last executing test programs: 9.31742336s ago: executing program 1 (id=143): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000840)={&(0x7f00000000c0)={0xa, 0x4e23, 0xc, @private2, 0x4}, 0x17, 0x0, 0x0, &(0x7f0000000800)=[@flowinfo={{0x10, 0x29, 0xb, 0x4263}}], 0x10}, 0x80) 8.317101034s ago: executing program 1 (id=146): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa5", 0xce) r7 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r6, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x14c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa0}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24b7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xbc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x60}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10000042}, 0x98) 7.812813576s ago: executing program 0 (id=147): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) inotify_init1(0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 5.781902984s ago: executing program 2 (id=155): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000840)={&(0x7f00000000c0)={0xa, 0x4e23, 0xc, @private2, 0x4}, 0x17, 0x0, 0x0, &(0x7f0000000800)=[@flowinfo={{0x10, 0x29, 0xb, 0x4263}}], 0x10}, 0x80) 5.781527034s ago: executing program 3 (id=156): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5.663439057s ago: executing program 1 (id=157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) 4.523360104s ago: executing program 2 (id=158): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000000401000006020202020202"], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x74, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x3, 0x2, 0x0, {0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x3, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x2, 0x5, 0x0, {0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0xa}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 4.011398686s ago: executing program 0 (id=159): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r7, r7, 0x0, 0x6) accept4(r6, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 3.991280846s ago: executing program 3 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x3, 0x161) 3.787246721s ago: executing program 1 (id=161): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r0}, 0x14) 3.763136251s ago: executing program 3 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x4365, 0x9, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x28, 0x10001, 0x1ff, 0xe669, 0x200, 0x5aa}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.635339654s ago: executing program 0 (id=163): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 3.509531868s ago: executing program 1 (id=164): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) syz_ublk_setup_io_uring(0x97c, &(0x7f0000000340)={0x0, 0xabda, 0x20000, 0x1, 0x38e}, &(0x7f00000003c0), &(0x7f0000000400), 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0xefe4, 0x400, 0x1, 0x159}, 0x0, 0x4, 0x0, &(0x7f0000001800)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) inotify_init() ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'wlan0\x00', @multicast}) 3.479314388s ago: executing program 2 (id=165): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x86022, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c000280080001400000001108000340000000050800"], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) r2 = openat$null(0xffffff9c, &(0x7f0000000140), 0x101201, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) set_mempolicy(0x0, &(0x7f0000000040)=0xfffffffffffffbff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) set_mempolicy(0x8000, &(0x7f0000000100)=0x9, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x0, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace(0x4206, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000680)) 3.274122003s ago: executing program 0 (id=166): socket(0x11, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3806}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) 2.653639727s ago: executing program 3 (id=167): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000840)={&(0x7f00000000c0)={0xa, 0x4e23, 0xc, @private2, 0x4}, 0x17, 0x0, 0x0, &(0x7f0000000800)=[@flowinfo={{0x10, 0x29, 0xb, 0x4263}}], 0x10}, 0x80) 2.509506641s ago: executing program 1 (id=168): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) inotify_init1(0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 2.245455807s ago: executing program 2 (id=169): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 2.245059207s ago: executing program 0 (id=170): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) 1.414795477s ago: executing program 3 (id=171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0}, 0x1f}], 0x0, 0x0, 0x0}) 1.246640081s ago: executing program 2 (id=172): syz_open_dev$sndpcmc(0x0, 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) write$nbd(r4, &(0x7f0000000400)=ANY=[], 0x34) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)}, 0x1c) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) 1.147208523s ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 65.497078ms ago: executing program 2 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01042ebdb26afcdbdf251600000018000180140002006e657464657673696d30000000000000050002"], 0x34}}, 0x14008080) 0s ago: executing program 0 (id=175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 81.799432][ T5763] cgroup: Unknown subsys name 'net' [ 