last executing test programs: 2m49.432798326s ago: executing program 0 (id=392): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 2m47.907879866s ago: executing program 0 (id=396): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 2m46.517783837s ago: executing program 0 (id=399): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mice(0xffffffffffffff9c, 0x0, 0x41) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m44.149401566s ago: executing program 0 (id=401): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x10001, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xffffffac) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x5, 0x178) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(0x0, 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550a, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r3, &(0x7f0000000140)={0x90, 0x0, r4, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r5, r6, 0x5, 0xfff}}}, 0x90) 2m42.554534036s ago: executing program 0 (id=408): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m41.965456074s ago: executing program 0 (id=411): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000040)=0x6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m26.033511812s ago: executing program 32 (id=411): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000040)=0x6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 22.884667271s ago: executing program 2 (id=681): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, 0x0}, 0x408d1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x80, 0x5, 0x9, 0x7, 0x7, "01000000000000c000000000800000e4018780"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {0x6}]}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 21.571373393s ago: executing program 2 (id=686): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff0000000000000007ed370000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = inotify_init() prlimit64(0x0, 0xa, &(0x7f0000000140)={0x1df, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d300887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffef7) dup(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x2400d034}, 0x800) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000200)="ebb8378e9dec8bc9d75ba294902835ec30a36cd0d8ca95557176d48556154ac9a16d00b4307717f933d56728944e9195ca1e3b10cfc2d674e9e1bfd3937a232e873985a15377bc033b430a405862ecdd177900c6aa7cd36d8e8c5ae8820f724e9d98e9046daba991bf9e54fcc64436764f3819d754971d58ef3ddc6d6d5953bf215b138e49befb", 0x87) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17.721386322s ago: executing program 6 (id=693): syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 17.634605478s ago: executing program 1 (id=694): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) r3 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/file0\x00', 0x0) fsmount(r3, 0x0, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000019300)='hfsplus\x00', 0x8010, 0x0) 16.633529255s ago: executing program 6 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 16.210115568s ago: executing program 6 (id=697): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) preadv(r2, 0x0, 0x0, 0xfff, 0x6) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 14.95021833s ago: executing program 5 (id=700): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/138, 0x8a, 0x10000, &(0x7f00000000c0)={0x23, 0x1, 0x81, 0x4}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 13.791440289s ago: executing program 5 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003a1000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file0\x00', 0x186) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) 13.272476321s ago: executing program 2 (id=702): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x0, 0x8000}}], 0x1, 0x4) 13.040345859s ago: executing program 4 (id=703): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 12.947085608s ago: executing program 2 (id=704): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') 11.613015856s ago: executing program 3 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x1) bind$l2tp(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, 0x4}, 0x10) 11.52550927s ago: executing program 1 (id=707): syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 11.026733573s ago: executing program 1 (id=708): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x101000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, &(0x7f0000001300)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) io_setup(0x4, &(0x7f0000000100)) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x80000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) fchmodat(r5, 0x0, 0xffffffd3) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x706) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x13, 0x6, 0x9, 0x0, 0x1, "100056f200"}) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 10.256339764s ago: executing program 3 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 9.853903027s ago: executing program 1 (id=710): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x10001, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xffffffac) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x5, 0x178) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, r3, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r4, r5, 0x5, 0xfff}}}, 0x90) 9.721778377s ago: executing program 3 (id=711): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) shutdown(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 8.156616282s ago: executing program 3 (id=712): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) sendmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) 7.840244118s ago: executing program 5 (id=713): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000000c0)={0x23, 0x1, 0x81, 0x4}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 7.810937706s ago: executing program 1 (id=714): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff0000000000000007ed370000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = inotify_init() prlimit64(0x0, 0xa, &(0x7f0000000140)={0x1df, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffef7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x2400d034}, 0x800) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000200)="ebb8378e9dec8bc9d75ba294902835ec30a36cd0d8ca95557176d48556154ac9a16d00b4307717f933d56728944e9195ca1e3b10cfc2d674e9e1bfd3937a232e873985a15377bc033b430a405862ecdd177900c6aa7cd36d8e8c5ae8820f724e9d98e9046daba991bf9e54fcc64436764f3819d754971d58ef3ddc6d6d5953bf215b138e49befb", 0x87) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 7.801500357s ago: executing program 6 (id=715): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(r1, r0) close(0x3) 6.370047628s ago: executing program 5 (id=716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfc, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0x2f}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) 6.366571696s ago: executing program 2 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0x24a7, 0x400, 0x1, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r4 = getpid() lstat(&(0x7f0000000100)='./file2/file0\x00', &(0x7f00000003c0)) r5 = syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r5, 0x24020000) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 6.141441579s ago: executing program 3 (id=718): socket$inet6(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.627314646s ago: executing program 3 (id=719): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000005aea7204e08011099bf0002030109021b00010000000009040000014466790009050db7"], 0x0) 5.60632559s ago: executing program 4 (id=720): syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x20) 5.273014559s ago: executing program 5 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendto(r0, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8", 0x1e, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 4.766006248s ago: executing program 6 (id=722): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x101000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, &(0x7f0000001300)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) io_setup(0x4, &(0x7f0000000100)) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x80000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) fchmodat(r5, 0x0, 0xffffffd3) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x706) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x13, 0x6, 0x9, 0x0, 0x1, "100056f200"}) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.760042452s ago: executing program 4 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 3.562654685s ago: executing program 6 (id=724): syz_usb_connect(0x5, 0x48, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xa8, 0xa5, 0xaf, 0x20, 0x2040, 0xb900, 0xc159, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x3, 0x7, 0x5, 0x60, 0xf, "", [{{0x9, 0x4, 0x7c, 0x23, 0x0, 0x53, 0x5c, 0x28, 0x2}}, {{0x9, 0x4, 0x0, 0xa3, 0x2, 0xda, 0x38, 0xad, 0xf2, [], [{{0x9, 0x5, 0x85, 0x2, 0x8, 0x6, 0xd, 0xc0}}, {{0x9, 0x5, 0x9, 0x14, 0x200, 0x8, 0x5, 0x7d}}]}}, {{0x9, 0x4, 0x34, 0x10, 0x0, 0x6, 0x81, 0x76, 0x6}}]}}]}}, 0x0) 3.361655399s ago: executing program 4 (id=725): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.272335443s ago: executing program 1 (id=726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x10001, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xffffffac) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x5, 0x178) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, r3, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r4, r5, 0x5, 0xfff}}}, 0x90) 3.164838323s ago: executing program 5 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0x24a7, 0x400, 0x1, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r4 = getpid() lstat(&(0x7f0000000100)='./file2/file0\x00', &(0x7f00000003c0)) r5 = syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000005aea7204e08011099bf0002030109021b00010000000009040000014466790009050db7"], 0x0) setns(r5, 0x24020000) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.949988793s ago: executing program 4 (id=728): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000000c0)={0x23, 0x1, 0x81, 0x4}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.152628431s ago: executing program 2 (id=729): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xcd, 0x5, 0x9, 0x41, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x40, 0xd2a0, 0xff}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000", @ANYRES16=r7, @ANYBLOB="050029bd708b000000002100000008000300", @ANYRES32=r8, @ANYBLOB="18017d80040002"], 0x134}}, 0x0) 0s ago: executing program 4 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) sendmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 86.124610][ T10] cfg80211: failed to load regulatory.db [ 86.931986][ T5807] cgroup: Unknown subsys name 'net' [ 87.048082][ T5807] cgroup: Unknown subsys name 'cpuset' [ 87.058259][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.753389][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.883326][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.895453][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.905136][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.913293][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.921988][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.932932][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.940468][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.948992][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.957285][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.957766][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.973063][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.973176][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.983764][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.989141][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.001811][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.002980][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.010970][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.016596][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.026650][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.031369][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.038196][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.046302][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.059569][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.068555][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.076249][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.076879][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.092865][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.098453][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.143317][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.151547][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.967661][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 94.019599][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.102188][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 94.310613][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.367629][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 94.397463][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.405625][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.413045][ T5827] bridge_slave_0: entered allmulticast mode [ 94.420834][ T5827] bridge_slave_0: entered promiscuous mode [ 94.473511][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.480709][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.488112][ T5827] bridge_slave_1: entered allmulticast mode [ 94.495864][ T5827] bridge_slave_1: entered promiscuous mode [ 94.504913][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 94.674245][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.681515][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.689017][ T5829] bridge_slave_0: entered allmulticast mode [ 94.696775][ T5829] bridge_slave_0: entered promiscuous mode [ 94.712905][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.720094][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.728342][ T5836] bridge_slave_0: entered allmulticast mode [ 94.736189][ T5836] bridge_slave_0: entered promiscuous mode [ 94.755280][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.779353][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.786894][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.794259][ T5829] bridge_slave_1: entered allmulticast mode [ 94.801933][ T5829] bridge_slave_1: entered promiscuous mode [ 94.817565][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.824817][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.832096][ T5836] bridge_slave_1: entered allmulticast mode [ 94.840328][ T5836] bridge_slave_1: entered promiscuous mode [ 94.864250][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.996920][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.004515][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.011747][ T5837] bridge_slave_0: entered allmulticast mode [ 95.019621][ T5837] bridge_slave_0: entered promiscuous mode [ 95.057798][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.083685][ T5838] Bluetooth: hci0: command tx timeout [ 95.089723][ T5838] Bluetooth: hci2: command tx timeout [ 95.096545][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.106120][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.114437][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.121677][ T5837] bridge_slave_1: entered allmulticast mode [ 95.129997][ T5837] bridge_slave_1: entered promiscuous mode [ 95.139863][ T5827] team0: Port device team_slave_0 added [ 95.162047][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.171633][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.179209][ T5840] Bluetooth: hci1: command tx timeout [ 95.184910][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.185651][ T52] Bluetooth: hci5: command tx timeout [ 95.192186][ T5835] bridge_slave_0: entered allmulticast mode [ 95.198731][ T5838] Bluetooth: hci3: command tx timeout [ 95.211819][ T5835] bridge_slave_0: entered promiscuous mode [ 95.222977][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.243329][ T5838] Bluetooth: hci4: command tx timeout [ 95.255974][ T5827] team0: Port device team_slave_1 added [ 95.276377][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.283933][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.291150][ T5828] bridge_slave_0: entered allmulticast mode [ 95.299019][ T5828] bridge_slave_0: entered promiscuous mode [ 95.320729][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.328382][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.335757][ T5835] bridge_slave_1: entered allmulticast mode [ 95.343596][ T5835] bridge_slave_1: entered promiscuous mode [ 95.378521][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.391740][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.401220][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.409376][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.416935][ T5828] bridge_slave_1: entered allmulticast mode [ 95.425488][ T5828] bridge_slave_1: entered promiscuous mode [ 95.526272][ T5829] team0: Port device team_slave_0 added [ 95.535489][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.560596][ T5836] team0: Port device team_slave_0 added [ 95.568309][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.575368][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.601821][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.629353][ T5829] team0: Port device team_slave_1 added [ 95.638184][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.664906][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.676653][ T5836] team0: Port device team_slave_1 added [ 95.684833][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.694676][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.701628][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.728212][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.741813][ T5837] team0: Port device team_slave_0 added [ 95.811618][ T5837] team0: Port device team_slave_1 added [ 95.832079][ T5828] team0: Port device team_slave_0 added [ 95.840533][ T5828] team0: Port device team_slave_1 added [ 95.885888][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.893002][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.919333][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.943365][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.950343][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.976649][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.990380][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.997396][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.023692][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.036859][ T5835] team0: Port device team_slave_0 added [ 96.056682][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.063728][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.089759][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.144597][ T5835] team0: Port device team_slave_1 added [ 96.150927][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.158192][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.184323][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.205904][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.212906][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.238967][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.273518][ T5827] hsr_slave_0: entered promiscuous mode [ 96.280148][ T5827] hsr_slave_1: entered promiscuous mode [ 96.305640][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.312745][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.338955][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.351715][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.358755][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.385438][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.458995][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.466363][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.492480][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.505717][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.512849][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.538868][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.596741][ T5836] hsr_slave_0: entered promiscuous mode [ 96.603559][ T5836] hsr_slave_1: entered promiscuous mode [ 96.610009][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 96.615970][ T5836] Cannot create hsr debugfs directory [ 96.658147][ T5829] hsr_slave_0: entered promiscuous mode [ 96.664792][ T5829] hsr_slave_1: entered promiscuous mode [ 96.671198][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 96.677181][ T5829] Cannot create hsr debugfs directory [ 96.745237][ T5837] hsr_slave_0: entered promiscuous mode [ 96.751862][ T5837] hsr_slave_1: entered promiscuous mode [ 96.758588][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 96.764610][ T5837] Cannot create hsr debugfs directory [ 96.803213][ T5828] hsr_slave_0: entered promiscuous mode [ 96.809830][ T5828] hsr_slave_1: entered promiscuous mode [ 96.816550][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 96.822289][ T5828] Cannot create hsr debugfs directory [ 97.017060][ T5835] hsr_slave_0: entered promiscuous mode [ 97.023792][ T5835] hsr_slave_1: entered promiscuous mode [ 97.030027][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 97.035832][ T5835] Cannot create hsr debugfs directory [ 97.162792][ T5838] Bluetooth: hci2: command tx timeout [ 97.168244][ T5838] Bluetooth: hci0: command tx timeout [ 97.242893][ T5838] Bluetooth: hci3: command tx timeout [ 97.242986][ T5840] Bluetooth: hci1: command tx timeout [ 97.248357][ T52] Bluetooth: hci5: command tx timeout [ 97.322631][ T52] Bluetooth: hci4: command tx timeout [ 97.658587][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.672072][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.693603][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.723667][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.784892][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.800399][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.814671][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.844064][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.940379][ T5836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.959673][ T5836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.972130][ T5836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.987155][ T5836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.084531][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.100183][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.121756][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.183709][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.270691][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.303458][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.327171][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.345952][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.359908][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.455814][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.466577][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.474937][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.503333][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.515705][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.547233][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.554520][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.566032][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.599434][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.606709][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.656930][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.672070][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.731126][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.738317][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.777028][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.784248][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.843862][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.857086][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.971086][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.978377][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.019507][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.065974][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.073215][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.084853][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.092032][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.117272][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.124663][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.140397][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.243459][ T5838] Bluetooth: hci2: command tx timeout [ 99.248986][ T52] Bluetooth: hci0: command tx timeout [ 99.259010][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.290999][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.302290][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.325352][ T52] Bluetooth: hci1: command tx timeout [ 99.330066][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.330859][ T52] Bluetooth: hci5: command tx timeout [ 99.345674][ T5838] Bluetooth: hci3: command tx timeout [ 99.377041][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.384326][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.396956][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.404193][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.416319][ T52] Bluetooth: hci4: command tx timeout [ 99.454151][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.471559][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.567632][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.597463][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.604711][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.663005][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.670196][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.801213][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.055587][ T5837] veth0_vlan: entered promiscuous mode [ 100.136359][ T5837] veth1_vlan: entered promiscuous mode [ 100.214765][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.243937][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.326361][ T5837] veth0_macvtap: entered promiscuous mode [ 100.387595][ T5837] veth1_macvtap: entered promiscuous mode [ 100.486488][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.518845][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.547871][ T5828] veth0_vlan: entered promiscuous mode [ 100.592102][ T5828] veth1_vlan: entered promiscuous mode [ 100.639111][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.707881][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.733520][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.745500][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.793617][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.879880][ T5829] veth0_vlan: entered promiscuous mode [ 100.900735][ T5828] veth0_macvtap: entered promiscuous mode [ 100.915994][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.945559][ T5827] veth0_vlan: entered promiscuous mode [ 100.967278][ T5828] veth1_macvtap: entered promiscuous mode [ 100.991638][ T5829] veth1_vlan: entered promiscuous mode [ 101.023667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.035235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.046000][ T5827] veth1_vlan: entered promiscuous mode [ 