='GPL\x00', 0x5f13afe7377b713a) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000b80)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000bc0)=0x6) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x110, r4, 0x2a55b000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000c00)={0x3, [0x9b93, 0x6, 0x4, 0x896f, 0x2, 0x101, 0x101, 0x3, 0x5, 0x200, 0x18, 0x8, 0x3, 0x2, 0x0, 0xd, 0x77b, 0xef87, 0xfff, 0x7, 0x3, 0x4, 0x2, 0x0, 0x99, 0xfffa, 0xfff, 0x2, 0x3, 0x3, 0x5c0, 0x8, 0x9, 0x1, 0x1, 0x200, 0x8000, 0x1000, 0x0, 0x3, 0x7a0e, 0xa20, 0x8000, 0x9, 0x1, 0x6, 0x6, 0x200], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x1, &(0x7f0000000c80)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x6db6d350e745210}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000e00), &(0x7f0000000e40)=0x30) listen(r5, 0x9) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r9, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa, 0x51}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "413151b2548b82a1a192b6"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0xc008001) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000001040)=0x8, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi3\x00', 0x121402, 0x0) syz_open_dev$dri(&(0x7f00000010c0), 0xf, 0x200000) rmdir(&(0x7f0000001100)='./file0\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 53.800057166s ago: executing program 33 (id=395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0xb6, 0xffffff5f, 0x42, @mcast2, @empty, 0x80, 0x1, 0x2, 0x80000001}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x3, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', r1, @netfilter=0x2d, r2, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x3, 0xea51}, 0x10, r3, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x5, 0x3, 0x8, 0x1}, {0x1, 0x3, 0x1, 0xf}, {0x3, 0x4, 0xa, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x4, 0xc, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r5 = openat$incfs(r4, &(0x7f0000000840)='.log\x00', 0x800, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xbc}}, 0x40) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getpeername$inet6(r5, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', r1, 0x8766, 0x80, 0x9, 0x7, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0xf1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2}}}}) finit_module(r5, &(0x7f0000000b40)='GPL\x00', 0x5f13afe7377b713a) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000b80)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000bc0)=0x6) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x110, r4, 0x2a55b000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000c00)={0x3, [0x9b93, 0x6, 0x4, 0x896f, 0x2, 0x101, 0x101, 0x3, 0x5, 0x200, 0x18, 0x8, 0x3, 0x2, 0x0, 0xd, 0x77b, 0xef87, 0xfff, 0x7, 0x3, 0x4, 0x2, 0x0, 0x99, 0xfffa, 0xfff, 0x2, 0x3, 0x3, 0x5c0, 0x8, 0x9, 0x1, 0x1, 0x200, 0x8000, 0x1000, 0x0, 0x3, 0x7a0e, 0xa20, 0x8000, 0x9, 0x1, 0x6, 0x6, 0x200], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x1, &(0x7f0000000c80)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x6db6d350e745210}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000e00), &(0x7f0000000e40)=0x30) listen(r5, 0x9) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r9, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa, 0x51}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "413151b2548b82a1a192b6"}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0xc008001) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000001040)=0x8, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi3\x00', 0x121402, 0x0) syz_open_dev$dri(&(0x7f00000010c0), 0xf, 0x200000) rmdir(&(0x7f0000001100)='./file0\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 14.246486802s ago: executing program 2 (id=526): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_kthread_work_execute_start\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000280)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000780)={0x0, 0x0, 0x2}, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000003c0)={0x0, 0xffffff16, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000f140100fdffffff00000000080045036d616400"], 0x18}}, 0x400) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4020, &(0x7f0000000640)={[{@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {}, {@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, 0xee01}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ':&.'}}, {@audit}]}) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) 12.866413372s ago: executing program 2 (id=528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x33c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0xd300, 0x5, 0x1, 0x7, 0x3, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x2}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x4}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x2, 0x5}, {0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x5, 0x12, 0x6c, 0x36, 0xb, 0x24, 0xb, 0x1, 0x64, 0x6, 0x4, 0x16, 0x12, 0x1b, 0x2, 0x1, 0x4, 0x24, 0x3, 0x9, 0x16, 0x30, 0x18]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x94fd, 0x5, 0x1, 0x7f, 0x8, 0xffff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x30, 0x5]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x7f, 0x800, 0x7ff, 0x10, 0x9, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xfff7, 0x6, 0x1, 0x8000, 0x401, 0xaa, 0x80]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0xa}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x2}, {0x6, 0x1}, {0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xbfe42bd0ff2fba26, 0x6c, 0x9, 0x6, 0x4, 0x6, 0x9, 0x2, 0x60, 0x0, 0x0, 0xb, 0x75, 0x6, 0x3, 0x30, 0x32, 0xb, 0x2d, 0x1b, 0x4, 0x4, 0x58, 0x5, 0x48, 0x9, 0x2, 0x6, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x9, 0x2, 0x7f, 0x546, 0x944c, 0x4b]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x0, 0x6, 0x2, 0x1, 0x2, 0x9d]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x2, 0x2, 0x1b, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0xf8, 0x3, 0x7, 0x7, 0x5, 0x1, 0x98]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xb7a, 0x101, 0xa, 0x9, 0xc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7f, 0x7, 0x100, 0x7551, 0x5, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0xc1b, 0x200, 0x8122, 0x1ff, 0xbb, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0x2, 0x800, 0x1cb, 0x9, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x8}, {0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x7}, {0x7, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x7}, {}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x12, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x16, 0x4, 0x6, 0x24, 0x16, 0x1b, 0x6c, 0x0, 0x18, 0x0, 0x14, 0x48, 0x6c, 0x3, 0x12, 0x18, 0x1b, 0x16, 0x5, 0x48, 0x18, 0x6c, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x0, 0xb2, 0x5, 0x1, 0x2, 0xfff]}}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f0000000540)=@ethtool_stats={0x1d, 0x1, [0x8000000001]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x10) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x33c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0xd300, 0x5, 0x1, 0x7, 0x3, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x2}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x4}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x2, 0x5}, {0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x5, 0x12, 0x6c, 0x36, 0xb, 0x24, 0xb, 0x1, 0x64, 0x6, 0x4, 0x16, 0x12, 0x1b, 0x2, 0x1, 0x4, 0x24, 0x3, 0x9, 0x16, 0x30, 0x18]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x94fd, 0x5, 0x1, 0x7f, 0x8, 0xffff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x30, 0x5]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x7f, 0x800, 0x7ff, 0x10, 0x9, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xfff7, 0x6, 0x1, 0x8000, 0x401, 0xaa, 0x80]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0xa}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x2}, {0x6, 0x1}, {0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xbfe42bd0ff2fba26, 0x6c, 0x9, 0x6, 0x4, 0x6, 0x9, 0x2, 0x60, 0x0, 0x0, 0xb, 0x75, 0x6, 0x3, 0x30, 0x32, 0xb, 0x2d, 0x1b, 0x4, 0x4, 0x58, 0x5, 0x48, 0x9, 0x2, 0x6, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x9, 0x2, 0x7f, 0x546, 0x944c, 0x4b]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x0, 0x6, 0x2, 0x1, 0x2, 0x9d]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x2, 0x2, 0x1b, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0xf8, 0x3, 0x7, 0x7, 0x5, 0x1, 0x98]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xb7a, 0x101, 0xa, 0x9, 0xc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7f, 0x7, 0x100, 0x7551, 0x5, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0xc1b, 0x200, 0x8122, 0x1ff, 0xbb, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5, 0x2, 0x800, 0x1cb, 0x9, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x8}, {0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x7}, {0x7, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x7}, {}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x12, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x16, 0x4, 0x6, 0x24, 0x16, 0x1b, 0x6c, 0x0, 0x18, 0x0, 0x14, 0x48, 0x6c, 0x3, 0x12, 0x18, 0x1b, 0x16, 0x5, 0x48, 0x18, 0x6c, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x0, 0xb2, 0x5, 0x1, 0x2, 0xfff]}}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'veth0_virt_wifi\x00', &(0x7f0000000540)=@ethtool_stats={0x1d, 0x1, [0x8000000001]}}) (async) 12.711979566s ago: executing program 6 (id=434): syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5c3dd53", 0x8a, 0x20008040, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x8a, 0xa) 11.703462895s ago: executing program 0 (id=530): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x1005) (async) socket$inet(0x2, 0x4, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="82223a0a857fd60600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r1}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) (async) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 11.30981061s ago: executing program 1 (id=531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x1}, {0x9}, 0x4, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x204}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r2, @ANYRES32=r7, @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r10 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000bd7000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x7973, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x359}, &(0x7f0000000200), &(0x7f00000001c0)) close_range(r10, r10, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) 10.894355289s ago: executing program 0 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000f40)=[{&(0x7f00000077c0)="d7", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, 0x0, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 10.668016866s ago: executing program 2 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0x5c}}, 0x0) 10.66055474s ago: executing program 6 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0xfffffffffffffff9) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) mmap(&(0x7f000012e000/0x3000)=nil, 0x3000, 0x100000a, 0x20010, r1, 0xb106000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x6, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffbfffffff, 0x5a8, 0x69f, 0xf, 0x80000006}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e001c3afffe80000000003f41b3419c402eca78998f0b76e0efd776fe8000000000000000000000000000aa82009078d7ac030000000000000000000000ffffac1414bb3d050000160000000000000000"], 0x0) keyctl$revoke(0x3, r0) keyctl$assume_authority(0x10, r0) 10.269959021s ago: executing program 0 (id=535): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x15, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000200)={0x60, 0xa, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000340)={0x20, 0x8, 0x1, "d3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0x5, 0x5, "28d71683b8"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0xbefa3eef4303d106, 0xe, {0xe, 0x3, "f9d721eefc64b9666581c6ac"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x20, 0x7, 0x27, "69844b243ba7d77ece9348861155c63130ed6316bea913bb7a24e94559b62d193e903b38c23da7"}, &(0x7f0000000100)={0x0, 0xa, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x9c, 0x8, 0x5, 0x0, 0x7fff, 0x9, 0xad3d, 0x2, 0x9, 0x1}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="003106060000002b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 9.848177442s ago: executing program 2 (id=536): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600), &(0x7f00000006c0)=@v3={0x3000000, [{0x0, 0x6}, {0x400, 0x7}], r1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000030000000000000100000000000000010500000020000000000000000000000b020000000061006774302e61006161"], 0x0, 0x58}, 0x28) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x7e, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a700000000080001400000050008000240000000000900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 9.588001102s ago: executing program 1 (id=537): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r1, &(0x7f0000002680)=[{&(0x7f00000001c0)='-', 0x1}], 0x1) lseek(r0, 0x7ffdffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 8.651890098s ago: executing program 1 (id=538): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) (async) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)={0x2f}, 0x8) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="201dd9ba"], 0x28, 0x7ffffff7}}], 0x1, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0xc044) (async) close(r5) (async) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000"], 0x110}}, 0x800) (async) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) getegid() (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r2, 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 8.650471104s ago: executing program 3 (id=539): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r0, 0x101) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x511000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @rand_addr=0x64010102}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) setresuid(0x0, 0xee01, 0xffffffffffffffff) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1ffffff, 0xcc2b01) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0x5, 0x6, 0x5, 0x4}, &(0x7f0000000bc0)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r6, 0x402, 0x80000004) 7.425855797s ago: executing program 6 (id=540): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x0, 0x9}, {0xe, 0x20}, 0xbf00, 0xbe, 0x65}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)='w', 0x1}, {&(0x7f0000000240)="467659397ede2fc1719cdb042bcbc8a9a07781853aad31e76942d0b8c1e3fda317a77afaea328d1c42327a356e781497d8bd6f42bc3cbaafcc408bad75c9bbcff8384c6f1e51f491b9a9a067901f41905729e4322f487e0295ff1be7c4178a108637e097614cb6032104e7d51ed2e80c29", 0x71}], 0x2, 0x1) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 4.748260447s ago: executing program 1 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd00}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x12f}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfe6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4840}, 0x24040805) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002060104000034e4000000000000000005c500"], 0x1c}}, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xbd986dd2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 4.741497361s ago: executing program 0 (id=542): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x10, '\x00', [@generic, @ra, @generic={0x0, 0x75, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bd"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0x2000}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @private}, &(0x7f00000001c0)=0xc) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x400c805) 4.617578935s ago: executing program 3 (id=543): r0 = io_uring_setup(0x7a5b, &(0x7f0000002280)={0x0, 0x1d9f, 0x20, 0x1, 0x204}) io_uring_enter(r0, 0x2667, 0x8f4e, 0x35, &(0x7f0000000000)={[0x1]}, 0x8) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585dadb"], 0x0) (async) syz_usb_connect(0x3, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a2403080500070e11240606"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x26001, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) (async, rerun: 64) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async, rerun: 64) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000002380)={0x18, 0x0, r4, {0x8}}, 0x18) syz_fuse_handle_req(r1, &(0x7f0000006b40)="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", 0x2000, &(0x7f000000ae40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x18, 0x0, 0x2, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r6, r1, 0x0) 3.716282225s ago: executing program 6 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x8, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x278, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x109, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x6, 