81.939614][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.369782][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.423050][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.433776][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.446571][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.459002][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.469484][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.469888][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.488753][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.498033][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.506996][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.508453][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.523322][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.523684][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.531460][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.550152][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.550908][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.560441][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.572435][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.577800][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.592427][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.601412][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.615936][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.625194][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.638835][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.662417][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.070391][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 86.132935][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.153039][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.287880][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.296935][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.304646][ T5779] bridge_slave_0: entered allmulticast mode [ 86.311946][ T5779] bridge_slave_0: entered promiscuous mode [ 86.344210][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.353294][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.362940][ T5779] bridge_slave_1: entered allmulticast mode [ 86.373407][ T5779] bridge_slave_1: entered promiscuous mode [ 86.403529][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.430658][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.439616][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.451659][ T5775] bridge_slave_0: entered allmulticast mode [ 86.463123][ T5775] bridge_slave_0: entered promiscuous mode [ 86.487844][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.513611][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.520881][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.529316][ T5775] bridge_slave_1: entered allmulticast mode [ 86.536326][ T5775] bridge_slave_1: entered promiscuous mode [ 86.556646][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.628439][ T5779] team0: Port device team_slave_0 added [ 86.634744][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.645455][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.652871][ T5776] bridge_slave_0: entered allmulticast mode [ 86.659960][ T5776] bridge_slave_0: entered promiscuous mode [ 86.676759][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.689319][ T5779] team0: Port device team_slave_1 added [ 86.696417][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.704267][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.711465][ T5776] bridge_slave_1: entered allmulticast mode [ 86.718859][ T5776] bridge_slave_1: entered promiscuous mode [ 86.727415][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.817738][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.825666][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.855881][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.875072][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.890650][ T5775] team0: Port device team_slave_0 added [ 86.911991][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.922318][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.955027][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.969083][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.982842][ T5775] team0: Port device team_slave_1 added [ 86.990689][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998494][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.007933][ T5774] bridge_slave_0: entered allmulticast mode [ 87.015720][ T5774] bridge_slave_0: entered promiscuous mode [ 87.025177][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.032761][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.040102][ T5774] bridge_slave_1: entered allmulticast mode [ 87.048554][ T5774] bridge_slave_1: entered promiscuous mode [ 87.147273][ T5776] team0: Port device team_slave_0 added [ 87.156167][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.163965][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.203964][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.220194][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.245225][ T5776] team0: Port device team_slave_1 added [ 87.265726][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.278073][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.311265][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.328361][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.364363][ T5779] hsr_slave_0: entered promiscuous mode [ 87.371210][ T5779] hsr_slave_1: entered promiscuous mode [ 87.440826][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.448578][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.476434][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.491020][ T5774] team0: Port device team_slave_0 added [ 87.506962][ T5775] hsr_slave_0: entered promiscuous mode [ 87.514026][ T5775] hsr_slave_1: entered promiscuous mode [ 87.520400][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.529347][ T5775] Cannot create hsr debugfs directory [ 87.541691][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.553836][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.580586][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.603473][ T5774] team0: Port device team_slave_1 added [ 87.653232][ T5086] Bluetooth: hci2: command tx timeout [ 87.655238][ T5780] Bluetooth: hci3: command tx timeout [ 87.659438][ T5785] Bluetooth: hci1: command tx timeout [ 87.732351][ T5785] Bluetooth: hci0: command tx timeout [ 87.757620][ T5776] hsr_slave_0: entered promiscuous mode [ 87.770241][ T5776] hsr_slave_1: entered promiscuous mode [ 87.779972][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.792915][ T5776] Cannot