101.075708][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.159197][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.189981][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.204602][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.227158][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.238223][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.250411][ T5835] veth0_vlan: entered promiscuous mode [ 101.260295][ T5829] veth0_macvtap: entered promiscuous mode [ 101.296420][ T5836] veth0_vlan: entered promiscuous mode [ 101.303171][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.313186][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.323690][ T52] Bluetooth: hci0: command tx timeout [ 101.329168][ T52] Bluetooth: hci2: command tx timeout [ 101.346229][ T5829] veth1_macvtap: entered promiscuous mode [ 101.355534][ T5827] veth0_macvtap: entered promiscuous mode [ 101.371419][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.402511][ T5838] Bluetooth: hci3: command tx timeout [ 101.408041][ T52] Bluetooth: hci5: command tx timeout [ 101.413797][ T5838] Bluetooth: hci1: command tx timeout [ 101.425919][ T5827] veth1_macvtap: entered promiscuous mode [ 101.442311][ T5835] veth1_vlan: entered promiscuous mode [ 101.469943][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.480561][ T5836] veth1_vlan: entered promiscuous mode [ 101.483713][ T52] Bluetooth: hci4: command tx timeout [ 101.572675][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.658017][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.668165][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.679166][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.710540][ T5835] veth0_macvtap: entered promiscuous mode [ 101.739038][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.755536][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.767162][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.806183][ T5835] veth1_macvtap: entered promiscuous mode [ 101.817363][ T5836] veth0_macvtap: entered promiscuous mode [ 101.837676][ T188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.855593][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.876768][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.926455][ T188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.936442][ T188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.967441][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.321162][ T5836] veth1_macvtap: entered promiscuous mode [ 102.370577][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.400732][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.476448][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.490990][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.497128][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.500685][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.547342][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.610442][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.671778][ T5973] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.686311][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.751355][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.791387][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.831738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.850508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.886772][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.125030][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.166088][ T1163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.191511][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.378991][ T1163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.408422][ T1163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.438679][ T1163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.660228][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.705616][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.933878][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.045329][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.712442][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.117946][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.156579][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.874485][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.886761][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.895682][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.904673][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.513771][ T5970] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.125539][ T5970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.154278][ T5970] usb 4-1: config 0 has no interface number 0 [ 111.172747][ T5970] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.209775][ T5970] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.274511][ T5970] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.336735][ T5970] usb 4-1: config 0 interface 1 has no altsetting 0 [ 111.362562][ T5970] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 111.393267][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.055316][ T5970] usb 4-1: config 0 descriptor?? [ 113.114535][ T6056] syz.1.25 (6056) used greatest stack depth: 19352 bytes left [ 114.827921][ T5970] usbhid 4-1:0.1: can't add hid device: -71 [ 114.876831][ T5970] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 114.982499][ T5970] usb 4-1: USB disconnect, device number 2 [ 117.753265][ T5970] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.074045][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 118.150591][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 119.881489][ T5970] usb 2-1: device descriptor read/all, error -71 [ 120.060738][ T6105] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.40'. [ 122.512603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.352547][ T6016] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.534922][ T6016] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.628964][ T6016] usb 2-1: config 0 has no interface number 0 [ 124.787869][ T6016] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.602893][ T6016] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.682110][ T6016] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.718369][ T6016] usb 2-1: config 0 interface 1 has no altsetting 0 [ 125.775171][ T6016] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 125.838313][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.937523][ T6016] usb 2-1: config 0 descriptor?? [ 125.982993][ T6016] usb 2-1: can't set config #0, error -71 [ 126.072861][ T6016] usb 2-1: USB disconnect, device number 4 [ 126.531587][ T6139] nfs: Unknown parameter 'ÿÿÿÿ' [ 126.586322][ T6139] comedi comedi1: comedi_config --init_data is deprecated [ 127.132437][ T5970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.232490][ T6016] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.372606][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 127.383905][ T5970] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 127.412546][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.444659][ T5970] usb 5-1: Product: syz [ 127.448898][ T5970] usb 5-1: Manufacturer: syz [ 127.456003][ T6016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.467601][ T5970] usb 5-1: SerialNumber: syz [ 127.484253][ T6016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.505430][ T5970] usb 5-1: config 0 descriptor?? [ 127.513984][ T6016] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.524497][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.555510][ T6016] usb 2-1: SerialNumber: syz [ 127.943900][ T6145] ======================================================= [ 127.943900][ T6145] WARNING: The mand mount option has been deprecated and [ 127.943900][ T6145] and is ignored by this kernel. Remove the mand [ 127.943900][ T6145] option from the mount to silence this warning. [ 127.943900][ T6145] ======================================================= [ 128.612348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.632361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.752469][ T5970] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 128.818445][ T5970] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 128.837855][ T6016] usb 2-1: 0:2 : does not exist [ 128.846324][ T6016] usb 2-1: unit 5 not found! [ 128.957158][ T5970] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 129.029059][ T5970] usb 5-1: USB disconnect, device number 2 [ 130.332556][ T6016] usb 2-1: USB disconnect, device number 5 [ 133.511820][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.522460][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.539891][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.562445][ T5970] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 136.766354][ T5970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.798298][ T5970] usb 2-1: config 0 has no interface number 0 [ 136.868578][ T5970] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.181599][ T5970] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.231242][ T5970] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.484004][ T5970] usb 2-1: config 0 interface 1 has no altsetting 0 [ 137.490692][ T5970] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 138.312545][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.488436][ T5970] usb 2-1: config 0 descriptor?? [ 138.822620][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.123052][ T5970] hid (null): invalid report_count 252767622 [ 139.304376][ T5928] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.331387][ T5970] uclogic 0003:145F:0212.0001: pen parameters not found [ 139.339024][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.350242][ T5970] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 139.359101][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.377586][ T5970] usb 2-1: USB disconnect, device number 6 [ 139.387468][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.420674][ T5928] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.446414][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.457214][ T5928] usb 4-1: Product: syz [ 139.461404][ T5928] usb 4-1: Manufacturer: syz [ 139.486407][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 139.496631][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 139.513178][ T5928] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 139.519134][ T5928] cdc_wdm 4-1:1.0: Unknown control protocol [ 140.985958][ T6216] Illegal XDP return value 4294967282 on prog (id 5) dev syz_tun, expect packet loss! [ 141.971199][ T5928] usb 4-1: USB disconnect, device number 3 [ 144.386479][ T6237] input: syz0 as /devices/virtual/input/input6 [ 149.214656][ T5894] kernel read not supported for file /dsp1 (pid: 5894 comm: kworker/1:3) [ 152.595394][ T6016] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.462091][ T6284] Zero length message leads to an empty skb [ 153.557822][ T6016] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.602399][ T6016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.646923][ T6016] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.692554][ T6016] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.694979][ T6016] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.695026][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.695062][ T6016] usb 5-1: Product: syz [ 153.695089][ T6016] usb 5-1: Manufacturer: syz [ 153.702062][ T6016] cdc_wdm 5-1:1.0: skipping garbage [ 153.773083][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 154.213853][ T6016] cdc_wdm 5-1:1.0: skipping garbage [ 154.260326][ T6016] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 154.292474][ T6016] cdc_wdm 5-1:1.0: Unknown control protocol [ 154.400618][ T6016] usb 5-1: USB disconnect, device number 3 [ 155.136251][ T6016] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.692555][ T6016] usb 6-1: Using ep0 maxpacket: 32 [ 156.183525][ T6016] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 156.208697][ T6016] usb 6-1: config 0 has no interface number 0 [ 156.244953][ T6016] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 156.282495][ T6016] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 156.344177][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 156.385746][ T6016] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 156.412103][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.451310][ T6016] usb 6-1: Product: syz [ 156.458504][ T6016] usb 6-1: Manufacturer: syz [ 156.480723][ T6016] usb 6-1: SerialNumber: syz [ 156.527467][ T6016] usb 6-1: config 0 descriptor?? [ 156.563276][ T6317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 156.612399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.813057][ T6016] radio-si470x 6-1:0.35: this is not a si470x device. [ 156.890375][ T6016] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 157.052082][ T6016] usb 6-1: USB disconnect, device number 2 [ 160.550080][ T6366] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.111'. [ 160.914234][ T6369] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 161.282506][ T6376] syz_tun: entered allmulticast mode [ 161.356497][ T6377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.364124][ T6377] IPv6: NLM_F_CREATE should be set when creating new route [ 161.371520][ T6377] IPv6: NLM_F_CREATE should be set when creating new route [ 161.378969][ T6377] IPv6: NLM_F_CREATE should be set when creating new route [ 161.830503][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.914889][ T6372] syz_tun: left allmulticast mode [ 162.619991][ T6390] lo speed is unknown, defaulting to 1000 [ 162.626575][ T6390] lo speed is unknown, defaulting to 1000 [ 162.647129][ T6390] lo speed is unknown, defaulting to 1000 [ 162.706918][ T6390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.874773][ T6390] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 163.168028][ T6390] lo speed is unknown, defaulting to 1000 [ 163.197040][ T6390] lo speed is unknown, defaulting to 1000 [ 163.204987][ T6390] lo