0x1}}, @perr={0x84, 0xee, {0x1, 0xe, [{{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x38}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x21}, {{}, @device_b, 0x2, @void, 0x21}, {{}, @broadcast, 0xe8, @void, 0x1e}, {{0x0, 0x1}, @device_a, 0x8e3c, @value=@device_b, 0x16}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_a, 0x2f6, @value=@broadcast, 0x21}, {{}, @device_a, 0x10, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x34}, {{}, @device_a, 0x4, @void, 0x1b}, {{}, @device_a, 0x1, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x19}, {{0x0, 0x1}, @device_a, 0xfaa, @value, 0x21}]}}, @ibss={0x6, 0x2}, @cf={0x4, 0x6, {0x2, 0x9, 0x1, 0xe}}]}, @NL80211_ATTR_IE={0x117, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x2}}, @dsss={0x3, 0x1, 0xb3}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0x8f}, @cf={0x4, 0x6, {0x9, 0xc, 0xfffe, 0x9}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x3, 0x35, "5b635b7dbd53c01a4ca0d31a046dac1c6625d521d5d83e7bd700b518b4e10237469e4c01ce25d132499a1d970f695a11deebc816eb"}, @tim={0x5, 0xb6, {0x5, 0x53, 0x9, "674c865f730cd9bcd689afaade5953cfbbfb00f8931bf2f0e7ac511cbc69134053f3d107d65e301b5fe3ea281e3537f988c0649cbaccbdbf31ac925896988dc7e76aa585cc1118fd7e9d366496a62841f1dda84fa30da08df40bd917bafe985e258d2085d40ae998922c6c953ef4a3d0726bb92a45481a77a1754824df2d0b21bfe20809d94c6823b604720cc85c079f07325cc3de770ba76f8617bffd1aa14080f3ef4a879b14f3596a40738f8b55ed276faa"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x278}, 0x1, 0x0, 0x0, 0x91}, 0x24000081) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltuid}]}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800f08100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) 3.710427149s ago: executing program 2 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) r3 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100040008010400440008004b000100000018004c000bac0f0001ac0f000fac0f0014ac0f000dac0f0004001e013400fe005b4b2efefbd21e89ebe44fed4ccafef683d6d2b615eaae470d346b912171f3b7964aa23b2b1cebf9b5e719d408580a7b08004b000100000008004c0013ac0f002400fe001c239bb7fafedd4381bff31d77124bfb354d84daed80e404deb71fdbdd2e3e6f08000c006400000008000d"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) r8 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r10, 0x403, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) gettid() 2.448031112s ago: executing program 1 (id=546): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000009f000/0x2000)=nil, &(0x7f00002c3000/0x4000)=nil, &(0x7f00003c9000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000705000/0x7000)=nil, &(0x7f00002c3000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000709000/0x1000)=nil, 0x0}, 0x68) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000bf5d8100000000852000000300000095000000000000006d439ce976aa79e99765259726eabe93eb5b54541f60cb9c13ee02"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0x1ffffffffffffdf0, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES32=r1], 0x0, 0x19f8, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x3, 0xfffffffffffffe96, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES64=r2, @ANYRES64=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e000000100081", 0x7}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) close(r5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e21, 0x80, @empty}, 0x1c) set_mempolicy_home_node(&(0x7f000056a000/0x4000)=nil, 0x4000, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002204000000ab0237ce0362a2c98221b4ec326d7c0d7a4df2b35ee8106afdd800f7716e3ced351e54a550233f8a7901b63cb52b6c3842fac1f265b5685288e7c906b6fad600e853b84993ff17a0793da52a3817013d20779ec99e8c7a8edd0f2c13cda99938484844e4a1616add7df0c9299d548374de8fb0c7933d0bcfd5054dd868c4c37e10c95c758c20"], 0x0}, 0x0) unshare(0x22020600) 2.447866623s ago: executing program 3 (id=547): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.869259043s ago: executing program 3 (id=548): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7ff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) 1.08973275s ago: executing program 1 (id=549): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="8030e51203f15bcb427043ce2563d64ac78bcad62537", @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchdir(0xffffffffffffffff) link(&(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0xa, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0xfffffffd}, 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x420a00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 730.629774ms ago: executing program 0 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r1 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000940)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1c0adf", 0x18, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x1, 0x0, 0x4, 0x0, 0x8, 0x10, 0x9}], {{0x4e20, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x1, "a43a72", 0x6, "5e6a98"}}}}}}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90ec7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 729.843976ms ago: executing program 6 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x260800, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x9, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)) syz_io_uring_setup(0x5e9, &(0x7f00000003c0)={0x0, 0x4c50, 0x4000, 0x0, 0xfffffffb, 0x0, r6}, 0x0, &(0x7f0000000840)) 531.591023ms ago: executing program 2 (id=552): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x5, 0x0) 405.795015ms ago: executing program 3 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 150.609285ms ago: executing program 3 (id=554): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x0, 0x9}, {0xe, 0x20}, 0xbf00, 0xbe, 0x65}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)='w', 0x1}, {&(0x7f0000000240)="467659397ede2fc1719cdb042bcbc8a9a07781853aad31e76942d0b8c1e3fda317a77afaea328d1c42327a356e781497d8bd6f42bc3cbaafcc408bad75c9bbcff8384c6f1e51f491b9a9a067901f41905729e4322f487e0295ff1be7c4178a108637e097614cb6032104e7d51ed2e80c29", 0x71}], 0x2, 0x1) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 0s ago: executing program 0 (id=555): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100)="844c0f0a9cbbf6f8027403004e9a2ea9dcb7314c922e79f4aa1de0e56d81d8931eb81c0763035c5a89f4ffe31082a1b721a371861b10427a01be69813e6ee55e33581165c9ac7f0e1acf6251d62455568962cd1e73e2702ae9afa8a96d902f62f337f94459dbadb41d54eb21c3832bef4f56c93b3809ed24836568c0bed8167b63fd5689be178ef8d0cbac9a96a58b66cf9c", &(0x7f0000000300)=""/200}, 0x20) kernel console output (not intermixed with test programs): ntered forwarding state [ 95.706792][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.838791][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.909604][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.916834][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.991638][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.998860][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.209704][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.375738][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.520974][ T5833] veth0_vlan: entered promiscuous mode [ 96.558318][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.582167][ T51] Bluetooth: hci0: command tx timeout [ 96.587770][ T5859] Bluetooth: hci2: command tx timeout [ 96.594964][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.620260][ T5833] veth1_vlan: entered promiscuous mode [ 96.657092][ T5849] veth0_vlan: entered promiscuous mode [ 96.665564][ T5859] Bluetooth: hci1: command tx timeout [ 96.671036][ T5859] Bluetooth: hci3: command tx timeout [ 96.677128][ T51] Bluetooth: hci4: command tx timeout [ 96.721651][ T5849] veth1_vlan: entered promiscuous mode [ 96.834944][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.851722][ T5833] veth0_macvtap: entered promiscuous mode [ 96.866382][ T5835] veth0_vlan: entered promiscuous mode [ 96.905722][ T5849] veth0_macvtap: entered promiscuous mode [ 96.921287][ T5834] veth0_vlan: entered promiscuous mode [ 96.937375][ T5833] veth1_macvtap: entered promiscuous mode [ 96.970654][ T5835] veth1_vlan: entered promiscuous mode [ 96.980827][ T5849] veth1_macvtap: entered promiscuous mode [ 97.007838][ T5834] veth1_vlan: entered promiscuous mode [ 97.054995][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.077046][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.115650][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.151537][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.174728][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.190301][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.209129][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.218016][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.281424][ T5835] veth0_macvtap: entered promiscuous mode [ 97.299035][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.309143][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.318970][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.328029][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.348821][ T5834] veth0_macvtap: entered promiscuous mode [ 97.365521][ T5835] veth1_macvtap: entered promiscuous mode [ 97.385277][ T5834] veth1_macvtap: entered promiscuous mode [ 97.480737][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.508751][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.569962][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.580365][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.595799][ T5836] veth0_vlan: entered promiscuous mode [ 97.638487][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.649321][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.659005][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.668779][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.680070][ T5836] veth1_vlan: entered promiscuous mode [ 97.686359][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.703347][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.709582][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.719783][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.728946][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.738347][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.772151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.780236][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.875174][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.895367][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.904534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.914687][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.038884][ T5836] veth0_macvtap: entered promiscuous mode [ 98.054628][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.061442][ T5836] veth1_macvtap: entered promiscuous mode [ 98.171211][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.199263][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.209656][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.233432][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.242979][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.284146][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.351900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 98.360842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 98.370080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 98.568306][ T5962] fuse: Unknown parameter '00000000000000000000003' [ 98.732289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.740741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.762481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.770910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.790728][ T5859] Bluetooth: hci2: command tx timeout [ 98.796992][ T5859] Bluetooth: hci0: command tx timeout [ 98.803026][ T5859] Bluetooth: hci3: command tx timeout [ 98.808891][ T5859] Bluetooth: hci4: command tx timeout [ 98.814738][ T5859] Bluetooth: hci1: command tx timeout [ 98.932468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.962328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.971412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 99.422807][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.451583][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.476719][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.509941][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.698085][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.732555][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.804608][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.812670][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.012481][ T5920] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 100.036485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.071338][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.390336][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.565318][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 100.776792][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.901659][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.991663][ T5920] usb 3-1: Product: syz [ 101.006106][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.058443][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.074974][ T5920] usb 3-1: Manufacturer: syz [ 101.110879][ T5920] usb 3-1: SerialNumber: syz [ 101.366600][ T5966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.402489][ T926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.302305][ T926] usb 1-1: device descriptor read/64, error -71 [ 102.373992][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.425871][ T5994] Zero length message leads to an empty skb [ 102.504296][ T5995] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.553290][ T926] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.692153][ T926] usb 1-1: device descriptor read/64, error -71 [ 102.698736][ T5995] usb 2-1: Using ep0 maxpacket: 8 [ 102.708104][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.719516][ T5920] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 102.731881][ T5920] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 102.742396][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.772578][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.786852][ T5995] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 102.796873][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.811889][ T5995] usb 2-1: config 0 descriptor?? [ 102.823315][ T926] usb usb1-port1: attempt power cycle [ 103.083387][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.122920][ T5966] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 103.181980][ T926] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.194277][ T5920] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 103.238398][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.247927][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 103.253344][ T5920] usb 3-1: USB disconnect, device number 2 [ 103.266073][ T926] usb 1-1: device descriptor read/8, error -71 [ 103.280652][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.293231][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.301036][ T5920] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 103.320933][ T24] usb 5-1: config 0 has no interface number 0 [ 103.346387][ T5995] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 103.351932][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.377367][ T5995] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 103.398421][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.403542][ T5995] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 103.418518][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.450015][ T24] usb 5-1: Product: syz [ 103.460283][ T5995] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 103.475899][ T24] usb 5-1: SerialNumber: syz [ 103.518435][ T5995] logitech 0003:046D:C293.0001: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 103.525861][ T24] usb 5-1: config 0 descriptor?? [ 103.570685][ T5995] logitech 0003:046D:C293.0001: no inputs found [ 103.585232][ T24] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 103.618692][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input5 [ 103.621471][ T5995] usb 2-1: USB disconnect, device number 2 [ 103.827261][ T926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.848061][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 103.892348][ T926] usb 1-1: Using ep0 maxpacket: 32 [ 103.907367][ T926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.925750][ T926] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.945857][ T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.969696][ T926] usb 1-1: Product: syz [ 103.993977][ T926] usb 1-1: Manufacturer: syz [ 104.008971][ T926] usb 1-1: SerialNumber: syz [ 104.036337][ T926] usb 1-1: config 0 descriptor?? [ 104.424909][ T6016] capability: warning: `syz.4.11' uses deprecated v2 capabilities in a way that may be insecure [ 104.530419][ T30] audit: type=1400 audit(1755948637.546:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=5998 comm="syz.4.11" name="map_files" dev="proc" ino=8217 [ 105.084066][ T30] audit: type=1400 audit(1755948637.566:3): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=5998 comm="syz.4.11" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 105.332788][ T926] gs_usb 1-1:0.0: Configuring for 52 interfaces [ 105.345556][ T926] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 105.371974][ T926] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 105.482683][ T2150] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.682092][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 105.873265][ T2150] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.959213][ T2150] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.981134][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.989767][ T2150] usb 2-1: Product: syz [ 106.005581][ T2150] usb 2-1: Manufacturer: syz [ 106.011308][ T2150] usb 2-1: SerialNumber: syz [ 106.158412][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.172062][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.179277][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.186749][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.194115][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.201254][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.208388][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.215542][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.222754][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.229943][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.298392][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 106.307895][ T24] usb 5-1: USB disconnect, device number 2 [ 106.519173][ T926] usb 1-1: USB disconnect, device number 5 [ 106.519661][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 106.539554][ T2150] usb 2-1: bad CDC descriptors [ 106.709237][ T6040] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 106.949765][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.755758][ T6050] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.930198][ T6050] syz.3.22: attempt to access beyond end of device [ 107.930198][ T6050] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 107.950247][ T6050] (syz.3.22,6050,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 107.958017][ T926] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 107.972631][ T6050] (syz.3.22,6050,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 108.000918][ T6050] (syz.3.22,6050,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 108.014359][ T6050] (syz.3.22,6050,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 108.137723][ T926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.191470][ T926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.307026][ T926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.356894][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.420004][ T926] usb 5-1: Product: syz [ 108.449456][ T926] usb 5-1: Manufacturer: syz [ 108.477757][ T926] usb 5-1: SerialNumber: syz [ 108.799150][ T10] usb 2-1: USB disconnect, device number 3 [ 108.836438][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.175420][ T24] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 109.455412][ T24] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.495605][ T926] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 109.496006][ T24] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 109.534362][ T24] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 109.579712][ T6064] ubi31: attaching mtd0 [ 109.585609][ T6064] ubi31: scanning is finished [ 109.590468][ T6064] ubi31: empty MTD device detected [ 109.600425][ T24] usb 4-1: Manufacturer: syz [ 109.605954][ T24] usb 4-1: SerialNumber: syz [ 110.393097][ T926] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.426364][ T24] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 110.540133][ T6064] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 110.575061][ T926] usb 5-1: USB disconnect, device number 3 [ 110.677743][ T24] usb 4-1: USB disconnect, device number 2 [ 110.776172][ T6076] FAULT_INJECTION: forcing a failure. [ 110.776172][ T6076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.807589][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.30 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 110.807615][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.807625][ T6076] Call Trace: [ 110.807631][ T6076] [ 110.807638][ T6076] dump_stack_lvl+0x189/0x250 [ 110.807663][ T6076] ? __pfx____ratelimit+0x10/0x10 [ 110.807685][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.807706][ T6076] ? __pfx__printk+0x10/0x10 [ 110.807732][ T6076] ? __might_fault+0xb0/0x130 [ 110.807764][ T6076] should_fail_ex+0x414/0x560 [ 110.807791][ T6076] _copy_from_user+0x2d/0xb0 [ 110.807819][ T6076] ___sys_sendmsg+0x158/0x2a0 [ 110.807847][ T6076] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.807887][ T6076] ? __fget_files+0x2a/0x420 [ 110.807900][ T6076] ? __fget_files+0x3a0/0x420 [ 110.807919][ T6076] __sys_sendmmsg+0x227/0x430 [ 110.807941][ T6076] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.807957][ T6076] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 110.807987][ T6076] ? ksys_write+0x22a/0x250 [ 110.808000][ T6076] ? __pfx_ksys_write+0x10/0x10 [ 110.808009][ T6076] ? rcu_is_watching+0x15/0xb0 [ 110.808027][ T6076] __x64_sys_sendmmsg+0xa0/0xc0 [ 110.808046][ T6076] do_syscall_64+0xfa/0x3b0 [ 110.808058][ T6076] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.808071][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.808083][ T6076] ? clear_bhb_loop+0x60/0xb0 [ 110.808097][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.808108][ T6076] RIP: 0033:0x7ff91e58ebe9 [ 110.808120][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.808130][ T6076] RSP: 002b:00007ff91f40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.808144][ T6076] RAX: ffffffffffffffda RBX: 00007ff91e7b5fa0 RCX: 00007ff91e58ebe9 [ 110.808153][ T6076] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000003 [ 110.808161][ T6076] RBP: 00007ff91f40f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.808168][ T6076] R10: 0000000004040080 R11: 0000000000000246 R12: 0000000000000001 [ 110.808175][ T6076] R13: 00007ff91e7b6038 R14: 00007ff91e7b5fa0 R15: 00007ffe170bfce8 [ 110.808194][ T6076] [ 111.318960][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.324707][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.537616][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 111.555271][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.566079][ T10] usb 2-1: Product: syz [ 111.570520][ T10] usb 2-1: Manufacturer: syz [ 111.583872][ T10] usb 2-1: SerialNumber: syz [ 111.620480][ T10] usb 2-1: config 0 descriptor?? [ 111.644308][ T6087] evm: overlay not supported [ 111.720806][ T6088] netlink: 'syz.2.31': attribute type 5 has an invalid length. [ 111.782611][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 004 [ 112.012557][ T6084] "syz.3.32" (6084) uses obsolete ecb(arc4) skcipher [ 112.123666][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.131709][ T10] (null): failure reading functionality [ 112.149862][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 112.332008][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 112.352663][ T10] usb 2-1: USB disconnect, device number 4 [ 112.369445][ T5927] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.399282][ T5927] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.431081][ T5927] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 112.522047][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.528823][ T5927] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 112.717988][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.919789][ T5927] usb 3-1: config 0 descriptor?? [ 114.620964][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 114.629044][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.643831][ T5927] usb 3-1: USB disconnect, device number 3 [ 114.922043][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 117.651008][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45'. [ 118.924336][ T5907] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 119.001996][ T2150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.118667][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.138114][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.188080][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 119.220062][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 119.230161][ T2150] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.250019][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.258337][ T2150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.270589][ T5907] usb 1-1: SerialNumber: syz [ 119.291851][ T2150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.340346][ T5907] usb 1-1: bad CDC descriptors [ 119.350269][ T2150] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.378085][ T5907] usb-storage 1-1:1.0: USB Mass Storage device detected [ 119.418854][ T5907] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 119.426964][ T2150] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.442219][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.447413][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.477750][ T5907] scsi host1: usb-storage 1-1:1.0 [ 119.626414][ T5929] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 119.642025][ T5929] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.654107][ T5929] usb 4-1: config 220 has no interface number 2 [ 119.660447][ T5929] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 119.674493][ T5929] usb 4-1: config 220 interface 0 has no altsetting 0 [ 119.681652][ T5929] usb 4-1: config 220 interface 76 has no altsetting 0 [ 119.688752][ T5929] usb 4-1: config 220 interface 1 has no altsetting 0 [ 119.702905][ T5929] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.712582][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.720609][ T5929] usb 4-1: Product: syz [ 119.724959][ T5929] usb 4-1: Manufacturer: syz [ 119.732907][ T5929] usb 4-1: SerialNumber: syz [ 119.791246][ T2150] usb 2-1: GET_CAPABILITIES returned 0 [ 119.810782][ T2150] usbtmc 2-1:16.0: can't read capabilities [ 119.914874][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.949805][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.070027][ T6179] team0: entered allmulticast mode [ 120.081363][ T6179] team_slave_0: entered allmulticast mode [ 120.091935][ T6179] team_slave_1: entered allmulticast mode [ 120.377309][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 120.682843][ T6185] bond0: (slave bond_slave_1): Releasing backup interface [ 120.958286][ T5929] usb 4-1: selecting invalid altsetting 0 [ 121.075862][ T5927] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.867165][ T5929] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 121.902974][ T5929] usb 4-1: No valid video chain found. [ 122.063561][ T5929] usb 4-1: selecting invalid altsetting 0 [ 122.069471][ T5929] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 122.080070][ T2150] usb 2-1: USB disconnect, device number 5 [ 122.127847][ T5927] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 122.149988][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.179270][ T5927] usb 5-1: Product: syz [ 122.197885][ T5927] usb 5-1: Manufacturer: syz [ 122.209647][ T5927] usb 5-1: SerialNumber: syz [ 122.215001][ T5929] usb 4-1: USB disconnect, device number 3 [ 122.477093][ T5927] usb 5-1: config 0 descriptor?? [ 122.510007][ T6185] team0: left allmulticast mode [ 122.516069][ T6185] team_slave_0: left allmulticast mode [ 122.524149][ T6185] team_slave_1: left allmulticast mode [ 122.577950][ T10] usb 1-1: USB disconnect, device number 6 [ 122.694945][ T5927] usb 5-1: ignoring: probably an ADSL modem [ 122.752029][ T2150] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.922574][ T2150] usb 2-1: device descriptor read/64, error -71 [ 123.128361][ T5927] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 123.403276][ T2150] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.464329][ T5927] usb 5-1: USB disconnect, device number 4 [ 123.564956][ T6218] tipc: Started in network mode [ 123.580415][ T2150] usb 2-1: device descriptor read/64, error -71 [ 123.591378][ T6218] tipc: Node identity 16e83e89ff0f, cluster identity 4711 [ 123.600760][ T6218] tipc: Enabled bearer , priority 0 [ 123.623228][ T6216] syzkaller0: entered promiscuous mode [ 123.628755][ T6216] syzkaller0: entered allmulticast mode [ 123.702593][ T2150] usb usb2-port1: attempt power cycle [ 124.070326][ T6213] tipc: Resetting bearer [ 124.178655][ T2150] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.284680][ T2150] usb 2-1: device descriptor read/8, error -71 [ 124.633085][ T926] tipc: Node number set to 3924246153 [ 124.761210][ T6213] tipc: Disabling bearer [ 124.861919][ T2150] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.022166][ T2150] usb 2-1: device descriptor read/8, error -71 [ 125.152558][ T2150] usb usb2-port1: unable to enumerate USB device [ 125.288399][ T6237] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 125.582052][ T6247] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[6247] [ 128.137945][ T30] audit: type=1326 audit(1755948661.226:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6264 comm="syz.2.72" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff91e58ebe9 code=0x0 [ 129.356192][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.420738][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.685856][ T926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.211919][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 131.412662][ T926] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.583081][ T926] usb 2-1: config 1 interface 0 has no altsetting 0 [ 131.630435][ T926] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 131.660916][ T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.676292][ T926] usb 2-1: Product: syz [ 131.680525][ T926] usb 2-1: Manufacturer: syz [ 131.741952][ T926] usb 2-1: SerialNumber: syz [ 131.788635][ T926] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 132.855176][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.891932][ T926] usb 2-1: no configuration chosen from 1 choice [ 133.569779][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.581494][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.814677][ T5929] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 133.854238][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.924495][ T5929] usb 4-1: Product: syz [ 133.928726][ T5929] usb 4-1: Manufacturer: syz [ 134.033462][ T5929] usb 4-1: SerialNumber: syz [ 134.096300][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.282967][ T5929] usb 4-1: config 0 descriptor?? [ 134.422976][ T51] Bluetooth: hci5: urb ffff88806668d700 submission failed (2) [ 135.454300][ T5927] usb 2-1: USB disconnect, device number 10 [ 135.463822][ T6322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.85'. [ 135.649281][ T5929] usb 4-1: USB disconnect, device number 4 [ 137.700252][ T6352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'. [ 140.303805][ T6368] fuse: Bad value for 'fd' [ 140.869781][ T6377] binder: 6376:6377 ioctl c0306201 2000000003c0 returned -14 [ 142.402008][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.666510][ T30] audit: type=1326 audit(1755948675.756:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91e58ebe9 code=0x7ffc0000 [ 142.674812][ T6407] syz.4.104: attempt to access beyond end of device [ 142.674812][ T6407] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 142.712121][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 142.732916][ T5927] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 142.755823][ T5927] usb 2-1: config 0 has no interface number 0 [ 142.787132][ T30] audit: type=1326 audit(1755948675.796:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff91e58ebe9 code=0x7ffc0000 [ 142.787186][ T5927] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 143.197327][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.206889][ T5927] usb 2-1: Product: syz [ 143.217262][ T5927] usb 2-1: Manufacturer: syz [ 143.351985][ T5927] usb 2-1: SerialNumber: syz [ 143.451275][ T30] audit: type=1326 audit(1755948675.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91e58ebe9 code=0x7ffc0000 [ 143.786637][ T5927] usb 2-1: config 0 descriptor?? [ 144.077606][ T5927] flexcop_usb: set interface failed. [ 144.097169][ T30] audit: type=1326 audit(1755948675.