create hsr debugfs directory [ 87.824508][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.831506][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.864263][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.908320][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.921490][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.953314][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.130350][ T5774] hsr_slave_0: entered promiscuous mode [ 88.137580][ T5774] hsr_slave_1: entered promiscuous mode [ 88.144165][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.151854][ T5774] Cannot create hsr debugfs directory [ 88.357560][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.381327][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.408837][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.425891][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.499848][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.523010][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.540313][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.551318][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.647353][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.657273][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.668948][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.679193][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.788185][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.798807][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.831966][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.855051][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.883726][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.927851][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.950982][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.987121][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.995675][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.035371][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.042557][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.063256][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.105774][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.114136][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.168503][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.185684][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.192967][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.220434][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.294770][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.334457][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.400183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.408409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.451584][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.459337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.506817][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.541190][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.548431][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.608732][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.616096][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.732881][ T5785] Bluetooth: hci1: command tx timeout [ 89.733499][ T5780] Bluetooth: hci2: command tx timeout [ 89.738413][ T5785] Bluetooth: hci3: command tx timeout [ 89.787754][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.812740][ T5785] Bluetooth: hci0: command tx timeout [ 89.825534][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.901780][ T5779] veth0_vlan: entered promiscuous mode [ 89.970573][ T5779] veth1_vlan: entered promiscuous mode [ 90.016713][ T5776] veth0_vlan: entered promiscuous mode [ 90.059232][ T5776] veth1_vlan: entered promiscuous mode [ 90.106034][ T5779] veth0_macvtap: entered promiscuous mode [ 90.125474][ T5779] veth1_macvtap: entered promiscuous mode [ 90.180780][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.197674][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.217539][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.231653][ T5776] veth0_macvtap: entered promiscuous mode [ 90.243941][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.255067][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.264072][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.273202][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301968][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.322885][ T5776] veth1_macvtap: entered promiscuous mode [ 90.429733][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.445599][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.461391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.496141][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.516333][ T5775] veth0_vlan: entered promiscuous mode [ 90.522785][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.533807][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.548860][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.561286][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.573607][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583875][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.593487][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.603786][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.660804][ T5774] veth0_vlan: entered promiscuous mode [ 90.670017][ T5775] veth1_vlan: entered promiscuous mode [ 90.708991][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.723169][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.770655][ T5774] veth1_vlan: entered promiscuous mode [ 90.805572][ T5775] veth0_macvtap: entered promiscuous mode [ 90.867995][ T5775] veth1_macvtap: entered promiscuous mode [ 90.905170][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.929143][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.008961][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.035059][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.045477][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.058540][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.071399][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.084818][ T5774] veth0_macvtap: entered promiscuous mode [ 91.099554][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.110355][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.139826][ T5774] veth1_macvtap: entered promiscuous mode [ 91.158061][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.184100][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.195209][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.219241][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.238586][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.296255][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.314040][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.323407][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.335285][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374356][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.414560][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.427469][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.437800][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.442361][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.474748][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.490867][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.508568][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.531490][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.545509][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.558320][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.575093][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.611620][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.626365][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.640596][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.701249][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.719895][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731637][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747269][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.815508][ T5785] Bluetooth: hci3: command tx timeout [ 91.824355][ T5086] Bluetooth: hci2: command tx timeout [ 91.825049][ T5780] Bluetooth: hci1: command tx timeout [ 91.893005][ T5780] Bluetooth: hci0: command tx timeout [ 92.045090][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.084767][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.109167][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.139127][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.282383][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.285659][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.305537][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.310428][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478571][ T5852] syz.2.3 (5852): drop_caches: 2 [ 92.697971][ T970] cfg80211: failed to load regulatory.db [ 93.914248][ T5780] Bluetooth: hci1: command tx timeout [ 93.919754][ T5785] Bluetooth: hci3: command tx timeout [ 93.925626][ T5086] Bluetooth: hci2: command tx timeout [ 93.988054][ T5780] Bluetooth: hci0: command tx timeout [ 94.667456][ T5861] kvm: kvm [5860]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc1) = 0xffff1af0000f010e [ 94.685101][ T5861] kvm: kvm [5860]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc1) = 0xffffdff0000f010e [ 94.791586][ T5882] Zero length message leads to an empty skb [ 95.027436][ T5882] Config c/1 of g1 needs at least one function. [ 95.049698][ T5886] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 95.068771][ T5882] udc dummy_udc.0: failed to start g1: -22 [ 95.086040][ T5882] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 95.123945][ T5882] UDC core: g1: couldn't find an available UDC or it's busy [ 95.140120][ T5886] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 95.212854][ T5886] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 97.788145][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 98.949721][ T5922] team0: Port device ip6erspan0 added [ 100.602695][ T5930] tipc: Started in network mode [ 100.647935][ T5930] tipc: Node identity 62cb4c34bf5f, cluster identity 4711 [ 100.704008][ T5930] tipc: Enabled bearer , priority 0 [ 100.749486][ T5929] tipc: Disabling bearer [ 102.026981][ T5952] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 102.126579][ T5953] Config c/1 of g1 needs at least one function. [ 102.135018][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.149298][ T5953] udc dummy_udc.0: failed to start g1: -22 [ 102.178812][ T5953] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 103.875745][ T5961] process 'syz.2.36' launched './file2' with NULL argv: empty string added [ 104.385718][ T5953] UDC core: g1: couldn't find an available UDC or it's busy [ 104.764216][ T5963] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 107.172400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.266388][ T5976] tipc: Started in network mode [ 108.340344][ T5976] tipc: Node identity b6817c5f6e07, cluster identity 4711 [ 108.382408][ T5976] tipc: Enabled bearer , priority 0 [ 108.434363][ T5982] syzkaller0: entered promiscuous mode [ 108.439909][ T5982] syzkaller0: entered allmulticast mode [ 108.556069][ T5981] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.564739][ T5981] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 108.574137][ T5981] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.582192][ T5981] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 108.744113][ T28] audit: type=1800 audit(1785000867.967:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.41" name="bcdDevice" dev="configfs" ino=7772 res=0 errno=0 [ 108.766325][ T5976] tipc: Resetting bearer [ 108.832521][ T5970] tipc: Resetting bearer [ 108.894508][ T5970] tipc: Disabling bearer [ 109.574841][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 111.137359][ T6033] Config c/1 of g1 needs at least one function. [ 111.160574][ T6033] udc dummy_udc.0: failed to start g1: -22 [ 111.201293][ T6033] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 111.221871][ T6040] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.235921][ T6033] UDC core: g1: couldn't find an available UDC or it's busy [ 114.254546][ T6060] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 114.360513][ T6060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.392005][ T6062] bond1: (slave gretap1): making interface the new active one [ 114.557582][ T6062] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.664318][ T6062] syz.3.57 (6062) used greatest stack depth: 20056 bytes left [ 114.988733][ T6066] tipc: Started in network mode [ 115.007613][ T6066] tipc: Node identity 4a6c4b229598, cluster identity 4711 [ 115.052843][ T6066] tipc: Enabled bearer , priority 0 [ 115.079117][ T6071] syzkaller0: entered promiscuous mode [ 115.104687][ T6071] syzkaller0: entered allmulticast mode [ 115.202571][ T6066] tipc: Resetting bearer [ 115.255688][ T6065] tipc: Resetting bearer [ 115.430483][ T6065] tipc: Disabling bearer [ 116.152725][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.458026][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 116.577196][ T9] usb 4-1: config 0 has no interfaces? [ 116.674156][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 116.674233][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 116.674289][ T9] usb 4-1: Product: syz [ 116.674345][ T9] usb 4-1: Manufacturer: syz [ 116.674396][ T9] usb 4-1: SerialNumber: syz [ 117.043022][ T9] usb 4-1: config 0 descriptor?? [ 119.218570][ T6078] tty tty25: ldisc open failed (-12), clearing slot 24 [ 119.286838][ T6088] sctp: failed to load transform for md5: -4 [ 119.294017][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 119.852715][ T6106] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 120.015713][ T6110] Config c/1 of g1 needs at least one function. [ 120.035926][ T6110] udc dummy_udc.0: failed to start g1: -22 [ 120.044180][ T6110] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 120.055206][ T6110] UDC core: g1: couldn't find an available UDC or it's busy [ 120.228166][ T6116] program syz.2.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.918265][ T970] usb 4-1: USB disconnect, device number 2 [ 121.229410][ T6116] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 121.969828][ T6132] tipc: Enabled bearer , priority 0 [ 123.285996][ T970] tipc: Node number set to 3632692319 [ 123.960623][ T6140] syzkaller0: entered promiscuous mode [ 124.180075][ T6140] syzkaller0: entered allmulticast mode [ 124.464889][ T6144] tipc: Resetting bearer [ 124.657362][ T6130] tipc: Resetting bearer [ 124.706843][ T6130] tipc: Disabling bearer [ 124.957472][ T6153] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.082361][ T6158] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 126.834809][ T6185] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 127.086574][ T6196] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 127.179009][ T6185] bond1 (unregistering): Released all slaves [ 127.271084][ T6195] tipc: Started in network mode [ 127.287974][ T6195] tipc: Node identity 368b2a96f56f, cluster identity 4711 [ 127.331949][ T6195] tipc: Enabled bearer , priority 0 [ 127.436042][ T6188] tipc: Disabling bearer [ 130.200714][ T6219] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 130.666212][ T6225] syzkaller1: entered promiscuous mode [ 130.686369][ T6225] syzkaller1: entered allmulticast mode [ 130.700871][ T6228] netlink: 168 bytes leftover after parsing attributes in process `syz.1.93'. [ 130.821948][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.853942][ T6230] tipc: Enabled bearer , priority 0 [ 130.938362][ T6230] tipc: Resetting bearer [ 130.947610][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.006215][ T6237] netlink: 'syz.1.97': attribute type 3 has an invalid length. [ 131.025324][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 131.145338][ T6229] tipc: Disabling bearer [ 131.377863][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.650057][ T6236] syz.3.96 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.808263][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 132.885690][ T6247] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 132.902322][ T6247] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 133.083632][ T6258] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 133.226397][ T6263] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 133.466723][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'. [ 133.487452][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'. [ 133.493678][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.611813][ T6268] syz.3.106 (6268) used greatest stack depth: 19352 bytes left [ 133.667499][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.682277][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.757500][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.771270][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 133.795516][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.809811][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.833389][ T27] usb 2-1: Product: syz [ 133.837808][ T27] usb 2-1: Manufacturer: syz [ 133.848592][ T27] usb 2-1: SerialNumber: syz [ 133.868562][ T27] cdc_mbim 2-1:1.0: skipping garbage [ 134.007494][ T6276] netlink: 'syz.3.108': attribute type 3 has an invalid length. [ 134.020790][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 135.962169][ T6261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.343177][ T6285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.350833][ T27] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 137.386695][ T27] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 137.435495][ T27] wwan wwan0: port wwan0mbim0 attached [ 137.528555][ T27] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 62:de:b3:ec:95:fb [ 137.591889][ T8] usb 2-1: USB disconnect, device number 2 [ 137.603498][ T8] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 137.798639][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 137.807702][ T6298] syzkaller0: entered promiscuous mode [ 137.815329][ T6298] syzkaller0: entered allmulticast mode [ 