speed is unknown, defaulting to 1000 [ 163.213797][ T6390] lo speed is unknown, defaulting to 1000 [ 163.221794][ T6390] lo speed is unknown, defaulting to 1000 [ 163.229313][ T6390] lo speed is unknown, defaulting to 1000 [ 163.474987][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 164.904170][ T6402] block nbd2: shutting down sockets [ 165.092585][ T5912] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 166.548697][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.042518][ T5912] usb 5-1: config 0 has no interface number 0 [ 167.048802][ T5912] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.063040][ T5912] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.113889][ T5912] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.167518][ T5912] usb 5-1: config 0 interface 1 has no altsetting 0 [ 167.196932][ T5912] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 167.256857][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.305037][ T5912] usb 5-1: config 0 descriptor?? [ 167.773254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 167.792367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.872355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.882353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 167.952349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 168.562340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.016647][ T6422] 9p: Bad value for 'wfdno' [ 170.101917][ T5912] usbhid 5-1:0.1: can't add hid device: -71 [ 170.112557][ T5912] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 170.236720][ T6424] CUSE: unknown device info "" [ 170.241764][ T6424] CUSE: unknown device info "" [ 170.246909][ T6424] CUSE: unknown device info "" [ 170.252028][ T6424] CUSE: unknown device info "" [ 170.257391][ T6424] CUSE: unknown device info "ÿ" [ 170.262661][ T6424] CUSE: unknown device info "" [ 170.267741][ T6424] CUSE: unknown device info "" [ 170.273024][ T6424] CUSE: unknown device info "ÿ" [ 170.278188][ T6424] CUSE: DEVNAME unspecified [ 170.642108][ T5912] usb 5-1: USB disconnect, device number 4 [ 171.116012][ T6428] Cannot find add_set index 0 as target [ 172.365050][ T6434] tipc: Started in network mode [ 172.370689][ T6434] tipc: Node identity 4e7fa31ceb03, cluster identity 4711 [ 172.384655][ T6434] tipc: Enabled bearer , priority 0 [ 172.414067][ T6434] syzkaller0: entered promiscuous mode [ 172.419602][ T6434] syzkaller0: entered allmulticast mode [ 173.161978][ T6444] siw: device registration error -23 [ 173.862150][ T5912] tipc: Node number set to 2776408860 [ 174.076498][ T6441] tipc: Resetting bearer [ 174.239595][ T6433] tipc: Resetting bearer [ 174.366900][ T6433] tipc: Disabling bearer [ 176.020064][ T6461] FAT-fs (nullb0): bogus number of reserved sectors [ 176.027142][ T6461] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 176.372460][ T5970] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 176.553583][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.624054][ T5970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.642521][ T5970] usb 1-1: config 0 has no interface number 0 [ 176.669529][ T5970] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.715712][ T5970] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.759199][ T5970] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.786990][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 176.790451][ T5970] usb 1-1: config 0 interface 1 has no altsetting 0 [ 176.808577][ T5970] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 176.915475][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 177.102578][ T5912] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 177.111711][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 177.155350][ T5912] usb 2-1: Product: syz [ 177.159553][ T5912] usb 2-1: SerialNumber: syz [ 177.201883][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.225086][ T5912] usb 2-1: config 0 descriptor?? [ 177.249973][ T5970] usb 1-1: config 0 descriptor?? [ 178.019244][ T5970] hid (null): invalid report_count 252767622 [ 178.221553][ T5970] uclogic 0003:145F:0212.0002: pen parameters not found [ 178.228990][ T5970] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 178.252785][ T6016] usb 1-1: USB disconnect, device number 2 [ 179.584758][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.142'. [ 179.916305][ T6493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.237436][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 185.497623][ T5970] usb 2-1: USB disconnect, device number 7 [ 185.894769][ T6525] batman_adv: batadv0: Adding interface: dummy0 [ 185.931772][ T6525] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.305988][ T6525] batman_adv: batadv0: Interface activated: dummy0 [ 186.369780][ T6529] syz_tun: entered allmulticast mode [ 186.633529][ T6525] batadv0: mtu less than device minimum [ 186.675096][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.687098][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.698728][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.710348][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.722092][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.733786][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.745400][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.757157][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.768807][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.140148][ T6522] syz_tun: left allmulticast mode [ 188.655707][ T6541] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 188.958655][ T6552] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 188.974764][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 188.975247][ T6546] bond1: (slave gretap1): making interface the new active one [ 189.227875][ T6546] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 189.292216][ T6549] vlan2: entered allmulticast mode [ 189.317091][ T6549] bond1: entered allmulticast mode [ 189.333450][ T6549] gretap1: entered allmulticast mode [ 189.354093][ T6549] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 189.422391][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.652590][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 189.660300][ T6557] random: crng reseeded on system resumption [ 190.182396][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.214183][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.428069][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 190.440147][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.451398][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.463948][ T30] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 190.474747][ T30] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 190.484177][ T30] usb 5-1: Product: syz [ 190.492183][ T30] usb 5-1: Manufacturer: syz [ 190.502519][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 191.161748][ T30] usb 5-1: SerialNumber: syz [ 191.184733][ T30] usb 5-1: config 0 descriptor?? [ 191.281816][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 191.309632][ T5914] usb 3-1: can't read configurations, error -71 [ 191.652437][ T30] rc_core: IR keymap rc-imon-rsc not found [ 191.866573][ T30] Registered IR keymap rc-empty [ 191.875831][ T30] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 191.891600][ T30] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 191.931971][ T30] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 193.906288][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.913434][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.306978][ T30] usb 5-1: USB disconnect, device number 5 [ 196.561423][ T6582] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.167'. [ 197.054825][ T6585] syz_tun: entered allmulticast mode [ 197.556016][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.985014][ T6580] syz_tun: left allmulticast mode [ 198.700665][ T6597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.799214][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 199.786461][ T6618] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.339834][ T6622] net_ratelimit: 10 callbacks suppressed [ 200.339861][ T6622] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 200.974011][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.317781][ T6627] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 201.423094][ T792] lo speed is unknown, defaulting to 1000 [ 201.433566][ T792] sy0: Port: 1 Link DOWN [ 204.322550][ T6645] CUSE: unknown device info "" [ 204.334178][ T6645] CUSE: unknown device info "" [ 204.339460][ T6645] CUSE: unknown device info "" [ 204.362545][ T6645] CUSE: unknown device info "" [ 204.374643][ T6645] CUSE: unknown device info "ÿ" [ 204.396149][ T6645] CUSE: unknown device info "" [ 204.410451][ T6645] CUSE: unknown device info "" [ 204.428128][ T6645] CUSE: unknown device info "ÿ" [ 204.469496][ T6645] CUSE: DEVNAME unspecified [ 205.493784][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.538540][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 205.983999][ T6663] Cannot find add_set index 0 as target [ 206.576135][ T6677] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.198'. [ 207.163610][ T6681] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 207.680082][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.208'. [ 207.734249][ T6689] bond2: (slave gretap2): making interface the new active one [ 207.750602][ T6689] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 208.254692][ T6705] syz_tun: entered allmulticast mode [ 208.914673][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.033301][ T6704] syz_tun: left allmulticast mode [ 211.234070][ T6741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.815963][ T6750] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 215.332916][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 215.367958][ T6772] syz_tun: entered allmulticast mode [ 216.713445][ T6758] syz_tun: left allmulticast mode [ 217.086073][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 217.093066][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 217.099233][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 217.109368][ T5141] Bluetooth: hci4: command 0x0406 tx timeout [ 217.116488][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.119486][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 217.442802][ T6788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.952360][ T5970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.134592][ T5970] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.143674][ T5970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.178195][ T6795] 9p: Bad value for 'rfdno' [ 218.237875][ T5970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.280397][ T5970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.319788][ T5970] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.352026][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.382352][ T5970] usb 3-1: Product: syz [ 218.386688][ T5970] usb 3-1: Manufacturer: syz [ 218.467550][ T5970] cdc_wdm 3-1:1.0: skipping garbage [ 218.507531][ T5970] cdc_wdm 3-1:1.0: skipping garbage [ 218.529942][ T5970] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.552342][ T5970] cdc_wdm 3-1:1.0: Unknown control protocol [ 218.918325][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.945874][ T5970] usb 3-1: USB disconnect, device number 4 [ 221.879665][ T6831] syz_tun: entered allmulticast mode [ 222.812364][ T6826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.819706][ T6826] IPv6: NLM_F_CREATE should be set when creating new route [ 222.827108][ T6826] IPv6: NLM_F_CREATE should be set when creating new route [ 222.834515][ T6826] IPv6: NLM_F_CREATE should be set when creating new route [ 223.453584][ T5970] kernel write not supported for file /dsp1 (pid: 5970 comm: kworker/0:7) [ 224.255954][ T6846] comedi comedi0: Minor 3 could not be opened [ 224.359009][ T6822] syz_tun: left allmulticast mode [ 226.641194][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 226.752558][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.843271][ T6876] FAT-fs (nullb0): bogus number of reserved sectors [ 226.851062][ T6876] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 227.009669][ T30] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.029045][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.055397][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.071436][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.119724][ T30] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.206535][ T30] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.224766][ T30] usb 5-1: Product: syz [ 227.499424][ T30] usb 5-1: Manufacturer: syz [ 227.565693][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 227.575199][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 227.596263][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 227.616332][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 227.732378][ T6016] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 227.784746][ T30] usb 5-1: USB disconnect, device number 6 [ 227.892538][ T6016] usb 4-1: Using ep0 maxpacket: 32 [ 227.900724][ T6016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 227.960024][ T6016] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 228.068821][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 228.282497][ T6016] usb 4-1: Product: syz [ 228.286866][ T6016] usb 4-1: SerialNumber: syz [ 228.293141][ T6878] comedi comedi2: reset error (fatal) [ 228.300419][ T6016] usb 4-1: config 0 descriptor?? [ 228.883847][ T6893] netlink: 'syz.5.270': attribute type 1 has an invalid length. [ 229.426552][ T6893] macvlan2: entered promiscuous mode [ 229.432037][ T6893] macvlan2: entered allmulticast mode [ 229.438980][ T6893] bond1: (slave macvlan2): Opening slave failed [ 229.596584][ T6895] bond1: (slave gretap1): making interface the new active one [ 229.643763][ T6895] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 230.991906][ T6905] syz_tun: entered allmulticast mode [ 232.080645][ T6908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.088141][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 232.095546][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 232.102908][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 232.742750][ T6904] syz_tun: left allmulticast mode [ 235.622387][ T792] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.573145][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 237.674760][ T792] usb 3-1: device descriptor read/all, error -71 [ 238.009385][ T5970] usb 4-1: USB disconnect, device number 4 [ 238.343817][ T6939] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.283'. [ 243.052666][ T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.207405][ T6975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.298'. [ 243.255990][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 243.341191][ T792] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 243.428688][ T792] usb 3-1: config 0 has no interface number 0 [ 243.812461][ T792] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 244.047721][ T792] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 244.104665][ T792] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 244.120919][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.149401][ T792] usb 3-1: Product: syz [ 244.157924][ T792] usb 3-1: Manufacturer: syz [ 244.193964][ T792] usb 3-1: SerialNumber: syz [ 244.218166][ T792] usb 3-1: config 0 descriptor?? [ 244.249342][ T6969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.316127][ T6977] comedi comedi2: reset error (fatal) [ 244.729730][ T792] radio-si470x 3-1:0.35: this is not a si470x device. [ 244.789595][ T792] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 244.800672][ T792] usb 3-1: USB disconnect, device number 7 [ 244.828389][ T6982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.550099][ T6987] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.301'. [ 246.309087][ T6990] random: crng reseeded on system resumption [ 248.449760][ T7011] syz_tun: entered allmulticast mode [ 248.481911][ T792] kernel write not supported for file /dsp1 (pid: 792 comm: kworker/0:2) [ 248.721043][ T7006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.728363][ T7006] IPv6: NLM_F_CREATE should be set when creating new route [ 248.735681][ T7006] IPv6: NLM_F_CREATE should be set when creating new route [ 248.743099][ T7006] IPv6: NLM_F_CREATE should be set when creating new route [ 249.877650][ T7004] syz_tun: left allmulticast mode [ 250.832362][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 250.848607][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 251.293165][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 251.672950][ T30] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 251.692916][ T30] usb 5-1: config 0 has no interface number 0 [ 251.699072][ T30] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 251.815401][ T30] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 251.830129][ T30] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 251.852391][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.860680][ T30] usb 5-1: Product: syz [ 251.865458][ T30] usb 5-1: Manufacturer: syz [ 251.870806][ T30] usb 5-1: SerialNumber: syz [ 251.893863][ T30] usb 5-1: config 0 descriptor?? [ 251.900108][ T7035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.558556][ T30] radio-si470x 5-1:0.35: this is not a si470x device. [ 252.612752][ T30] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 252.637299][ T30] usb 5-1: USB disconnect, device number 7 [ 252.758439][ T7054] comedi comedi2: reset error (fatal) [ 254.336921][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 255.088276][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.095039][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.388096][ T7075] siw: device registration error -23 [ 266.635104][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 266.836397][ T7136] tmpfs: Bad value for 'mpol' [ 269.522392][ T7154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.022856][ T7165] syz_tun: entered allmulticast mode [ 271.176558][ T7166] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.351'. [ 271.609159][ T7165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.616426][ T7165] IPv6: NLM_F_CREATE should be set when creating new route [ 271.623797][ T7165] IPv6: NLM_F_CREATE should be set when creating new route [ 271.631012][ T7165] IPv6: NLM_F_CREATE should be set when creating new route [ 273.951608][ T7160] syz_tun: left allmulticast mode [ 274.246901][ T7192] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 274.288930][ T7193] random: crng reseeded on system resumption [ 277.292082][ T7207] Cannot find add_set index 0 as target [ 278.051153][ T7208] CUSE: unknown device info "" [ 278.056401][ T7208] CUSE: unknown device info "" [ 278.064194][ T7208] CUSE: unknown device info "" [ 278.069140][ T7208] CUSE: unknown device info "" [ 278.074128][ T7208] CUSE: unknown device info "ÿ" [ 278.079143][ T7208] CUSE: unknown device info "" [ 278.091959][ T7208] CUSE: unknown device info "" [ 278.097073][ T7208] CUSE: unknown device info "ÿ" [ 278.102160][ T7208] CUSE: DEVNAME unspecified [ 278.531037][ T7197] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 278.540411][ T7197] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 278.550399][ T7197] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 279.951079][ T7224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.883115][ T7228] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.367'. [ 283.696369][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 284.340294][ T7260] Cannot find add_set index 0 as target [ 288.063559][ T7276] 9p: Bad value for 'wfdno' [ 288.435788][ T7280] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.382'. [ 289.698933][ T7282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.195810][ T7293] process 'syz.4.386' launched './file2' with NULL argv: empty string added [ 290.316744][ T7293] FAT-fs (nullb0): bogus number of reserved sectors [ 290.323618][ T7293] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 290.717892][ T6016] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 291.272894][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 291.313419][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 291.350967][ T6016] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 291.371218][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 291.452368][ T6016] usb 5-1: Product: syz [ 291.475577][ T6016] usb 5-1: SerialNumber: syz [ 291.503237][ T6016] usb 5-1: config 0 descriptor?? [ 296.903974][ T7337] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.397'. [ 297.237753][ T7345] CUSE: unknown device info "" [ 297.243106][ T7345] CUSE: unknown device info "" [ 297.248081][ T7345] CUSE: unknown device info "" [ 297.253225][ T7345] CUSE: unknown device info "" [ 297.260574][ T7345] CUSE: unknown device info "ÿ" [ 297.266146][ T7345] CUSE: unknown device info "" [ 297.271285][ T7345] CUSE: unknown device info "" [ 297.276257][ T7345] CUSE: unknown device info "ÿ" [ 297.281267][ T7345] CUSE: DEVNAME unspecified [ 298.061465][ T5843] usb 5-1: USB disconnect, device number 8 [ 298.297726][ T7353] binder: 7352:7353 ioctl 40046205 0 returned -22 [ 298.384405][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.404'. [ 298.805301][ T7360] Cannot find add_set index 0 as target [ 298.912619][ T7363] 9p: Bad value for 'wfdno' [ 299.952441][ T31] audit: type=1326 audit(1775486221.998:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 299.975825][ T31] audit: type=1326 audit(1775486222.008:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.002354][ T31] audit: type=1326 audit(1775486222.008:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.024493][ T31] audit: type=1326 audit(1775486222.008:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.047160][ T31] audit: type=1326 audit(1775486222.008:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.069420][ T31] audit: type=1326 audit(1775486222.008:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.092628][ T31] audit: type=1326 audit(1775486222.008:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.286782][ T31] audit: type=1326 audit(1775486222.008:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.558989][ T31] audit: type=1326 audit(1775486222.008:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 300.642869][ T31] audit: type=1326 audit(1775486222.008:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5a759c819 code=0x7ffc0000 [ 303.695156][ T7389] random: crng reseeded on system resumption [ 303.907859][ T7389] overlayfs: failed to resolve './file1': -2 [ 305.175450][ T7401] batman_adv: batadv0: Adding interface: dummy0 [ 305.181741][ T7401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.362354][ T7401] batman_adv: batadv0: Interface activated: dummy0 [ 306.161900][ T7409] binder: 7405:7409 ioctl 40046205 0 returned -22 [ 308.189177][ T7411] FAT-fs (nullb0): bogus number of reserved sectors [ 308.204870][ T7411] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 308.552339][ T792] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 308.692460][ T5914] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.093825][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 309.093845][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 309.254230][ T5914] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 309.339178][ T5914] usb 2-1: config 0 has no interface number 0 [ 309.380824][ T5914] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 309.411365][ T5914] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 309.712800][ T5914] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 309.727227][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.735854][ T5914] usb 2-1: Product: syz [ 309.740070][ T5914] usb 2-1: Manufacturer: syz [ 309.750230][ T5914] usb 2-1: SerialNumber: syz [ 310.498550][ T5914] usb 2-1: config 0 descriptor?? [ 310.842452][ T5914] radio-si470x 2-1:0.35: this is not a si470x device. [ 310.893890][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 310.984475][ T5914] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 311.062755][ T5914] usb 2-1: USB disconnect, device number 8 [ 314.394530][ T792] usb 3-1: device descriptor read/all, error -110 [ 314.546523][ T792] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 314.714685][ T792] usb 3-1: device descriptor read/64, error -32 [ 314.852732][ T792] usb usb3-port1: attempt power cycle [ 316.400415][ T7466] binder: 7462:7466 ioctl c0306201 0 returned -14 [ 316.653329][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.659953][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.198233][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.209149][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.217870][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.233529][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.265686][ T7463] comedi comedi2: reset error (fatal) [ 317.271569][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.504205][ T7470] lo speed is unknown, defaulting to 1000 [ 319.322297][ T5846] Bluetooth: hci6: command tx timeout [ 320.624336][ T7486] syzkaller0: entered promiscuous mode [ 320.630080][ T7486] syzkaller0: entered allmulticast mode [ 321.402778][ T5846] Bluetooth: hci6: command tx timeout [ 323.237016][ T6016] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 323.319282][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 323.484872][ T5846] Bluetooth: hci6: command tx timeout [ 323.794159][ T6016] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.843195][ T6016] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.880462][ T7523] binder: 7522:7523 ioctl c0306201 0 returned -14 [ 323.884516][ T6016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.924974][ T6016] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.958638][ T6016] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.987519][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.008046][ T6016] usb 6-1: Product: syz [ 324.022271][ T6016] usb 6-1: Manufacturer: syz [ 324.056254][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 324.081815][ T6016] cdc_wdm 6-1:1.0: skipping garbage [ 324.262702][ T6016] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 325.055405][ T6016] cdc_wdm 6-1:1.0: Unknown control protocol [ 325.110582][ T6016] usb 6-1: USB disconnect, device number 3 [ 325.138517][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.563140][ T5846] Bluetooth: hci6: command tx timeout [ 325.822522][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.456'. [ 325.928642][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 326.008521][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.237587][ T7543] netlink: 220 bytes leftover after parsing attributes in process `syz.2.457'. [ 326.274565][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.352440][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.377698][ T7470] bridge_slave_0: entered allmulticast mode [ 326.420249][ T7470] bridge_slave_0: entered promiscuous mode [ 326.704097][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.650077][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.717413][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.747551][ T7470] bridge_slave_1: entered allmulticast mode [ 329.069281][ T7470] bridge_slave_1: entered promiscuous mode [ 330.556630][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.2.463'. [ 331.328265][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.318775][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.381678][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.692454][ T792] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 332.728508][ T7470] team0: Port