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6403 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91e58ebe9 code=0x7ffc0000 [ 144.114365][ T5927] b2c2_flexcop_usb 2-1:0.204: probe with driver b2c2_flexcop_usb failed with error -22 [ 144.186601][ T30] audit: type=1326 audit(1755948675.866:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff91e5c14a5 code=0x7ffc0000 [ 144.235459][ T6416] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 144.274255][ T30] audit: type=1326 audit(1755948676.066:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff91e58ebe9 code=0x7ffc0000 [ 144.428632][ T6416] netlink: 165 bytes leftover after parsing attributes in process `syz.2.110'. [ 144.486629][ T6422] 9pnet_fd: Insufficient options for proto=fd [ 145.109657][ T5929] usb 2-1: USB disconnect, device number 11 [ 150.915416][ T5929] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 150.969855][ T6455] netlink: 436 bytes leftover after parsing attributes in process `syz.3.118'. [ 151.255507][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.302005][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.671602][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.772735][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 152.078401][ T5929] usb 1-1: not running at top speed; connect to a high speed hub [ 152.098089][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.102779][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 152.137710][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.163414][ T5929] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 152.184286][ T5927] usb 4-1: config 1 interface 0 has no altsetting 0 [ 152.198973][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.204737][ T5929] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 152.240619][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=02e6, bcdDevice= 0.40 [ 152.251916][ T5907] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.284082][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.284954][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.297875][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.315090][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.321847][ T5927] usb 4-1: Product: syz [ 152.327351][ T5927] usb 4-1: Manufacturer: syz [ 152.334520][ T5929] usb 1-1: Product: syz [ 152.352641][ T5929] usb 1-1: Manufacturer: syz [ 152.367551][ T5929] usb 1-1: SerialNumber: syz [ 152.569468][ T5907] usb 5-1: config 0 descriptor?? [ 152.575059][ T5927] usb 4-1: SerialNumber: syz [ 152.681385][ T6481] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.801360][ T5929] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.843046][ T5927] usbhid 4-1:1.0: can't add hid device: -71 [ 152.849233][ T5927] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 152.903273][ T5927] usb 4-1: USB disconnect, device number 5 [ 153.017051][ T5929] usb 1-1: USB disconnect, device number 7 [ 153.025358][ T5907] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 153.039113][ T5907] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 153.065260][ T5907] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 3/5 [ 153.074251][ T5907] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 153.095653][ T5907] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22 [ 153.109981][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.279205][ T6470] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 153.292370][ T6470] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 153.309345][ T6470] Can't find a SQUASHFS superblock on nullb0 [ 153.494479][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.546365][ T6492] warning: `syz.1.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.858017][ T5920] usb 4-1: device descriptor read/64, error -71 [ 154.252185][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.278059][ T10] usb 5-1: USB disconnect, device number 5 [ 154.352078][ T5907] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.425641][ T5920] usb 4-1: device descriptor read/64, error -71 [ 154.554427][ T5920] usb usb4-port1: attempt power cycle [ 155.105258][ T5920] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.206039][ T5920] usb 4-1: device descriptor read/8, error -71 [ 155.425328][ T5907] usb 1-1: config 9 has an invalid interface number: 206 but max is 2 [ 155.442026][ T5907] usb 1-1: config 9 has an invalid interface number: 104 but max is 2 [ 155.450841][ T5907] usb 1-1: config 9 has an invalid interface number: 45 but max is 2 [ 155.459659][ T5907] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 155.468709][ T5907] usb 1-1: config 9 has no interface number 0 [ 155.475433][ T5907] usb 1-1: config 9 has no interface number 1 [ 155.482207][ T5907] usb 1-1: config 9 has no interface number 2 [ 155.488476][ T5907] usb 1-1: config 9 interface 206 altsetting 5 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 155.502088][ T5920] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.507336][ T5907] usb 1-1: config 9 interface 206 altsetting 5 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 155.521233][ T5907] usb 1-1: config 9 interface 206 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 155.534788][ T5907] usb 1-1: config 9 interface 206 altsetting 5 has an endpoint descriptor with address 0x47, changing to 0x7 [ 155.546819][ T5907] usb 1-1: config 9 interface 206 altsetting 5 endpoint 0x7 has invalid maxpacket 34414, setting to 1024 [ 155.558201][ T5907] usb 1-1: config 9 interface 206 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 1024 [ 155.570712][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 155.570817][ T5920] usb 4-1: device descriptor read/8, error -71 [ 155.598238][ T6512] netlink: 312 bytes leftover after parsing attributes in process `syz.1.132'. [ 155.607417][ T5907] usb 1-1: config 9 interface 206 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 155.630147][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 155.639160][ T5907] usb 1-1: config 9 interface 206 altsetting 5 endpoint 0x2 has an invalid bInterval 255, changing to 7 [ 155.655221][ T5907] usb 1-1: config 9 interface 206 altsetting 5 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 155.669632][ T5907] usb 1-1: config 9 interface 104 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 155.681069][ T5907] usb 1-1: config 9 interface 104 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 155.745174][ T5907] usb 1-1: config 9 interface 104 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 155.776651][ T5907] usb 1-1: config 9 interface 104 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 155.795013][ T5907] usb 1-1: config 9 interface 104 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 155.808274][ T5907] usb 1-1: config 9 interface 104 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 155.839379][ T5907] usb 1-1: config 9 interface 45 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 155.920714][ T5907] usb 1-1: config 9 interface 45 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 155.961882][ T5907] usb 1-1: config 9 interface 45 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 156.023743][ T5907] usb 1-1: config 9 interface 45 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 156.062411][ T5907] usb 1-1: config 9 interface 45 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 156.129986][ T5907] usb 1-1: config 9 interface 206 has no altsetting 0 [ 156.153881][ T5907] usb 1-1: config 9 interface 104 has no altsetting 0 [ 156.182013][ T5907] usb 1-1: config 9 interface 45 has no altsetting 0 [ 156.209000][ T5907] usb 1-1: Dual-Role OTG device on HNP port [ 156.217980][ T5907] usb 1-1: New USB device found, idVendor=0489, idProduct=e03d, bcdDevice= 9.d0 [ 156.258611][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.285425][ T5907] usb 1-1: Product: Ⰺ [ 156.292073][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 156.317159][ T5907] usb 1-1: Manufacturer: 볹됩퉰꫿ꅗꭙ敀趃㸞돱禫╈醛⃇ꪼ耭뼇通⸆꺎庖损略뢺跍蚑槕‣廑ኻ⑾缥ឝ겐饾䑸귏뿂투ݜ䤾㈠篚㫒圾袠淪ᐲ [ 156.355316][ T5907] usb 1-1: SerialNumber: 寏袚鏄㥘냷铲ឮ颭ꠡ囡旲腛깝뚳㋀௽ꊌ⚸を淪쫂ꑤ逞匩奭৫馓誢བྷ虄Ϻ싈蚳闌傛坘̽꓅妔麩嶡靏翐긹稔ﴵ聁ꉝ树ⴽꌉ쥻雥툑ӥ㟕悘揧춰蠕櫘뭤鑞騒ؖ⓭챃萃苷퇾酉䗺셧뾶ѷ᯹䠜蠙╶ቩത쥮댻⑴ꆬ쨟詰阔 [ 156.388089][ T5920] usb usb4-port1: unable to enumerate USB device [ 156.487953][ T6497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.504390][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.544973][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 156.567441][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.588854][ T24] usb 2-1: config 0 descriptor?? [ 156.594862][ T6523] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 156.691901][ T926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.770148][ T5907] usb 1-1: USB disconnect, device number 8 [ 156.812042][ T5920] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 156.872293][ T926] usb 5-1: Using ep0 maxpacket: 32 [ 156.883290][ T926] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 156.916489][ T926] usb 5-1: config 0 has no interface number 0 [ 156.940756][ T926] usb 5-1: config 0 interface 29 has no altsetting 0 [ 156.960857][ T926] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 156.988950][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.007497][ T5920] usb 4-1: config 4 has an invalid interface number: 88 but max is 0 [ 157.025704][ T926] usb 5-1: Product: syz [ 157.036130][ T5920] usb 4-1: config 4 has no interface number 0 [ 157.040708][ T24] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 157.042548][ T926] usb 5-1: Manufacturer: syz [ 157.069663][ T5920] usb 4-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 5, skipping [ 157.117220][ T926] usb 5-1: SerialNumber: syz [ 157.121980][ T5920] usb 4-1: config 4 interface 88 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.148186][ T926] usb 5-1: config 0 descriptor?? [ 157.171814][ T5920] usb 4-1: config 4 interface 88 has no altsetting 0 [ 157.201503][ T5920] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 157.252139][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.296017][ T5920] usb 4-1: Product: syz [ 157.346654][ T5920] usb 4-1: Manufacturer: syz [ 157.351403][ T5920] usb 4-1: SerialNumber: syz [ 158.092698][ T24] usb 2-1: USB disconnect, device number 12 [ 158.336746][ T926] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 158.353420][ T6531] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 158.485314][ T926] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 158.537847][ T926] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 158.643484][ T926] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 159.362393][ T926] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 159.471946][ T6556] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 159.562706][ T926] usb 4-1: USB disconnect, device number 10 [ 159.823606][ T926] usb 5-1: USB disconnect, device number 6 [ 160.190477][ T6578] ======================================================= [ 160.190477][ T6578] WARNING: The mand mount option has been deprecated and [ 160.190477][ T6578] and is ignored by this kernel. Remove the mand [ 160.190477][ T6578] option from the mount to silence this warning. [ 160.190477][ T6578] ======================================================= [ 160.275529][ T6583] netlink: 'syz.3.153': attribute type 4 has an invalid length. [ 160.318790][ T6578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.352317][ T6582] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 160.403275][ T6585] program syz.2.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.815463][ T5836] syz-executor (5836) used greatest stack depth: 19584 bytes left [ 162.855520][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.977518][ T6450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.090113][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 163.097359][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.105669][ T24] usb 4-1: config 0 has no interface number 0 [ 163.113105][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.141839][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 163.163022][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.181083][ T6450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.191931][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.221961][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.231085][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.255133][ T24] usb 4-1: config 0 descriptor?? [ 163.287993][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 163.338317][ T6450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.466313][ T6450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.493877][ T24] usb 4-1: USB disconnect, device number 11 [ 163.499895][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 163.533550][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 164.157083][ T6625] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 164.217837][ T6450] bridge_slave_1: left allmulticast mode [ 164.238105][ T6450] bridge_slave_1: left promiscuous mode [ 164.245914][ T6625] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.165'. [ 164.267477][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.375217][ T6450] bridge_slave_0: left allmulticast mode [ 164.403280][ T6450] bridge_slave_0: left promiscuous mode [ 164.419392][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.428164][ T5927] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.610541][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 164.639505][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.671641][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.687387][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.697853][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.712411][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.724594][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.739228][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.749418][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.758312][ T5927] usb 2-1: Product: syz [ 164.762928][ T5927] usb 2-1: Manufacturer: syz [ 164.767667][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.774984][ T5927] usb 2-1: SerialNumber: syz [ 165.194247][ T30] audit: type=1326 audit(1755948698.286:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e98ebe9 code=0x7ffc0000 [ 165.277101][ T30] audit: type=1326 audit(1755948698.286:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e98ebe9 code=0x7ffc0000 [ 165.362482][ T30] audit: type=1326 audit(1755948698.286:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f606e98ebe9 code=0x7ffc0000 [ 165.447742][ T30] audit: type=1326 audit(1755948698.286:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.0.167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e98ebe9 code=0x0 [ 167.141741][ T51] Bluetooth: hci1: command tx timeout [ 167.517864][ T5927] usb 2-1: 0:2 : does not exist [ 167.673730][ T5927] usb 2-1: USB disconnect, device number 13 [ 168.695885][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.885724][ T6665] mmap: syz.0.172 (6665): VmData 25972736 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 169.221885][ T51] Bluetooth: hci1: command tx timeout [ 169.481345][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.523043][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.549117][ T6450] bond0 (unregistering): Released all slaves [ 170.703474][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 171.315465][ T51] Bluetooth: hci1: command tx timeout [ 173.238835][ T5995] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.679403][ T51] Bluetooth: hci1: command tx timeout [ 174.082120][ T5995] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.905486][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.958758][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.000213][ T5995] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.033699][ T5995] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.806546][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.885242][ T5995] usb 4-1: config 0 descriptor?? [ 176.039337][ T5995] usb 4-1: can't set config #0, error -71 [ 176.113241][ T5995] usb 4-1: USB disconnect, device number 12 [ 176.343905][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 176.621012][ T6450] hsr_slave_0: left promiscuous mode [ 176.676609][ T6450] hsr_slave_1: left promiscuous mode [ 176.725769][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.770208][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.965226][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.756718][ T5995] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.772284][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.081867][ T5995] usb 4-1: device descriptor read/64, error -71 [ 178.220958][ T6450] veth1_macvtap: left promiscuous mode [ 178.257165][ T6450] veth0_macvtap: left promiscuous mode [ 178.317201][ T6450] veth1_vlan: left promiscuous mode [ 178.356953][ T6450] veth0_vlan: left promiscuous mode [ 178.421953][ T5995] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.591896][ T5995] usb 4-1: device descriptor read/64, error -71 [ 178.723008][ T5995] usb usb4-port1: attempt power cycle [ 179.242002][ T5995] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.312017][ T5995] usb 4-1: device descriptor read/8, error -71 [ 179.571921][ T5995] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 179.797890][ T5995] usb 4-1: device not accepting address 16, error -71 [ 179.848512][ T5995] usb usb4-port1: unable to enumerate USB device [ 180.991915][ T926] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.265510][ T926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.300392][ T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.355724][ T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.418814][ T926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.529430][ T926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.575145][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 181.634859][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 181.656183][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.746469][ T926] usb 3-1: config 0 descriptor?? [ 182.354859][ T926] usbhid 3-1:0.0: can't add hid device: -71 [ 182.360948][ T926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.435400][ T926] usb 3-1: USB disconnect, device number 4 [ 183.583077][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.193'. [ 183.639462][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.193'. [ 184.202226][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 186.427219][ T6838] netlink: 'syz.0.205': attribute type 5 has an invalid length. [ 186.591875][ T5995] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 186.629590][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.637107][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.647160][ T6629] bridge_slave_0: entered allmulticast mode [ 186.659111][ T6629] bridge_slave_0: entered promiscuous mode [ 186.708966][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.733394][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.746998][ T6629] bridge_slave_1: entered allmulticast mode [ 186.773725][ T5995] usb 4-1: Using ep0 maxpacket: 32 [ 186.794957][ T6629] bridge_slave_1: entered promiscuous mode [ 186.819659][ T5995] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.847752][ T5995] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 186.891933][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.942569][ T5995] usb 4-1: config 0 descriptor?? [ 187.035291][ T6848] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 187.077409][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.197416][ T5995] usbhid 4-1:0.0: can't add hid device: -71 [ 187.219396][ T5995] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.280043][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.314124][ T5995] usb 4-1: USB disconnect, device number 17 [ 187.508500][ T6629] team0: Port device team_slave_0 added [ 187.547308][ T6629] team0: Port device team_slave_1 added [ 187.561943][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.695072][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.713122][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.771211][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.795656][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.828538][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.859321][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 187.925844][ T5920] usb 1-1: config 1 interface 0 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 188.023520][ T5920] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 188.154338][ T5920] usb 1-1: config 1 interface 0 has no altsetting 0 [ 188.233150][ T5920] usb 1-1: New USB device found, idVendor=0008, idProduct=0000, bcdDevice= 0.00 [ 188.295722][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.345959][ T5920] usb 1-1: SerialNumber: syz [ 188.880607][ T5920] usb 1-1: USB disconnect, device number 9 [ 188.958467][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.987699][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.058981][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.346326][ T5995] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.454296][ T6629] hsr_slave_0: entered promiscuous mode [ 190.777591][ T6629] hsr_slave_1: entered promiscuous mode [ 190.863578][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.863759][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 190.891044][ T6629] Cannot create hsr debugfs directory [ 190.928097][ T5995] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.948041][ T5995] usb 3-1: config 248 has an invalid interface number: 3 but max is 2 [ 190.965802][ T5995] usb 3-1: config 248 has an invalid interface number: 190 but max is 2 [ 191.097750][ T5995] usb 3-1: config 248 has an invalid interface number: 111 but max is 2 [ 191.149951][ T5995] usb 3-1: config 248 has no interface number 0 [ 191.178666][ T5995] usb 3-1: config 248 has no interface number 1 [ 191.209462][ T5995] usb 3-1: config 248 has no interface number 2 [ 191.235530][ T5995] usb 3-1: config 248 interface 3 has no altsetting 0 [ 191.249954][ T5995] usb 3-1: config 248 interface 190 has no altsetting 0 [ 191.266562][ T5995] usb 3-1: config 248 interface 111 has no altsetting 0 [ 191.284527][ T5995] usb 3-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 191.305241][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.327992][ T5995] usb 3-1: Product: syz [ 191.335867][ T5995] usb 3-1: Manufacturer: syz [ 191.340710][ T5995] usb 3-1: SerialNumber: syz [ 191.360729][ T6893] syzkaller1: entered allmulticast mode [ 191.568264][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.577417][ T5920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 191.602832][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.664262][ T5995] usb 3-1: USB disconnect, device number 5 [ 191.741931][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 191.809186][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.849508][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.883444][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.910047][ T5920] usb 2-1: Product: syz [ 191.914755][ T5920] usb 2-1: Manufacturer: syz [ 191.935265][ T5920] usb 2-1: SerialNumber: syz [ 191.962416][ T5920] usb 2-1: bad CDC descriptors [ 192.140898][ T6629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.187467][ T6629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.391970][ T5995] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.439589][ T6629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.614394][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.350508][ T5995] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 193.401976][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.436561][ T6629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.455575][ T5995] usb 4-1: config 0 descriptor?? [ 193.522559][ T5995] usb 4-1: can't set config #0, error -71 [ 193.563712][ T5995] usb 4-1: USB disconnect, device number 18 [ 193.852670][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.961938][ T5957] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.997446][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.094470][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.101856][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.141871][ T5957] usb 1-1: device descriptor read/64, error -71 [ 194.156819][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.162824][ T6943] netlink: 'syz.3.223': attribute type 21 has an invalid length. [ 194.164063][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.200588][ T6943] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.245964][ T6943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.253626][ T6943] IPv6: NLM_F_CREATE should be set when creating new route [ 194.261012][ T6943] IPv6: NLM_F_CREATE should be set when creating new route [ 194.268378][ T6943] IPv6: NLM_F_CREATE should be set when creating new route [ 194.401933][ T5957] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.453182][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459566][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.532584][ T5995] usb 2-1: USB disconnect, device number 14 [ 194.605288][ T5957] usb 1-1: device descriptor read/64, error -71 [ 194.874679][ T5957] usb usb1-port1: attempt power cycle [ 195.292082][ T5957] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 195.426293][ T5957] usb 1-1: device descriptor read/8, error -71 [ 196.082096][ T5957] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.953263][ T5957] usb 1-1: device descriptor read/8, error -71 [ 197.063128][ T5957] usb usb1-port1: unable to enumerate USB device [ 197.464050][ T6983] Bluetooth: MGMT ver 1.23 [ 198.375165][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.438823][ T6987] bridge_slave_1: left allmulticast mode [ 198.501983][ T6987] bridge_slave_1: left promiscuous mode [ 198.508126][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.584253][ T6987] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 198.607244][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.232'. [ 199.585930][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.806198][ T7006] capability: warning: `syz.2.234' uses 32-bit capabilities (legacy support in use) [ 207.057302][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.244'. [ 207.388434][ T6629] veth0_vlan: entered promiscuous mode [ 207.418351][ T6629] veth1_vlan: entered promiscuous mode [ 207.473811][ T6629] veth0_macvtap: entered promiscuous mode [ 207.497779][ T6629] veth1_macvtap: entered promiscuous mode [ 207.556376][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.619995][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.647242][ T7067] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 207.700148][ T6629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.711234][ T7059] loop8: detected capacity change from 0 to 8 [ 207.751821][ T6629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.755216][ T7059] Dev loop8: unable to read RDB block 8 [ 207.810663][ T7059] loop8: unable to read partition table [ 207.810877][ T6629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.856309][ T7059] loop8: partition table beyond EOD, truncated [ 207.872328][ T6629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.911960][ T7059] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 207.913239][ T7074] overlayfs: failed to resolve './file1': -2 [ 208.060505][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.404923][ T7067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.596005][ T7070] bond1: (slave geneve2): making interface the new active one [ 209.717954][ T7070] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 213.960846][ T7118] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 214.023748][ T7118] cramfs: wrong magic [ 214.806876][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.894557][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.082753][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.132298][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.432444][ T7150] netlink: 100 bytes leftover after parsing attributes in process `syz.1.261'. [ 216.477966][ T7150] geneve1: entered allmulticast mode [ 216.751938][ T5995] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.870279][ T7160] xt_l2tp: missing protocol rule (udp|l2tpip) [ 216.921893][ T5995] usb 6-1: Using ep0 maxpacket: 32 [ 216.929428][ T5995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.942533][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.968022][ T5995] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 216.978446][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.985161][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 216.988387][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 216.992946][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 217.005737][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 217.036737][ T5995] usb 6-1: Product: syz [ 217.064411][ T5995] usb 6-1: Manufacturer: syz [ 217.112259][ T5995] usb 6-1: SerialNumber: syz [ 217.131490][ T5995] usb 6-1: config 0 descriptor?? [ 217.353626][ T5995] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 217.405645][ T5995] usb 6-1: USB disconnect, device number 2 [ 217.734885][ T7171] netlink: 256 bytes leftover after parsing attributes in process `syz.2.264'. [ 218.255896][ T7171] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 219.412012][ T5907] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.756182][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 219.773617][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.511911][ T5907] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 220.551874][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.673768][ T5907] usb 6-1: config 0 descriptor?? [ 220.727657][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 221.757974][ T7212] pvfs2: Unknown parameter 'kmem_cache_free' [ 222.898314][ T5190] bcm5974 6-1:0.0: could not read from device [ 222.920802][ T7224] bridge1: entered promiscuous mode [ 222.926180][ T7224] bridge1: entered allmulticast mode [ 223.021142][ T5190] bcm5974 6-1:0.0: could not read from device [ 223.038152][ T5907] usb 6-1: USB disconnect, device number 3 [ 223.098300][ T7113] bcm5974 6-1:0.0: could not read from device [ 224.317942][ T7113] udevd[7113]: Error opening device "/dev/input/event4": No such device [ 224.368813][ T7113] udevd[7113]: Unable to EVIOCGABS device "/dev/input/event4" [ 224.639031][ T7241] loop2: detected capacity change from 0 to 7 [ 224.688260][ T7241] loop2: [ 224.781875][ T7113] udevd[7113]: Unable to EVIOCGABS device "/dev/input/event4" [ 224.790569][ T7113] udevd[7113]: Unable to EVIOCGABS device "/dev/input/event4" [ 224.798408][ T7241] loop2: partition table partially beyond EOD, truncated [ 224.871985][ T7113] udevd[7113]: Unable to EVIOCGABS device "/dev/input/event4" [ 226.629169][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 226.803635][ T5841] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 227.026682][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.245562][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.432874][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.932127][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.036124][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.080823][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.127700][ T10] usb 6-1: config 0 descriptor?? [ 229.370131][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 230.374740][ T10] usb 6-1: USB disconnect, device number 4 [ 230.554653][ T7311] trusted_key: encrypted_key: insufficient parameters specified [ 230.568442][ T7311] vcan0: MTU too low for tipc bearer [ 230.574078][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 231.265564][ T7312] fido_id[7312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 232.163556][ T7330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.812420][ T5907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.052235][ T5907] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 233.101797][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.142168][ T5907] usb 2-1: Product: syz [ 233.164132][ T5907] usb 2-1: Manufacturer: syz [ 233.181800][ T5907] usb 2-1: SerialNumber: syz [ 233.209543][ T5907] usb 2-1: config 0 descriptor?? [ 233.458564][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.467348][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 233.483782][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.337360][ T5907] usb 2-1: ignoring: probably an ADSL modem [ 234.578941][ T5907] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 234.633166][ T5907] usb 2-1: USB disconnect, device number 15 [ 234.754424][ T5957] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 234.944142][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.958364][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.972136][ T5957] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 234.981408][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.005166][ T5957] usb 6-1: config 0 descriptor?? [ 235.202028][ T6004] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.393251][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 235.403164][ T6004] usb 1-1: config index 0 descriptor too short (expected 50356, got 796) [ 235.412086][ T6004] usb 1-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 235.420977][ T6004] usb 1-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 235.455527][ T5957] usbhid 6-1:0.0: can't add hid device: -71 [ 235.461613][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 235.476413][ T6004] usb 1-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 235.512419][ T5957] usb 6-1: USB disconnect, device number 5 [ 235.532122][ T5841] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.540507][ T6004] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 235.556311][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.593347][ T6004] usb 1-1: Product: syz [ 235.597604][ T6004] usb 1-1: Manufacturer: syz [ 235.611829][ T6004] usb 1-1: SerialNumber: syz [ 236.034132][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.065189][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.103769][ T5841] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.127362][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.159817][ T5841] usb 4-1: config 0 descriptor?? [ 236.194042][ T7399] tipc: Started in network mode [ 236.450526][ T5841] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 236.459687][ T7399] tipc: Node identity 3e05fcacf702, cluster identity 4711 [ 236.467553][ T6004] usb 1-1: USB disconnect, device number 