137.834519][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 138.709466][ T6293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.838203][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 139.011793][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.025224][ T6306] bond2: (slave team0): Enslaving as an active interface with an up link [ 139.074293][ T6310] bond2: entered promiscuous mode [ 139.079365][ T6310] team0: entered promiscuous mode [ 139.089802][ T6310] team_slave_0: entered promiscuous mode [ 139.096554][ T6310] team_slave_1: entered promiscuous mode [ 139.104375][ T6310] bond2: entered allmulticast mode [ 139.109555][ T6310] team0: entered allmulticast mode [ 139.120214][ T6310] team_slave_0: entered allmulticast mode [ 139.132120][ T6310] team_slave_1: entered allmulticast mode [ 139.141497][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 139.164730][ T6324] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 141.459305][ T6343] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 141.904136][ T6353] netlink: 'syz.1.128': attribute type 3 has an invalid length. [ 141.913558][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 141.933299][ T6354] binder: 6351:6354 ioctl c0306201 0 returned -14 [ 141.951585][ T6354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.127'. [ 142.367195][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 143.271440][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.317660][ T6367] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 143.333883][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.356041][ T6370] bond1: (slave team0): Enslaving as an active interface with an up link [ 143.397182][ T6367] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 143.422811][ T6367] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 143.447246][ T6367] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 143.459819][ T6372] bond1: entered promiscuous mode [ 143.466608][ T6372] team0: entered promiscuous mode [ 143.473024][ T6372] team_slave_0: entered promiscuous mode [ 143.488332][ T6372] team_slave_1: entered promiscuous mode [ 143.507795][ T6372] bond1: entered allmulticast mode [ 143.535439][ T6372] team0: entered allmulticast mode [ 143.540606][ T6372] team_slave_0: entered allmulticast mode [ 143.572409][ T6372] team_slave_1: entered allmulticast mode [ 143.725929][ T6381] tipc: Enabled bearer , priority 0 [ 143.751926][ T6381] syzkaller0: entered promiscuous mode [ 143.770077][ T6381] syzkaller0: entered allmulticast mode [ 143.820195][ T6381] tipc: Resetting bearer [ 143.855848][ T6380] tipc: Resetting bearer [ 143.938267][ T6380] tipc: Disabling bearer [ 143.958558][ T6387] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 143.970291][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 144.111520][ T6389] kvm: pic: non byte write [ 144.138249][ T6389] kvm: pic: non byte write [ 144.151651][ T6389] kvm: pic: non byte write [ 144.158801][ T6389] kvm: pic: non byte write [ 144.168554][ T6389] kvm: pic: non byte write [ 144.173623][ T6389] kvm: pic: non byte write [ 144.178615][ T6389] kvm: pic: non byte write [ 144.183758][ T6389] kvm: pic: non byte write [ 144.188651][ T6389] kvm: pic: non byte write [ 144.193882][ T6389] kvm: pic: non byte write [ 144.321722][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.320293][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 145.407119][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.471048][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.512804][ T6413] bond1: (slave team0): Enslaving as an active interface with an up link [ 145.566137][ T6407] bond1: entered promiscuous mode [ 145.571317][ T6407] team0: entered promiscuous mode [ 145.591099][ T6407] team_slave_0: entered promiscuous mode [ 145.601742][ T6407] team_slave_1: entered promiscuous mode [ 145.618214][ T6407] bond1: entered allmulticast mode [ 145.632184][ T6407] team0: entered allmulticast mode [ 145.642258][ T6407] team_slave_0: entered allmulticast mode [ 145.652149][ T6407] team_slave_1: entered allmulticast mode [ 146.261606][ T6425] tipc: Enabled bearer , priority 0 [ 146.288055][ T6425] syzkaller0: entered promiscuous mode [ 146.305090][ T6425] syzkaller0: entered allmulticast mode [ 146.359791][ T6425] tipc: Resetting bearer [ 146.364099][ T6430] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 146.416950][ T6424] tipc: Resetting bearer [ 146.459684][ T6424] tipc: Disabling bearer [ 147.061861][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.079696][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.093228][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.107619][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.133454][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.146603][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.159202][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.171992][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.185268][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.197931][ T6440] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.941990][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 147.993405][ T6443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.947557][ T6450] bond2: (slave team0): Releasing backup interface [ 148.993117][ T6450] team0: left promiscuous mode [ 149.042821][ T6450] team_slave_0: left promiscuous mode [ 149.058166][ T6450] team_slave_1: left promiscuous mode [ 149.102697][ T6450] team0: left allmulticast mode [ 149.136616][ T6450] team_slave_0: left allmulticast mode [ 149.153126][ T6450] team_slave_1: left allmulticast mode [ 149.190582][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.212893][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.247276][ T6450] bond3: (slave team0): Enslaving as an active interface with an up link [ 149.356602][ T6455] bond3: entered promiscuous mode [ 149.392123][ T6455] team0: entered promiscuous mode [ 149.418143][ T6455] team_slave_0: entered promiscuous mode [ 149.432341][ T6455] team_slave_1: entered promiscuous mode [ 149.438793][ T6455] bond3: entered allmulticast mode [ 149.457529][ T6455] team0: entered allmulticast mode [ 149.473125][ T6455] team_slave_0: entered allmulticast mode [ 149.486566][ T6455] team_slave_1: entered allmulticast mode [ 149.938467][ T6466] tipc: Enabled bearer , priority 0 [ 149.951976][ T6466] syzkaller0: entered promiscuous mode [ 149.966090][ T6466] syzkaller0: entered allmulticast mode [ 149.994880][ T6466] tipc: Resetting bearer [ 150.026799][ T6465] tipc: Resetting bearer [ 150.125359][ T6465] tipc: Disabling bearer [ 150.187864][ T6475] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 152.109544][ T6489] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 152.127060][ T6490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 152.133917][ T6490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.178146][ T6490] vhci_hcd vhci_hcd.0: Device attached [ 152.191221][ T6492] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 152.241833][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.253584][ T12] vhci_hcd: stop threads [ 152.257892][ T12] vhci_hcd: release socket [ 152.275038][ T12] vhci_hcd: disconnect device [ 152.300014][ T6497] binder: BINDER_SET_CONTEXT_MGR already set [ 152.347190][ T6497] binder: 6496:6497 ioctl 4018620d 2000000002c0 returned -16 [ 152.350444][ T6498] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 152.529362][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 152.631757][ T6504] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.684573][ T6504] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.574458][ T6507] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 153.586211][ T6507] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 153.594628][ T6507] CPU: 1 PID: 6507 Comm: syz.3.173 Not tainted syzkaller #0 [ 153.602008][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.612150][ T6507] RIP: 0010:f_midi2_free_ep+0x52/0x2e0 [ 153.617616][ T6507] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 63 fc 0a fb 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 50 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 153.637408][ T6507] RSP: 0018:ffffc9001062f9c8 EFLAGS: 00010202 [ 153.643582][ T6507] RAX: 00000000000000e6 RBX: ffff88805dca0000 RCX: 0000000000080000 [ 153.651732][ T6507] RDX: ffffc9000e0bf000 RSI: 000000000005e58c RDI: 000000000005e58d [ 153.659730][ T6507] RBP: dffffc0000000000 R08: ffffffff911eb617 R09: 1ffffffff223d6c2 [ 153.667703][ T6507] R10: dffffc0000000000 R11: fffffbfff223d6c3 R12: 0000000000000730 [ 153.675757][ T6507] R13: dffffc0000000000 R14: ffff88805dca0128 R15: dffffc0000000000 [ 153.683727][ T6507] FS: 00007f85682e76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 153.692656][ T6507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.699228][ T6507] CR2: 000055557ea19a38 CR3: 00000000771b1000 CR4: 00000000003506e0 [ 153.707195][ T6507] Call Trace: [ 153.710468][ T6507] [ 153.713427][ T6507] f_midi2_unbind+0x9b/0x330 [ 153.718021][ T6507] purge_configs_funcs+0x241/0x3a0 [ 153.723129][ T6507] configfs_composite_unbind+0xa4/0x1c0 [ 153.728668][ T6507] gadget_unbind_driver+0x1bf/0x3e0 [ 153.733864][ T6507] ? gadget_bind_driver+0x770/0x770 [ 153.739058][ T6507] device_release_driver_internal+0x408/0x6f0 [ 153.745146][ T6507] driver_detach+0x1f3/0x2d0 [ 153.749753][ T6507] bus_remove_driver+0x221/0x2f0 [ 153.754685][ T6507] usb_gadget_unregister_driver+0x4e/0x70 [ 153.760407][ T6507] gadget_dev_desc_UDC_store+0x178/0x2e0 [ 153.766031][ T6507] configfs_write_iter+0x312/0x400 [ 153.771146][ T6507] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 153.776779][ T6507] vfs_write+0x474/0x9a0 [ 153.781023][ T6507] ? file_end_write+0x250/0x250 [ 153.785880][ T6507] ? __fget_files+0x3fc/0x460 [ 153.790551][ T6507] ? __fdget_pos+0x2a3/0x330 [ 153.795163][ T6507] ? ksys_write+0x74/0x260 [ 153.799624][ T6507] ksys_write+0x151/0x260 [ 153.803961][ T6507] ? __ia32_sys_read+0x90/0x90 [ 153.808741][ T6507] ? lockdep_hardirqs_on+0x98/0x150 [ 153.813935][ T6507] do_syscall_64+0x55/0xb0 [ 153.818362][ T6507] ? clear_bhb_loop+0x40/0x90 [ 153.823052][ T6507] ? clear_bhb_loop+0x40/0x90 [ 153.827727][ T6507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.833626][ T6507] RIP: 0033:0x7f856739de99 [ 153.838053][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.857665][ T6507] RSP: 002b:00007f85682e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.866095][ T6507] RAX: ffffffffffffffda RBX: 00007f8567626090 RCX: 00007f856739de99 [ 153.874093][ T6507] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 153.882078][ T6507] RBP: 00007f8567433eaf R08: 0000000000000000 R09: 0000000000000000 [ 153.890057][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.898045][ T6507] R13: 00007f8567626128 R14: 00007f8567626090 R15: 00007ffcd0b2daf8 [ 153.906035][ T6507] [ 153.909074][ T6507] Modules linked in: [ 153.937565][ T6507] ---[ end trace 0000000000000000 ]--- [ 153.943162][ T6507] RIP: 0010:f_midi2_free_ep+0x52/0x2e0 [ 153.949022][ T6507] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 63 fc 0a fb 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 50 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 153.971732][ T6507] RSP: 0018:ffffc9001062f9c8 EFLAGS: 00010202 [ 154.007361][ T6507] RAX: 00000000000000e6 RBX: ffff88805dca0000 RCX: 0000000000080000 [ 154.017257][ T6507] RDX: ffffc9000e0bf000 RSI: 000000000005e58c RDI: 000000000005e58d [ 154.038131][ T6507] RBP: dffffc0000000000 R08: ffffffff911eb617 R09: 1ffffffff223d6c2 [ 154.047448][ T6507] R10: dffffc0000000000 R11: fffffbfff223d6c3 R12: 0000000000000730 [ 154.056347][ T6507] R13: dffffc0000000000 R14: ffff88805dca0128 R15: dffffc0000000000 [ 154.066293][ T6507] FS: 00007f85682e76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 154.077619][ T6507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.085769][ T6507] CR2: 0000564dafc5fd10 CR3: 00000000771b1000 CR4: 00000000003506e0 [ 154.094156][ T6507] Kernel panic - not syncing: Fatal exception [ 154.100547][ T6507] Kernel Offset: disabled [ 154.104888][ T6507] Rebooting in 86400 seconds..