device team_slave_0 added [ 332.811508][ T7470] team0: Port device team_slave_1 added [ 332.928816][ T792] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.951562][ T792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.991885][ T792] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.038590][ T792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.086683][ T792] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.104442][ T792] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.122017][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.149370][ T792] usb 6-1: Product: syz [ 333.150381][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.164416][ T792] usb 6-1: Manufacturer: syz [ 333.227892][ T792] cdc_wdm 6-1:1.0: skipping garbage [ 333.245515][ T792] cdc_wdm 6-1:1.0: skipping garbage [ 333.277432][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.300081][ T792] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 333.325581][ T792] cdc_wdm 6-1:1.0: Unknown control protocol [ 333.341089][ T7587] batman_adv: batadv0: Adding interface: dummy0 [ 333.352535][ T7587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.453037][ T7587] batman_adv: batadv0: Interface activated: dummy0 [ 333.480174][ T7588] batadv0: mtu less than device minimum [ 333.490535][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.502553][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.514515][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.526452][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.538406][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.550370][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.562322][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.574262][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.586207][ T7588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.631130][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 333.637851][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 333.644716][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 333.651308][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 333.657659][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 333.685235][ T792] usb 6-1: USB disconnect, device number 4 [ 333.725605][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.764669][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.837716][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.059698][ T1107] bridge_slave_1: left allmulticast mode [ 334.066801][ T1107] bridge_slave_1: left promiscuous mode [ 334.079124][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.107011][ T1107] bridge_slave_0: left allmulticast mode [ 334.112878][ T1107] bridge_slave_0: left promiscuous mode [ 334.120692][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.303878][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.967943][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.009109][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.066129][ T1107] bond0 (unregistering): Released all slaves [ 337.133047][ T7627] capability: warning: `syz.4.477' uses 32-bit capabilities (legacy support in use) [ 337.474654][ T7470] hsr_slave_0: entered promiscuous mode [ 337.498047][ T7470] hsr_slave_1: entered promiscuous mode [ 337.511999][ T7470] debugfs: 'hsr0' already exists in 'hsr' [ 337.525560][ T7470] Cannot create hsr debugfs directory [ 337.532871][ T7632] netlink: 'syz.3.478': attribute type 7 has an invalid length. [ 338.262571][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 338.569268][ T7650] net_ratelimit: 10 callbacks suppressed [ 338.569288][ T7650] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:85:08:00 [ 338.605124][ T1107] hsr_slave_0: left promiscuous mode [ 338.627427][ T1107] hsr_slave_1: left promiscuous mode [ 338.637145][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.646181][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.658813][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.667361][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.695386][ T1107] veth1_macvtap: left promiscuous mode [ 338.708317][ T1107] veth0_macvtap: left promiscuous mode [ 338.757277][ T1107] veth1_vlan: left promiscuous mode [ 338.769373][ T1107] veth0_vlan: left promiscuous mode [ 341.547639][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 341.592505][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 342.591025][ T7685] Cannot find add_set index 0 as target [ 342.610743][ T7470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.681758][ T7470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.789112][ T7470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.827575][ T7470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.903063][ T5846] Bluetooth: hci2: unexpected event for opcode 0x040d [ 343.561681][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.576144][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.654408][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.654551][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.656990][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.657109][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.391044][ T7731] batadv0: mtu less than device minimum [ 346.442349][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.453944][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.465476][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.477010][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.488529][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.500068][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.511621][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.523365][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 346.534929][ T7731] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.364231][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 348.222481][ T7754] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 348.415600][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.400343][ T7470] veth0_vlan: entered promiscuous mode [ 350.422678][ T7470] veth1_vlan: entered promiscuous mode [ 351.107462][ T7470] veth0_macvtap: entered promiscuous mode [ 351.185915][ T7470] veth1_macvtap: entered promiscuous mode [ 351.371162][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.476977][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.816390][ T87] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.841665][ T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.919720][ T87] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.962688][ T1102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.840204][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.852783][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.032813][ T7821] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.523'. [ 354.163068][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.183408][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.126993][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.526'. [ 355.351162][ T7837] CUSE: unknown device info "" [ 355.356447][ T7837] CUSE: unknown device info "" [ 355.361571][ T7837] CUSE: unknown device info "" [ 355.366928][ T7837] CUSE: unknown device info "" [ 355.372687][ T7837] CUSE: unknown device info "ÿ" [ 355.381427][ T7837] CUSE: unknown device info "" [ 355.387889][ T7837] CUSE: unknown device info "" [ 355.393032][ T7837] CUSE: unknown device info "ÿ" [ 355.398337][ T7837] CUSE: DEVNAME unspecified [ 356.536291][ T7846] netlink: 'syz.2.529': attribute type 4 has an invalid length. [ 358.314389][ T7866] Cannot find add_set index 0 as target [ 362.564943][ T7899] siw: device registration error -23 [ 363.350764][ T7916] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.545'. [ 370.670926][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 370.713293][ T7965] siw: device registration error -23 [ 371.248002][ T7973] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 373.822604][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 373.949890][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 373.949915][ T31] audit: type=1326 audit(1775486295.618:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 374.032563][ T7990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 375.939671][ T7989] xt_CT: No such helper "pptp" [ 376.629663][ T31] audit: type=1326 audit(1775486295.618:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 376.817630][ T31] audit: type=1326 audit(1775486295.618:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 376.974754][ T31] audit: type=1326 audit(1775486295.618:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 377.096848][ T31] audit: type=1326 audit(1775486295.738:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 377.234812][ T31] audit: type=1326 audit(1775486295.738:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 377.371080][ T31] audit: type=1326 audit(1775486295.738:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 377.676977][ T8012] blktrace: Concurrent blktraces are not allowed on loop5 [ 378.035221][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.043947][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.120669][ T31] audit: type=1326 audit(1775486295.738:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 378.370783][ T31] audit: type=1326 audit(1775486295.738:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 378.442967][ T31] audit: type=1326 audit(1775486295.858:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31ecf9c819 code=0x7ffc0000 [ 379.731735][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 380.050951][ T8035] syz_tun: entered allmulticast mode [ 380.172682][ T8036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.791165][ T8030] syz_tun: left allmulticast mode [ 387.217231][ T5846] Bluetooth: hci5: unexpected event for opcode 0x040d [ 387.434255][ T8085] random: crng reseeded on system resumption [ 387.535605][ T8085] overlayfs: failed to resolve './file0': -2 [ 395.133795][ T8148] blktrace: Concurrent blktraces are not allowed on loop3 [ 395.346870][ T8149] syz_tun: entered allmulticast mode [ 395.604145][ T8150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.611373][ T8150] IPv6: NLM_F_CREATE should be set when creating new route [ 395.618688][ T8150] IPv6: NLM_F_CREATE should be set when creating new route [ 395.625951][ T8150] IPv6: NLM_F_CREATE should be set when creating new route [ 396.300630][ T8141] syz_tun: left allmulticast mode [ 403.787724][ T8227] FAT-fs (nullb0): bogus number of reserved sectors [ 403.794550][ T8227] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 404.122566][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 404.322367][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 404.351340][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 404.677055][ T8237] siw: device registration error -23 [ 405.366466][ T5928] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 405.375735][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 405.387582][ T5928] usb 4-1: Product: syz [ 405.565847][ T5928] usb 4-1: SerialNumber: syz [ 405.643458][ T5928] usb 4-1: config 0 descriptor?? [ 405.897312][ T8240] syz_tun: entered allmulticast mode [ 406.044503][ T8242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.795307][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 407.812508][ T8238] syz_tun: left allmulticast mode [ 411.167804][ T5894] usb 4-1: USB disconnect, device number 5 [ 412.172813][ T5846] Bluetooth: hci0: unexpected event for opcode 0x040d [ 412.314425][ T8286] CUSE: unknown device info "" [ 412.319311][ T8286] CUSE: unknown device info "" [ 412.325006][ T8286] CUSE: unknown device info "" [ 412.330100][ T8286] CUSE: unknown device info "" [ 412.335052][ T8286] CUSE: unknown device info "ÿ" [ 412.339981][ T8286] CUSE: unknown device info "" [ 412.344917][ T8286] CUSE: unknown device info "" [ 412.349776][ T8286] CUSE: unknown device info "ÿ" [ 412.354928][ T8286] CUSE: DEVNAME unspecified [ 412.451262][ T8290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.192357][ T5928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 413.453893][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 413.481531][ T5928] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 413.502940][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.521861][ T5928] usb 3-1: Product: syz [ 413.530130][ T5928] usb 3-1: Manufacturer: syz [ 413.542619][ T5928] usb 3-1: SerialNumber: syz [ 413.597010][ T5928] usb 3-1: config 0 descriptor?? [ 413.886322][ T5928] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 413.928065][ T5928] dvb-usb: bulk message failed: -22 (4/0) [ 413.972307][ T5928] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 414.042817][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 414.071050][ T5928] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 414.171953][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.193866][ T5928] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 414.247668][ T5928] usb 3-1: media controller created [ 414.313553][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.431339][ T5928] usb 3-1: selecting invalid altsetting 3 [ 414.456887][ T5928] ttusb2: set interface to alts=3 failed [ 414.637477][ T5928] DVB: Unable to find symbol tda10086_attach() [ 414.659835][ T5928] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 414.683482][ T5928] dvb-usb: bulk message failed: -22 (4/0) [ 414.697261][ T5928] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 414.762501][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 414.783046][ T5928] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 414.830588][ T5928] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 415.240232][ T5928] usb 3-1: USB disconnect, device number 11 [ 415.337291][ T5928] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 415.614743][ T8308] syzkaller0: entered promiscuous mode [ 415.620298][ T8308] syzkaller0: entered allmulticast mode [ 417.950697][ T8324] syz_tun: entered allmulticast mode [ 418.079716][ T8329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.119570][ T8329] fuse: Bad value for 'fd' [ 418.530785][ T8334] CUSE: unknown device info "" [ 418.538593][ T8334] CUSE: unknown device info "" [ 418.543569][ T8334] CUSE: unknown device info "" [ 418.548425][ T8334] CUSE: unknown device info "" [ 418.554033][ T8334] CUSE: unknown device info "ÿ" [ 418.558981][ T8334] CUSE: unknown device info "" [ 418.563892][ T8334] CUSE: unknown device info "" [ 418.568738][ T8334] CUSE: unknown device info "ÿ" [ 418.574179][ T8334] CUSE: DEVNAME unspecified [ 418.622703][ T8323] syz_tun: left allmulticast mode [ 418.712284][ T5970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 418.818522][ T8339] FAT-fs (nullb0): bogus number of reserved sectors [ 418.825622][ T8339] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 418.909125][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 418.970578][ T5970] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 418.990524][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.272808][ T8341] siw: device registration error -23 [ 419.316437][ T5970] usb 5-1: config 0 descriptor?? [ 419.364243][ T5970] as10x_usb: device has been detected [ 419.391791][ T5970] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 419.631603][ T5970] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 420.624006][ T5970] as10x_usb: error during firmware upload part1 [ 420.710982][ T8331] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 420.719996][ T5970] Registered device nBox DVB-T Dongle [ 420.861564][ T8331] netlink: 228 bytes leftover after parsing attributes in process `syz.4.647'. [ 421.102636][ T5970] usb 5-1: USB disconnect, device number 9 [ 421.471590][ T5970] Unregistered device nBox DVB-T Dongle [ 421.480186][ T5970] as10x_usb: device has been disconnected [ 422.192338][ T5970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 422.363676][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 422.374299][ T5970] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 422.414144][ T5970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.466781][ T5970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.512275][ T5970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.561808][ T5970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.646600][ T5970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.707401][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.153252][ T5970] usb 4-1: usb_control_msg returned -32 [ 423.159996][ T5970] usbtmc 4-1:16.0: can't read capabilities [ 424.468049][ T8386] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 424.662262][ T5894] usb 4-1: USB disconnect, device number 6 [ 424.871499][ T8392] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.658'. [ 424.990381][ T5846] Bluetooth: hci2: unexpected event for opcode 0x040d [ 426.927399][ T8411] syz_tun: entered allmulticast mode [ 427.157710][ T8413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.226969][ T8412] fuse: Bad value for 'fd' [ 427.565170][ T8410] syz_tun: left allmulticast mode [ 428.332884][ T8418] CUSE: unknown device info "" [ 428.340622][ T8418] CUSE: unknown device info "" [ 428.345602][ T8418] CUSE: unknown device info "" [ 428.350466][ T8418] CUSE: unknown device info "" [ 428.355641][ T8418] CUSE: unknown device info "ÿ" [ 428.360677][ T8418] CUSE: unknown device info "" [ 428.365599][ T8418] CUSE: unknown device info "" [ 428.370449][ T8418] CUSE: unknown device info "ÿ" [ 428.375457][ T8418] CUSE: DEVNAME unspecified [ 434.644416][ T8458] FAT-fs (nullb0): bogus number of reserved sectors [ 434.657214][ T8458] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 434.711749][ T8457] lo speed is unknown, defaulting to 1000 [ 436.289288][ T8475] CUSE: unknown device info "" [ 436.319476][ T8475] CUSE: unknown device info "" [ 436.351715][ T8475] CUSE: unknown device info "" [ 436.431563][ T8475] CUSE: unknown device info "" [ 436.495195][ T8475] CUSE: unknown device info "ÿ" [ 436.560729][ T8475] CUSE: unknown device info "" [ 436.609063][ T8475] CUSE: unknown device info "" [ 436.684184][ T8475] CUSE: unknown device info "ÿ" [ 436.698685][ T8475] CUSE: DEVNAME unspecified [ 438.356874][ T8491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.257036][ T8496] siw: device registration error -23 [ 439.423441][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.430130][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.666351][ T5834] Bluetooth: hci2: unexpected event for opcode 0x040d [ 442.085088][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 442.741537][ T8523] FAT-fs (nullb0): bogus number of reserved sectors [ 442.748407][ T8523] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 442.935109][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.690'. [ 443.872526][ T8534] CUSE: unknown device info "" [ 443.877489][ T8534] CUSE: unknown device info "" [ 443.882443][ T8534] CUSE: unknown device info "" [ 443.887314][ T8534] CUSE: unknown device info "" [ 443.892237][ T8534] CUSE: unknown device info "ÿ" [ 443.897185][ T8534] CUSE: unknown device info "" [ 443.902363][ T8534] CUSE: unknown device info "" [ 443.907222][ T8534] CUSE: unknown device info "ÿ" [ 443.912255][ T8534] CUSE: DEVNAME unspecified [ 445.143460][ T792] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 445.623863][ T8552] siw: device registration error -23 [ 446.000518][ T792] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.027496][ T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.068625][ T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.104009][ T792] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.340412][ T792] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.352263][ T792] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.360420][ T792] usb 5-1: Product: syz [ 446.367017][ T792] usb 5-1: Manufacturer: syz [ 446.384741][ T792] cdc_wdm 5-1:1.0: skipping garbage [ 446.390152][ T792] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 447.331667][ T792] usb 5-1: USB disconnect, device number 10 [ 448.555474][ T8582] FAT-fs (nullb0): bogus number of reserved sectors [ 448.572840][ T8582] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 449.275585][ T8587] Cannot find add_set index 0 as target [ 451.538453][ T8607] CUSE: unknown device info "" [ 451.543560][ T8607] CUSE: unknown device info "" [ 451.548418][ T8607] CUSE: unknown device info "" [ 451.553328][ T8607] CUSE: unknown device info "" [ 451.558172][ T8607] CUSE: unknown device info "ÿ" [ 451.563296][ T8607] CUSE: unknown device info "" [ 451.568160][ T8607] CUSE: unknown device info "" [ 451.573545][ T8607] CUSE: unknown device info "ÿ" [ 451.578476][ T8607] CUSE: DEVNAME unspecified [ 453.317642][ T5846] Bluetooth: hci4: unexpected event for opcode 0x040d [ 454.484233][ T5914] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 454.706266][ T5914] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.706311][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.706337][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.706383][ T5914] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.708481][ T5914] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.708516][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.708543][ T5914] usb 7-1: Product: syz [ 454.708563][ T5914] usb 7-1: Manufacturer: syz [ 454.779346][ T5914] cdc_wdm 7-1:1.0: skipping garbage [ 454.779379][ T5914] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 455.253221][ T8635] FAT-fs (nullb0): bogus number of reserved sectors [ 455.253268][ T8635] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 455.347462][ T5914] usb 7-1: USB disconnect, device number 2 [ 455.716721][ T8643] FAT-fs (nullb0): bogus number of reserved sectors [ 455.724609][ T8643] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 456.132377][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 456.532655][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 456.575634][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 456.643416][ T24] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 456.654980][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 456.760115][ T24] usb 4-1: Product: syz [ 456.789453][ T24] usb 4-1: SerialNumber: syz [ 456.817939][ T24] usb 4-1: config 0 descriptor?? [ 458.102823][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 459.002269][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 459.131627][ T8663] CUSE: unknown device info "" [ 459.136730][ T8663] CUSE: unknown device info "" [ 459.141690][ T8663] CUSE: unknown device info "" [ 459.146987][ T8663] CUSE: unknown device info "" [ 459.153646][ T8663] CUSE: unknown device info "ÿ" [ 459.158689][ T8663] CUSE: unknown device info "" [ 459.163822][ T8663] CUSE: unknown device info "" [ 459.168778][ T8663] CUSE: unknown device info "ÿ" [ 459.174040][ T8663] CUSE: DEVNAME unspecified [ 459.570817][ T24] usb 7-1: config 7 has an invalid interface number: 124 but max is 2 [ 459.626612][ T24] usb 7-1: config 7 has an invalid interface number: 52 but max is 2 [ 459.696124][ T24] usb 7-1: config 7 has no interface number 1 [ 459.718527][ T24] usb 7-1: config 7 has no interface number 2 [ 459.750239][ T8667] FAT-fs (nullb0): bogus number of reserved sectors [ 459.757072][ T8667] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 459.861732][ T24] usb 7-1: config 7 interface 0 altsetting 163 bulk endpoint 0x85 has invalid maxpacket 8 [ 459.890713][ T24] usb 7-1: config 7 interface 0 altsetting 163 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 460.074230][ T5970] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 460.087135][ T24] usb 7-1: config 7 interface 124 has no altsetting 0 [ 460.087178][ T24] usb 7-1: config 7 interface 0 has no altsetting 0 [ 460.087211][ T24] usb 7-1: config 7 interface 52 has no altsetting 0 [ 460.092819][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=c1.59 [ 460.092869][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.092906][ T24] usb 7-1: Product: syz [ 460.092934][ T24] usb 7-1: Manufacturer: syz [ 460.092961][ T24] usb 7-1: SerialNumber: syz [ 461.072450][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 461.081425][ T24] smsusb:smsusb_probe: board id=8, interface number 124 [ 461.109945][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 461.115104][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 461.139568][ T5970] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 461.139621][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 461.139660][ T5970] usb 6-1: Product: syz [ 461.139688][ T5970] usb 6-1: SerialNumber: syz [ 461.156890][ T5970] usb 6-1: config 0 descriptor?? [ 461.172735][ T24] smsusb:siano_media_device_register: media controller created [ 461.175565][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.175682][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.175796][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.175898][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.175998][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.176277][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.176381][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.176484][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.176585][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.176758][ T24] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 461.176843][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.189031][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195561][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195623][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195673][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195722][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195824][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195873][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.195937][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196002][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196067][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196324][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196392][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196460][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196527][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196593][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196668][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196740][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196817][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 461.196924][ T24] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 461.196945][ T24] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 461.196963][ T24] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 461.219769][ T24] ------------[ cut here ]------------ [ 461.219796][ T24] !PageLargeKmalloc(page) [ 461.219810][ T24] WARNING: mm/slub.c:6393 at free_large_kmalloc+0x96/0xd0, CPU#1: kworker/1:0/24 [ 461.219898][ T24] Modules linked in: [ 461.219949][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.220006][ T24] Tainted: [L]=SOFTLOCKUP [ 461.220021][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.220049][ T24] Workqueue: usb_hub_wq hub_event [ 461.220088][ T24] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 461.220152][ T24] Code: 28 90 0f 0b 90 80 3d 6e 5b 5a 0e 00 0f 84 35 48 bc fe 48 8b 74 24 28 48 89 ef e8 35 3c 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 92 0e e7 8d 5b 5d 41 5c 41 [ 461.220190][ T24] RSP: 0018:ffffc900001e6d70 EFLAGS: 00010202 [ 461.220224][ T24] RAX: 00000000000000ff RBX: ffffea00021e7880 RCX: 0000000000000030 [ 461.220250][ T24] RDX: 0000000000000000 RSI: ffff8880879e2000 RDI: ffffea00021e7880 [ 461.220278][ T24] RBP: ffff8880879e2000 R08: 0000000000000005 R09: 0000000000000000 [ 461.220304][ T24] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88802ab0a000 [ 461.220330][ T24] R13: ffff88805319f000 R14: dffffc0000000000 R15: ffff88802ab0a0f0 [ 461.220361][ T24] FS: 0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 461.220396][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.220424][ T24] CR2: 00007fc7294e79c0 CR3: 000000005b96a000 CR4: 0000000000350ef0 [ 461.220451][ T24] Call Trace: [ 461.220465][ T24] [ 461.220486][ T24] usb_free_urb.part.0+0xf8/0x110 [ 461.220542][ T24] usb_free_urb+0x1f/0x30 [ 461.220594][ T24] smsusb_term_device+0x108/0x200 [ 461.220665][ T24] smsusb_init_device+0xb4e/0xbb0 [ 461.220730][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 461.220802][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 461.220877][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.220927][ T24] ? usb_clear_halt+0xb5/0x160 [ 461.220993][ T24] smsusb_probe+0xd7f/0xe1f [ 461.221053][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 461.221108][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.221157][ T24] ? mark_held_locks+0x40/0x70 [ 461.221224][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 461.221297][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.221362][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.221411][ T24] ? __pm_runtime_set_status+0x13c/0x970 [ 461.221469][ T24] usb_probe_interface+0x303/0x8f0 [ 461.221521][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 461.221570][ T24] really_probe+0x241/0xa60 [ 461.221621][ T24] __driver_probe_device+0x1de/0x400 [ 461.221665][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.221720][ T24] driver_probe_device+0x4c/0x1b0 [ 461.221768][ T24] __device_attach_driver+0x1df/0x340 [ 461.221826][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 461.221872][ T24] bus_for_each_drv+0x159/0x1e0 [ 461.221936][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.222000][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222048][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 461.222091][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222233][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.222307][ T24] __device_attach+0x1e4/0x4d0 [ 461.222354][ T24] ? __pfx___device_attach+0x10/0x10 [ 461.222400][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222448][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 461.222490][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222543][ T24] device_initial_probe+0xaf/0xd0 [ 461.222592][ T24] bus_probe_device+0x64/0x160 [ 461.222634][ T24] device_add+0x11d9/0x1950 [ 461.222691][ T24] ? __pfx_device_add+0x10/0x10 [ 461.222743][ T24] ? kfree+0x1f6/0x6b0 [ 461.222791][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222839][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.222887][ T24] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 461.222961][ T24] usb_set_configuration+0xd97/0x1c60 [ 461.223050][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 461.223107][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 461.223165][ T24] usb_probe_device+0xef/0x400 [ 461.223204][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 461.223247][ T24] really_probe+0x241/0xa60 [ 461.223299][ T24] __driver_probe_device+0x1de/0x400 [ 461.223345][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.223400][ T24] driver_probe_device+0x4c/0x1b0 [ 461.223448][ T24] __device_attach_driver+0x1df/0x340 [ 461.223499][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 461.223547][ T24] bus_for_each_drv+0x159/0x1e0 [ 461.223879][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.223943][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.223992][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 461.224277][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.224327][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.224401][ T24] __device_attach+0x1e4/0x4d0 [ 461.224449][ T24] ? __pfx___device_attach+0x10/0x10 [ 461.224495][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.224543][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 461.224587][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.224643][ T24] device_initial_probe+0xaf/0xd0 [ 461.224692][ T24] bus_probe_device+0x64/0x160 [ 461.224735][ T24] device_add+0x11d9/0x1950 [ 461.224802][ T24] ? __pfx_device_add+0x10/0x10 [ 461.224853][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.224901][ T24] ? add_device_randomness+0xb7/0xf0 [ 461.224949][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225009][ T24] usb_new_device.cold+0x685/0x115c [ 461.225067][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 461.225147][ T24] hub_event+0x314d/0x4af0 [ 461.225228][ T24] ? __pfx_hub_event+0x10/0x10 [ 461.225265][ T24] ? __entry_text_end+0xfdfb5/0x1020b9 [ 461.225312][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 461.225361][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225415][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225468][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225518][ T24] ? rcu_is_watching+0x12/0xc0 [ 461.225574][ T24] process_one_work+0xa23/0x19a0 [ 461.225637][ T24] ? __pfx_process_one_work+0x10/0x10 [ 461.225677][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225742][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.225808][ T24] worker_thread+0x5ef/0xe50 [ 461.225902][ T24] ? kthread+0x13a/0x450 [ 461.225937][ T24] ? __pfx_worker_thread+0x10/0x10 [ 461.225975][ T24] kthread+0x370/0x450 [ 461.226009][ T24] ? __pfx_kthread+0x10/0x10 [ 461.226047][ T24] ret_from_fork+0x754/0xd80 [ 461.226088][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 461.226129][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.226178][ T24] ? __switch_to+0x7b4/0x1120 [ 461.226226][ T24] ? __pfx_kthread+0x10/0x10 [ 461.226265][ T24] ret_from_fork_asm+0x1a/0x30 [ 461.226336][ T24] [ 461.226356][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 461.226384][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.226437][ T24] Tainted: [L]=SOFTLOCKUP [ 461.226451][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.226477][ T24] Workqueue: usb_hub_wq hub_event [ 461.226513][ T24] Call Trace: [ 461.226525][ T24] [ 461.226539][ T24] dump_stack_lvl+0x100/0x190 [ 461.226602][ T24] vpanic+0x552/0x970 [ 461.226641][ T24] ? __pfx_vpanic+0x10/0x10 [ 461.226695][ T24] panic+0xd1/0xe0 [ 461.226732][ T24] ? __pfx_panic+0x10/0x10 [ 461.226818][ T24] check_panic_on_warn.cold+0x19/0x34 [ 461.226852][ T24] ? free_large_kmalloc+0x96/0xd0 [ 461.226895][ T24] __warn.cold+0x191/0x348 [ 461.226929][ T24] __report_bug+0x296/0x3d0 [ 461.226955][ T24] ? free_large_kmalloc+0x96/0xd0 [ 461.227002][ T24] ? __pfx___report_bug+0x10/0x10 [ 461.227029][ T24] ? device_initial_probe+0xaf/0xd0 [ 461.227063][ T24] ? bus_probe_device+0x64/0x160 [ 461.227088][ T24] ? device_add+0x11d9/0x1950 [ 461.227125][ T24] ? usb_new_device.cold+0x685/0x115c [ 461.227157][ T24] ? hub_event+0x314d/0x4af0 [ 461.227182][ T24] ? process_one_work+0xa23/0x19a0 [ 461.227210][ T24] ? worker_thread+0x5ef/0xe50 [ 461.227237][ T24] ? kthread+0x370/0x450 [ 461.227261][ T24] ? ret_from_fork+0x754/0xd80 [ 461.227286][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 461.227319][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.227354][ T24] ? find_held_lock+0x2b/0x80 [ 461.227390][ T24] ? smscore_unregister_device+0x537/0x7f0 [ 461.227432][ T24] ? smscore_unregister_device+0x537/0x7f0 [ 461.227480][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.227533][ T24] ? free_large_kmalloc+0x96/0xd0 [ 461.227585][ T24] report_bug+0xb2/0x220 [ 461.227612][ T24] ? free_large_kmalloc+0x96/0xd0 [ 461.227657][ T24] handle_bug+0x16a/0x2a0 [ 461.227702][ T24] exc_invalid_op+0x17/0x50 [ 461.227754][ T24] asm_exc_invalid_op+0x1a/0x20 [ 461.227795][ T24] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 461.227841][ T24] Code: 28 90 0f 0b 90 80 3d 6e 5b 5a 0e 00 0f 84 35 48 bc fe 48 8b 74 24 28 48 89 ef e8 35 3c 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 92 0e e7 8d 5b 5d 41 5c 41 [ 461.227869][ T24] RSP: 0018:ffffc900001e6d70 EFLAGS: 00010202 [ 461.227893][ T24] RAX: 00000000000000ff RBX: ffffea00021e7880 RCX: 0000000000000030 [ 461.227911][ T24] RDX: 0000000000000000 RSI: ffff8880879e2000 RDI: ffffea00021e7880 [ 461.227930][ T24] RBP: ffff8880879e2000 R08: 0000000000000005 R09: 0000000000000000 [ 461.227948][ T24] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88802ab0a000 [ 461.227967][ T24] R13: ffff88805319f000 R14: dffffc0000000000 R15: ffff88802ab0a0f0 [ 461.228007][ T24] usb_free_urb.part.0+0xf8/0x110 [ 461.228049][ T24] usb_free_urb+0x1f/0x30 [ 461.228086][ T24] smsusb_term_device+0x108/0x200 [ 461.228137][ T24] smsusb_init_device+0xb4e/0xbb0 [ 461.228184][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 461.228231][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 461.228286][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.228321][ T24] ? usb_clear_halt+0xb5/0x160 [ 461.228370][ T24] smsusb_probe+0xd7f/0xe1f [ 461.228414][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 461.228455][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.228490][ T24] ? mark_held_locks+0x40/0x70 [ 461.228536][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 461.228587][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.228636][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.228672][ T24] ? __pm_runtime_set_status+0x13c/0x970 [ 461.228714][ T24] usb_probe_interface+0x303/0x8f0 [ 461.228751][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 461.228798][ T24] really_probe+0x241/0xa60 [ 461.228849][ T24] __driver_probe_device+0x1de/0x400 [ 461.228890][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.228930][ T24] driver_probe_device+0x4c/0x1b0 [ 461.228965][ T24] __device_attach_driver+0x1df/0x340 [ 461.229002][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 461.229037][ T24] bus_for_each_drv+0x159/0x1e0 [ 461.229084][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.229130][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229165][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 461.229196][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229232][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.229285][ T24] __device_attach+0x1e4/0x4d0 [ 461.229320][ T24] ? __pfx___device_attach+0x10/0x10 [ 461.229354][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229390][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 461.229423][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229464][ T24] device_initial_probe+0xaf/0xd0 [ 461.229500][ T24] bus_probe_device+0x64/0x160 [ 461.229532][ T24] device_add+0x11d9/0x1950 [ 461.229574][ T24] ? __pfx_device_add+0x10/0x10 [ 461.229613][ T24] ? kfree+0x1f6/0x6b0 [ 461.229640][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229676][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.229711][ T24] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 461.229765][ T24] usb_set_configuration+0xd97/0x1c60 [ 461.229840][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 461.229882][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 461.229938][ T24] usb_probe_device+0xef/0x400 [ 461.229977][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 461.230011][ T24] really_probe+0x241/0xa60 [ 461.230049][ T24] __driver_probe_device+0x1de/0x400 [ 461.230082][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230121][ T24] driver_probe_device+0x4c/0x1b0 [ 461.230156][ T24] __device_attach_driver+0x1df/0x340 [ 461.230193][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 461.230227][ T24] bus_for_each_drv+0x159/0x1e0 [ 461.230273][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.230320][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230355][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 461.230386][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230421][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.230475][ T24] __device_attach+0x1e4/0x4d0 [ 461.230509][ T24] ? __pfx___device_attach+0x10/0x10 [ 461.230544][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230579][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 461.230612][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230653][ T24] device_initial_probe+0xaf/0xd0 [ 461.230689][ T24] bus_probe_device+0x64/0x160 [ 461.230721][ T24] device_add+0x11d9/0x1950 [ 461.230763][ T24] ? __pfx_device_add+0x10/0x10 [ 461.230806][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230841][ T24] ? add_device_randomness+0xb7/0xf0 [ 461.230876][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.230919][ T24] usb_new_device.cold+0x685/0x115c [ 461.230963][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 461.231032][ T24] hub_event+0x314d/0x4af0 [ 461.231117][ T24] ? __pfx_hub_event+0x10/0x10 [ 461.231145][ T24] ? __entry_text_end+0xfdfb5/0x1020b9 [ 461.231179][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 461.231216][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231255][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231294][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231329][ T24] ? rcu_is_watching+0x12/0xc0 [ 461.231368][ T24] process_one_work+0xa23/0x19a0 [ 461.231419][ T24] ? __pfx_process_one_work+0x10/0x10 [ 461.231447][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231498][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231539][ T24] worker_thread+0x5ef/0xe50 [ 461.231582][ T24] ? kthread+0x13a/0x450 [ 461.231606][ T24] ? __pfx_worker_thread+0x10/0x10 [ 461.231633][ T24] kthread+0x370/0x450 [ 461.231659][ T24] ? __pfx_kthread+0x10/0x10 [ 461.231687][ T24] ret_from_fork+0x754/0xd80 [ 461.231717][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 461.231747][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.231790][ T24] ? __switch_to+0x7b4/0x1120 [ 461.231825][ T24] ? __pfx_kthread+0x10/0x10 [ 461.231853][ T24] ret_from_fork_asm+0x1a/0x30 [ 461.231905][ T24] [ 461.232275][ T24] Kernel Offset: disabled