14 [ 236.472892][ T7399] tipc: Enabled bearer , priority 0 [ 236.516384][ T7401] syzkaller0: entered promiscuous mode [ 236.649876][ T7401] syzkaller0: entered allmulticast mode [ 236.932084][ T7399] tipc: Resetting bearer [ 236.982180][ T5840] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 236.999479][ T5839] Bluetooth: hci5: command 0xfc11 tx timeout [ 237.024018][ T7409] xt_hashlimit: size too large, truncated to 1048576 [ 238.415194][ T7426] erofs (device loop1): cannot find valid erofs superblock [ 238.418387][ T5841] tipc: Node number set to 3372743852 [ 238.738009][ T5841] usb 4-1: USB disconnect, device number 20 [ 239.262324][ T7434] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 239.270041][ T7434] netlink: 224 bytes leftover after parsing attributes in process `syz.5.318'. [ 239.293261][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 239.809063][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 239.862222][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 239.880905][ T7430] delete_channel: no stack [ 239.942916][ T7460] sit0: entered promiscuous mode [ 239.991175][ T7460] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 240.131361][ T7460] netlink: 1 bytes leftover after parsing attributes in process `syz.2.323'. [ 241.543380][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.791862][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.076482][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 242.732031][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.856777][ T10] usb usb2-port1: attempt power cycle [ 242.951976][ T5841] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 243.064326][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.326'. [ 243.118779][ T5841] usb 4-1: not running at top speed; connect to a high speed hub [ 243.129168][ T5841] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 243.153338][ T5841] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.169306][ T5841] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 243.188529][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.201046][ T5841] usb 4-1: Product: syz [ 243.211864][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.221005][ T5841] usb 4-1: Manufacturer: 籧홀謝䚇鮇췲݌ᚽᎥ﬌憈탄殮槐豚⃐શ⍼糚纸銭䍹귛燬ݷ濰庼룯㺮長 [ 243.240728][ T5841] usb 4-1: SerialNumber: syz [ 243.253156][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.529174][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 243.544966][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.633025][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.659267][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.820914][ T10] usb usb2-port1: unable to enumerate USB device [ 244.012887][ T5995] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 244.235462][ T5995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.323596][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 244.356614][ T5995] usb 6-1: config 1 interface 0 altsetting 210 bulk endpoint 0x1 has invalid maxpacket 1024 [ 244.417417][ T7524] dlm: non-version read from control device 8224 [ 244.426574][ T5995] usb 6-1: config 1 interface 0 altsetting 210 bulk endpoint 0x82 has invalid maxpacket 16 [ 244.840727][ T5995] usb 6-1: config 1 interface 0 has no altsetting 0 [ 244.907919][ T5995] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.951826][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 245.440325][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.483260][ T5995] usb 6-1: Product: syz [ 245.487557][ T5995] usb 6-1: Manufacturer: syz [ 245.511918][ T5995] usb 6-1: SerialNumber: syz [ 245.558488][ T7516] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 245.575367][ T7516] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 245.651870][ T5920] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 245.982591][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 246.919250][ T5920] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 246.936345][ T5920] usb 2-1: can't read configurations, error -61 [ 246.968562][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.013125][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.044037][ T5841] usbhid 4-1:1.0: can't add hid device: -71 [ 247.050300][ T5841] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 247.080337][ T5995] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 210 proto 2 vid 0x0525 pid 0xA4A8 [ 247.122368][ T5841] usb 4-1: USB disconnect, device number 21 [ 247.161957][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 247.173688][ T5995] usb 6-1: USB disconnect, device number 6 [ 247.214930][ T5995] usblp0: removed [ 247.641195][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 248.306020][ T5920] usb 2-1: device descriptor read/all, error -71 [ 248.345934][ T5920] usb usb2-port1: attempt power cycle [ 248.761958][ T5957] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.911981][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 248.927598][ T5957] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 249.262423][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.270505][ T5957] usb 4-1: Product: syz [ 249.332122][ T5957] usb 4-1: Manufacturer: syz [ 249.336805][ T5957] usb 4-1: SerialNumber: syz [ 249.394669][ T5957] usb 4-1: config 0 descriptor?? [ 249.432271][ T5957] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 249.468050][ T5957] dvb-usb: bulk message failed: -22 (3/0) [ 249.517279][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.582191][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.621468][ T5957] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 249.647879][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.656700][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.696280][ T24] IPVS: starting estimator thread 0... [ 249.775719][ T5957] usb 4-1: media controller created [ 249.794554][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 249.942721][ T5907] usb 6-1: config 0 has an invalid interface number: 145 but max is 1 [ 249.971080][ T7572] IPVS: using max 24 ests per chain, 57600 per kthread [ 250.058438][ T5907] usb 6-1: config 0 has an invalid interface number: 43 but max is 1 [ 250.209416][ T5907] usb 6-1: config 0 has no interface number 0 [ 250.402269][ T5907] usb 6-1: config 0 has no interface number 1 [ 250.566747][ T5907] usb 6-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 250.860408][ T5907] usb 6-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 251.123052][ T5907] usb 6-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 252.451121][ T5907] usb 6-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 252.469796][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.481855][ T5907] usb 6-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 252.510830][ T5907] usb 6-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.526176][ T5907] usb 6-1: config 0 interface 145 has no altsetting 0 [ 252.534583][ T5907] usb 6-1: config 0 interface 43 has no altsetting 0 [ 252.754650][ T5957] dvb-usb: bulk message failed: -22 (6/0) [ 252.823882][ T5907] usb 6-1: string descriptor 0 read error: -71 [ 252.899576][ T5957] dvb-usb: bulk message failed: -22 (6/0) [ 252.985480][ T5907] usb 6-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 253.016387][ T5957] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 253.174383][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.840254][ T5907] usb 6-1: config 0 descriptor?? [ 253.846759][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 253.882067][ T5907] usb 6-1: can't set config #0, error -71 [ 253.917655][ T5957] dvb-usb: schedule remote query interval to 150 msecs. [ 253.937575][ T5907] usb 6-1: USB disconnect, device number 7 [ 253.960948][ T7582] netlink: zone id is out of range [ 253.968511][ T5957] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 254.027328][ T7582] netlink: zone id is out of range [ 254.041404][ T5957] usb 4-1: USB disconnect, device number 22 [ 254.075558][ T7582] netlink: zone id is out of range [ 254.110442][ T7582] netlink: zone id is out of range [ 254.287232][ T7582] netlink: zone id is out of range [ 254.359724][ T7582] netlink: zone id is out of range [ 254.400545][ T7582] netlink: zone id is out of range [ 254.462011][ T7582] netlink: zone id is out of range [ 254.503869][ T7582] netlink: zone id is out of range [ 254.509045][ T7582] netlink: zone id is out of range [ 254.546028][ T5957] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 255.874796][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881188][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.722034][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 257.892555][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 257.907222][ T5920] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 258.031953][ T5920] usb 3-1: config 4 has no interface number 0 [ 258.057632][ T5920] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 258.155822][ T5920] usb 3-1: config 4 interface 51 has no altsetting 0 [ 258.887280][ T5920] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 258.901863][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.920723][ T5920] usb 3-1: Product: syz [ 258.930632][ T5920] usb 3-1: Manufacturer: syz [ 259.107586][ T5920] usb 3-1: SerialNumber: syz [ 259.131444][ T7626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.171676][ T5920] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 259.879149][ T6004] usb 3-1: USB disconnect, device number 6 [ 261.152112][ T6004] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 261.262248][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 261.332255][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 261.536854][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.678579][ T5840] Bluetooth: to_multiplier 0 < 10 [ 261.681870][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 261.692071][ T6004] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 261.700342][ T6004] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 261.828436][ T7701] _Z`Ԁ@: entered promiscuous mode [ 261.942997][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.971693][ T7706] netlink: 256 bytes leftover after parsing attributes in process `syz.2.377'. [ 261.974511][ T5907] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 262.000914][ T6004] usb 2-1: config 0 has no interface number 0 [ 262.022007][ T6004] usb 2-1: config 0 interface 149 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 262.045885][ T5907] usb 6-1: can't read configurations, error -71 [ 262.067712][ T6004] usb 2-1: config 0 interface 149 has no altsetting 0 [ 262.087619][ T6004] usb 2-1: New USB device found, idVendor=04ca, idProduct=4605, bcdDevice=5b.55 [ 262.119778][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.150442][ T6004] usb 2-1: Product: syz [ 262.167294][ T6004] usb 2-1: Manufacturer: syz [ 262.172160][ T7709] serio: Serial port ptm0 [ 262.183840][ T6004] usb 2-1: SerialNumber: syz [ 262.205708][ T6004] usb 2-1: config 0 descriptor?? [ 262.256039][ T7714] mmap: syz.2.379 (7714) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 262.287219][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 262.555498][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.603611][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.782944][ T5929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.952566][ T5929] usb 4-1: device descriptor read/64, error -71 [ 263.222201][ T5929] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 263.563284][ T7746] QAT: failed to copy from user cfg_data. [ 263.701833][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 264.161876][ T5929] usb 4-1: device descriptor read/64, error -71 [ 264.171314][ T7752] comedi comedi3: das16m1: I/O port conflict (0x501,8) [ 264.217559][ T6004] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 264.285324][ T5929] usb usb4-port1: attempt power cycle [ 264.314828][ T6004] usb 2-1: USB disconnect, device number 23 [ 264.742876][ T5929] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 264.990044][ T5929] usb 4-1: device descriptor read/8, error -71 [ 265.692047][ T5929] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 265.756479][ T7775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.763858][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 265.771161][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 265.776852][ T5929] usb 4-1: device descriptor read/8, error -71 [ 265.778468][ T7775] IPv6: NLM_F_CREATE should be set when creating new route [ 265.835182][ T7775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.924913][ T5929] usb usb4-port1: unable to enumerate USB device [ 266.364835][ T5920] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 266.634819][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 266.761920][ T5920] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.255185][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.262337][ T5920] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 267.271428][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.361053][ T5920] usb 3-1: config 0 descriptor?? [ 267.387912][ T7777] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.929095][ T5920] kye 0003:0458:5015.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 268.179419][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 268.282817][ T5920] kye 0003:0458:5015.0005: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 268.450985][ T5920] kye 0003:0458:5015.0005: tablet-enabling feature report not found [ 268.551246][ T5920] kye 0003:0458:5015.0005: tablet enabling failed [ 268.693065][ T5920] usb 3-1: USB disconnect, device number 7 [ 269.428107][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 270.613439][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 270.742562][ T6004] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.414431][ T6004] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.441338][ T6004] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.504680][ T6004] usb 1-1: config 220 has no interface number 2 [ 271.541966][ T6004] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 271.611828][ T6004] usb 1-1: config 220 interface 0 has no altsetting 0 [ 271.641811][ T6004] usb 1-1: config 220 interface 76 has no altsetting 0 [ 271.695113][ T6004] usb 1-1: config 220 interface 1 has no altsetting 0 [ 271.847284][ T6004] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.981985][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.095057][ T7868] netlink: 428 bytes leftover after parsing attributes in process `syz.3.410'. [ 272.104200][ T7868] netlink: 64 bytes leftover after parsing attributes in process `syz.3.410'. [ 272.121374][ T7868] No such timeout policy "syz1" [ 272.971800][ T6004] usb 1-1: Product: syz [ 272.976107][ T6004] usb 1-1: Manufacturer: syz [ 272.980822][ T6004] usb 1-1: SerialNumber: syz [ 273.289741][ T6004] usb 1-1: selecting invalid altsetting 0 [ 273.337920][ T6004] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 273.373891][ T6004] usb 1-1: No valid video chain found. [ 273.408953][ T6004] usb 1-1: selecting invalid altsetting 0 [ 273.426679][ T6004] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 273.464458][ T6004] usb 1-1: USB disconnect, device number 15 [ 273.622283][ T7879] netlink: 'syz.1.414': attribute type 10 has an invalid length. [ 273.631986][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 273.686084][ T7880] netlink: 'syz.1.414': attribute type 10 has an invalid length. [ 273.688462][ T7879] batman_adv: batadv0: Adding interface: team0 [ 273.739591][ T7880] netlink: 2 bytes leftover after parsing attributes in process `syz.1.414'. [ 273.791855][ T5907] usb 3-1: device descriptor read/64, error -71 [ 273.833456][ T7879] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.950633][ T7879] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 274.036345][ T5907] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 274.058442][ T7880] team0: entered promiscuous mode [ 274.109586][ T7880] team_slave_0: entered promiscuous mode [ 274.159591][ T7880] team_slave_1: entered promiscuous mode [ 274.203027][ T5907] usb 3-1: device descriptor read/64, error -71 [ 274.214329][ T7880] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.228245][ T7880] batman_adv: batadv0: Interface activated: team0 [ 274.238467][ T7880] batman_adv: batadv0: Interface deactivated: team0 [ 274.292610][ T7880] batman_adv: batadv0: Removing interface: team0 [ 274.306667][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 274.335055][ T5907] usb usb3-port1: attempt power cycle [ 274.560456][ T7880] bridge0: port 3(team0) entered blocking state [ 274.968817][ T7880] bridge0: port 3(team0) entered disabled state [ 274.975439][ T7880] team0: entered allmulticast mode [ 274.980618][ T7880] team_slave_0: entered allmulticast mode [ 274.987354][ T7880] team_slave_1: entered allmulticast mode [ 275.024354][ T7880] bridge0: port 3(team0) entered blocking state [ 275.030829][ T7880] bridge0: port 3(team0) entered forwarding state [ 275.031960][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 