last executing test programs: 21.322008319s ago: executing program 3 (id=945): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r6}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_usb_connect(0x1, 0xe5d, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xf2, 0xf, 0x15, 0x40, 0x93a, 0x50f, 0x14e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4b, 0x3, 0x6, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x19, 0x8, 0xd, 0x70, 0x76, 0x36, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xceea, 0x6}}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x6, 0x7}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x7df, 0x1, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb7, 0x800}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xe, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x2, 0xfa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7}, @generic={0xb0, 0x10, "5e7df2c965e023b9456c4a2481c82d9de44ff9472b939fb787a32ca6496b711ac5260cd44745d78a11cd4cc3ee8141bd4c04feb82bb04269f9f859efd1171000dfe23502727910fc2b20e97f7403dd63dc0d81b0e4cebdb7f72d342d246caf5297478dc71ff5efe643bc5ad3dc1fdba9578edbe39c9d931ac69469c8d2c085d2198dbb96e83eb7da72202089b61ccbd29d931efccf589686198d9097906db9da1030bb0813e8f99354d7f73a59c0"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x1, 0xfa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x74, 0xff9e}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xbf, 0xf, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3fa, 0x5, 0x4, 0xae}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x0, 0x80, 0x5, [@generic={0x1a, 0x23, "34d5814eb61c62b7d05c84f04d52b83c411747e42d83f4f0"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x6, 0xc1, [@generic={0x5a, 0x21, "d5f9cefe0546fe14d862402b7afb22c279e83c3170c3fe6d7d0ae2aa5ca2081915aed8ebe76edbb428c520b2aeb9b1533e1425f4b706ce843d712e12efa0654479ac6047d26668881561412a5b1e25e0f10c5e9c56b83269"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x81, 0x2, 0x1, [@generic={0xb0, 0xf, "f379b750c7c4e84d4fae695095ad4ac682773419529db24a55d04256ebf1f120cedffd7f8f5c7a2b15a3e7fe77d83a4f57ba9b00d79e04f35b35dc954cb49893138a5934a1a58100df42b63aab3de0317e4818df094034b56483b98edcc8cd88a5dacdc6bb19a4f45565dd67c2adef1e30a74feccf3d73f2ba241f600b6d09076f0b88e585d056c13cb061964ce5dcf3954b17a7b954d11ed3baaac1a0f805ec1b434b2f0507030e561d694c6278"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x81, 0xe6, 0x2}}]}}, {{0x9, 0x4, 0xbc, 0x2, 0x10, 0x35, 0x43, 0xd5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x60, 0x2, 0xd7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}, @generic={0xf6, 0x1c, "cd973058bd2aa4985a77686258cc7be4bdb9604f2f383c9067e55209bbd3bf406ce371ab7b78b7d8f8415e2430581e2ef5f17c27c0ef25daba38ade7ea1adaf0cdd2d69d76b10721c7d2f6eacd912b3a8bdc7585579aedb5e9133482468811453aa38e7ef92a5f8523d00834b7a11511a44d1a41d30774a8ac4ce8e5ca7c3a69c0806e42b8a8697a3d033f8094549a010629d41d149ff9b6d6d5785fff019eb40d51ee1bab5767e5ba06e0b4386a9c82ddfeaa1cd34dfaaf6ffc71a25af70dd678d0bdab79a6d7938fee9199d7dae81ee5567f21eb977ec422c5415fdc11ac0dd3de2e51f615aec09688159d487e2417812daef7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x81, 0x81, 0x6, [@generic={0xa3, 0xc, "fa34346f449a04e9d4e944e19c4f4bd6a041f8f63168126c65c286a0987b4f750248e221840625e4a2b4be7f7b9f47887740f93aef27f1ab602392356e1805d2da63fe7d6400373189770078217e5bd2da7c6a8f3c9f247390321645b055c1e7c77103d8ba8063a5cd96302c5e6af2ba935f64bbc7eed763c8ab6bb1465cb118f22e2c29cd0034c052d5312b980ac4d37a12c03c8ed7bd8afd6f51aea8d55d2027"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xc25}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0xb, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x10, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xf}, @generic={0x25, 0xe, "4d5b52cf278d3a0de5fc3b3a5f30ce44dcbfcd4a50ca13a35750ea90eabe9e55357637"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x3e, 0x1a, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x2}, @generic={0x8c, 0x23, "f557205239242b687b4a7f95b8bcaa3966221db86724830eddfcbd55088b1036d72ccb184df4d707fc59484dd31161187c687c0d2ef82d285cb9093a675ed2d8f9e30c160575ea304cc32ba43abdea949b35a17467b0d28aaa91697819ab8a678933d83765afdd9e3a09efca255996404994e51cd56e7836d0f5e1d33de304036e72d1ba3b4704813f77"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x0, 0xce, 0x3, [@generic={0x2f, 0x0, "6bae435544700190be1650aa2e7b5f52e05e7d3b2f586f9bf1a9642ea3c14f49967d85a6ac7e4483fabae5253a"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x220, 0x2, 0x8, 0xb}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x7f, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x7e7, 0x7, 0x22, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0xfff2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x8, 0x4, 0xe}}, {{0x9, 0x5, 0x9, 0x9, 0x200, 0x6, 0xfb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xfffc}]}}, {{0x9, 0x5, 0xf8ba6a07493de56a, 0x0, 0x10, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0xd, 0xe, 0x20, 0x9, 0x3, 0xb1}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x7, 0x81, 0x80}}, {{0x9, 0x5, 0x1, 0xd, 0x2ef, 0x98, 0x7, 0xaf}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xf5, 0x1, 0x8, [@generic={0x36, 0xf, "3c5a6f6acf6d130d020f5a2e93223103353158d1924499b909d0eee12bb7250a92ec1caac7a9b5276469ada170d2b6f7797b2ccd"}, @generic={0xd7, 0x23, "0b10414d1ad8d0db9d6f84dd7115425c9b0bea3894312a9cd569ab5503e2548b25a52b192a2b8b419af9b966aa36ad687de2a8c2887ec3d14c5d63e7a69e40c9faff5b21a6304815f73a827778415811aaea84154e15eee3e7a33c50dd0f57a3a873f7068ab736648cf6573dfb654397ba88c80ba0701e84ba66ea482a19fd0f9692e9113d389f8b3aceba25a7f3f3a2884752c41c21909bdb5d32b6a208454626daaf4139a628b1b2e08e34b37a7ef79487e0d38274464a27a732cfbf2693dfb9398b2f96188c49034b77c921eec9bc059c0f6bd6"}]}}]}}, {{0x9, 0x4, 0x85, 0x3, 0x10, 0xff, 0xff, 0xff, 0x0, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0xbe, 0x27, "13"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x7, "9dc932"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3, 0xd9, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0x40, "c238", "f2"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x40, "9d6b"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, 'Wv\f'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x5, 0x35}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@acm={0x4}, @obex={0x5, 0x24, 0x15, 0x101}]}], [{{0x9, 0x5, 0xf, 0x8, 0x40, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x6}, @generic={0xe7, 0x6, "334390ddd525461e1a9a64d0c53f37f99374cad8167c522f2337bbc308dc5fb4a36bfc8c52d924a245e74289a0c9192c4409af873dc76f4bfd4cc3042323b5f17da6ddba645c8b1caec5fdd7ace089be7ea3801b318d9a9ae381a6b3ec38b066cdb04992fb9eccd3a08e76fb51e36aea7686c29987576a02e49f5c45363f54b69f1632f84b0938cd61bfae78086a641a9231b078a3a61b2f146417fb3f1caa4417627d8255e58fbd43ec2fa88bb7978df8738cb0142d11ee7444d6b07ee4be8b129ee8ac3265972ce4e5acb9caeee8f27612487e5eca70c463daedbd9c2e4dc1fedee6f242"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0x8, 0x5b}}, {{0x9, 0x5, 0xf, 0x8, 0x19f, 0x66, 0x1, 0x4}}, {{0x9, 0x5, 0x9, 0x1d, 0x8, 0x0, 0x3, 0x4, [@generic={0x9d, 0x22, "e5cfdf06742fe4ed2aadb512f859061adee424fa5013ace65c2e78e3a717213c0523f9e077ccc054d8798325815008752a3adacfdc3371fd974b0d362084442997194798c9f66bc59811bd600de680814d2a73507d6810017558aa80c4ba60a1fd33d18244a8c24ee9ed75dae10e251222e0f8af18dfd0c6b97386bce1a3876ce838189cc046f3671bc90e897efb3263caa07cb53f25122552b720"}]}}, {{0x9, 0x5, 0x88, 0x3, 0x20, 0x1, 0x0, 0x93}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x80, 0x2, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xf, 0x2, 0x5, [@generic={0xe4, 0x23, "33bfb6ce0334e5749f829f8d3d1e9e811dc8737b3f08fa6a7cdcd94ab41d0ff63e98c7654da0ffc080d0bdcae9a0c1061e4f3eea2754fe1c47c4817145542c98df2b5875baedd5592368bcfc1e5cf00921d8c53c4a129d5232aba0e1b39a6cbafd904001c6fb0c9f412b4b0e3ab5b285681e4709074249a653ef5a793d545c51769697c64ad71cd0f140e77c8f1b8fd74d53aacd70be970e37f823ee96f6718074e49318bda7670be1756442271a76e60589167f127777d438bfa1f4af23e8a23cdfba681fa05b167f1518c48b49912c59e0a0c9955e78bfe21b9a9501f931731824"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3b}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xf, 0xfb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x40, 0x5, 0x8, [@generic={0xc9, 0x1, "50dff7e154adad583b1725d3622f76bbd57f499513ca5b1ac3297971aa82b37e962c4573cb37476e67dd28616cc0b8b3a81ee51ca1393657a8cb97050a6e18439cf3c561fc29be1dc0b662391fa3c918aab788cebf426160644a13a1b01ac245c89aebf79938e65ace9c3bf6bb4bf831c944f5a0e7bdfc7942cd6c9995c865c3d1f0ce63989e2c26797534682cf61f5d8a65cfe7856d1a9e564d428b01be4aaf618e81c0b3c60765b4c8f7bfb2ac83c17f83c90bc9998ee73c74c83f267614a02198950882408b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x7, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xaa, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0xf, 0xff, [@generic={0x97, 0x30, "4b5ec285bb2eb90ca191d099247fc8b0c2d480e32267b3d6888a546c78b9a4dad3412c33c728f7365d5fec017073d5554e80c8ff92d5018b07b454a58cdf047714bc5f32b1427055b64b0f83b885d7dacf7e1cefc311a6550bb03af05a2f8c39e538b583e62140063708eeda778f476d0663147b4ef9fce4efd616ef373b24a7edeb4048eadf54211de4c9e0bb4afb3eb01a5f2393"}, @generic={0x9c, 0x23, "4120a788b8450c210f5601e0f3edd13e4c1b59262d8b1b7386c9ac122a5844e7652f3c749d388a0e806609cb89a08fd8177aa851d96f6251d217c8a88d11a95f7253e798ca482a1ecc210fc3a2137de25c40c4328720f218c9878dd6e6d9a516d1bfed3b4d80952388997241bc394f71d4ca7b6867c861344037004780a711a4f9e00a71abfccdd8429fef2191cff96660871d2bb2380d8874d5"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x9, 0x37, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xe, 0x6, 0x2, [@generic={0xe2, 0x20, "3b905b5c4939eab89f51fd6a7088d738e123c5aef0ba20c09b06432d07f510000b519da1541b36f1a426a7e3797887a9a5bf3b7d7b562855fe346c79e48bfd73a1e0a16703606de345a6b0df9d021ef83ed588ccbd93806042859b3b27d4a37a2cea61fe051d5651d0d686f308305f50ac5e57368ddad66faaac3baaed8ff033453fba1f328d79b1a24560a59d06beaa7c61be0a32aeae0b7989cc922be13a010317abb6e504ff4a8fcd6dc269fa089f59d65d42a848735f527f584cd51559953b7c2242287c4b757c6791676a508afe1b7b26a97dd6dc187c50bddee1d0c6bd"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0xa, 0x4, 0x5, [@generic={0xaf, 0xe, "b2efda9ace70a7e0dfbd7eb83c1c62109dde7697a3c81127cfba897a51787cfaff3dd84572e112ac24e4d411b1a6a8518e0c902130608d1b2ffc6dcae6c5738569309fe545a172dcf8074b6d9dc5903e1a4fa51e6a4e9dcadd4b08d792f7a6b187733baa3dc34b5687f8361b54fcafc85d2cb493f07e0fab4d3d8160036038297bab14bbc50561d779aa63b90febcd4a8ad26116d281d443d591cd2be26b8993d33e8723f3311d6c9a448cd41a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xfe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xad743a55008d205a, 0xb, 0x53}, @generic={0x54, 0xb, "fe39b73dac189ed192d1c39aab5ad1a9c93f33f561574baa2082bccfcd4910953914c7b7b34272547a855e9b75aa3dd0dce9596b933e632f852a27d65229a3b872053035106d702e5184fc6400115d75d158"}]}}]}}]}}]}}, 0x0) 17.369940546s ago: executing program 3 (id=958): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x680000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000400)={0x1, 0x8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000480)={'veth0_to_hsr\x00', @link_local}) read$FUSE(r4, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r6, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000003c40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003c80), 0x2000, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003cc0), 0x1, 0x0) r13 = getpid() getresuid(&(0x7f0000003d00)=0x0, &(0x7f0000003d40), &(0x7f0000003d80)) r15 = getegid() r16 = mq_open(&(0x7f0000003dc0)='-\x00', 0x2, 0x122, &(0x7f0000003e00)={0x8, 0xfffffffffffffffc, 0x5, 0x600}) r17 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() r20 = syz_clone3(&(0x7f0000007dc0)={0x0, &(0x7f0000007c40), &(0x7f0000007c80), &(0x7f0000007cc0), {0x5}, &(0x7f0000007d00)=""/45, 0x2d, &(0x7f0000007d40), &(0x7f0000007d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r4}}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000007e40)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000007f40)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000007f80)={0x7, 0x6, {0x0}, {0xee01}, 0xfffffffffffffff7, 0x8}) sendmmsg$unix(r5, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="82f1217c1bf0cff6e232b182dd19e8e207ca8b548441e2f78bbd395f5c1503abe737641c5dd1870df1093002a58743a664e6723c4a057cad05ae0ebe76c77651331d0f5ebf9e8a7e0ad8c97f8660c4e9c19b463057e64c6eecfc51b283cc4b1c7b4c9d6da0fc79b3cf32d01b1df6a56fd3f6051da46952fc323778c51604f22a2238878fc5e2c2b424bb9473d6496f4f0dcdafb189", 0x95}, {&(0x7f0000000580)="6c8d9d07c6c42e0b5c4841c8ea05237dbda1", 0x12}], 0x2, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000600)="5da6061fa03d63eabc191b6deb59a8e8f5808f4cc1a7faa7d7b9033349448f048c173251325a46ce54aa27b118abccdc9f140db1889caa2c3964e75f15384d990e71423750aaa12d625a2e92", 0x4c}, {&(0x7f0000000680)="c096eda6cd5a54c0506f261c5c4f163b0fac23a0c9", 0x15}, {&(0x7f00000006c0)="98a8125f02a3fc6b07e87a925efaf947bda1c6d286c23b30db0053d3ea4dca22c73de59e8a1f76df1b359051b964aa1b0c9cceb7445367f049b835310ac7d8e52181af276e2a21647e1ee4d0dc68c99d9cfc4f6c3f5ec9a248e55d5a7e0ef713ae77e57eababa066cee8097180a8f0e4cb8a3e3eddc8e76e165f69f7a5df34a242851b4d27633e73c75f5f28be244fecc093236cc6184a7d42cef50baabed2e2cb519a295592c2ca50f240bc108011c24f8541dcd92a0b8212750f7c18e14e4a25d7399cec57d740320494de82d54ab6afae", 0xd2}, {&(0x7f00000007c0)="47b5da0145edc7b0c1a14cbfce2b02f79d1faf89c159a114c135043fd743004a5823ad35e79ee910378ea1ca0310cfb98b70140327d4ae36ee582c9fa5cd63a76c02b16f7a5fd463dd8f774893cbcde6b321292d5a9e61df9792e5441c6d3c8c79714c9db2a6379d3829c3b08e8eef34604437e72bebe7b3e7e0c0c8294c3a7cf26c035b09db1d2f387ecc498334b4889c3050af3aef8e5d23963ab9135d57baf5b11c14d497172ff66f6736ffa74d9d9d67", 0xb2}, {&(0x7f0000000880)="3833762c40f98c0321627d7e4a8ae1b45bb1da42f19b083bdfc0da6715c3301100", 0x21}, {&(0x7f00000008c0)="b578529e489f46f9fb14c78229b881278403ed71bec86c9f0dcd363631a3f0ef2bbd9a33a4e84d752cf3539f9232e6499978c10cf7b3099d4cd958bfe6a0c6e092b22e88f0b662722b6b0c30c87941522520c158f2b0eba4000ba2b677ebabb832367983074418fe1a75a11b5a26e0913527814acd7f7b5339de508488115d0087bcb1ad7b2ae21e01bb379e9cd5b18a38bf489f4aff1ae58e32e38a587491f1f97a32d6aaea3f4a9b53e30accb48932ba7969da894edd785e73ecd69c3a1828803b6e1056bb76c4", 0xc8}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="9edd845792a7c5f7a64ad49ffb5e6b951e09fc3f229a4691082d1a047ae3aea084cc13ef3643bf1d31e651587e7655be00f901c3602e12db5b1516e5a282d4e128a2585071b04a2ba2c6d6e4786b924583f3ab7f5ad7baa39b457bba4deb52c37429474af310aec78c1132862e76816cb6d8eb7d996c", 0x76}], 0x8, &(0x7f0000003f00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r2, r6, r6, r4]}}, @rights={{0x24, 0x1, 0x1, [r6, r5, r10, r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, r4]}}, @rights={{0x28, 0x1, 0x1, [r4, r5, r1, r1, r11, r12]}}, @rights={{0x18, 0x1, 0x1, [r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [r16, r5]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x2c, 0x1, 0x1, [r6, r1, r4, r2, r1, r5, r6]}}], 0x150, 0x8000}}, {{&(0x7f0000004080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004100)="00daf94364fdb71fad9a3649a83776ef5e2cff57997d8099521442da55982dec976027d433523ce28c61456f8dc7020af51d8709b7a1322f1ea05781715143ff169a4c4fa9a626b9e03cb378d9c9f248bead3d83bfd9dc5aa515e89b36902fbad3f55d21e40ea5b70e6cbf0e193f4012f047850d48edb59cbbda0e5995851bb404dcc256bb309b4cfba82a4ec9fbab94f5dcff5ec22a77346d", 0x99}, {&(0x7f00000041c0)="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", 0x1000}, {&(0x7f00000051c0)="2e176449eb6a627e2ec9f623e82d36cbbf7c1fc8ccb79cc3a228d8f2131732bcbd439a13d929f9818937", 0x2a}, {&(0x7f0000005200)="16bad412e907101fa6355be76740b755494636d8f788c7890ac91819cfa24d1840d9f765254a1dbccdc0916b8f68991600a11e5e17cfdec9b21b39afb3d560a637ec191f88a111640eadc01a516191227029848008593439514277baa1e795b573fcf3e148d00b9c48022807e8e2a18ce1bd9d3036686ecf87bdabfe76ed24897760334fe74f4042f4536334f4f2250875dc803f2f3a9637f6917737d3d9aaf418b478a8f2", 0xa5}], 0x4, 0x0, 0x0, 0x8044}}, {{&(0x7f0000005300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006680)=[{&(0x7f0000005380)="046aac2c3bbbd726809ca188428f55be39731da7e64692d90ecfcaa10962e788891dd55e631fcaa4fae83f", 0x2b}, {&(0x7f00000053c0)="bc5cc106065b63b98ce41b37e9b922aec4303890f5f58ebcad3f0b3b20bbf33a284d5299391d38b775aa90756b78ac236780394e40a3527a4f4cead38f2b2945ef0a9ca578e1fb4f8feff3df58a7a278893b739e4d9d7672c5556d28be89309125c855aac0e20dad9284bd2d88", 0x6d}, {&(0x7f0000005440)="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", 0x1000}, {&(0x7f0000006440)="6378c8e23e221e33f427f9055e5e185f01c360865e0b9ccc0f0c61688e7c0ef30cc689423a8b614a9c8b7fd27af44da585a87ec06a851b4238f84e9bbd20c3d63479cae5317d4a50aa6570eb9cf3550f5ae38cab154eafa1127c83e1acd9641d2df81edd14442d6ed8f956a662eb34f1c43fd2", 0x73}, {&(0x7f00000064c0)="c0e7557d164a0ba38aec92bf65c0b404603dd2c1f095d6d1186f4391a6c56cf06beb37372844831d656a73590e31b248f8288772487eab43ef392074c68f664d6ff7df1690f9d84ae55ffb1f4a353ffb3d182f776f299383d7038fc8fbe206949412105557df0ce9b070b4ef066c3545809a0f6121162adbe346b78326313dd4c845877c3ca17f4274939a9dfc0fb22b57c232aeda81be33c7", 0x99}, {&(0x7f0000006580)="8469f241ca0b800eb3d3a9836abe09de057f8544e07b32fcccc7a1108125a735830b978b8f4f69539f6a5361a0c8cbabc3a2bd3a3ec75b38a3c4d9ce7266b238fcb646b4a7bae93f26433c7aad7a5d20f585514eb0bda86913631ed3c11f875e0e2f0d6dbf4ce6b9570cbfd457af453f4d23a7900143b04da87dff0cad74a3190d84e208331dba04d85e97f2b8798185e3f744b357254569772184eec1b09e9d5021ef80a9d30be50820d4b42648f1a70b390ea756dbaf81d67543e2ea29173e7bdd3d32215ba283f765582f294f08128a184017cb2e3500", 0xd8}], 0x6, &(0x7f0000006700), 0x0, 0x4840}}, {{&(0x7f0000006740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f00000067c0)="c80f9ad1be1524c4da7e", 0xa}, {&(0x7f0000006800)="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", 0xff}, {&(0x7f0000006900)="8e215908721ba37420e325b3fa5e3dcd621b98bfae2cd390626115a02e09dd54594e9dccedef4223bf52db632d2200b95a2b57b76ebf7dfa17f2ef1e9d75030e0326b9a70ffe08fe0605b4ce30f35a513272ccbea002c012bbae64e40e7ca37168ab95b6ee070c14e48d433e2c98726a4dbc96d173b261526e03681c38d44abf21ae78cfdf33", 0x86}, {&(0x7f00000069c0)="891b65bdf2e78b2f72dfc3c134112a951aeb2445f3aae7431da96e2cefff685f3252948248f6b1fdd3b52b69f7bc08934db6ec89d32569d53a246e4b3f62b8eb2ad5e729", 0x44}, {&(0x7f0000006a40)="3ef80144cbefc6427296f501e03815bb2a", 0x11}, {&(0x7f0000006a80)="b1c0eeea20f2c3a51ca960d2476bdc7fc9b3f5c8f7d36abdf59197a348eb66a1f765e5a530f8eadef3b976f4350ff8cf4b5406cc8b5e5f02f12c809970e612fd17de55229975eb2de045d40b895990b47edbb102b092b1803a42a1ecf2ff30d32574efe7d86d9ec1c72c230ed713c08a652523ccd885c118cee526ff7ac98e74ba2dd6582c7ad6d82d50c59db7558c9b48a11170e9db8521be4ae23b9fee00796b2712d01a5b6309570250f33b273f33634a9f0a8d0307e3694cf2aa7c6c54adbc6677e70a103625fdaadb46c926622d1081c9aea71ed9a6257163b67b07a5570c95be8aeda4eeffa7f88b80423bc6f66f", 0xf1}, {&(0x7f0000006b80)="11ae2a8d90eddd0d4d3de167e28ed2a730df9534030d92f33e54e76a439ec201472e23bdeb10feca7410b7007ab3bfe570b34ecf2312801870a977d1ad000bd0", 0x40}, {&(0x7f0000006bc0)="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", 0x1000}], 0x8, &(0x7f0000008680)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r22}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r2, r5, r4, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}, @cred={{0x1c}}], 0x140, 0x2000000}}, {{&(0x7f00000087c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000088c0)=[{&(0x7f0000008840)="53bedd7a917ac75d7ce9011d00b7676e85f757f44b2d9bccebef8b79eee090ac65923c98172d35f9ea8bc59804a5153ed79834ff7edbcd1c307dccb097e95b063d5c51900947d1dd980e250a60f39f2dfdb3d7560f3c54f33bf33e6e10bea12ace1a", 0x62}], 0x1, 0x0, 0x0, 0x8044}}], 0x6, 0x10005) 17.20795973s ago: executing program 3 (id=960): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000001600000000000001fe8000000000000400000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000000000000000000000300000095000000000000e90000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 15.884036902s ago: executing program 3 (id=965): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000680)=ANY=[@ANYBLOB='unlock m'], 0xb) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200f7ffffffffffffff000102ff6584ca7e0c46a6f8d0030109022400010103405609040002010301020209210400080000400e0905810300020d0af8"], 0x0) 13.869792001s ago: executing program 0 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="21000000875ac715dfacf617f2728e5de147669914fa2b44adbbcf147bea0f060000000000000049d11a780e01892ad328e0c80efe24ac8062ce8b79bcf7eed858e0df624aa406a85e1a1dc20b4577ee4d8ac1dac5d3431d1e2efca0fa9f12da00432c9d345866ece0fd01c3403d6747ae545e2fb368ba5f1709cd34c73b5e6de1ce1682f44c2a0414bd7625f5c08d0d034f71135edf59fc25ba2b70a6dd71a712dc7c7daecd13c6820c34d1b4c4cc636741e170dc5d75e912069b556999acb61ab9f3f895e9c0279e27aa47f665164af502d5a10760c5116eeb5b", @ANYRES16=0x0, @ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0a0018000303030303030000180070000500010001000000050006000100000004000300"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="2ef71d7457375a8de0c4ae4c4b55ea36710190e30f741e8ec48c943b7e1be5138de7ccd2d095ee5327145dc861e07cd4d0d9214b89510963a7d9a6d554fb886a196fde307ee8d1496bb68ea13cf386a2194e6e88e94b70d4a60b445749fc52b75210f77e2f0d17928edff273664987cce0c8ef8bc0d63551c4b38ba8ce72ec07e988b46d49d708c08a7fa223d9bceffced652a6a224908310851"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0xa0000, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x7, r4}}], 0x20, 0xc005}], 0x1, 0x10) r5 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000a40)="348f8c6aa0", 0x5}, {&(0x7f0000000a80)="073fe2d5ad69dddb99b353", 0xb}], 0x2) syz_usb_ep_write(r2, 0x81, 0xda, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6") 12.665919447s ago: executing program 3 (id=985): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x50}, 0x2) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x43]}, 0x8, 0x80000) read$msr(r1, &(0x7f0000000200)=""/144, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x3}, 0x2) 12.337924924s ago: executing program 3 (id=986): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100027bd7000fbdbdf251500000062e87c0d2ef80e183e9e0c00018008000100b6f00fb399d4728844f5df92f09648fab722fbb5f088cf1549b4d8502f49f36107e0c6ef918ae1df02e95ca62d914913e86edf5a1dd7a9ab8ff0d750026d335fa1be3ac5467e", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x4000000) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x7, 0xa2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x2, 0x0}) r8 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, r8) mkdirat(0xffffffffffffff9c, 0x0, 0x4) 8.810534962s ago: executing program 0 (id=991): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r5 = syz_clone(0x800000, &(0x7f0000000300)="52c94401467300f16007ac8dee4a1172c682382729155a4b574802c9202fd0da8e28f7d1b05807710a88eb9911af7576ff1893a43c0cdf1a670121a81f18486ba92ea5c0b91d4013ca73919b3303b501d316ea0a14857309df3f1d1a2936fe5ea78e85591ee54a7e2746ef40318940fcbb47a98f5eb41f5816387d74cbc2d73b37132f24f0326bfa92", 0x89, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="e1d6387264f4002ced84e52364af2e3a362976184698418584609c88e6b6a9edba556f3e962c6c712ce35be7f1b723b54e3eda7fb85ae376939ee4c9bf3d3cf2b40a2c") sched_setscheduler(r5, 0x1, &(0x7f0000000440)=0x7fffffff) 8.286537232s ago: executing program 0 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 6.112994866s ago: executing program 2 (id=1000): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) setrlimit(0x0, &(0x7f0000000040)={0x7, 0xfffffffffffffffc}) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0300000905810300020000000904010000020d00000904010102020d0000090582010002000008090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x810, 0x10, 0x1000, 0x16, 0x10, 0x10, 0x10, 0x7, 0x10, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000b1c21a85fc8e0e3d100"/29, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 5.806410445s ago: executing program 2 (id=1002): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x8, &(0x7f00000007c0)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) epoll_create(0x802) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="94634e12872b0400000000000008fa4ba12777715e70c2712b44bccfac4dabacb6306bc8f44f6bb1a46e95b6db38ef97", 0x30}, {0x0}, {&(0x7f0000000200)="7aef02febfc74f19b84b7f11bcff573c8a01008b50d5b12541a8bc520c7b7783a26d4fe966629ebab955da254c8bf4648b8b263358", 0x35}], 0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000480)='./file0\x00', 0x8000, 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0xfffffffffffffcc7}) mount(&(0x7f00000004c0)=@nullb, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='nilfs2\x00', 0x400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)={0x10000008}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x0, "bb8937011300000100000000000800000b000039ea000000000000004a000002", 0x494e4f4b}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x4004000) 5.697308815s ago: executing program 1 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_extract_tcp_res(0x0, 0x5, 0x60000) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, {[@mss={0x2, 0x4, 0x9}]}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) socketpair(0x1d, 0x6, 0x6, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000fedbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x140002, 0x0, [0x9, 0x3f, 0x8, 0x5, 0x8, 0x7, 0x80000001, 0xffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.166940394s ago: executing program 1 (id=1006): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0x31}}}}, ["", "", ""]}, 0x28}}, 0x4008000) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0x31}}}}, ["", "", ""]}, 0x28}}, 0x4008000) (async) 5.038559009s ago: executing program 0 (id=1008): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x50}, 0x2) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x43]}, 0x8, 0x80000) read$msr(r1, &(0x7f0000000200)=""/144, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x3}, 0x2) 5.026817719s ago: executing program 2 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000340)={0x140980001, 0x0, "ff5dff0f251ed700f60065c214525ae572ce1c205a923fc24b6b06fa080033ae", 0xfffffffffffffffa, 0x10, 0x8000000001, 0xfffffffffffffffc, 0x400, 0x4, 0x7, 0x2000000, [0x6, 0x6, 0x2a3, 0x1000]}) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x94) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb06000100"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c250000000004006033d474a88127ae00007b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x41) syz_usb_connect(0x2, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003c3d10a08dc17020250f10102030109024e000104e9000909042000000e0100ff0a240102000502010209240703deec9e701b789b22e603009d0924030106030501f90c24080201000dacf34b44910524040606092403090003030605320423a27d15a34e05675a2309482acdda"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',rfdog=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 4.979691682s ago: executing program 1 (id=1010): syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="1800008f008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000500008500000086000000bf0900000000000055090100000000009500000000000000bd0a0600000000001500f4ff0020000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c6bd714895d57e600002000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd5e}, 0x94) syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="1800008f008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000500008500000086000000bf0900000000000055090100000000009500000000000000bd0a0600000000001500f4ff0020000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c6bd714895d57e600002000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd5e}, 0x94) (async) 4.838380563s ago: executing program 1 (id=1012): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x51, 0x1}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@mpls_getroute={0x78, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x14, 0x80, 0x2, 0xff, 0x2, 0x0, 0x4, 0x1600}, [@RTA_DST={0x8, 0x1, {0x1}}, @RTA_DST={0x8, 0x1, {0x739}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0x8, 0x1, {0x2ff8, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x12, 0x9, r7}}, @RTA_DST={0x8, 0x1, {0x3}}, @RTA_VIA={0xfffffffffffffed8, 0x12, {0x11, "cf0bfe08e42dd7b054e5e047abe5"}}, @RTA_VIA={0x14, 0x12, {0x2c, "b326b7ef7bd537a6c3d1a4077695"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0xfffff001, 0x20007, 0x30314742, 0x5, 0x6, [{0xb, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x2}, {0x800, 0x7ffb}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x7, 0x1}}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000c80), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x48) 4.058379225s ago: executing program 2 (id=1013): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0x1000000004, 0x1fff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xaa, 0x6, 0x3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01ea718d6489919b0024bd7000fcdbdf2503000000180001801400020073797a5f74756e000000000000000000050002000200000005000300070000007d4be40c2bbef455022e"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x24000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\x00', 0x3a, '&%,,', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x4f, 0x43, 0x4f, 0x43]}, 0x32) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x5e20, 0xffc00002, @empty, 0x4}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bb00000809ca86074ca9bd1c0000000000119078ac1437bbe000000100004e2000089078000000000000"], 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x7) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.116718744s ago: executing program 4 (id=1014): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x18, 0x4, 0x56, 0x8, 0x3, 0x3, 0xfff, 0x1a4, 0x38, 0x2b5, 0x9, 0x2, 0x20, 0x2, 0xed0, 0x7, 0x7}, [{0x2, 0x6, 0xb, 0xd0ed, 0xfffffe57, 0x2, 0x2, 0x74f3}, {0x2, 0xffff, 0x8ad, 0x5, 0x3, 0x7, 0x8, 0x8}], "be438597032ebe8c86e97e78e942a811", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x888) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000900)={0x3, 0x4, 0x1, 0x7}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='ext4_mballoc_alloc\x00', r2, 0x0, 0xffffffff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@volatile={0x9}, @struct={0xa, 0x2, 0x0, 0x4, 0x0, 0x73, [{0x10, 0x0, 0xd16}, {0xf, 0x1, 0x40}]}]}, {0x0, [0x0]}}, &(0x7f0000000a40)=""/234, 0x4b, 0xea, 0x0, 0xd}, 0x28) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1e, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x19}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0xa, 0x4, 0x2, 0xc, 0x1}, @exit, @alu={0x4, 0x0, 0xb, 0x6, 0xb, 0xffffffffffffff7c, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x0, 0x6, 0x6, 0xa, 0x10, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x1, 0x2, 0x7, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x5, 0x58, &(0x7f0000000cc0)=""/88, 0x40f00, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000d40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r3, r2, r2, r2, r2, r2, r2, 0x1], 0x0, 0x10, 0x1}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001200)={0x0, &(0x7f0000000ec0)=[@uexit={0x0, 0x18, 0x9b}, @wrmsr={0x1e, 0x20, {0x0, 0x7}}, @uexit={0x0, 0x18, 0x661e}, @wrmsr={0x1e, 0x20, {0x2cb, 0x4}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x46, 0x20, {0x2, 0x7}}, @wr_crn={0x46, 0x20, {0x2, 0xb33}}, @cpuid={0x14, 0x18, {0x0, 0x3ff}}, @wrmsr={0x1e, 0x20, {0x22e, 0xffffffffffffff73}}, @cpuid={0x14, 0x18, {0x1, 0x19b1c080}}, @wrmsr={0x1e, 0x20, {0xa27, 0x2}}, @rdmsr={0x32, 0x18, {0xb2c}}, @uexit={0x0, 0x18, 0x681}, @rdmsr={0x32, 0x18, {0x85d}}, @uexit={0x0, 0x18, 0x1f9}, @wrmsr={0x1e, 0x20, {0xa9a, 0x5}}, @wr_crn={0x46, 0x20, {0xe, 0xa6}}, @cpuid={0x14, 0x18, {0x2, 0x4e1c}}, @rdmsr={0x32, 0x18, {0x396}}, @cpuid={0x14, 0x18, {0x3ff, 0x80}}, @rdmsr={0x32, 0x18, {0x266}}, @uexit={0x0, 0x18, 0x10000}, @code={0xa, 0x76, {"66baf80cb8add19589ef66bafc0cec66450fc7b4b1a8000000f30f0964f3aab9160a0000b841948a44ba9e6a40370f30b8010000000f01c1b9800000c00f3235000400000f30b906040000b8058a0000ba000000000f3066b8c2000f00d8652e65360f01cb"}}, @wr_crn={0x46, 0x20, {0x3, 0xcc06}}, @cpuid={0x14, 0x18, {0x6, 0xfffffffb}}, @uexit={0x0, 0x18, 0x7fffffff}, @wr_crn={0x46, 0x20, {0x2, 0x6}}], 0x336}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000001240)={0x4, 0x0, [{0x0, 0x7, 0x0, 0xf351, 0xa644, 0x6, 0x8}, {0xc0000000, 0x2, 0x3, 0x7, 0x3, 0x0, 0x5d}, {0x7, 0x2, 0x0, 0x2800, 0x40000000, 0x4, 0x7}, {0x6, 0x7, 0x0, 0x5, 0x2, 0x202, 0x7}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001300)=0xc, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001340), 0x280280) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001380), 0x4) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f00000013c0)="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") write(r1, &(0x7f00000014c0)="fbedea8ada80b24b1f19adb88f88a2a781e949808eb2a8989bfb7c806f73db0180b0d3e10139e2fe1bfa5d1a5dbb62471674c6a8a13dcceff431650def9c9910911b314274d1f756174757dac6281869c9ccde9452b30f324bccd2c6434a56a4d838c94ebaa849b74341a5bbfd02a37d643f92a3cd40acb9c6d52c7e946123f6bcda02d2111ddd70c96092638c25787dc1a4e9bc7020", 0x96) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000001580)={0x7, 0x0, [{0x6, 0x9, 0x1, 0x3, 0x3, 0x7, 0x5}, {0x7, 0x10, 0x4, 0x14d, 0x6, 0xfdc, 0x1}, {0x80000001, 0x9e92, 0x4, 0x7, 0x6, 0x80, 0x800}, {0x40000001, 0x0, 0x4, 0x80000000, 0x4, 0x593, 0x6}, {0xa, 0x9, 0x6, 0x1400, 0x1, 0x6, 0x9}, {0xc0000019, 0x9cf, 0x4, 0xb36, 0x8, 0x9, 0x4000000}, {0x2, 0x9, 0x0, 0x5, 0x2, 0x8}]}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000016c0), 0x40000, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x4) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000000, 0x810, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000001740)=0x1, 0x0, 0x4) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000001780)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x5, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}]}, &(0x7f0000001800)='GPL\x00', 0x4b9, 0x63, &(0x7f0000001840)=""/99, 0x40f00, 0x9, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000018c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001900)=[r3, r3, r3], &(0x7f0000001940)=[{0x5, 0x1, 0x9, 0x1}, {0x3, 0x2, 0x7, 0xb}, {0x5, 0x5, 0xa, 0xa}, {0x2, 0x4, 0x9, 0x2}, {0x2, 0x4, 0xe, 0x2}, {0x2, 0x4, 0x1, 0x7}, {0x0, 0x3, 0xd, 0xc}, {0x0, 0x2, 0x6, 0xa}], 0x10, 0x2}, 0x94) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001ac0)={r3, r7, 0x25, 0x9, @void}, 0x10) r8 = openat2(r3, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x8000, 0x140, 0x23}, 0x18) r9 = fcntl$getown(r1, 0x9) fcntl$lock(r8, 0x25, &(0x7f0000001b80)={0x0, 0x4, 0x9, 0x100, r9}) 3.096798984s ago: executing program 1 (id=1015): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x4000804}, 0x1883cca9451965e9) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 2.77656949s ago: executing program 4 (id=1016): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x8108}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000380)) 1.644661963s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) unshare(0x40020000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'bridge_slave_1\x00', {0x2, 0x4e24, @multicast2}}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0xf5a1c2b8e98148d, [0x6, 0x1]}, {0x80000000, 0x0, 0x7, [0xffffffda, 0x9]}, 0x2, [0x5, 0x84000000]}) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 1.458604287s ago: executing program 4 (id=1018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0xc0684608, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8}, 0x50) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="6c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r3, @ANYBLOB="000000000000000018380000010000000000000000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff850000000600000018000000010000000000000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x8c, &(0x7f00000006c0)=""/140, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x0, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r3], &(0x7f0000000780)=[{0x1, 0x2, 0xd, 0xc}, {0x0, 0x1, 0x4, 0xb}, {0x3, 0x3, 0x0, 0x3}], 0x10, 0x7}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r4, 0x0, 0x8}, 0x62) (async) socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r7, 0x0, r8}, 0xc) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async, rerun: 32) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (rerun: 32) syz_io_uring_setup(0x239, &(0x7f00000008c0)={0x0, 0xb74f, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f00000002c0), 0x0) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) (async) recvfrom$rxrpc(r10, &(0x7f0000000940)=""/196, 0xc4, 0x10000, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 1.274254205s ago: executing program 4 (id=1019): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000107000044470000000000000a0000000c0002006e6c383032b03dd561351107c065070b6fac0439e30dc84960da3b8ff992b63c8062343b7aba36402a8d60e256274434be5b26698bed20f71ccdddc1d687bed7ffbbf3a4987d5a03315f1d7612a974576cb7e65034"], 0x20}, 0x1, 0x0, 0x0, 0x24008805}, 0x2404c015) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x1, 0x4000, 0xeeef0000, 0xffff1000], 0x100000000007, 0x14, 0x9}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x100}}, 0x14}}, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x800}, 0x9e) (async) r6 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x47bc, 0x97ff, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0xfffffff7, 0x1, 0x3}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1.212413446s ago: executing program 4 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x89aa, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r3, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x0, 0x400000, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000200000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c5258735b467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1080084c46ea7e2b347a36f5662403e1b2be4284322a4908a0d41649872971c7c56f0979bd10b97163c066d0e1903002f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a1173ba09087f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000209a028044ede964362cfb2f30a246c3b2f60000fc4ddd91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfab6b39baf879a14d4172f1d67c83795eae0d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c401d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef22b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc8679534f6b0505c7d728326d666f39e82cfcf7e7a85df288529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4dd60642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda649d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f58d419b3f4687bf0c06700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb65fda86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd25e778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086e76bfe3174e808abd82286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8ecc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2f6396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x840) 887.427041ms ago: executing program 2 (id=1021): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r3, 0x1, 0x2e, &(0x7f0000000780)=""/16, &(0x7f00000007c0)=0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="90480000004b030008000300", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x300000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x93}, 0x1c) 778.37024ms ago: executing program 4 (id=1022): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_es_remove_extent\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000000000000001a00"/28], 0x50) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000ff010000040000000001000090000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000003c0)={0x3ff, "7f58fb7b212713ef392da8d47b94ad8452829d73ea79dd9884dd03c4f116739b"}) close(r6) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="00f7e48931a4b5ad8933582f6937f57baa4af58ef62c1515f5c8794999cfd7a6f6f1bfa9b5185b7ad95e04add3eed616fbda9e3541978b47a698f40da540bd080dcfc4e01cce87b74d5223666e1bfe144e0a5e1617e233317b4b01c148e7681bb4d616ab8d0dfb67bcb4fe2262ab87ff12cd60"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x92}, 0x10}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xc3, 0xaf, 0xe, 0x8, 0x6f8, 0x3004, 0x5b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0xc, 0x80, 0x0, [{{0x9, 0x4, 0xa6, 0x3, 0x0, 0x3a, 0x6d, 0x33, 0x7}}, {{0x9, 0x4, 0x0, 0x8, 0x0, 0xff, 0xff, 0xff, 0xc}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x480001, &(0x7f00000002c0)={[{@uuid_on}], [{@smackfsroot={'smackfsroot', 0x3d, '(@'}}]}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 777.559044ms ago: executing program 0 (id=1023): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200001801400030000000200fd030800090007000d00050005000400"], 0x40}}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)=ANY=[@ANYBLOB="0186d800", @ANYRES16=r2, @ANYBLOB="10002dbd7000fbdbdf252800000008000300", @ANYRES32=r6, @ANYBLOB="0c009900070000003f0000000a00060050505050505000000a000600505050505050000095002a003e01037107ffff0100ff2140828340065708000000ffffffffffff0100000008021100000003000000000000000904080211000000060000000008021100000100000000010802110000000300000001080211000000070000000408021100000000f0ffff04ffffffffffff040000000008021100000005000000050802110000007f00000005080211000000060000000000000600360000000000060036000200000016002a008c10790442f6567efb6985f8f7a4cfff90520000"], 0x100}, 0x1, 0x0, 0x0, 0x2000011}, 0x8010) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r11, 0x0, 0x0}, 0x10) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) r12 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) connect$unix(r12, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r13 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$RNDADDENTROPY(r13, 0x40085203, &(0x7f0000000400)={0x9, 0x1000, "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"}) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd000000100001000c0810000c00000000040000", 0x58}], 0x1) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000001440)=@tipc=@name, 0x80, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/252, 0xfc}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000015c0)=""/98, 0x62}], 0x3, &(0x7f0000001680)=""/248, 0xf8}, 0x10000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="740000002b00010000000000fcdbdf25bec908da9c7654dbb21af88633e95d523e6c62df06343afcb735cf2c36cf11af90efc923e78af88ece687ee6aa480c754ef93c12a2e5254e9f78ee3eaef817af1faaa344449f2e45b57cb8667315cc3f402fc834ab89f7626f3bc600da4fa943d853dc0332fcc80e9e11d03ee20d3ecb139c659be5e7f2ee6fbe66628619196cd0622aa6efbd496eda24dff99140f0b9554f6efa2ed24d911b606a86cdfe0000000000000000", @ANYRES64=r1, @ANYRES16=r1, @ANYRESDEC=r7], 0x74}], 0x1, 0x0, 0x0, 0x40084}, 0x0) 660.606962ms ago: executing program 1 (id=1024): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='.\x00', &(0x7f00000006c0)='/proc/sysvipc/sem\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r2, 0xc6c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8cfe8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r4, 0x20c2789fb6c04185, &(0x7f0000000300)={0x3d7f4931, 0x3}, &(0x7f0000000340)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000001400000127bd7000fbdbdf250a408000", @ANYRES32=r8, @ANYBLOB="000002000000000000000006000000ffe0000001000009007d0400000000010000000000007f389cb17c3c248c00393000000000000000feffff0000000200fe880000000000000000000000000001eeff09000300000048424e902769104a"], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=1025): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r5, 0xfffff000, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): k: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 167.374969][ T5978] rc_core: IR keymap rc-hauppauge not found [ 167.393557][ T5978] Registered IR keymap rc-empty [ 167.403863][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.431924][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.494714][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 167.531337][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.584810][ T5978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.780080][ T9] usb 4-1: device descriptor read/64, error -71 [ 167.812145][ T5978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 167.974780][ T9] usb usb4-port1: attempt power cycle [ 168.229999][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.266390][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.892488][ T5169] usb 2-1: device descriptor read/all, error -71 [ 169.109868][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.132625][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.160220][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.199857][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.231579][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 169.245827][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.270837][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.335993][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.362827][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 169.573617][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 170.014092][ T6777] 9pnet_fd: Insufficient options for proto=fd [ 170.041324][ T5978] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 170.691451][ T5978] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.691977][ T5845] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 170.707536][ T5978] usb 5-1: USB disconnect, device number 5 [ 170.773063][ T5845] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.070616][ T5845] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.190094][ T5978] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 171.247611][ T5845] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.257865][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.270211][ T5845] usb 1-1: Product: syz [ 171.274520][ T5845] usb 1-1: Manufacturer: syz [ 171.279450][ T5845] usb 1-1: SerialNumber: syz [ 171.318106][ T5845] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.344190][ T5978] usb 5-1: device descriptor read/64, error -71 [ 171.412198][ T5169] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.590057][ T5978] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 171.752441][ T5978] usb 5-1: device descriptor read/64, error -71 [ 172.216004][ T5978] usb usb5-port1: attempt power cycle [ 172.491861][ T5169] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 172.513654][ T5169] ath9k_htc: Failed to initialize the device [ 172.597131][ T5169] usb 1-1: ath9k_htc: USB layer deinitialized [ 172.721444][ T6805] netlink: 64 bytes leftover after parsing attributes in process `syz.1.223'. [ 173.886129][ T980] usb 1-1: USB disconnect, device number 11 [ 174.624264][ T6821] ªªªªªª2g,¾{: renamed from lo (while UP) [ 176.855180][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 177.365596][ T6845] –: renamed from vxcan1 (while UP) [ 177.519536][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 178.513855][ T6853] block device autoloading is deprecated and will be removed. [ 178.770934][ T6853] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 179.880116][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 179.916942][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 180.023097][ T6863] netlink: 'syz.1.236': attribute type 15 has an invalid length. [ 180.259798][ T92] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.439806][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 180.457690][ T92] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 180.476578][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.516549][ T92] usb 2-1: config 0 has no interface number 0 [ 180.552875][ T92] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 180.570630][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.593906][ T92] usb 2-1: Product: syz [ 180.598155][ T92] usb 2-1: Manufacturer: syz [ 180.625123][ T92] usb 2-1: SerialNumber: syz [ 180.646966][ T92] usb 2-1: config 0 descriptor?? [ 180.886085][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.925027][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.039962][ T92] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.222552][ T92] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 181.240441][ T92] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 181.255281][ T92] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 181.275228][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.296434][ T92] usb 1-1: config 0 descriptor?? [ 181.417998][ T6879] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.431233][ T6880] net_ratelimit: 10 callbacks suppressed [ 181.431253][ T6880] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 181.664497][ T6883] QAT: failed to copy from user. [ 181.694808][ T6883] overlayfs: failed to resolve './file1': -2 [ 181.749976][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 181.964619][ T6882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.241'. [ 182.336754][ T980] usb 2-1: USB disconnect, device number 8 [ 182.450824][ T92] usb 1-1: string descriptor 0 read error: -71 [ 182.531653][ T92] usb 1-1: USB disconnect, device number 12 [ 185.303049][ T92] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.099880][ T92] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.120213][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.129450][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.149754][ T92] usb 1-1: Product: syz [ 186.153990][ T92] usb 1-1: Manufacturer: syz [ 186.158837][ T92] usb 1-1: SerialNumber: syz [ 186.497168][ T30] audit: type=1326 audit(1755946813.023:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.4.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x0 [ 186.773175][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.829636][ T980] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.952103][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.968176][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.981863][ T5845] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.003522][ T980] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 187.008405][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.019814][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.036202][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.045477][ T5845] usb 2-1: config 0 descriptor?? [ 187.054146][ T980] usb 4-1: config 0 descriptor?? [ 187.070317][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.328545][ T92] cdc_ncm 1-1:1.0: bind() failure [ 187.341314][ T92] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 187.348207][ T92] cdc_ncm 1-1:1.1: bind() failure [ 187.361652][ T92] usb 1-1: USB disconnect, device number 13 [ 188.668894][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 188.669024][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 188.714263][ T5845] usb 2-1: USB disconnect, device number 9 [ 188.962290][ T6955] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 188.982251][ T6955] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 189.316887][ T980] usb 4-1: string descriptor 0 read error: -71 [ 189.330540][ T980] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 189.377991][ T980] gspca_sunplus: reg_w_riv err -71 [ 189.396181][ T980] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 189.506179][ T980] usb 4-1: USB disconnect, device number 9 [ 189.619934][ T5845] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.642887][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'. [ 189.669878][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'. [ 189.747086][ T6971] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 189.806040][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 189.815140][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 189.834400][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 189.854216][ T5845] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 189.879801][ T5845] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.916347][ T5845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.929937][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.944624][ T5845] usb 1-1: SerialNumber: syz [ 189.957068][ T6961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.000073][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 190.150309][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 190.182049][ T43] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 190.200199][ T43] usb 4-1: config 0 has no interface number 0 [ 190.206879][ T43] usb 4-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=6f.cd [ 190.220276][ T5845] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.254738][ T5845] usb 1-1: USB disconnect, device number 14 [ 190.268168][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.319207][ T43] usb 4-1: config 0 descriptor?? [ 190.340295][ T43] usb 4-1: active config #0 != 1 ?? [ 190.629808][ T980] usb 4-1: USB disconnect, device number 10 [ 191.969084][ T7005] process 'syz.2.266' launched './file2' with NULL argv: empty string added [ 192.080007][ T980] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.251673][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 192.273891][ T980] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 192.337255][ T980] usb 4-1: config 254 has no interface number 0 [ 192.594179][ T980] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 192.632829][ T980] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.660841][ T980] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.686147][ T980] usb 4-1: config 254 interface 235 has no altsetting 0 [ 192.702407][ T980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 192.711834][ T980] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 192.739791][ T980] usb 4-1: Product: syz [ 192.759854][ T980] usb 4-1: Manufacturer: syz [ 192.767015][ T980] usb 4-1: SerialNumber: syz [ 192.790334][ T6995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.010400][ T6995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.019518][ T980] usbtest 4-1:254.235: Linux gadget zero [ 193.028238][ T980] usbtest 4-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 193.232506][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 193.671136][ T6995] dummy0: entered allmulticast mode [ 193.710058][ T6995] batman_adv: batadv0: Adding interface: dummy0 [ 193.720021][ T6995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.810219][ T6995] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 193.872663][ T92] usb 4-1: USB disconnect, device number 11 [ 194.073137][ T7021] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 194.121489][ T7021] team0: Port device wlan1 added [ 194.445995][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 195.205401][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 196.006181][ T7040] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 196.167030][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.421295][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 196.827260][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.980252][ T43] usb 4-1: device descriptor read/64, error -71 [ 197.136572][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 197.230303][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.379923][ T43] usb 4-1: device descriptor read/64, error -71 [ 197.507109][ T43] usb usb4-port1: attempt power cycle [ 198.770160][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.824961][ T43] usb 4-1: device descriptor read/8, error -71 [ 199.312547][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.534543][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.211845][ T43] usb 4-1: device descriptor read/8, error -71 [ 200.299875][ T5954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.336962][ T43] usb usb4-port1: unable to enumerate USB device [ 200.531079][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 200.598074][ T5954] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.598480][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.637281][ T5954] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.637896][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.825148][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.832874][ T5954] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 200.927241][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.000733][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.007379][ T7073] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 201.009350][ T5954] hub 2-1:1.0: bad descriptor, ignoring hub [ 201.009380][ T5954] hub 2-1:1.0: probe with driver hub failed with error -5 [ 201.027625][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 201.027650][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 201.047783][ T5954] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 201.047825][ T5954] cdc_wdm 2-1:1.0: Unknown control protocol [ 201.155629][ T43] usb 4-1: New USB device found, idVendor=8420, idProduct=157a, bcdDevice=77.64 [ 201.189856][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.199008][ T43] usb 4-1: Product: syz [ 201.205438][ T43] usb 4-1: Manufacturer: syz [ 201.219520][ T43] usb 4-1: SerialNumber: syz [ 201.232343][ T43] usb 4-1: config 0 descriptor?? [ 201.293284][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.300199][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.307170][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.313826][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.320200][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.326845][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.333148][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.339788][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.347415][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.354092][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.360890][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.367545][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.373933][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.380574][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.387038][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.393671][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.400047][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.406683][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.413032][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 201.419673][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 201.547715][ T5978] usb 4-1: USB disconnect, device number 16 [ 201.885504][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 202.659020][ T5169] usb 2-1: USB disconnect, device number 10 [ 205.780114][ T5169] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 205.940172][ T5954] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 205.969844][ T5169] usb 2-1: Using ep0 maxpacket: 32 [ 205.978508][ T5169] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.997672][ T5169] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 206.019859][ T5169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.028010][ T5169] usb 2-1: Product: syz [ 206.060027][ T5169] usb 2-1: Manufacturer: syz [ 206.064702][ T5169] usb 2-1: SerialNumber: syz [ 206.074413][ T5169] usb 2-1: config 0 descriptor?? [ 206.109818][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 206.131980][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.154211][ T5954] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 206.163906][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.178567][ T5954] usb 1-1: Product: syz [ 206.193618][ T5954] usb 1-1: Manufacturer: syz [ 206.198913][ T5954] usb 1-1: SerialNumber: syz [ 206.211393][ T5954] usb 1-1: config 0 descriptor?? [ 206.430872][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.452652][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.656894][ T5954] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 206.699468][ T5954] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 206.818373][ T5954] usb 1-1: USB disconnect, device number 15 [ 206.995640][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.188899][ T980] usb 5-1: config 0 has no interfaces? [ 207.205927][ T980] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 207.223280][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.244754][ T980] usb 5-1: Product: syz [ 207.255445][ T980] usb 5-1: Manufacturer: syz [ 207.273362][ T980] usb 5-1: SerialNumber: syz [ 207.295519][ T980] usb 5-1: config 0 descriptor?? [ 207.451004][ T5169] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 207.458130][ T5169] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 207.564435][ T5169] usb 5-1: USB disconnect, device number 9 [ 209.620148][ T980] usb 2-1: USB disconnect, device number 11 [ 210.602739][ T7181] syzkaller1: entered promiscuous mode [ 210.608307][ T7181] syzkaller1: entered allmulticast mode [ 210.681051][ T7181] binder: BINDER_SET_CONTEXT_MGR already set [ 210.752548][ T7181] binder: 7178:7181 ioctl 4018620d 200000004a80 returned -16 [ 212.667549][ T7212] tty tty26: ldisc open failed (-12), clearing slot 25 [ 212.935868][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.020571][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.230428][ T5978] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 213.461237][ T5169] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.731271][ T5169] usb 4-1: Using ep0 maxpacket: 16 [ 213.805296][ T5169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.846347][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.359991][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 214.652385][ T5978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.667746][ T5978] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 214.683741][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.686556][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.695815][ T5978] usb 1-1: config 0 descriptor?? [ 214.754398][ T5169] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.790521][ T5169] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.804140][ T5169] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.813405][ T5169] usb 4-1: Manufacturer: syz [ 214.834044][ T5169] usb 4-1: config 0 descriptor?? [ 214.847580][ T7246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=41663 (83326 ns) > initial count (4462 ns). Using initial count to start timer. [ 215.119830][ T5169] rc_core: IR keymap rc-hauppauge not found [ 215.127620][ T5169] Registered IR keymap rc-empty [ 215.138018][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 215.309260][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 215.339989][ T980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.341257][ T5169] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 215.378187][ T5169] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 215.414434][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 216.096332][ T980] usb 5-1: device descriptor read/64, error -71 [ 216.104036][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.146862][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.148089][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.210019][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.230251][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.259945][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.289870][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.336856][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.359802][ T980] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.363372][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.488733][ T5927] usb 1-1: USB disconnect, device number 16 [ 216.529996][ T980] usb 5-1: device descriptor read/64, error -71 [ 216.680722][ T980] usb usb5-port1: attempt power cycle [ 216.907440][ T5845] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 216.944381][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.960743][ T7273] ubi31: attaching mtd0 [ 216.967823][ T7273] ubi31: scanning is finished [ 216.972902][ T7273] ubi31: empty MTD device detected [ 216.984513][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 216.990635][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 216.990888][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 216.996706][ T5155] Bluetooth: hci0: command 0x0406 tx timeout [ 217.002924][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 217.011220][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.039915][ T5169] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.090081][ T980] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.110388][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 217.136264][ T980] usb 5-1: device descriptor read/8, error -71 [ 217.145503][ T5169] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 217.185957][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.210212][ T7273] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 217.217876][ T7273] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 217.225936][ T7273] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 217.233606][ T7273] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 217.242532][ T7273] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 217.249437][ T7273] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 217.257588][ T7273] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2935165850 [ 217.267811][ T7273] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 217.279628][ T7279] ubi31: background thread "ubi_bgt31d" started, PID 7279 [ 217.279995][ T5169] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.320029][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.349366][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 217.373889][ T5845] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.390145][ T7280] nbd: couldn't find a device at index 65546 [ 217.393508][ T5169] usb 4-1: USB disconnect, device number 17 [ 217.420645][ T980] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.428517][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.475550][ T980] usb 5-1: device descriptor read/8, error -71 [ 217.484784][ T5845] usb 2-1: config 0 descriptor?? [ 217.550087][ T5845] hub 2-1:0.0: USB hub found [ 217.600427][ T980] usb usb5-port1: unable to enumerate USB device [ 217.728350][ T5845] hub 2-1:0.0: 1 port detected [ 218.110525][ T5852] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6 [ 218.228163][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.343'. [ 218.614424][ T7297] misc userio: The device must be registered before sending interrupts [ 219.375112][ T5845] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 219.400175][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 219.421274][ T7294] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 219.428962][ T7294] netlink: 224 bytes leftover after parsing attributes in process `syz.0.345'. [ 219.716158][ T7297] misc userio: The device must be registered before sending interrupts [ 220.930277][ T92] usb 2-1: USB disconnect, device number 12 [ 221.572977][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 222.269635][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.310633][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.316151][ T7329] orangefs_mount: mount request failed with -4 [ 222.380333][ T92] IPVS: starting estimator thread 0... [ 222.489311][ T7338] IPVS: using max 26 ests per chain, 62400 per kthread [ 222.720458][ T980] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.919953][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 222.989738][ T980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.173800][ T980] usb 2-1: config 0 has no interface number 0 [ 223.296842][ T980] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.495055][ T980] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.538939][ T980] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 223.590769][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.662371][ T980] usb 2-1: config 0 descriptor?? [ 223.898905][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 223.992069][ T980] usbhid 2-1:0.1: can't add hid device: -71 [ 224.016075][ T980] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 224.116532][ T980] usb 2-1: USB disconnect, device number 13 [ 224.559954][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.762963][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 224.795815][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.826385][ T980] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 224.867952][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.892956][ T980] usb 2-1: config 0 descriptor?? [ 225.649526][ T980] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 226.232154][ T980] usb 2-1: USB disconnect, device number 14 [ 227.701433][ T7415] input: syz0 as /devices/virtual/input/input10 [ 228.330316][ T980] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 228.450534][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 228.459419][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 229.209972][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 229.296203][ T980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 229.319870][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 229.333257][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 229.345600][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 229.357311][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 229.414327][ T980] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 229.429020][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.443653][ T980] usb 1-1: Product: syz [ 229.451165][ T980] usb 1-1: Manufacturer: syz [ 229.459137][ T980] usb 1-1: SerialNumber: syz [ 229.476713][ T980] usb 1-1: config 0 descriptor?? [ 229.532620][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 229.546283][ T7435] IPVS: Error joining to the multicast group [ 229.696907][ T980] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 229.739391][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.773121][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.813882][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.845916][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.870690][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.903324][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.939542][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.964874][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 229.993879][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.034114][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.068020][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.113748][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.144930][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.157851][ T7451] loop7: detected capacity change from 0 to 16384 [ 230.176112][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.226143][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.247390][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.303528][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.326898][ T980] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 230.355598][ T980] input input11: Timeout waiting for response from device. [ 230.393430][ T980] usb 1-1: USB disconnect, device number 17 [ 230.420267][ C1] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 230.430532][ C0] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.432030][ T7453] loop7: detected capacity change from 16384 to 0 [ 230.440018][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 230.545724][ C0] I/O error, dev loop7, sector 1544 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 232.194176][ T30] audit: type=1326 audit(1755946858.723:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7464 comm="syz.3.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x0 [ 232.693495][ T7476] ceph: Path missing in source [ 234.165142][ T7494] sctp: [Deprecated]: syz.4.392 (pid 7494) Use of int in max_burst socket option deprecated. [ 234.165142][ T7494] Use struct sctp_assoc_value instead [ 234.214650][ T7497] ip_tunnel: non-ECT from 172.30.1.3 with TOS=0x3 [ 234.945435][ T7517] netlink: 129704 bytes leftover after parsing attributes in process `syz.2.396'. [ 235.059297][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.068501][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.318366][ T7524] sctp: [Deprecated]: syz.4.397 (pid 7524) Use of int in maxseg socket option. [ 235.318366][ T7524] Use struct sctp_assoc_value instead [ 237.544523][ T7543] tipc: Started in network mode [ 237.549444][ T7543] tipc: Node identity b62721f9ab1b, cluster identity 4711 [ 237.604532][ T7543] tipc: Enabled bearer , priority 0 [ 237.645126][ T7542] syzkaller0: entered promiscuous mode [ 237.671705][ T7542] syzkaller0: entered allmulticast mode [ 237.923942][ T7541] tipc: Resetting bearer [ 238.661030][ T5927] tipc: Node number set to 490480121 [ 238.689520][ T7541] tipc: Disabling bearer [ 238.779841][ T92] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 238.939995][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 238.990007][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 239.047062][ T92] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 239.070279][ T92] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.414162][ T92] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.137369][ T92] usb 1-1: Product: syz [ 242.141850][ T92] usb 1-1: Manufacturer: syz [ 242.146465][ T92] usb 1-1: SerialNumber: syz [ 242.153300][ T92] usb 1-1: config 0 descriptor?? [ 242.160732][ T92] usb 1-1: can't set config #0, error -71 [ 242.177406][ T92] usb 1-1: USB disconnect, device number 18 [ 244.113789][ T7589] binder: BINDER_SET_CONTEXT_MGR already set [ 244.120217][ T7589] binder: 7587:7589 ioctl 4018620d 200000000040 returned -16 [ 247.711564][ T7671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.303246][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 251.329849][ T5169] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.520031][ T5169] usb 5-1: Using ep0 maxpacket: 16 [ 251.542849][ T5169] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 251.552895][ T5169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.570997][ T5169] usb 5-1: config 0 has no interface number 0 [ 251.583605][ T5169] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 251.593199][ T5169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.602274][ T5169] usb 5-1: Product: syz [ 251.606573][ T5169] usb 5-1: Manufacturer: syz [ 251.612458][ T5169] usb 5-1: SerialNumber: syz [ 251.653067][ T5169] usb 5-1: config 0 descriptor?? [ 251.682990][ T5169] asix 5-1:0.251: probe with driver asix failed with error -22 [ 251.991755][ T7707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.017067][ T7712] FAULT_INJECTION: forcing a failure. [ 252.017067][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.031457][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.3.430 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 252.031478][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.031487][ T7712] Call Trace: [ 252.031493][ T7712] [ 252.031500][ T7712] dump_stack_lvl+0x189/0x250 [ 252.031523][ T7712] ? __pfx____ratelimit+0x10/0x10 [ 252.031540][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.031557][ T7712] ? __pfx__printk+0x10/0x10 [ 252.031577][ T7712] ? __might_fault+0xb0/0x130 [ 252.031601][ T7712] should_fail_ex+0x414/0x560 [ 252.031620][ T7712] _copy_from_iter+0x1db/0x16f0 [ 252.031642][ T7712] ? rcu_is_watching+0x15/0xb0 [ 252.031660][ T7712] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 252.031677][ T7712] ? __pfx__copy_from_iter+0x10/0x10 [ 252.031698][ T7712] ? __build_skb_around+0x257/0x3e0 [ 252.031722][ T7712] ? netlink_sendmsg+0x642/0xb30 [ 252.031744][ T7712] ? skb_put+0x11b/0x210 [ 252.031768][ T7712] netlink_sendmsg+0x6b2/0xb30 [ 252.031797][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.031826][ T7712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.031841][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.031864][ T7712] __sock_sendmsg+0x21c/0x270 [ 252.031884][ T7712] ____sys_sendmsg+0x505/0x830 [ 252.031912][ T7712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.031943][ T7712] ? import_iovec+0x74/0xa0 [ 252.031967][ T7712] ___sys_sendmsg+0x21f/0x2a0 [ 252.031992][ T7712] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.032043][ T7712] ? __fget_files+0x2a/0x420 [ 252.032059][ T7712] ? __fget_files+0x3a0/0x420 [ 252.032084][ T7712] __x64_sys_sendmsg+0x19b/0x260 [ 252.032110][ T7712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.032142][ T7712] ? __pfx_ksys_write+0x10/0x10 [ 252.032160][ T7712] ? do_syscall_64+0xbe/0x3b0 [ 252.032180][ T7712] do_syscall_64+0xfa/0x3b0 [ 252.032196][ T7712] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.032212][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.032227][ T7712] ? clear_bhb_loop+0x60/0xb0 [ 252.032246][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.032260][ T7712] RIP: 0033:0x7f132d18ebe9 [ 252.032274][ T7712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.032287][ T7712] RSP: 002b:00007f132b3ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.032303][ T7712] RAX: ffffffffffffffda RBX: 00007f132d3b5fa0 RCX: 00007f132d18ebe9 [ 252.032314][ T7712] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 252.032324][ T7712] RBP: 00007f132b3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 252.032333][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.032341][ T7712] R13: 00007f132d3b6038 R14: 00007f132d3b5fa0 R15: 00007fffb1eac7b8 [ 252.032365][ T7712] [ 252.337172][ T7707] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 252.619434][ T7707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.635859][ T7707] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 252.665979][ T7707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.713576][ T7707] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 252.769266][ T7707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.786935][ T7707] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 253.045728][ T7707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.066840][ T7707] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 254.019823][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 254.481943][ T5978] usb 5-1: USB disconnect, device number 14 [ 254.649990][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 254.732313][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 254.804787][ T5169] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 254.820054][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 254.985031][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.002425][ T5978] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 255.021997][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.048248][ T5169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.071233][ T5169] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.084333][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.105432][ T5169] usb 4-1: config 0 descriptor?? [ 255.133261][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 255.207113][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 255.453430][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 255.615609][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.683111][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 255.820328][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.828006][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 255.891136][ T5169] plantronics 0003:047F:FFFF.0005: collection stack underflow [ 255.908968][ T5169] plantronics 0003:047F:FFFF.0005: item 0 2 0 12 parsing failed [ 255.917927][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 255.940842][ T5169] plantronics 0003:047F:FFFF.0005: parse failed [ 255.979903][ T5169] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 256.008573][ T5978] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 256.038242][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.056976][ T5978] usb 5-1: Product: syz [ 256.079750][ T5978] usb 5-1: Manufacturer: syz [ 256.089398][ T5978] usb 5-1: SerialNumber: syz [ 256.094340][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 256.120974][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.121001][ T5978] usb 5-1: config 0 descriptor?? [ 256.417974][ T5978] usb 4-1: USB disconnect, device number 18 [ 256.451821][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 256.493228][ T7754] loop2: detected capacity change from 0 to 7 [ 256.523175][ T7754] loop2: [ 256.534889][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.584911][ T7757] fuse: Unknown parameter 'gùoup_id' [ 256.660199][ T7754] loop2: partition table partially beyond EOD, truncated [ 256.672316][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.731841][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 256.772927][ T7756] tmpfs: Bad value for 'mpol' [ 256.809845][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 256.889770][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 257.209793][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 257.497481][ T7762] FAULT_INJECTION: forcing a failure. [ 257.497481][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 257.510330][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.1.443 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 257.510364][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.510378][ T7762] Call Trace: [ 257.510387][ T7762] [ 257.510396][ T7762] dump_stack_lvl+0x189/0x250 [ 257.510428][ T7762] ? __pfx____ratelimit+0x10/0x10 [ 257.510452][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.510478][ T7762] ? __pfx__printk+0x10/0x10 [ 257.510514][ T7762] ? ref_tracker_alloc+0x318/0x460 [ 257.510543][ T7762] should_fail_ex+0x414/0x560 [ 257.510571][ T7762] should_failslab+0xa8/0x100 [ 257.510597][ T7762] kmem_cache_alloc_noprof+0x73/0x3c0 [ 257.510618][ T7762] ? skb_clone+0x212/0x3a0 [ 257.510646][ T7762] skb_clone+0x212/0x3a0 [ 257.510671][ T7762] __netlink_deliver_tap+0x404/0x850 [ 257.510715][ T7762] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.510748][ T7762] netlink_deliver_tap+0x19c/0x1b0 [ 257.510781][ T7762] netlink_unicast+0x730/0x8e0 [ 257.510822][ T7762] netlink_sendmsg+0x805/0xb30 [ 257.510864][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.510905][ T7762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.510927][ T7762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.510960][ T7762] __sock_sendmsg+0x21c/0x270 [ 257.510990][ T7762] ____sys_sendmsg+0x505/0x830 [ 257.511031][ T7762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.511077][ T7762] ? import_iovec+0x74/0xa0 [ 257.511137][ T7762] ___sys_sendmsg+0x21f/0x2a0 [ 257.511184][ T7762] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.511261][ T7762] ? __fget_files+0x2a/0x420 [ 257.511285][ T7762] ? __fget_files+0x3a0/0x420 [ 257.511323][ T7762] __x64_sys_sendmsg+0x19b/0x260 [ 257.511368][ T7762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.511414][ T7762] ? __pfx_ksys_write+0x10/0x10 [ 257.511442][ T7762] ? rcu_is_watching+0x15/0xb0 [ 257.511472][ T7762] ? do_syscall_64+0xbe/0x3b0 [ 257.511502][ T7762] do_syscall_64+0xfa/0x3b0 [ 257.511525][ T7762] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.511548][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.511570][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 257.511597][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.511618][ T7762] RIP: 0033:0x7fec8818ebe9 [ 257.511637][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.511655][ T7762] RSP: 002b:00007fec88f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.511678][ T7762] RAX: ffffffffffffffda RBX: 00007fec883b5fa0 RCX: 00007fec8818ebe9 [ 257.511694][ T7762] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 257.511708][ T7762] RBP: 00007fec88f48090 R08: 0000000000000000 R09: 0000000000000000 [ 257.511721][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.511733][ T7762] R13: 00007fec883b6038 R14: 00007fec883b5fa0 R15: 00007ffff1b9e208 [ 257.511768][ T7762] [ 258.128472][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 258.186666][ T5845] usb 5-1: USB disconnect, device number 15 [ 258.442674][ T7771] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 258.450663][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.446'. [ 260.221217][ T7771] batman_adv: batadv0: Adding interface: virt_wifi0 [ 260.241434][ T7771] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.289368][ T7771] batman_adv: batadv0: Interface activated: virt_wifi0 [ 261.643857][ T7802] Lens B: ================= START STATUS ================= [ 261.652030][ T7802] Lens B: Focus, Absolute: 0 [ 261.657035][ T7802] Lens B: ================== END STATUS ================== [ 262.413747][ T7785] o2cb: This node has not been configured. [ 262.419903][ T7785] o2cb: Cluster check failed. Fix errors before retrying. [ 262.427070][ T7785] (syz.1.449,7785,1):user_dlm_register:674 ERROR: status = -22 [ 262.434708][ T7785] (syz.1.449,7785,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 262.942890][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 263.622221][ T7829] batadv0: entered promiscuous mode [ 263.629012][ T7829] bond0: entered promiscuous mode [ 263.673600][ T7829] bond_slave_0: entered promiscuous mode [ 263.679560][ T7829] bond_slave_1: entered promiscuous mode [ 263.708659][ T7829] hsr1: entered allmulticast mode [ 263.714777][ T7829] batadv0: entered allmulticast mode [ 263.720289][ T7829] bond0: entered allmulticast mode [ 263.725694][ T7829] bond_slave_0: entered allmulticast mode [ 263.731632][ T7829] bond_slave_1: entered allmulticast mode [ 263.738101][ T7829] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 263.970570][ T980] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 264.129852][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 264.151561][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.171770][ T980] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 264.209799][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.223197][ T980] usb 2-1: config 0 descriptor?? [ 264.289277][ T7851] syzkaller1: entered promiscuous mode [ 264.294969][ T7851] syzkaller1: entered allmulticast mode [ 264.372571][ T7854] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 264.426799][ T7854] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 264.435920][ T7854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.468'. [ 264.498085][ T7854] team0: Port device geneve0 added [ 264.566974][ T7855] loop6: detected capacity change from 0 to 524287999 [ 264.631087][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.662281][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 264.668373][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.677112][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.711137][ T980] usb 2-1: USB disconnect, device number 15 [ 264.752534][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.761385][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.772797][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.782971][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.796798][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.811929][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.829175][ T7855] ldm_validate_partition_table(): Disk read failed. [ 264.841405][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.853243][ T7855] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.873674][ T7855] Dev loop6: unable to read RDB block 0 [ 264.883637][ T7855] loop6: unable to read partition table [ 264.918867][ T7855] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 265.027452][ T7866] misc userio: The device must be registered before sending interrupts [ 265.195573][ T7866] misc userio: The device must be registered before sending interrupts [ 265.682384][ T7884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.699834][ T30] audit: type=1326 audit(1755946892.203:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 265.739998][ T92] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 265.794581][ T30] audit: type=1326 audit(1755946892.203:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 265.836550][ T30] audit: type=1326 audit(1755946892.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 265.894272][ T30] audit: type=1326 audit(1755946892.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 265.939841][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 265.971295][ T92] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 265.979444][ T92] usb 4-1: config 0 has no interface number 0 [ 265.988116][ T30] audit: type=1326 audit(1755946892.203:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 266.020440][ T92] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.038322][ T30] audit: type=1326 audit(1755946892.203:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 266.069865][ T92] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.079588][ T92] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.088099][ T92] usb 4-1: Product: syz [ 266.092853][ T92] usb 4-1: SerialNumber: syz [ 266.101130][ T30] audit: type=1326 audit(1755946892.203:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 266.134103][ T92] usb 4-1: config 0 descriptor?? [ 266.154803][ T92] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 266.265241][ T30] audit: type=1326 audit(1755946892.203:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 266.364890][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.373345][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.382287][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.389946][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.397175][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.404404][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.412688][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.419923][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.427138][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.434445][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.444062][ T92] usb 4-1: USB disconnect, device number 19 [ 266.444139][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 266.465397][ T30] audit: type=1326 audit(1755946892.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 266.515822][ T92] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 266.527399][ T30] audit: type=1326 audit(1755946892.203:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3258ebe9 code=0x7ffc0000 [ 267.257221][ T7903] netlink: 68 bytes leftover after parsing attributes in process `syz.3.480'. [ 267.608977][ T7908] misc userio: The device must be registered before sending interrupts [ 267.783044][ T980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 267.798829][ T7908] misc userio: The device must be registered before sending interrupts [ 267.975667][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 268.012923][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.099259][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.177907][ T980] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 268.271102][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.502483][ T980] usb 4-1: config 0 descriptor?? [ 269.614541][ T980] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 270.563993][ T5927] usb 4-1: USB disconnect, device number 20 [ 270.791895][ T980] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 271.720493][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 271.758802][ T980] usb 2-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 271.787811][ T7932] fido_id[7932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.841089][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.899208][ T980] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 271.931145][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.977306][ T980] usb 2-1: config 0 descriptor?? [ 272.221665][ T980] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 272.453844][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.491'. [ 272.765162][ T7964] misc userio: The device must be registered before sending interrupts [ 273.015028][ T7964] misc userio: The device must be registered before sending interrupts [ 273.905074][ T5169] usb 2-1: USB disconnect, device number 16 [ 275.105254][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.120213][ T7986] 9pnet_fd: Insufficient options for proto=fd [ 275.128391][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.499920][ T5169] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 275.602949][ T7995] bridge1: entered promiscuous mode [ 276.430087][ T5845] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.680659][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.794158][ T5845] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 276.889505][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.070952][ T5845] usb 5-1: config 0 descriptor?? [ 277.410097][ T5169] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 277.436295][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 277.552322][ T5845] usbhid 5-1:0.0: can't add hid device: -71 [ 277.558398][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 277.579836][ T5845] usb 5-1: USB disconnect, device number 16 [ 277.590669][ T5169] usb 4-1: device descriptor read/64, error -71 [ 277.683899][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 277.695251][ T8024] bridge_slave_1: left allmulticast mode [ 277.701560][ T8024] bridge_slave_1: left promiscuous mode [ 277.707610][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.737052][ T8024] bridge_slave_0: left allmulticast mode [ 277.745012][ T8024] bridge_slave_0: left promiscuous mode [ 277.766514][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.860163][ T5169] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 278.059758][ T5169] usb 4-1: device descriptor read/64, error -71 [ 278.173064][ T5169] usb usb4-port1: attempt power cycle [ 279.269772][ T5169] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 279.310449][ T5169] usb 4-1: device descriptor read/8, error -71 [ 279.559805][ T5169] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 279.593142][ T5169] usb 4-1: device descriptor read/8, error -71 [ 279.700274][ T5169] usb usb4-port1: unable to enumerate USB device [ 279.840153][ T980] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 279.849081][ T8038] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 280.014808][ T980] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 280.029257][ T980] usb 2-1: config 0 has no interface number 0 [ 280.044470][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 280.074558][ T980] usb 2-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice=a2.95 [ 280.099776][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.110966][ T980] usb 2-1: Product: syz [ 280.115187][ T980] usb 2-1: Manufacturer: syz [ 280.128547][ T980] usb 2-1: SerialNumber: syz [ 280.187251][ T980] usb 2-1: config 0 descriptor?? [ 280.203055][ T980] usb 2-1: NDI device with a latency value of 1 [ 280.472009][ T980] ftdi_sio 2-1:0.8: FTDI USB Serial Device converter detected [ 280.497313][ T980] ftdi_sio ttyUSB0: unknown device type: 0xa295 [ 280.514735][ T980] usb 2-1: USB disconnect, device number 18 [ 280.648974][ T980] ftdi_sio 2-1:0.8: device disconnected [ 281.195092][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 282.226187][ T8084] netlink: 'syz.2.527': attribute type 21 has an invalid length. [ 282.236578][ T8084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.527'. [ 282.248400][ T8084] netlink: 'syz.2.527': attribute type 5 has an invalid length. [ 282.257547][ T8084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.527'. [ 282.298757][ T8084] netlink: 'syz.2.527': attribute type 21 has an invalid length. [ 282.339292][ T8084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.527'. [ 282.350001][ T92] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 282.365070][ T8084] netlink: 'syz.2.527': attribute type 5 has an invalid length. [ 282.381153][ T8084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.527'. [ 282.489746][ T92] usb 4-1: device descriptor read/64, error -71 [ 282.742629][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 282.754043][ T92] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 283.130347][ T92] usb 4-1: device descriptor read/64, error -71 [ 283.250321][ T92] usb usb4-port1: attempt power cycle [ 283.599859][ T92] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 283.714099][ T92] usb 4-1: device descriptor read/8, error -71 [ 284.354871][ T92] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 284.442531][ T92] usb 4-1: device descriptor read/8, error -71 [ 284.609576][ T92] usb usb4-port1: unable to enumerate USB device [ 285.341190][ T8130] overlayfs: overlapping lowerdir path [ 285.428449][ T8131] overlay: ./bus is not a directory [ 286.037473][ T8132] o2cb: This node has not been configured. [ 286.043959][ T8132] o2cb: Cluster check failed. Fix errors before retrying. [ 286.052412][ T8132] (syz.0.535,8132,0):user_dlm_register:674 ERROR: status = -22 [ 286.060375][ T8132] (syz.0.535,8132,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 286.577030][ T8138] misc userio: The device must be registered before sending interrupts [ 286.958585][ T8138] misc userio: The device must be registered before sending interrupts [ 287.244095][ T8144] afs: Unknown parameter '' [ 287.267279][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 289.209541][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 290.224768][ T5978] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 290.375219][ T8187] kvm: pic: non byte write [ 290.859549][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 290.859569][ T30] audit: type=1800 audit(1755946917.383:49): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.556" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 291.060001][ T8196] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 291.084860][ T8196] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 291.190338][ T5927] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 291.287591][ T8196] netlink: 7446 bytes leftover after parsing attributes in process `syz.3.554'. [ 291.317557][ T8196] trusted_key: encrypted_key: insufficient parameters specified [ 291.333033][ T5927] usb 2-1: device descriptor read/64, error -71 [ 291.450707][ T92] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 291.475986][ T30] audit: type=1326 audit(1755946918.003:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.497409][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.720334][ T30] audit: type=1326 audit(1755946918.003:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.743179][ T30] audit: type=1326 audit(1755946918.003:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.764492][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.772237][ T5927] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 291.780517][ T30] audit: type=1326 audit(1755946918.003:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.805911][ T30] audit: type=1326 audit(1755946918.003:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.828071][ T30] audit: type=1326 audit(1755946918.003:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 291.849433][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.575099][ T5927] usb 2-1: device descriptor read/64, error -71 [ 292.588770][ T92] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 292.607932][ T92] usb 5-1: config 0 has no interface number 0 [ 292.615496][ T30] audit: type=1326 audit(1755946918.003:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 292.636878][ T92] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 292.687157][ T92] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 292.702679][ T5927] usb usb2-port1: attempt power cycle [ 292.709732][ T30] audit: type=1326 audit(1755946918.003:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 292.731046][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.742186][ T92] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 292.752000][ T92] usb 5-1: Product: syz [ 292.756224][ T92] usb 5-1: Manufacturer: syz [ 292.760464][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.562'. [ 292.761512][ T30] audit: type=1326 audit(1755946918.003:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 292.791831][ T92] usb 5-1: SerialNumber: syz [ 292.807369][ T92] usb 5-1: config 0 descriptor?? [ 292.826869][ T8213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 292.838115][ T92] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 292.851108][ T92] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 292.864752][ T92] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 292.878924][ T92] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 292.954649][ T92] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 292.992735][ T92] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 293.021512][ T92] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 293.089784][ T5927] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 293.245767][ T8213] tipc: Enabled bearer , priority 10 [ 294.002453][ T92] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 294.017745][ T92] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 294.029173][ T92] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 294.052623][ T5927] usb 2-1: device descriptor read/8, error -71 [ 294.479972][ T92] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 294.641959][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 294.671827][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.703395][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.728033][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.758876][ T92] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.773306][ T5169] usb 5-1: USB disconnect, device number 17 [ 294.782997][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.802674][ T5169] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 294.834627][ T92] usb 4-1: config 0 descriptor?? [ 294.856254][ T5169] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 294.918756][ T5169] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 294.965239][ T5169] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 295.002325][ T5169] keyspan 5-1:0.107: device disconnected [ 295.268824][ T92] plantronics 0003:047F:FFFF.0007: report_id 1982038556 is invalid [ 295.309819][ T92] plantronics 0003:047F:FFFF.0007: item 0 4 1 8 parsing failed [ 295.328631][ T92] plantronics 0003:047F:FFFF.0007: parse failed [ 295.339853][ T92] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 295.479134][ T92] usb 4-1: USB disconnect, device number 30 [ 295.509777][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 295.600520][ T5169] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 295.809784][ T5169] usb 1-1: Using ep0 maxpacket: 32 [ 295.827368][ T5169] usb 1-1: config 0 has an invalid interface number: 241 but max is 0 [ 295.845167][ T5169] usb 1-1: config 0 has no interface number 0 [ 295.865556][ T5169] usb 1-1: config 0 interface 241 altsetting 2 endpoint 0x82 has invalid maxpacket 592, setting to 64 [ 295.899516][ T5169] usb 1-1: config 0 interface 241 has no altsetting 0 [ 295.919064][ T5169] usb 1-1: New USB device found, idVendor=045e, idProduct=04d7, bcdDevice=6b.6c [ 295.936905][ T5169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.979035][ T5169] usb 1-1: Product: syz [ 295.983718][ T5169] usb 1-1: Manufacturer: syz [ 295.988444][ T5169] usb 1-1: SerialNumber: syz [ 296.013756][ T5169] usb 1-1: config 0 descriptor?? [ 296.232828][ T5169] usb 1-1: USB disconnect, device number 19 [ 297.560698][ T8284] input: syz0 as /devices/virtual/input/input14 [ 298.846993][ T8295] tmpfs: Unknown parameter 'nr_inodµs' [ 299.048554][ T8301] netlink: 'syz.3.580': attribute type 58 has an invalid length. [ 299.080661][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 299.091269][ T5927] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 299.543408][ T5927] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 299.553245][ T5927] usb 1-1: config 1 has no interface number 0 [ 299.559412][ T5927] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 299.573394][ T5927] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.363531][ T5927] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 300.379801][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.464233][ T5927] usb 1-1: Product: syz [ 300.484443][ T5927] usb 1-1: Manufacturer: syz [ 300.500279][ T5927] usb 1-1: SerialNumber: syz [ 300.521275][ T8294] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.557006][ T5927] usb 1-1: Error in usbnet_get_endpoints (-22) [ 301.430209][ T5845] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 301.855921][ T92] usb 1-1: USB disconnect, device number 20 [ 302.360954][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'. [ 302.406851][ T5845] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 302.452240][ T5845] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.496834][ T5845] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 302.658991][ T5845] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.695197][ T5845] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 302.737291][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.764510][ T5845] usb 2-1: config 0 descriptor?? [ 303.994991][ T8349] trusted_key: encrypted_key: keyword 'upw' not recognized [ 306.592644][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 306.598669][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 306.646074][ T5845] usb 2-1: USB disconnect, device number 23 [ 306.977583][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 306.977601][ T30] audit: type=1326 audit(1755946933.503:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.083895][ T8388] cgroup: noprefix used incorrectly [ 307.234019][ T30] audit: type=1326 audit(1755946933.533:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.259339][ T30] audit: type=1326 audit(1755946933.613:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.281169][ T30] audit: type=1326 audit(1755946933.613:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.302707][ T30] audit: type=1326 audit(1755946933.613:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.326871][ T30] audit: type=1326 audit(1755946933.613:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.354041][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 307.363601][ T30] audit: type=1326 audit(1755946933.613:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.391552][ T30] audit: type=1326 audit(1755946933.613:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.418454][ T30] audit: type=1326 audit(1755946933.623:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 307.507771][ T30] audit: type=1326 audit(1755946933.623:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 308.628102][ T8409] binder: 8403:8409 unknown command 0 [ 308.639868][ T8409] binder: 8403:8409 ioctl c0306201 2000000003c0 returned -22 [ 309.589820][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 309.950462][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 311.303251][ T8440] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 311.313405][ T8440] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 311.322811][ T8439] tipc: Started in network mode [ 311.328258][ T8439] tipc: Node identity 080211, cluster identity 4711 [ 311.335674][ T8439] tipc: Enabled bearer , priority 0 [ 311.426927][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 311.729886][ T980] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 311.932498][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.957968][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 311.979259][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 312.005976][ T980] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 312.051507][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.087132][ T980] usb 4-1: Product: syz [ 312.092149][ T980] usb 4-1: Manufacturer: syz [ 312.097123][ T980] usb 4-1: SerialNumber: syz [ 312.126820][ T980] usb 4-1: config 0 descriptor?? [ 312.145682][ T8442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 312.423462][ T980] rc_core: IR keymap rc-streamzap not found [ 312.450053][ T92] tipc: Node number set to 134353152 [ 312.455857][ T980] Registered IR keymap rc-empty [ 312.470556][ T980] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 312.673099][ T980] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 312.972738][ T980] usb 4-1: USB disconnect, device number 31 [ 314.221275][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 315.611587][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 315.642418][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.659742][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.694554][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.810859][ T980] usb 5-1: device descriptor read/64, error -71 [ 315.869866][ T92] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 316.043695][ T92] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.070682][ T92] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.091310][ T980] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.108025][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.123479][ T92] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 316.146808][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.171320][ T92] usb 2-1: config 0 descriptor?? [ 316.239864][ T980] usb 5-1: device descriptor read/64, error -71 [ 316.360412][ T980] usb usb5-port1: attempt power cycle [ 316.442855][ T92] itetech 0003:06CB:73F6.0008: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 316.817190][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 316.873171][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.114935][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.442528][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.499825][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 317.517023][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.551776][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.560897][ T980] usb 5-1: device descriptor read/8, error -71 [ 317.619177][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.671402][ T5969] usb 2-1: USB disconnect, device number 24 [ 317.810691][ T980] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 317.840757][ T980] usb 5-1: device descriptor read/8, error -71 [ 317.871078][ T92] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 317.940942][ T8532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.961397][ T980] usb usb5-port1: unable to enumerate USB device [ 318.055401][ T92] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.064999][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.073146][ T92] usb 1-1: Product: syz [ 318.078276][ T92] usb 1-1: Manufacturer: syz [ 318.083020][ T92] usb 1-1: SerialNumber: syz [ 318.104221][ T92] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.301713][ T980] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.466342][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.511488][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.669813][ T5969] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 318.712319][ T5169] usb 1-1: USB disconnect, device number 21 [ 319.294982][ T5926] IPVS: starting estimator thread 0... [ 319.369921][ T980] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 319.472348][ T8560] IPVS: using max 24 ests per chain, 57600 per kthread [ 319.795585][ T980] ath9k_htc: Failed to initialize the device [ 319.951389][ T5169] usb 1-1: ath9k_htc: USB layer deinitialized [ 322.282342][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 323.606472][ T8604] overlayfs: missing 'lowerdir' [ 324.018134][ T8605] Mount JFS Failure: -22 [ 325.903316][ T8614] netlink: 'syz.3.655': attribute type 7 has an invalid length. [ 326.824715][ T8636] libceph: resolve '4..' (ret=-3): failed [ 328.035202][ T8646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.665'. [ 328.232659][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 328.385083][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 328.385105][ T30] audit: type=1804 audit(1755946954.873:143): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.665" name="/newroot/150/file0" dev="tmpfs" ino=815 res=1 errno=0 [ 328.946611][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 330.175424][ T8681] overlayfs: failed to resolve './file0': -2 [ 330.463335][ T8674] netlink: 76 bytes leftover after parsing attributes in process `syz.2.670'. [ 332.309836][ T980] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 332.853841][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 332.957585][ T980] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.969686][ T980] usb 1-1: config 0 has no interface number 0 [ 333.001872][ T980] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.011359][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.019520][ T980] usb 1-1: Product: syz [ 333.039186][ T980] usb 1-1: Manufacturer: syz [ 333.049486][ T980] usb 1-1: SerialNumber: syz [ 333.079617][ T980] usb 1-1: config 0 descriptor?? [ 333.113772][ T980] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.308259][ T980] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.403008][ T980] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.830815][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 334.037267][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 334.087439][ T980] usb 1-1: USB disconnect, device number 22 [ 334.120835][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 334.770996][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'. [ 335.003253][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 335.030463][ T980] quatech2 1-1:0.51: device disconnected [ 336.470200][ T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 336.633178][ T980] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 336.656251][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.706420][ T980] usb 1-1: config 0 descriptor?? [ 336.877433][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 337.241512][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 337.526597][ T980] usbhid 1-1:0.0: can't add hid device: -71 [ 337.534559][ T980] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.558920][ T980] usb 1-1: USB disconnect, device number 23 [ 341.070607][ T8762] input: syz0 as /devices/virtual/input/input17 [ 342.285799][ T8776] netlink: 88 bytes leftover after parsing attributes in process `syz.2.695'. [ 342.312682][ T8773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.695'. [ 342.335238][ T8774] SET target dimension over the limit! [ 342.471446][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 342.620743][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 342.659833][ T8776] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 342.725245][ T8788] loop6: detected capacity change from 0 to 7 [ 342.736388][ T8788] Dev loop6: unable to read RDB block 7 [ 342.742316][ T8788] loop6: unable to read partition table [ 342.748312][ T8788] loop6: partition table beyond EOD, truncated [ 342.773170][ T8788] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.814164][ T8788] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 342.865814][ T8776] openvswitch: netlink: Missing key (keys=40, expected=80) [ 343.111668][ T8788] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.700'. [ 343.384133][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 343.791004][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 344.079907][ T8805] qnx4: no qnx4 filesystem (no root dir). [ 345.160099][ T8823] netlink: 120 bytes leftover after parsing attributes in process `syz.4.708'. [ 345.208830][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 348.501037][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 348.633306][ T5169] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 348.772385][ T5926] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 348.793049][ T5926] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 348.803488][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.817749][ T5926] usb 5-1: Product: syz [ 348.822062][ T5926] usb 5-1: Manufacturer: syz [ 348.826692][ T5926] usb 5-1: SerialNumber: syz [ 348.836411][ T5926] usb 5-1: config 0 descriptor?? [ 348.839991][ T5169] usb 2-1: Using ep0 maxpacket: 16 [ 348.878465][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.889793][ T5169] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 348.908005][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.798788][ T5169] usb 2-1: config 0 descriptor?? [ 350.559593][ T5169] usbhid 2-1:0.0: can't add hid device: -71 [ 350.566651][ T5169] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 350.578784][ T5169] usb 2-1: USB disconnect, device number 26 [ 350.670544][ T5926] usb 5-1: USB disconnect, device number 22 [ 350.976399][ T8870] netlink: 7 bytes leftover after parsing attributes in process `syz.0.719'. [ 351.045693][ T8870] netlink: 7 bytes leftover after parsing attributes in process `syz.0.719'. [ 351.221298][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 351.830716][ T8872] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 351.998551][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.723'. [ 352.499756][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 352.624567][ T8890] bond_slave_0: entered promiscuous mode [ 352.631456][ T8890] bond_slave_1: entered promiscuous mode [ 353.118118][ T8890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 353.226620][ T8890] bond_slave_0: left promiscuous mode [ 353.232366][ T8890] bond_slave_1: left promiscuous mode [ 353.241969][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.726'. [ 353.305389][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.726'. [ 355.626843][ T5169] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 356.159747][ T5169] usb 1-1: Using ep0 maxpacket: 16 [ 356.246842][ T5169] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 356.300362][ T5169] usb 1-1: New USB device found, idVendor=17cf, idProduct=721e, bcdDevice=de.06 [ 356.309493][ T5169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.317543][ T5169] usb 1-1: Product: syz [ 356.322324][ T5169] usb 1-1: Manufacturer: syz [ 356.326974][ T5169] usb 1-1: SerialNumber: syz [ 356.351197][ T5169] usb 1-1: config 0 descriptor?? [ 356.577624][ T92] usb 1-1: USB disconnect, device number 24 [ 356.609483][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 356.618530][ T8940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.807633][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.059423][ T8955] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.073324][ T8955] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 359.098591][ T8955] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.256115][ T8955] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 359.300343][ T8960] syzkaller1: entered promiscuous mode [ 359.306174][ T8960] syzkaller1: entered allmulticast mode [ 359.486342][ T8962] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.573449][ T8962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 359.709048][ T8962] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.729818][ T8962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 359.788995][ T30] audit: type=1326 audit(1755946986.313:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 359.943757][ T8970] overlayfs: missing 'lowerdir' [ 360.837516][ T30] audit: type=1326 audit(1755946986.313:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.859109][ T30] audit: type=1326 audit(1755946986.343:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.881336][ T30] audit: type=1326 audit(1755946986.343:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.902841][ T30] audit: type=1326 audit(1755946986.343:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.924575][ T30] audit: type=1326 audit(1755946986.353:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.946170][ T30] audit: type=1326 audit(1755946986.353:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 360.970855][ T30] audit: type=1326 audit(1755946986.353:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 361.028493][ T30] audit: type=1326 audit(1755946986.353:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 361.190076][ T5169] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 361.259464][ T30] audit: type=1326 audit(1755946986.353:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8968 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x7ffc0000 [ 361.421340][ T5169] usb 2-1: device descriptor read/64, error -71 [ 361.679809][ T5169] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 361.810227][ T8983] netlink: 5 bytes leftover after parsing attributes in process `syz.4.745'. [ 361.833731][ T5169] usb 2-1: device descriptor read/64, error -71 [ 361.838991][ T8983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.951891][ T5169] usb usb2-port1: attempt power cycle [ 362.290334][ T5169] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 362.324806][ T5169] usb 2-1: device descriptor read/8, error -71 [ 362.639860][ T5169] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 362.708095][ T5169] usb 2-1: device descriptor read/8, error -71 [ 362.728985][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 362.749879][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.746'. [ 362.849368][ T5169] usb usb2-port1: unable to enumerate USB device [ 366.629370][ T9034] mmap: syz.0.759 (9034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 367.011835][ T9051] Invalid ELF header magic: != ELF [ 367.089205][ T9048] sctp: [Deprecated]: syz.2.761 (pid 9048) Use of int in maxseg socket option. [ 367.089205][ T9048] Use struct sctp_assoc_value instead [ 367.164719][ T9055] xt_nfacct: accounting object `syz1' does not exists [ 367.189822][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 367.352209][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 367.368195][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.410774][ T5926] usb 5-1: config 0 descriptor?? [ 367.515320][ T5926] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 367.782310][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.825648][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.868809][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.896578][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.611875][ T5926] gspca_stv06xx: I2C: Read error writing address: -71 [ 369.748094][ T5926] usb 5-1: USB disconnect, device number 23 [ 370.351858][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 372.677008][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 372.745916][ T9137] loop2: detected capacity change from 0 to 7 [ 372.786532][ T6526] Dev loop2: unable to read RDB block 7 [ 372.815972][ T6526] loop2: AHDI p3 p4 [ 372.828194][ T6526] loop2: partition table partially beyond EOD, truncated [ 372.860634][ T6526] loop2: p3 start 1869967406 is beyond EOD, truncated [ 372.890272][ T9137] Dev loop2: unable to read RDB block 7 [ 372.941972][ T9137] loop2: AHDI p3 p4 [ 372.945968][ T9137] loop2: partition table partially beyond EOD, truncated [ 372.974597][ T9137] loop2: p3 start 1869967406 is beyond EOD, truncated [ 373.643467][ T9144] netlink: 68 bytes leftover after parsing attributes in process `syz.4.782'. [ 374.477927][ T5206] Dev loop2: unable to read RDB block 7 [ 374.499547][ T5206] loop2: AHDI p3 p4 [ 374.510654][ T5206] loop2: partition table partially beyond EOD, truncated [ 374.526884][ T5206] loop2: p3 start 1869967406 is beyond EOD, truncated [ 375.570373][ T9171] pim6reg: entered allmulticast mode [ 376.417015][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 376.417056][ T30] audit: type=1326 audit(1755947003.941:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9175 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 376.581498][ T30] audit: type=1326 audit(1755947003.941:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9175 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 376.729812][ T9187] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 376.744296][ T9187] cramfs: wrong magic [ 379.423669][ T9214] Bluetooth: MGMT ver 1.23 [ 382.269039][ T9256] sch_fq: defrate 4294967295 ignored. [ 383.001307][ T9261] netlink: 140 bytes leftover after parsing attributes in process `syz.4.805'. [ 383.012020][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 383.935254][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 384.086894][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.109524][ T5852] Bluetooth: hci4: unexpected event for opcode 0x0062 [ 384.173121][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.261559][ T9285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.504932][ T5852] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 385.713445][ T9305] fuse: Bad value for 'rootmode' [ 385.993344][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.091454][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.230707][ T5169] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 386.758960][ T9318] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 387.802835][ T9331] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 388.187445][ T5852] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 388.196348][ T5852] Bluetooth: hci4: Injecting HCI hardware error event [ 388.205559][ T5852] Bluetooth: hci4: hardware error 0x00 [ 388.419839][ T9344] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 389.259885][ T5169] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 389.460279][ T5169] usb 1-1: unable to get BOS descriptor or descriptor too short [ 389.568573][ T5169] usb 1-1: not running at top speed; connect to a high speed hub [ 389.611505][ T5169] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 389.629832][ T5169] usb 1-1: config 9 has no interface number 0 [ 389.654276][ T5169] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 389.697289][ T5169] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 389.758350][ T5169] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 389.797877][ T9363] netlink: 104 bytes leftover after parsing attributes in process `syz.4.830'. [ 389.819683][ T5169] usb 1-1: config 9 interface 5 has no altsetting 0 [ 389.836550][ T5169] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 390.211460][ T5169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.368648][ T5852] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 390.434354][ T5169] usb 1-1: Product: syz [ 390.437678][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 390.438707][ T5169] usb 1-1: Manufacturer: syz [ 390.452359][ T5169] usb 1-1: SerialNumber: syz [ 391.501859][ T5169] usb 1-1: USB disconnect, device number 25 [ 393.314574][ T5926] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 393.424352][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.838'. [ 393.531539][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 393.558093][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.622879][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.671817][ T5926] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 393.736050][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.775906][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.784468][ T5926] usb 4-1: SerialNumber: syz [ 393.808401][ T5926] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 393.808432][ T5926] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 393.808459][ T5926] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 394.053481][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.063381][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.918694][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.954597][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.119313][ T5927] usb 4-1: USB disconnect, device number 33 [ 395.347435][ T9425] sctp: [Deprecated]: syz.0.848 (pid 9425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.347435][ T9425] Use struct sctp_sack_info instead [ 397.564597][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.810751][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.972411][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.989975][ T980] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 400.005306][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.065559][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.095062][ T9459] ntfs3(nullb0): Primary boot signature is not NTFS. [ 400.106274][ T9459] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 400.257522][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 400.438385][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.620235][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.662648][ T980] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 400.686522][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.709975][ T9463] vlan2: entered promiscuous mode [ 400.716193][ T9463] vlan2: entered allmulticast mode [ 400.721657][ T9463] hsr_slave_1: entered allmulticast mode [ 400.728946][ T9465] SET target dimension over the limit! [ 400.754490][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 400.787509][ T980] usb 2-1: config 0 descriptor?? [ 400.892907][ T980] usb 2-1: can't set config #0, error -71 [ 401.007196][ T980] usb 2-1: USB disconnect, device number 31 [ 401.227979][ T9477] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 401.345485][ T9483] fuse: Unknown parameter 'groupBid' [ 401.354606][ T9483] tmpfs: Bad value for 'mpol' [ 402.399446][ T9475] netlink: 'syz.0.859': attribute type 21 has an invalid length. [ 402.407977][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 403.040410][ T9507] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 403.062183][ T9507] overlayfs: overlapping lowerdir path [ 403.229950][ T5969] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 403.420342][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 403.464365][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.763651][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.794390][ T5969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 403.850746][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.889025][ T9511] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 403.904100][ T5969] usb 1-1: config 0 descriptor?? [ 404.337258][ T5969] koneplus 0003:1E7D:2D51.0009: item fetching failed at offset 1/5 [ 404.410938][ T5969] koneplus 0003:1E7D:2D51.0009: parse failed [ 404.457578][ T5969] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -22 [ 404.550177][ T9506] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 404.685849][ T5926] usb 1-1: USB disconnect, device number 26 [ 406.242577][ T980] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 406.429881][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 406.437319][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.452645][ T980] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 406.462470][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.496199][ T980] usb 2-1: Product: syz [ 406.506064][ T980] usb 2-1: Manufacturer: syz [ 406.524564][ T980] usb 2-1: SerialNumber: syz [ 406.566873][ T980] usb 2-1: config 0 descriptor?? [ 406.608721][ T980] cdc_ether 2-1:0.0: skipping garbage [ 406.780028][ T980] usb 2-1: bad CDC descriptors [ 406.785678][ T980] usb 2-1: unsupported MDLM descriptors [ 406.855128][ T9528] bridge0: entered promiscuous mode [ 406.894194][ T9528] bridge0: entered allmulticast mode [ 408.288683][ T5954] usb 2-1: USB disconnect, device number 32 [ 408.348206][ T9565] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 408.376713][ T9565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.396897][ T9565] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 408.418388][ T9567] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 408.449822][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.882'. [ 408.458835][ T9567] batadv0: entered promiscuous mode [ 408.489815][ T9567] batadv0: entered allmulticast mode [ 408.515935][ T9567] bond0: (slave batadv0): Releasing backup interface [ 408.555841][ T9567] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 408.754902][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.762931][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.770463][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.777951][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.785468][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.792959][ T9578] Dead loop on virtual device ip6_vti0, fix it urgently! [ 409.819011][ T9596] syzkaller1: entered promiscuous mode [ 409.830455][ T9596] syzkaller1: entered allmulticast mode [ 410.356369][ T9603] misc userio: The device must be registered before sending interrupts [ 410.384797][ T9605] netlink: 248 bytes leftover after parsing attributes in process `syz.0.893'. [ 411.060040][ T5927] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 411.259752][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 411.289008][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.344861][ T5927] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 411.441086][ T5927] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 412.109115][ T5927] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 412.120426][ T5927] usb 1-1: config 7 has no interface number 0 [ 412.126552][ T5927] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 412.138513][ T5927] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 412.180716][ T5927] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 412.201541][ T9603] misc userio: The device must be registered before sending interrupts [ 412.320399][ T5927] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 412.364463][ T5927] usb 1-1: config 7 interface 128 has no altsetting 0 [ 412.394410][ T5927] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 412.431951][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.451448][ T5927] usb 1-1: Product: syz [ 412.455686][ T5927] usb 1-1: Manufacturer: syz [ 412.483549][ T5927] usb 1-1: SerialNumber: syz [ 412.519421][ T9619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 412.762595][ T9619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.771764][ T9619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.863848][ T5927] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.927733][ T5927] usb 1-1: MIDIStreaming interface descriptor not found [ 413.245965][ T9656] i2c i2c-0: Invalid block write size 34 [ 413.418986][ T9656] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 414.572375][ T5927] usb 1-1: USB disconnect, device number 27 [ 414.687226][ T8245] udevd[8245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.956844][ T9674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'. [ 415.195441][ T92] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 415.269289][ T9656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.369920][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 415.381546][ T92] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.396122][ T92] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.471672][ T92] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.478389][ T92] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 415.579390][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.620109][ T92] usb 4-1: config 0 descriptor?? [ 415.706255][ T9683] netlink: 5 bytes leftover after parsing attributes in process `syz.1.910'. [ 415.740972][ T9683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.094243][ T92] dragonrise 0003:0079:0011.000A: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 416.246211][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 416.281662][ T92] usb 4-1: USB disconnect, device number 34 [ 416.287763][ T9711] netlink: 'syz.4.915': attribute type 6 has an invalid length. [ 416.341747][ T9713] fuse: Bad value for 'fd' [ 416.351689][ T9708] fido_id[9708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 417.300712][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 417.531420][ T9728] net veth1_virt_wifi €Â: renamed from virt_wifi0 (while UP) [ 418.186745][ T9727] No control pipe specified [ 418.254460][ T9733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.919'. [ 418.264561][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 418.406511][ T9734] ipvlan2: entered promiscuous mode [ 418.416610][ T9734] bridge0: port 1(ipvlan2) entered blocking state [ 418.520506][ T9736] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 418.636677][ T9734] bridge0: port 1(ipvlan2) entered disabled state [ 418.746652][ T9734] ipvlan2: entered allmulticast mode [ 418.786000][ T9734] ipvlan2: left allmulticast mode [ 420.439008][ T9757] n (unregistering): Released all slaves [ 420.717591][ T9765] overlayfs: failed to clone upperpath [ 420.730154][ T9765] No source specified [ 421.445702][ T9773] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1 [ 421.457320][ T9773] ref_ctr increment failed for inode: 0x3d1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880341fd000 [ 421.859556][ T9785] misc userio: The device must be registered before sending interrupts [ 422.528231][ T9799] misc userio: The device must be registered before sending interrupts [ 422.581198][ T92] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 422.616427][ T92] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.331721][ T92] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 425.445161][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 425.529764][ T92] usb 4-1: Invalid ep0 maxpacket: 64 [ 425.684233][ T92] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 425.988023][ T92] usb 4-1: Invalid ep0 maxpacket: 64 [ 426.000176][ T92] usb usb4-port1: attempt power cycle [ 426.379967][ T92] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 426.410644][ T92] usb 4-1: Invalid ep0 maxpacket: 64 [ 426.639890][ T92] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 426.680758][ T92] usb 4-1: Invalid ep0 maxpacket: 64 [ 426.686596][ T92] usb usb4-port1: unable to enumerate USB device [ 426.806514][ T30] audit: type=1326 audit(1755947054.331:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9850 comm="syz.4.951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f062698ebe9 code=0x0 [ 426.817653][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 429.205426][ T30] audit: type=1326 audit(1755947056.681:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.580738][ T30] audit: type=1326 audit(1755947056.681:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.603719][ T30] audit: type=1326 audit(1755947056.811:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.635846][ T30] audit: type=1326 audit(1755947056.811:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.675248][ T30] audit: type=1326 audit(1755947056.811:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.766545][ T30] audit: type=1326 audit(1755947056.821:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.831866][ T30] audit: type=1326 audit(1755947056.831:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.867474][ T30] audit: type=1326 audit(1755947056.831:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 429.892243][ T30] audit: type=1326 audit(1755947056.841:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9889 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132d18ebe9 code=0x7ffc0000 [ 430.509709][ T5927] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 430.663324][ T5927] usb 4-1: device descriptor read/64, error -71 [ 430.949862][ T5927] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 431.109943][ T5927] usb 4-1: device descriptor read/64, error -71 [ 431.253373][ T5927] usb usb4-port1: attempt power cycle [ 431.387407][ T9948] binder: 9945:9948 ioctl c0306201 200000000080 returned -14 [ 431.439470][ T9949] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 431.450486][ T9949] netlink: 'syz.1.975': attribute type 2 has an invalid length. [ 431.458617][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 431.739292][ T5927] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 432.020135][ T5927] usb 4-1: device descriptor read/8, error -71 [ 432.279723][ T5927] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 432.395694][ T5927] usb 4-1: device descriptor read/8, error -71 [ 432.519726][ T5969] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 432.560269][ T5927] usb usb4-port1: unable to enumerate USB device [ 432.701242][ T5969] usb 1-1: device descriptor read/64, error -71 [ 432.952221][ T5969] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 433.089849][ T5969] usb 1-1: device descriptor read/64, error -71 [ 433.167679][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'. [ 433.200271][ T5969] usb usb1-port1: attempt power cycle [ 433.211132][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 433.354546][ T9995] misc userio: The device must be registered before sending interrupts [ 433.532521][ T9995] misc userio: The device must be registered before sending interrupts [ 433.579731][ T5969] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 433.663467][ T5969] usb 1-1: device descriptor read/8, error -71 [ 433.759782][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 433.959882][ T5969] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 433.984533][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 433.984552][ T30] audit: type=1326 audit(1755947061.501:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 434.052474][ T5969] usb 1-1: device descriptor read/8, error -71 [ 434.250382][ T5969] usb usb1-port1: unable to enumerate USB device [ 435.051945][ T30] audit: type=1326 audit(1755947061.501:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 435.073623][ T30] audit: type=1326 audit(1755947061.511:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 437.093543][ T30] audit: type=1326 audit(1755947061.511:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 437.239305][ T30] audit: type=1326 audit(1755947061.551:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec88185ba7 code=0x7ffc0000 [ 437.316602][ T30] audit: type=1326 audit(1755947061.551:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec8812ade9 code=0x7ffc0000 [ 437.368542][ T30] audit: type=1326 audit(1755947061.551:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 437.413818][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 437.414633][ T30] audit: type=1326 audit(1755947061.551:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec88185ba7 code=0x7ffc0000 [ 437.507071][ T30] audit: type=1326 audit(1755947061.551:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec8812ade9 code=0x7ffc0000 [ 437.580578][ T30] audit: type=1326 audit(1755947061.551:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.1.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8818ebe9 code=0x7ffc0000 [ 437.809890][ T980] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 437.984353][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 438.189198][ T980] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 438.213871][ T980] usb 5-1: config 1 has no interface number 0 [ 438.239679][ T980] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 438.259881][ T980] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 438.274200][ T980] usb 5-1: config 1 interface 105 has no altsetting 0 [ 438.316011][ T980] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 438.342266][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.360496][ T980] usb 5-1: Product: syz [ 438.373589][ T980] usb 5-1: Manufacturer: syz [ 438.378258][ T980] usb 5-1: SerialNumber: syz [ 438.401684][T10023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.417387][T10023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.981536][ T5954] Process accounting resumed [ 438.995980][T10047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.003696][T10047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.696672][ T980] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 439.720132][ T980] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 439.771883][ T980] usb 5-1: USB disconnect, device number 24 [ 440.108598][T10059] netlink: 'syz.1.1001': attribute type 10 has an invalid length. [ 440.176059][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.188694][T10059] team0: Port device bond0 added [ 440.530105][T10064] nbd2: detected capacity change from 0 to 4 [ 440.555870][T10073] block nbd2: shutting down sockets [ 440.667773][T10064] NILFS (nullb0): couldn't find nilfs on the device [ 441.083040][T10091] misc userio: The device must be registered before sending interrupts [ 441.807224][T10091] misc userio: The device must be registered before sending interrupts [ 445.253732][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 445.963100][ T5954] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 445.999751][ T980] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 446.131773][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 446.189755][ T980] usb 1-1: Using ep0 maxpacket: 8 Connection to 10.128.0.49 closed by remote host. [ 446.761551][ T5954] usb 5-1: device descriptor read/all, error -71 [ 448.076230][ T980] usb 1-1: device descriptor read/all, error -71 [ 448.098997][ T6332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.215421][ T6332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.305194][ T6332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.397857][ T6332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.834025][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.847679][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.857855][ T6332] bond0 (unregistering): Released all slaves [ 448.944372][ T6332] tipc: Disabling bearer [ 448.961579][ T6332] tipc: Left network mode [ 449.003968][ T6332] [ 449.006355][ T6332] ====================================================== [ 449.013372][ T6332] WARNING: possible circular locking dependency detected [ 449.020404][ T6332] 6.16.0-syzkaller #0 Not tainted [ 449.025425][ T6332] ------------------------------------------------------ [ 449.032463][ T6332] kworker/u8:15/6332 is trying to acquire lock: [ 449.038697][ T6332] ffff8880586b8e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 449.048125][ T6332] [ 449.048125][ T6332] but task is already holding lock: [ 449.055485][ T6332] ffff888028488768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 449.065865][ T6332] [ 449.065865][ T6332] which lock already depends on the new lock. [ 449.065865][ T6332] [ 449.076268][ T6332] [ 449.076268][ T6332] the existing dependency chain (in reverse order) is: [ 449.085281][ T6332] [ 449.085281][ T6332] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 449.093022][ T6332] lock_acquire+0x120/0x360 [ 449.098060][ T6332] __mutex_lock+0x182/0xe80 [ 449.103123][ T6332] ieee80211_open+0xed/0x1f0 [ 449.108239][ T6332] __dev_open+0x470/0x880 [ 449.113121][ T6332] netif_open+0xaa/0x170 [ 449.117917][ T6332] dev_open+0x125/0x260 [ 449.122610][ T6332] team_add_slave+0xb36/0x2840 [ 449.127908][ T6332] do_set_master+0x530/0x6d0 [ 449.133032][ T6332] do_setlink+0xcf0/0x41c0 [ 449.137987][ T6332] rtnl_newlink+0x160b/0x1c70 [ 449.143199][ T6332] rtnetlink_rcv_msg+0x7cc/0xb70 [ 449.148676][ T6332] netlink_rcv_skb+0x205/0x470 [ 449.153982][ T6332] netlink_unicast+0x75c/0x8e0 [ 449.159279][ T6332] netlink_sendmsg+0x805/0xb30 [ 449.164581][ T6332] __sock_sendmsg+0x21c/0x270 [ 449.169793][ T6332] ____sys_sendmsg+0x505/0x830 [ 449.175103][ T6332] ___sys_sendmsg+0x21f/0x2a0 [ 449.180317][ T6332] __x64_sys_sendmsg+0x19b/0x260 [ 449.185791][ T6332] do_syscall_64+0xfa/0x3b0 [ 449.190825][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.197252][ T6332] [ 449.197252][ T6332] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 449.205285][ T6332] validate_chain+0xb9b/0x2140 [ 449.210581][ T6332] __lock_acquire+0xab9/0xd20 [ 449.215784][ T6332] lock_acquire+0x120/0x360 [ 449.220812][ T6332] __mutex_lock+0x182/0xe80 [ 449.225849][ T6332] team_del_slave+0x32/0x1c0 [ 449.230978][ T6332] team_device_event+0x285/0xa20 [ 449.236463][ T6332] notifier_call_chain+0x1b3/0x3e0 [ 449.242123][ T6332] unregister_netdevice_many_notify+0x15d8/0x2320 [ 449.249073][ T6332] unregister_netdevice_queue+0x33c/0x380 [ 449.255325][ T6332] _cfg80211_unregister_wdev+0x165/0x590 [ 449.261498][ T6332] ieee80211_remove_interfaces+0x49a/0x6d0 [ 449.267852][ T6332] ieee80211_unregister_hw+0x5d/0x2c0 [ 449.273768][ T6332] mac80211_hwsim_del_radio+0x275/0x460 [ 449.279851][ T6332] hwsim_exit_net+0x584/0x640 [ 449.285058][ T6332] ops_undo_list+0x497/0x990 [ 449.290189][ T6332] cleanup_net+0x4c5/0x800 [ 449.295137][ T6332] process_scheduled_works+0xade/0x17b0 [ 449.301220][ T6332] worker_thread+0x8a0/0xda0 [ 449.306337][ T6332] kthread+0x70e/0x8a0 [ 449.310942][ T6332] ret_from_fork+0x3fc/0x770 [ 449.316072][ T6332] ret_from_fork_asm+0x1a/0x30 [ 449.321410][ T6332] [ 449.321410][ T6332] other info that might help us debug this: [ 449.321410][ T6332] [ 449.331642][ T6332] Possible unsafe locking scenario: [ 449.331642][ T6332] [ 449.339101][ T6332] CPU0 CPU1 [ 449.344470][ T6332] ---- ---- [ 449.349838][ T6332] lock(&rdev->wiphy.mtx); [ 449.354355][ T6332] lock(team->team_lock_key); [ 449.361675][ T6332] lock(&rdev->wiphy.mtx); [ 449.368718][ T6332] lock(team->team_lock_key); [ 449.373500][ T6332] [ 449.373500][ T6332] *** DEADLOCK *** [ 449.373500][ T6332] [ 449.381651][ T6332] 5 locks held by kworker/u8:15/6332: [ 449.387029][ T6332] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 449.397939][ T6332] #1: ffffc90003037bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 449.408490][ T6332] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 449.417826][ T6332] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 449.427686][ T6332] #4: ffff888028488768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 449.438496][ T6332] [ 449.438496][ T6332] stack backtrace: [ 449.444401][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: kworker/u8:15 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 449.444423][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.444435][ T6332] Workqueue: netns cleanup_net [ 449.444466][ T6332] Call Trace: [ 449.444478][ T6332] [ 449.444487][ T6332] dump_stack_lvl+0x189/0x250 [ 449.444508][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.444527][ T6332] ? __pfx__printk+0x10/0x10 [ 449.444548][ T6332] ? print_lock_name+0xde/0x100 [ 449.444571][ T6332] print_circular_bug+0x2ee/0x310 [ 449.444593][ T6332] check_noncircular+0x134/0x160 [ 449.444616][ T6332] validate_chain+0xb9b/0x2140 [ 449.444636][ T6332] ? lockdep_unlock+0x89/0x120 [ 449.444661][ T6332] ? validate_chain+0x897/0x2140 [ 449.444685][ T6332] __lock_acquire+0xab9/0xd20 [ 449.444702][ T6332] ? team_del_slave+0x32/0x1c0 [ 449.444724][ T6332] lock_acquire+0x120/0x360 [ 449.444738][ T6332] ? team_del_slave+0x32/0x1c0 [ 449.444762][ T6332] ? __mutex_trylock_common+0x153/0x260 [ 449.444785][ T6332] __mutex_lock+0x182/0xe80 [ 449.444803][ T6332] ? team_del_slave+0x32/0x1c0 [ 449.444826][ T6332] ? rcu_is_watching+0x15/0xb0 [ 449.444846][ T6332] ? team_del_slave+0x32/0x1c0 [ 449.444869][ T6332] ? __pfx___mutex_lock+0x10/0x10 [ 449.444888][ T6332] ? bond_netdev_event+0xd9/0xe80 [ 449.444913][ T6332] ? __pfx___mutex_lock+0x10/0x10 [ 449.444932][ T6332] ? __pfx_bond_netdev_event+0x10/0x10 [ 449.444960][ T6332] team_del_slave+0x32/0x1c0 [ 449.444984][ T6332] team_device_event+0x285/0xa20 [ 449.445002][ T6332] notifier_call_chain+0x1b3/0x3e0 [ 449.445024][ T6332] unregister_netdevice_many_notify+0x15d8/0x2320 [ 449.445051][ T6332] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 449.445072][ T6332] ? __lock_acquire+0xab9/0xd20 [ 449.445102][ T6332] unregister_netdevice_queue+0x33c/0x380 [ 449.445120][ T6332] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 449.445142][ T6332] _cfg80211_unregister_wdev+0x165/0x590 [ 449.445168][ T6332] ieee80211_remove_interfaces+0x49a/0x6d0 [ 449.445189][ T6332] ? __pfx_synchronize_rcu+0x10/0x10 [ 449.445209][ T6332] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 449.445229][ T6332] ? rcu_is_watching+0x15/0xb0 [ 449.445250][ T6332] ieee80211_unregister_hw+0x5d/0x2c0 [ 449.445278][ T6332] mac80211_hwsim_del_radio+0x275/0x460 [ 449.445305][ T6332] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 449.445336][ T6332] hwsim_exit_net+0x584/0x640 [ 449.445359][ T6332] ? __pfx_hwsim_exit_net+0x10/0x10 [ 449.445381][ T6332] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 449.445408][ T6332] ops_undo_list+0x497/0x990 [ 449.445433][ T6332] ? __pfx_ops_undo_list+0x10/0x10 [ 449.445461][ T6332] cleanup_net+0x4c5/0x800 [ 449.445484][ T6332] ? __pfx_cleanup_net+0x10/0x10 [ 449.445508][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.445523][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 449.445540][ T6332] ? process_scheduled_works+0x9ef/0x17b0 [ 449.445559][ T6332] process_scheduled_works+0xade/0x17b0 [ 449.445588][ T6332] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.445612][ T6332] worker_thread+0x8a0/0xda0 [ 449.445640][ T6332] kthread+0x70e/0x8a0 [ 449.445663][ T6332] ? __pfx_worker_thread+0x10/0x10 [ 449.445681][ T6332] ? __pfx_kthread+0x10/0x10 [ 449.445702][ T6332] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.445717][ T6332] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.445733][ T6332] ? __pfx_kthread+0x10/0x10 [ 449.445755][ T6332] ret_from_fork+0x3fc/0x770 [ 449.445772][ T6332] ? __pfx_ret_from_fork+0x10/0x10 [ 449.445790][ T6332] ? __switch_to_asm+0x39/0x70 [ 449.445810][ T6332] ? __switch_to_asm+0x33/0x70 [ 449.445830][ T6332] ? __pfx_kthread+0x10/0x10 [ 449.445851][ T6332] ret_from_fork_asm+0x1a/0x30 [ 449.445879][ T6332] [ 449.807068][ T6332] team0: Port device wlan1 removed [ 449.919231][ T6332] hsr_slave_0: left promiscuous mode [ 449.925084][ T6332] hsr_slave_1: left promiscuous mode [ 449.931585][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.938998][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.949311][ T6332] veth1_macvtap: left promiscuous mode [ 449.954957][ T6332] veth0_macvtap: left promiscuous mode [ 449.961478][ T6332] veth1_vlan: left promiscuous mode [ 449.967193][ T6332] veth0_vlan: left promiscuous mode [ 450.103464][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 450.115188][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 450.566264][ T6332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.625163][ T6332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.664858][ T6332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.714478][ T6332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.772068][ T6332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.814732][ T6332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.874966][ T6332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.924879][ T6332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.001724][ T6332] bridge_slave_1: left allmulticast mode [ 451.007430][ T6332] bridge_slave_1: left promiscuous mode [ 451.013279][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.023959][ T6332] bridge_slave_0: left allmulticast mode [ 451.029934][ T6332] bridge_slave_0: left promiscuous mode [ 451.035723][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.206570][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.216823][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.226671][ T6332] bond0 (unregistering): Released all slaves [ 451.317541][ T6332] bond1 (unregistering): Released all slaves [ 451.435200][ T6332] bond0 (unregistering): left promiscuous mode [ 451.441544][ T6332] bond_slave_0: left promiscuous mode [ 451.447057][ T6332] bond_slave_1: left promiscuous mode [ 451.453435][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.462483][ T6332] bond_slave_0: left allmulticast mode [ 451.469246][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.479655][ T6332] bond_slave_1: left allmulticast mode [ 451.486158][ T6332] bond0 (unregistering): Released all slaves [ 451.568723][ T6332] tipc: Disabling bearer [ 451.575507][ T6332] tipc: Left network mode [ 451.868063][ T6332] hsr_slave_0: left promiscuous mode [ 451.874526][ T6332] hsr_slave_1: left promiscuous mode [ 451.880435][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.887869][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.896615][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.904133][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.912450][ T6332] batadv0: left promiscuous mode [ 451.920405][ T6332] hsr_slave_0: left promiscuous mode [ 451.926076][ T6332] hsr_slave_1: left promiscuous mode [ 451.932291][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.939777][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.947541][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.955508][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.966919][ T6332] veth1_macvtap: left promiscuous mode [ 451.972511][ T6332] veth0_macvtap: left promiscuous mode [ 451.978087][ T6332] veth1_vlan: left promiscuous mode [ 451.983458][ T6332] veth0_vlan: left promiscuous mode [ 451.989482][ T6332] veth1_macvtap: left promiscuous mode [ 451.995044][ T6332] veth0_macvtap: left promiscuous mode [ 452.000805][ T6332] veth1_vlan: left promiscuous mode [ 452.006049][ T6332] veth0_vlan: left promiscuous mode [ 452.203754][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 452.231190][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 452.419528][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 452.449282][ T6332] team0 (unregistering): Port device C removed [ 454.588661][ T6332] IPVS: stop unused estimator thread 0...