275.112720][ T5907] usb 3-1: device descriptor read/8, error -71 [ 275.172506][ T7890] net_ratelimit: 30 callbacks suppressed [ 275.172527][ T7890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.371922][ T5907] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 275.656341][ T5907] usb 3-1: device descriptor read/8, error -71 [ 276.366241][ T5907] usb usb3-port1: unable to enumerate USB device [ 278.212273][ T5995] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 278.402855][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 278.420017][ T5995] usb 4-1: config 0 has no interfaces? [ 278.434623][ T5995] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 278.459267][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.478199][ T5995] usb 4-1: Product: syz [ 279.397080][ T5995] usb 4-1: Manufacturer: syz [ 279.402612][ T5995] usb 4-1: SerialNumber: syz [ 279.792065][ T5995] r8152-cfgselector 4-1: Unknown version 0x0000 [ 279.798396][ T5995] r8152-cfgselector 4-1: config 0 descriptor?? [ 279.837298][ T5995] r8152-cfgselector 4-1: can't set config #0, error -71 [ 279.877267][ T5995] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 279.900714][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 279.923592][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 279.999760][ T7943] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 280.157007][ T7943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.706882][ T2150] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 280.891911][ T2150] usb 3-1: Using ep0 maxpacket: 32 [ 281.176427][ T7953] bridge0: port 3(team0) entered disabled state [ 281.184294][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.193934][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.254272][ T7955] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 281.370545][ T7958] netlink: 'syz.3.430': attribute type 39 has an invalid length. [ 281.440439][ T7955] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 281.531407][ T7958] veth0_macvtap: left promiscuous mode [ 281.676797][ T7960] @: renamed from vlan0 (while UP) [ 284.133562][ T7989] syz_tun: entered allmulticast mode [ 285.210968][ T7985] trusted_key: encrypted_key: insufficient parameters specified [ 285.835983][ T8002] dlm: no locking on control device [ 286.071844][ T2150] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.492901][ T2150] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 286.500533][ T2150] usb 3-1: chopping to 0 config(s) [ 286.714126][ T2150] usb 3-1: can't read configurations, error -32 [ 286.854548][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.866031][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.885017][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.891115][ T2150] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 286.906899][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.917119][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.160011][ T8015] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 287.509388][ T2150] usb 3-1: device descriptor read/64, error -32 [ 287.912148][ T5907] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 287.922703][ T2150] usb usb3-port1: attempt power cycle [ 288.008425][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 288.092974][ T5907] usb 4-1: device descriptor read/64, error -71 [ 288.352112][ T5907] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.463949][ T7405] tipc: Resetting bearer [ 288.481940][ T5907] usb 4-1: device descriptor read/64, error -71 [ 288.546431][ T7405] tipc: Disabling bearer [ 288.613478][ T5907] usb usb4-port1: attempt power cycle [ 288.819769][ T6036] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.899896][ T8040] syzkaller1: entered promiscuous mode [ 288.908125][ T8040] syzkaller1: entered allmulticast mode [ 288.982364][ T5839] Bluetooth: hci5: command tx timeout [ 288.982389][ T5907] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 289.002822][ T5907] usb 4-1: device descriptor read/8, error -71 [ 289.055873][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 289.271980][ T5907] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 290.284603][ T5907] usb 4-1: device not accepting address 31, error -71 [ 290.332778][ T5907] usb usb4-port1: unable to enumerate USB device [ 290.350566][ T6036] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.982846][ T6004] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 291.062030][ T5839] Bluetooth: hci5: command tx timeout [ 291.531660][ T6004] usb 1-1: too many endpoints for config 0 interface 0 altsetting 114: 139, using maximum allowed: 30 [ 291.623166][ T6004] usb 1-1: config 0 interface 0 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 139 [ 291.732875][ T6004] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.942105][ T6004] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 291.982496][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.996986][ T6004] usb 1-1: Product: syz [ 292.006096][ T6004] usb 1-1: Manufacturer: syz [ 292.021151][ T6004] usb 1-1: SerialNumber: syz [ 292.085140][ T6004] usb 1-1: config 0 descriptor?? [ 292.215928][ T8104] binder: 8098:8104 ioctl 400c620e 200000000300 returned -22 [ 292.263033][ T6036] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.143633][ T5839] Bluetooth: hci5: command tx timeout [ 293.198341][ T30] audit: type=1326 audit(1755948826.286:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8118 comm="syz.1.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a398ebe9 code=0x0 [ 293.268371][ T6036] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.284558][ T6004] gspca_main: benq-2.14.0 probing 04a5:3035 [ 293.352986][ T6004] usb 1-1: USB disconnect, device number 16 [ 294.276555][ T8153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.977717][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.238798][ T5839] Bluetooth: hci5: command tx timeout [ 295.249009][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.256454][ T8010] bridge_slave_0: entered allmulticast mode [ 295.265390][ T8010] bridge_slave_0: entered promiscuous mode [ 295.282468][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.302265][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.309576][ T8010] bridge_slave_1: entered allmulticast mode [ 295.462858][ T8010] bridge_slave_1: entered promiscuous mode [ 295.710503][ T30] audit: type=1326 audit(1755948828.586:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8169 comm="syz.2.464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91e58ebe9 code=0x0 [ 295.951340][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.047467][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.096194][ T8233] kernel profiling enabled (shift: 62) [ 296.130494][ T8233] profiling shift: 62 too large [ 296.963628][ T8264] block device autoloading is deprecated and will be removed. [ 297.146458][ T8010] team0: Port device team_slave_0 added [ 297.218637][ T8010] team0: Port device team_slave_1 added [ 297.379544][ T8312] netlink: 14 bytes leftover after parsing attributes in process `syz.0.474'. [ 297.517651][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.688107][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.715121][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.750170][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.757713][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.414632][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.818118][ T8271] xt_hashlimit: max too large, truncated to 1048576 [ 299.037949][ T30] audit: type=1326 audit(1755948832.126:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.115561][ T30] audit: type=1326 audit(1755948832.126:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.218278][ T30] audit: type=1326 audit(1755948832.126:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.245594][ T30] audit: type=1326 audit(1755948832.126:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.269808][ T30] audit: type=1326 audit(1755948832.126:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.291367][ T30] audit: type=1326 audit(1755948832.126:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.322048][ T30] audit: type=1326 audit(1755948832.126:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.344226][ T30] audit: type=1326 audit(1755948832.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.371413][ T30] audit: type=1326 audit(1755948832.126:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.410870][ T30] audit: type=1326 audit(1755948832.126:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8333 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde91d8ebe9 code=0x7fc00000 [ 299.676237][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 300.240430][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.244897][ T8348] netlink: 35 bytes leftover after parsing attributes in process `syz.3.480'. [ 300.270841][ T8312] bond0 (unregistering): Released all slaves [ 300.457150][ T6036] bridge_slave_1: left allmulticast mode [ 300.481673][ T6036] bridge_slave_1: left promiscuous mode [ 300.502758][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.538545][ T6036] bridge_slave_0: left allmulticast mode [ 300.546722][ T6036] bridge_slave_0: left promiscuous mode [ 300.572232][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.799347][ T8403] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 301.807400][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.482'. [ 301.873190][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 302.082121][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 302.199024][ T24] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 302.289596][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 302.299386][ T24] usb 1-1: config 0 has no interface number 0 [ 302.312734][ T24] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.348137][ T24] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.374893][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 302.410732][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 302.422652][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.430705][ T24] usb 1-1: Product: syz [ 302.456043][ T24] usb 1-1: Manufacturer: syz [ 302.460745][ T24] usb 1-1: SerialNumber: syz [ 302.476517][ T24] usb 1-1: config 0 descriptor?? [ 302.499338][ T24] f81534 1-1:0.12: unsupported endpoint max packet size [ 302.842880][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.958870][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.061939][ T24] usb 1-1: USB disconnect, device number 17 [ 303.149960][ T8418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.942155][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.998609][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.142760][ T6036] bond0 (unregistering): Released all slaves [ 304.735478][ T8401] tc_dump_action: action bad kind [ 304.741151][ T8403] dummy0: entered promiscuous mode [ 304.977051][ T8403] bond0: (slave dummy0): Releasing backup interface [ 304.999673][ T8403] bridge0: port 4(dummy0) entered blocking state [ 305.018336][ T8403] bridge0: port 4(dummy0) entered disabled state [ 305.762631][ T8403] dummy0: entered allmulticast mode [ 305.950631][ T8458] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 305.957431][ T8458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.965361][ T6036] tipc: Left network mode [ 305.985582][ T8458] vhci_hcd vhci_hcd.0: Device attached [ 306.158007][ T8010] hsr_slave_0: entered promiscuous mode [ 306.172525][ T5841] vhci_hcd: vhci_device speed not set [ 306.182371][ T8010] hsr_slave_1: entered promiscuous mode [ 306.202542][ T8010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.210230][ T8010] Cannot create hsr debugfs directory [ 306.282152][ T5841] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 306.365986][ T8459] vhci_hcd: connection reset by peer [ 306.383409][ T12] vhci_hcd: stop threads [ 306.388576][ T12] vhci_hcd: release socket [ 306.415084][ T12] vhci_hcd: disconnect device [ 307.210758][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 307.298562][ T5907] IPVS: starting estimator thread 0... [ 307.502261][ T8563] IPVS: using max 24 ests per chain, 57600 per kthread [ 307.715034][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.852012][ T6036] hsr_slave_0: left promiscuous mode [ 307.907722][ T6036] hsr_slave_1: left promiscuous mode [ 307.937542][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.055039][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.087731][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.101491][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.343482][ T6036] veth1_macvtap: left promiscuous mode [ 308.350029][ T6036] veth0_macvtap: left promiscuous mode [ 308.358961][ T6036] veth1_vlan: left promiscuous mode [ 308.364663][ T6036] veth0_vlan: left promiscuous mode [ 308.480865][ T5907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 308.642305][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 308.742745][ T5907] usb 1-1: config 8 has an invalid interface number: 83 but max is 1 [ 308.857397][ T5907] usb 1-1: config 8 has an invalid interface number: 178 but max is 1 [ 309.202889][ T5907] usb 1-1: config 8 has an invalid interface number: 107 but max is 1 [ 309.212132][ T5907] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 309.220829][ T5907] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 309.230513][ T5907] usb 1-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 309.614235][ T5907] usb 1-1: config 8 has no interface number 0 [ 309.620391][ T5907] usb 1-1: config 8 has no interface number 1 [ 309.627087][ T5907] usb 1-1: config 8 has no interface number 2 [ 309.633588][ T5907] usb 1-1: config 8 interface 83 altsetting 5 bulk endpoint 0xC has invalid maxpacket 16 [ 309.642606][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.644109][ T5907] usb 1-1: config 8 interface 83 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 309.665618][ T5907] usb 1-1: config 8 interface 83 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 309.677006][ T5907] usb 1-1: config 8 interface 83 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 309.690549][ T5907] usb 1-1: config 8 interface 83 altsetting 5 endpoint 0x7 has an invalid bInterval 101, changing to 7 [ 309.703585][ T5907] usb 1-1: config 8 interface 83 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 309.716232][ T5907] usb 1-1: config 8 interface 178 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.727466][ T5907] usb 1-1: config 8 interface 178 altsetting 0 endpoint 0x8 has an invalid bInterval 114, changing to 10 [ 309.739449][ T5907] usb 1-1: config 8 interface 178 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 309.750935][ T5907] usb 1-1: config 8 interface 178 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 309.762808][ T5907] usb 1-1: config 8 interface 178 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 309.776847][ T5907] usb 1-1: too many endpoints for config 8 interface 107 altsetting 89: 40, using maximum allowed: 30 [ 309.787978][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 309.799146][ T5907] usb 1-1: config 8 interface 107 altsetting 89 bulk endpoint 0x1 has invalid maxpacket 16 [ 309.810748][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x8, skipping [ 309.833191][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x7, skipping [ 309.851212][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x1, skipping [ 309.864632][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 309.875816][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has a duplicate endpoint with address 0x1, skipping [ 309.886887][ T5907] usb 1-1: config 8 interface 107 altsetting 89 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 309.898824][ T5907] usb 1-1: config 8 interface 107 altsetting 89 has 8 endpoint descriptors, different from the interface descriptor's value: 40 [ 309.914447][ T5907] usb 1-1: config 8 interface 83 has no altsetting 0 [ 309.921605][ T5907] usb 1-1: config 8 interface 107 has no altsetting 0 [ 309.931396][ T5907] usb 1-1: Dual-Role OTG device on HNP port [ 309.938409][ T5907] usb 1-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice= b.19 [ 309.950385][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.958869][ T5907] usb 1-1: Product: ᴽ뙀Ḿㄶ獽뤡㺒셍빓㩆歼횅蒊Ꮮ꩒䘼듂﷽㕵㴊䡷黕ꕣ竦昷ਮヨ齜门ӈ镌轂鵸ὺ鰌婋 [ 309.973940][ T5907] usb 1-1: Manufacturer: ䷥쵶棭鮞렡汸ං㬓 [ 309.980682][ T5907] usb 1-1: SerialNumber: 耎앬匬筿Ὧ [ 309.996967][ T8572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.009161][ T8572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.147427][ T5929] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 310.291799][ T5929] usb 2-1: device descriptor read/64, error -71 [ 310.384574][ T5907] usb 1-1: USB disconnect, device number 18 [ 310.546077][ T5929] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 310.628913][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 310.683662][ T5929] usb 2-1: device descriptor read/64, error -71 [ 310.697688][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 310.794009][ T5929] usb usb2-port1: attempt power cycle [ 310.883943][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 311.049602][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 311.061464][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.073537][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 311.082795][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.094339][ T5907] usb 3-1: config 0 descriptor?? [ 311.114065][ T5907] hub 3-1:0.0: USB hub found [ 311.143475][ T5929] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 311.183885][ T5929] usb 2-1: device descriptor read/8, error -71 [ 311.319523][ T5907] hub 3-1:0.0: 1 port detected [ 311.380437][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 311.380457][ T30] audit: type=1800 audit(1755948844.466:109): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.494" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 311.380981][ T8562] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 311.416244][ T8562] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 311.426348][ T8562] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 311.441993][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 311.461582][ T5841] vhci_hcd: vhci_device speed not set [ 311.532943][ T5929] usb 2-1: device descriptor read/8, error -71 [ 311.672512][ T5929] usb usb2-port1: unable to enumerate USB device [ 311.704951][ T8664] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 311.746308][ T8664] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 312.250767][ T8010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.275280][ T8010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.305786][ T8010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.348591][ T8010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.517430][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.543667][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.578640][ T8619] random: crng reseeded on system resumption [ 312.920209][ T5907] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 312.921082][ T5841] usb 3-1: USB disconnect, device number 15 [ 312.968334][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.013303][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 313.129233][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.177063][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.185391][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.264088][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.271394][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.282547][ T6004] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 313.461871][ T6004] usb 1-1: Using ep0 maxpacket: 16 [ 313.483537][ T6451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.546528][ T6004] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.766393][ T6004] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.966772][ T6004] usb 1-1: config 0 interface 0 has no altsetting 0 [ 314.078621][ T6004] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 314.220230][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.307281][ T6004] usb 1-1: config 0 descriptor?? [ 315.040856][ T8768] QAT: failed to copy from user cfg_data. [ 315.664743][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.031261][ T6004] usbhid 1-1:0.0: can't add hid device: -71 [ 316.052261][ T6004] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.151877][ T6004] usb 1-1: USB disconnect, device number 19 [ 316.351769][ T8802] binder: BINDER_SET_CONTEXT_MGR already set [ 316.358244][ T8802] binder: 8794:8802 ioctl 4018620d 200000004a80 returned -16 [ 317.032039][ T6004] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 317.169219][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.187337][ T6004] usb 2-1: device descriptor read/64, error -71 [ 317.309145][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.501862][ T6004] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 317.664336][ T6004] usb 2-1: device descriptor read/64, error -71 [ 317.793601][ T6004] usb usb2-port1: attempt power cycle [ 318.182112][ T6004] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 318.432060][ T6004] usb 2-1: device not accepting address 30, error -71 [ 318.924065][ T8010] veth0_vlan: entered promiscuous mode [ 318.968375][ T8010] veth1_vlan: entered promiscuous mode [ 319.839757][ T6036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.005974][ T8010] veth0_macvtap: entered promiscuous mode [ 320.049339][ T8848] fuse: Bad value for 'user_id' [ 320.071929][ T8848] fuse: Bad value for 'user_id' [ 320.339700][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 320.351806][ T5920] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 320.458479][ T8010] veth1_macvtap: entered promiscuous mode [ 320.517041][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.540347][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 320.556734][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.574493][ T5920] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.594609][ T5920] usb 2-1: config 0 has no interface number 0 [ 320.627174][ T8010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.627400][ T5920] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.640619][ T8010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.672365][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.675160][ T8010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.689194][ T5920] usb 2-1: Product: syz [ 320.689217][ T5920] usb 2-1: Manufacturer: syz [ 320.689234][ T5920] usb 2-1: SerialNumber: syz [ 320.704817][ T5920] usb 2-1: config 0 descriptor?? [ 320.735452][ T5920] smsc95xx v2.0.0 [ 320.739268][ T5920] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 320.749373][ T8010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.795992][ T5920] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 320.823292][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.170856][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.203761][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.320553][ T8900] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.520'. [ 321.409632][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.429328][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.475667][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.488824][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.967716][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.434'. [ 324.099696][ T5929] usb 2-1: USB disconnect, device number 32 [ 325.644436][ T6450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.065178][ T6453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.091810][ T5929] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 326.318788][ T5929] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 326.621935][ T5929] usb 1-1: config 0 has no interface number 0 [ 326.913870][ T5929] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 327.045602][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 327.054923][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 328.109790][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.940978][ T5929] usb 1-1: Product: syz [ 329.945340][ T5929] usb 1-1: Manufacturer: syz [ 329.950097][ T5929] usb 1-1: SerialNumber: syz [ 330.102550][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 330.307005][ T5929] usb 1-1: config 0 descriptor?? [ 330.687486][ T5929] usb 1-1: can't set config #0, error -71 [ 330.708000][ T5929] usb 1-1: USB disconnect, device number 20 [ 331.418177][ T3475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.468233][ T6451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.036729][ T9026] bridge_slave_0: left allmulticast mode [ 332.301921][ T9026] bridge_slave_0: left promiscuous mode [ 332.421425][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.057502][ T9026] bridge_slave_1: left allmulticast mode [ 333.072144][ T9026] bridge_slave_1: left promiscuous mode [ 333.087068][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.378859][ T9026] team0: Port device team_slave_0 removed [ 334.155191][ T9026] team0: Port device team_slave_1 removed [ 334.262846][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.318480][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.408128][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.416062][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.459926][ T9034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.058054][ T9075] vlan0: entered allmulticast mode [ 335.081265][ T9075] team0: entered allmulticast mode [ 335.185118][ T9075] team0: Device vlan0 is already an upper device of the team interface [ 335.592105][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 335.649033][ T9095] [ 335.651436][ T9095] ====================================================== [ 335.658484][ T9095] WARNING: possible circular locking dependency detected [ 335.665527][ T9095] 6.16.0-syzkaller #0 Not tainted [ 335.670568][ T9095] ------------------------------------------------------ [ 335.677633][ T9095] syz.2.552/9095 is trying to acquire lock: [ 335.683545][ T9095] ffff88805a690730 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 335.693383][ T9095] [ 335.693383][ T9095] but task is already holding lock: [ 335.700764][ T9095] ffff88807b4a7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 335.710147][ T9095] [ 335.710147][ T9095] which lock already depends on the new lock. [ 335.710147][ T9095] [ 335.720710][ T9095] [ 335.720710][ T9095] the existing dependency chain (in reverse order) is: [ 335.729754][ T9095] [ 335.729754][ T9095] -> #3 (&of->mutex){+.+.}-{4:4}: [ 335.737035][ T9095] lock_acquire+0x120/0x360 [ 335.742115][ T9095] __mutex_lock+0x182/0xe80 [ 335.747176][ T9095] kernfs_fop_write_iter+0x1e0/0x4f0 [ 335.753023][ T9095] iter_file_splice_write+0x937/0x1000 [ 335.759032][ T9095] do_splice+0xc79/0x1660 [ 335.763927][ T9095] __se_sys_splice+0x2e1/0x460 [ 335.769271][ T9095] do_syscall_64+0xfa/0x3b0 [ 335.774412][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.780877][ T9095] [ 335.780877][ T9095] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 335.788322][ T9095] lock_acquire+0x120/0x360 [ 335.793379][ T9095] __mutex_lock+0x182/0xe80 [ 335.798438][ T9095] iter_file_splice_write+0x1e6/0x1000 [ 335.804451][ T9095] do_splice+0xc79/0x1660 [ 335.809335][ T9095] __se_sys_splice+0x2e1/0x460 [ 335.814649][ T9095] do_syscall_64+0xfa/0x3b0 [ 335.819703][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.826144][ T9095] [ 335.826144][ T9095] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 335.833582][ T9095] lock_acquire+0x120/0x360 [ 335.838646][ T9095] sb_start_write+0x4d/0x1c0 [ 335.843804][ T9095] mnt_want_write+0x41/0x90 [ 335.848903][ T9095] ovl_setattr+0x2c8/0x550 [ 335.853880][ T9095] notify_change+0xb36/0xe40 [ 335.859053][ T9095] vfs_utimes+0x3fb/0x570 [ 335.863962][ T9095] do_utimes+0x1bd/0x2a0 [ 335.868767][ T9095] __x64_sys_utime+0x13e/0x200 [ 335.874098][ T9095] do_syscall_64+0xfa/0x3b0 [ 335.879158][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.885609][ T9095] [ 335.885609][ T9095] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 335.894343][ T9095] validate_chain+0xb9b/0x2140 [ 335.899662][ T9095] __lock_acquire+0xab9/0xd20 [ 335.904896][ T9095] lock_acquire+0x120/0x360 [ 335.909951][ T9095] down_read+0x46/0x2e0 [ 335.914658][ T9095] lookup_slow+0x46/0x70 [ 335.919454][ T9095] walk_component+0x2d2/0x400 [ 335.924686][ T9095] path_lookupat+0x163/0x430 [ 335.929834][ T9095] filename_lookup+0x212/0x570 [ 335.935256][ T9095] kern_path+0x35/0x50 [ 335.939893][ T9095] lookup_bdev+0xc0/0x280 [ 335.944886][ T9095] resume_store+0x169/0x460 [ 335.949963][ T9095] kernfs_fop_write_iter+0x378/0x4f0 [ 335.955824][ T9095] vfs_write+0x54b/0xa90 [ 335.960616][ T9095] ksys_write+0x145/0x250 [ 335.965580][ T9095] do_syscall_64+0xfa/0x3b0 [ 335.970632][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.977165][ T9095] [ 335.977165][ T9095] other info that might help us debug this: [ 335.977165][ T9095] [ 335.987423][ T9095] Chain exists of: [ 335.987423][ T9095] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 335.987423][ T9095] [ 336.000869][ T9095] Possible unsafe locking scenario: [ 336.000869][ T9095] [ 336.008341][ T9095] CPU0 CPU1 [ 336.013742][ T9095] ---- ---- [ 336.019144][ T9095] lock(&of->mutex); [ 336.023178][ T9095] lock(&pipe->mutex); [ 336.029889][ T9095] lock(&of->mutex); [ 336.036434][ T9095] rlock(&ovl_i_mutex_dir_key[depth]); [ 336.042014][ T9095] [ 336.042014][ T9095] *** DEADLOCK *** [ 336.042014][ T9095] [ 336.050180][ T9095] 4 locks held by syz.2.552/9095: [ 336.055225][ T9095] #0: ffff88807a95d7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 336.064427][ T9095] #1: ffff888031502428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 336.073367][ T9095] #2: ffff88807b4a7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 336.083177][ T9095] #3: ffff88801eade008 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 336.093344][ T9095] [ 336.093344][ T9095] stack backtrace: [ 336.099275][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.2.552 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 336.099302][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.099315][ T9095] Call Trace: [ 336.099325][ T9095] [ 336.099335][ T9095] dump_stack_lvl+0x189/0x250 [ 336.099363][ T9095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.099386][ T9095] ? __pfx__printk+0x10/0x10 [ 336.099427][ T9095] ? print_lock_name+0xde/0x100 [ 336.099455][ T9095] print_circular_bug+0x2ee/0x310 [ 336.099483][ T9095] check_noncircular+0x134/0x160 [ 336.099511][ T9095] validate_chain+0xb9b/0x2140 [ 336.099543][ T9095] __lock_acquire+0xab9/0xd20 [ 336.099566][ T9095] ? lookup_slow+0x46/0x70 [ 336.099592][ T9095] lock_acquire+0x120/0x360 [ 336.099611][ T9095] ? lookup_slow+0x46/0x70 [ 336.099640][ T9095] ? bpf_lsm_inode_permission+0x9/0x20 [ 336.099661][ T9095] ? security_inode_permission+0xb7/0x310 [ 336.099685][ T9095] down_read+0x46/0x2e0 [ 336.099709][ T9095] ? lookup_slow+0x46/0x70 [ 336.099737][ T9095] lookup_slow+0x46/0x70 [ 336.099765][ T9095] walk_component+0x2d2/0x400 [ 336.099798][ T9095] ? path_lookupat+0x156/0x430 [ 336.099825][ T9095] path_lookupat+0x163/0x430 [ 336.099854][ T9095] filename_lookup+0x212/0x570 [ 336.099883][ T9095] ? __pfx_filename_lookup+0x10/0x10 [ 336.099919][ T9095] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 336.099939][ T9095] ? getname_kernel+0x146/0x2f0 [ 336.099965][ T9095] ? getname_kernel+0x20e/0x2f0 [ 336.099991][ T9095] kern_path+0x35/0x50 [ 336.100017][ T9095] lookup_bdev+0xc0/0x280 [ 336.100042][ T9095] ? rcu_is_watching+0x15/0xb0 [ 336.100065][ T9095] ? __pfx_lookup_bdev+0x10/0x10 [ 336.100089][ T9095] ? kstrndup+0xbf/0x160 [ 336.100119][ T9095] resume_store+0x169/0x460 [ 336.100145][ T9095] ? sysfs_file_kobj+0x1a/0x230 [ 336.100169][ T9095] ? __pfx_resume_store+0x10/0x10 [ 336.100199][ T9095] ? sysfs_file_kobj+0x1a/0x230 [ 336.100218][ T9095] ? sysfs_file_kobj+0x1a/0x230 [ 336.100237][ T9095] ? sysfs_file_kobj+0x1a/0x230 [ 336.100257][ T9095] ? sysfs_file_kobj+0x1e4/0x230 [ 336.100277][ T9095] ? sysfs_kf_write+0x166/0x260 [ 336.100300][ T9095] ? __pfx_sysfs_kf_write+0x10/0x10 [ 336.100320][ T9095] kernfs_fop_write_iter+0x378/0x4f0 [ 336.100355][ T9095] vfs_write+0x54b/0xa90 [ 336.100376][ T9095] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 336.100408][ T9095] ? __pfx_vfs_write+0x10/0x10 [ 336.100431][ T9095] ? __fget_files+0x2a/0x420 [ 336.100458][ T9095] ksys_write+0x145/0x250 [ 336.100478][ T9095] ? __pfx_ksys_write+0x10/0x10 [ 336.100495][ T9095] ? rcu_is_watching+0x15/0xb0 [ 336.100519][ T9095] ? do_syscall_64+0xbe/0x3b0 [ 336.100543][ T9095] do_syscall_64+0xfa/0x3b0 [ 336.100564][ T9095] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.100584][ T9095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.100604][ T9095] ? clear_bhb_loop+0x60/0xb0 [ 336.100627][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.100648][ T9095] RIP: 0033:0x7ff91e58ebe9 [ 336.100668][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.100687][ T9095] RSP: 002b:00007ff91f3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.100710][ T9095] RAX: ffffffffffffffda RBX: 00007ff91e7b6180 RCX: 00007ff91e58ebe9 [ 336.100727][ T9095] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 336.100740][ T9095] RBP: 00007ff91e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.100753][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.100766][ T9095] R13: 00007ff91e7b6218 R14: 00007ff91e7b6180 R15: 00007ffe170bfce8 [ 336.100797][ T9095] [ 336.735348][ T9095] block device autoloading is deprecated and will be removed. [ 336.742167][ T5965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.755432][ T9095] syz.2.552: attempt to access beyond end of device [ 336.755432][ T9095] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 336.768453][ T9095] PM: Image not found (code -5) [ 337.534421][ T5965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.273360][ T5965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.553185][ T5965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration