last executing test programs: 11.9631744s ago: executing program 1 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x1) 10.080698528s ago: executing program 3 (id=187): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) semop(0x0, &(0x7f00000001c0)=[{0x4, 0x7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_open_dev$sndctrl(0x0, 0x22a8, 0x4a0000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x182}, "803900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "0400"}, 0x28) recvfrom(r2, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) shutdown(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r3, 0x0, 0x0, 0x15c, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) 9.212327184s ago: executing program 3 (id=191): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) read$dsp(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, 0x0, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4078) 7.618646895s ago: executing program 3 (id=193): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.253627774s ago: executing program 2 (id=197): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x4000000) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000280), 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70100400000004fffffa06000100f10a00000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000080)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) 6.268032643s ago: executing program 3 (id=200): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 5.209669234s ago: executing program 3 (id=201): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x1208000, 0x0, 0x8245f874673c990a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) r5 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r6 = dup2(r5, r5) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000300)='source', 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) timer_create(0x0, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) vmsplice(r7, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r7, 0x407, 0x2000000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) 5.11127101s ago: executing program 2 (id=202): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="341afb40a3e32a4ceb60ce00a5f938f95a628d3abd83b09001066aabfa770534b9e6b78ff7e81b", &(0x7f0000000480)='\vi'}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.10957415s ago: executing program 1 (id=203): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) lseek(0xffffffffffffffff, 0x5, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 4.991028395s ago: executing program 4 (id=204): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000844) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.935281503s ago: executing program 1 (id=206): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) r3 = socket(0xa, 0x2, 0x0) r4 = inotify_init() r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r7}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r7}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote, r7}, 0xc) 3.782325231s ago: executing program 2 (id=207): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x558}]}}]}, 0x38}}, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000004c0)="1f", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.758837497s ago: executing program 0 (id=208): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.472344766s ago: executing program 1 (id=209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @remote}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x2a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xc5}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @generic={0x5e, 0x4, 0xa, 0x7, 0x81}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4de313f2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x81, 0xce, &(0x7f0000000240)=""/206, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x4, 0xfffff001, 0x3}, 0x10, 0x1b337, 0xffffffffffffffff, 0x1, &(0x7f0000000440), &(0x7f0000000480)=[{0x1, 0x3, 0xa, 0x8}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=[0x0], 0x0, 0xa8, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f0000000b80), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_open_dev$dri(0x0, 0x1, 0xc0400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x81, 0x3, {{0x12, 0x4, 0x0, 0x3d, 0x48, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x1, [{@local, 0x7}]}, @end, @end, @timestamp={0x44, 0x4, 0x3e, 0x0, 0x6}, @ssrr={0x89, 0x1f, 0x94, [@rand_addr=0x64010100, @rand_addr=0x64010100, @empty, @multicast2, @local, @local, @rand_addr=0x64010100]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r6, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000bc0)={0x250, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x228, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3116e05135182b03f462fc7b2dd8776bcf86a2a752bfe13c9e158febc4b7042f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31fe2fbccd01adc51927df0893afdf49e8d2301937c14918bab47061a589e6c5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9db}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @mcast1, 0x8}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd9d}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) 3.354582211s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) 3.338927558s ago: executing program 2 (id=211): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 2.860475616s ago: executing program 4 (id=212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000680), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 1.961137534s ago: executing program 0 (id=213): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$unix(0x1, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x204000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.946876187s ago: executing program 2 (id=214): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x26) keyctl$invalidate(0x15, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e03e, 0x1000}, 0x20) 1.795139034s ago: executing program 4 (id=215): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r0, 0x101, 0x1) 1.762414983s ago: executing program 1 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.632936536s ago: executing program 4 (id=217): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 1.49905409s ago: executing program 2 (id=218): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="341afb40a3e32a4ceb60ce00a5f938f95a628d3abd83b09001066aabfa770534b9e6b78ff7e81b", &(0x7f0000000480)='\vi'}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0xfffffffffffffe92, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.498848717s ago: executing program 0 (id=219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.312482446s ago: executing program 4 (id=220): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = io_uring_setup(0x3792, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.19684651s ago: executing program 1 (id=221): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000200)={0x801400, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r6, &(0x7f0000000000)=""/116, 0x74) process_madvise(r5, 0x0, 0x0, 0x17, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x5034) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000640)=0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r14, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x200840c4) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setresuid(r15, r15, r15) newfstatat(0xffffffffffffff9c, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) write$FUSE_STATX(r6, &(0x7f0000004100)={0x130, 0x0, r8, {0x81, 0x0, 0x0, '\x00', {0x800, 0x41b6, 0x1, 0x101, r15, r16, 0x4000, '\x00', 0x2, 0xfffffffffffffff8, 0x6, 0x1, {0x800, 0x9}, {0x7f52, 0xb}, {0x1, 0x8}, {0x5, 0x7fff}, 0x9, 0x9, 0x3, 0x1}}}, 0x130) 1.10426557s ago: executing program 3 (id=222): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r1}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="44319cf25b62d789e85b1c38f7770c"], 0x1c}, 0x1, 0x0, 0x0, 0x200420c0}, 0x40850) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) 1.068043261s ago: executing program 0 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) 965.639666ms ago: executing program 4 (id=224): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) 0s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x10000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 73.334962][ T5603] cgroup: Unknown subsys name 'net' [ 73.443488][ T5603] cgroup: Unknown subsys name 'cpuset' [ 73.451358][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.820209][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.082349][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.083037][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.084299][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.085167][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.093244][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.093685][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.103486][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.104801][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.107370][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.108770][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.109563][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.110244][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.113032][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.117087][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.133720][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.159736][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.161914][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.164177][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.192215][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.193542][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.217330][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.227019][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.234248][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.251534][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.252126][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.042013][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.042189][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.042331][ T5616] bridge_slave_0: entered allmulticast mode [ 79.044961][ T5616] bridge_slave_0: entered promiscuous mode [ 79.050915][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.051068][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.051475][ T5616] bridge_slave_1: entered allmulticast mode [ 79.053189][ T5616] bridge_slave_1: entered promiscuous mode [ 79.177365][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.184701][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.184861][ T5630] bridge_slave_0: entered allmulticast mode [ 79.186596][ T5630] bridge_slave_0: entered promiscuous mode [ 79.189602][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.189697][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.189816][ T5630] bridge_slave_1: entered allmulticast mode [ 79.192108][ T5630] bridge_slave_1: entered promiscuous mode [ 79.203337][ T5629] Bluetooth: hci2: command tx timeout [ 79.203557][ T5618] Bluetooth: hci1: command tx timeout [ 79.246510][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.289619][ T5629] Bluetooth: hci3: command tx timeout [ 79.289751][ T5629] Bluetooth: hci0: command tx timeout [ 79.291009][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.291215][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.291353][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.291466][ T5615] bridge_slave_0: entered allmulticast mode [ 79.294585][ T5615] bridge_slave_0: entered promiscuous mode [ 79.300939][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.301269][ T5618] Bluetooth: hci4: command tx timeout [ 79.354873][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.355337][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.355475][ T5617] bridge_slave_0: entered allmulticast mode [ 79.357478][ T5617] bridge_slave_0: entered promiscuous mode [ 79.364941][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.365175][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.365268][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.365398][ T5615] bridge_slave_1: entered allmulticast mode [ 79.367276][ T5615] bridge_slave_1: entered promiscuous mode [ 79.403329][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.403430][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.403553][ T5614] bridge_slave_0: entered allmulticast mode [ 79.406369][ T5614] bridge_slave_0: entered promiscuous mode [ 79.410540][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.410638][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.411730][ T5614] bridge_slave_1: entered allmulticast mode [ 79.413448][ T5614] bridge_slave_1: entered promiscuous mode [ 79.431634][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.431735][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.431848][ T5617] bridge_slave_1: entered allmulticast mode [ 79.433868][ T5617] bridge_slave_1: entered promiscuous mode [ 79.488952][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.491742][ T5616] team0: Port device team_slave_0 added [ 79.497123][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.560155][ T5630] team0: Port device team_slave_0 added [ 79.563726][ T5616] team0: Port device team_slave_1 added [ 79.586526][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.608872][ T5630] team0: Port device team_slave_1 added [ 79.632298][ T5615] team0: Port device team_slave_0 added [ 79.634905][ T5615] team0: Port device team_slave_1 added [ 79.637430][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.655926][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.674107][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.679385][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.679432][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.722589][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.739454][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.739496][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.739864][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.758644][ T5614] team0: Port device team_slave_0 added [ 79.788497][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.788516][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.788539][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.794720][ T5614] team0: Port device team_slave_1 added [ 79.814883][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.814901][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.814926][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.852425][ T5617] team0: Port device team_slave_0 added [ 79.861223][ T5617] team0: Port device team_slave_1 added [ 79.911264][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.911296][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.911630][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.957099][ T5616] hsr_slave_0: entered promiscuous mode [ 79.958245][ T5616] hsr_slave_1: entered promiscuous mode [ 79.967718][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.967738][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.967758][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.970158][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.970189][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.970213][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.972297][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.972312][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.972336][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.105523][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.105627][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.105652][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.107716][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.107730][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.107753][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.215465][ T5615] hsr_slave_0: entered promiscuous mode [ 80.216481][ T5615] hsr_slave_1: entered promiscuous mode [ 80.217205][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 80.217301][ T5615] Cannot create hsr debugfs directory [ 80.248495][ T5614] hsr_slave_0: entered promiscuous mode [ 80.250637][ T5614] hsr_slave_1: entered promiscuous mode [ 80.251376][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 80.251396][ T5614] Cannot create hsr debugfs directory [ 80.273188][ T5630] hsr_slave_0: entered promiscuous mode [ 80.274304][ T5630] hsr_slave_1: entered promiscuous mode [ 80.275590][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.275609][ T5630] Cannot create hsr debugfs directory [ 80.317930][ T5617] hsr_slave_0: entered promiscuous mode [ 80.319827][ T5617] hsr_slave_1: entered promiscuous mode [ 80.320545][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 80.320563][ T5617] Cannot create hsr debugfs directory [ 80.822297][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.834315][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.836558][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.846896][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.848304][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.854542][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.860222][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.874009][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.958243][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.974592][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.975787][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.995437][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.003795][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.012904][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.018902][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.029041][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.147143][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.157465][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.178430][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.191795][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.207397][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.217921][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.229624][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.239770][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.283755][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.290938][ T4933] Bluetooth: hci2: command tx timeout [ 81.291047][ T5618] Bluetooth: hci1: command tx timeout [ 81.306219][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.313742][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.326234][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.335900][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.336810][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.348047][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.359347][ T5629] Bluetooth: hci3: command tx timeout [ 81.364381][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.364884][ T4933] Bluetooth: hci0: command tx timeout [ 81.368597][ T5618] Bluetooth: hci4: command tx timeout [ 81.373547][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.435720][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.481783][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.481927][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.500432][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.513413][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.525628][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.525721][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.534645][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.547954][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.563174][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.572789][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.575175][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.587279][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.618919][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.697044][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.739596][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.739699][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.806935][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.807066][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.898755][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.982089][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.026062][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.108411][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.108531][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.138145][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.156297][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.156399][ T4165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.173792][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.195218][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.195315][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.235965][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.236089][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.278119][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.347469][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.347607][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.385353][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.385470][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.860163][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.024104][ T5616] veth0_vlan: entered promiscuous mode [ 83.047580][ T5616] veth1_vlan: entered promiscuous mode [ 83.232202][ T5616] veth0_macvtap: entered promiscuous mode [ 83.261912][ T5616] veth1_macvtap: entered promiscuous mode [ 83.324594][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.359744][ T5618] Bluetooth: hci1: command tx timeout [ 83.359754][ T4933] Bluetooth: hci2: command tx timeout [ 83.385720][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.396917][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.441168][ T4933] Bluetooth: hci4: command tx timeout [ 83.451731][ T4933] Bluetooth: hci0: command tx timeout [ 83.451775][ T4933] Bluetooth: hci3: command tx timeout [ 83.593497][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.593723][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.593767][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.593800][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626360][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.738241][ T5614] veth0_vlan: entered promiscuous mode [ 83.814485][ T4920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.814539][ T4920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.865189][ T5614] veth1_vlan: entered promiscuous mode [ 83.903758][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.934710][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.955028][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.955073][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.072819][ T5614] veth0_macvtap: entered promiscuous mode [ 84.103666][ T5614] veth1_macvtap: entered promiscuous mode [ 84.117512][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.163696][ T5617] veth0_vlan: entered promiscuous mode [ 84.196867][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.222846][ T5617] veth1_vlan: entered promiscuous mode [ 84.235952][ T5615] veth0_vlan: entered promiscuous mode [ 84.253978][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.297169][ T5615] veth1_vlan: entered promiscuous mode [ 84.309343][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.483187][ T5617] veth0_macvtap: entered promiscuous mode [ 84.505477][ T5630] veth0_vlan: entered promiscuous mode [ 84.528828][ T5615] veth0_macvtap: entered promiscuous mode [ 84.554793][ T5617] veth1_macvtap: entered promiscuous mode [ 84.563665][ T5615] veth1_macvtap: entered promiscuous mode [ 84.588758][ T5630] veth1_vlan: entered promiscuous mode [ 84.606479][ T4920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.606534][ T4920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.671358][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.708220][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.735057][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.757534][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.757586][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.760871][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.761021][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.761207][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818050][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.923504][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.923607][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.924008][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.924217][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999353][ T1009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999403][ T1009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999438][ T1009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999469][ T1009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.439344][ T4933] Bluetooth: hci2: command tx timeout [ 85.439394][ T4933] Bluetooth: hci1: command tx timeout [ 85.519262][ T5618] Bluetooth: hci3: command tx timeout [ 85.519310][ T5618] Bluetooth: hci4: command tx timeout [ 85.519357][ T5618] Bluetooth: hci0: command tx timeout [ 85.597569][ T5630] veth0_macvtap: entered promiscuous mode [ 85.639047][ T5630] veth1_macvtap: entered promiscuous mode [ 86.899847][ T30] cfg80211: failed to load regulatory.db [ 86.990671][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.200288][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.200336][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.257925][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.296470][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.308859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.529493][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529559][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529609][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529658][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.572285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.572318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.739965][ T5833] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.998542][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.024175][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.275402][ T5841] binder: 5834:5841 ioctl c0306201 200000000040 returned -14 [ 89.472487][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.482818][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.721349][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.734587][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.570197][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.811420][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 91.869295][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.870409][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 91.873983][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.874015][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.916311][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.925585][ T9] usb 4-1: Product: syz [ 91.930072][ T9] usb 4-1: Manufacturer: syz [ 91.934769][ T9] usb 4-1: SerialNumber: syz [ 92.224369][ T9] usb 4-1: interface 1 not found [ 93.961868][ T5808] usb 4-1: USB disconnect, device number 2 [ 94.139310][ T5876] netlink: zone id is out of range [ 94.140766][ T5876] netlink: zone id is out of range [ 94.142271][ T5876] netlink: zone id is out of range [ 95.760573][ T191] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.053429][ T5886] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 97.055273][ T191] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 97.094081][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.102495][ T191] usb 4-1: Product: syz [ 97.106793][ T191] usb 4-1: Manufacturer: syz [ 97.118823][ T191] usb 4-1: SerialNumber: syz [ 97.133720][ T191] usb 4-1: config 0 descriptor?? [ 98.149727][ T191] usb 4-1: Firmware: major: 212, minor: 0, hardware type: ATUSB (0) [ 98.270570][ T5896] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 98.353087][ T191] usb 4-1: failed to fetch extended address, random address set [ 98.458686][ T191] usb 4-1: USB disconnect, device number 3 [ 98.672188][ T5904] netlink: 6208 bytes leftover after parsing attributes in process `syz.4.28'. [ 98.795709][ T5905] netlink: 'syz.2.15': attribute type 18 has an invalid length. [ 100.194635][ T5905] Zero length message leads to an empty skb [ 100.219707][ T4920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.223798][ T145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.223846][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.223877][ T145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.680851][ T5918] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 101.209202][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.401024][ T10] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 101.402047][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.402095][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.402134][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.405294][ T10] usb 5-1: config 0 descriptor?? [ 103.985689][ T10] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 104.471925][ T10] usb 5-1: USB disconnect, device number 2 [ 105.429262][ T5946] ======================================================= [ 105.429262][ T5946] WARNING: The mand mount option has been deprecated and [ 105.429262][ T5946] and is ignored by this kernel. Remove the mand [ 105.429262][ T5946] option from the mount to silence this warning. [ 105.429262][ T5946] ======================================================= [ 105.532481][ T5946] NILFS (loop1): device size too small [ 105.564153][ T5946] jffs2: notice: (5946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.647028][ T5944] syzkaller0: entered promiscuous mode [ 105.647125][ T5944] syzkaller0: entered allmulticast mode [ 106.749714][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.899975][ T5808] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 106.912788][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.922058][ T5808] usb 1-1: Product: syz [ 106.926592][ T5808] usb 1-1: Manufacturer: syz [ 106.931587][ T5808] usb 1-1: SerialNumber: syz [ 106.943192][ T5808] usb 1-1: config 0 descriptor?? [ 107.005865][ T5968] se_device not configured yet, cannot port link [ 107.086834][ T5968] MTD: Couldn't look up './dev/mtdblock0': -2 [ 107.607362][ T5808] usb 1-1: Firmware version (0.0) predates our first public release. [ 107.616900][ T5808] usb 1-1: Please update to version 0.2 or newer [ 108.082563][ T5808] usb 1-1: USB disconnect, device number 2 [ 108.740014][ T5994] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 108.767894][ T5994] binder: 5988:5994 ioctl c0306201 200000000040 returned -14 [ 108.916318][ T5997] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 109.592430][ T191] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.791267][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.799178][ T191] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.815537][ T191] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.815607][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.435705][ T191] usb 5-1: config 0 descriptor?? [ 110.462304][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.480962][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.481034][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.481091][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.554254][ T6010] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.580917][ T191] pwc: Askey VC010 type 2 USB webcam detected. [ 110.625274][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.644000][ T10] usb 3-1: invalid MIDI in EP 0 [ 110.910338][ T139] IPVS: starting estimator thread 0... [ 110.917825][ T6010] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 110.956702][ T191] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.960689][ T191] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.961796][ T191] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.962830][ T191] pwc: recv_control_msg error -32 req 04 val 1000 [ 111.155553][ T191] pwc: recv_control_msg error -32 req 04 val 1300 [ 111.164183][ T191] pwc: recv_control_msg error -32 req 04 val 1400 [ 111.224605][ T6037] IPVS: using max 30 ests per chain, 72000 per kthread [ 111.723806][ T191] pwc: recv_control_msg error -71 req 02 val 2100 [ 111.980804][ T191] pwc: recv_control_msg error -71 req 04 val 1500 [ 111.982910][ T191] pwc: recv_control_msg error -71 req 02 val 2500 [ 111.983932][ T191] pwc: recv_control_msg error -71 req 02 val 2400 [ 111.984360][ T191] pwc: recv_control_msg error -71 req 02 val 2600 [ 111.984757][ T191] pwc: recv_control_msg error -71 req 02 val 2900 [ 111.985175][ T191] pwc: recv_control_msg error -71 req 02 val 2800 [ 111.986167][ T191] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.987013][ T191] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.147909][ T6051] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 112.173702][ T6051] binder: 6039:6051 ioctl c0306201 200000000040 returned -14 [ 113.499846][ T5808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.596758][ T191] pwc: Registered as video103. [ 113.623767][ T6055] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 113.629540][ T191] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 113.643958][ T191] usb 5-1: USB disconnect, device number 3 [ 113.730533][ T5808] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.743822][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.758992][ T5808] usb 2-1: Product: syz [ 113.768242][ T5808] usb 2-1: Manufacturer: syz [ 113.774726][ T5808] usb 2-1: SerialNumber: syz [ 113.784649][ T5808] usb 2-1: config 0 descriptor?? [ 113.802666][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 113.820944][ T10] usb 3-1: USB disconnect, device number 2 [ 113.884412][ T6063] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.241694][ T5808] usb 2-1: Firmware version (0.0) predates our first public release. [ 114.241735][ T5808] usb 2-1: Please update to version 0.2 or newer [ 114.737145][ T5808] usb 2-1: USB disconnect, device number 2 [ 115.019359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.671215][ T5619] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.962217][ T5619] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 115.976837][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.996118][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.996162][ T5619] usb 1-1: Product: syz [ 115.996191][ T5619] usb 1-1: Manufacturer: syz [ 115.996207][ T5619] usb 1-1: SerialNumber: syz [ 116.027155][ T6108] tipc: Started in network mode [ 116.036341][ T6108] tipc: Node identity c26479a9e6eb, cluster identity 4711 [ 116.044860][ T6108] tipc: Enabled bearer , priority 0 [ 116.138880][ T5619] pl2303 1-1:1.0: required endpoints missing [ 116.142721][ T6111] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 116.922278][ T5619] usb 1-1: USB disconnect, device number 3 [ 116.941908][ T6114] kthread_run failed with err -4 [ 117.088442][ T6121] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 117.204205][ T6122] binder: 6112:6122 ioctl c0306201 200000000040 returned -14 [ 117.455988][ T6105] tipc: Disabling bearer [ 117.534893][ T30] tipc: Node number set to 613382569 [ 117.663568][ T6130] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 117.719495][ T5746] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.998315][ T5746] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.085043][ T5746] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.095767][ T5746] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.116956][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.457666][ T6123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.476600][ T5746] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.477887][ T5746] usb 3-1: invalid MIDI in EP 0 [ 118.756536][ T6123] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 119.048086][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.129498][ T5746] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 119.153786][ T5746] usb 3-1: USB disconnect, device number 3 [ 120.238057][ T6165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.346213][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 121.569364][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.059885][ T30] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 122.061352][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.104550][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.104604][ T30] usb 3-1: Product: syz [ 122.106835][ T30] usb 3-1: Manufacturer: syz [ 122.106856][ T30] usb 3-1: SerialNumber: syz [ 122.160524][ T30] pl2303 3-1:1.0: required endpoints missing [ 122.386545][ T191] usb 3-1: USB disconnect, device number 4 [ 122.929211][ T5756] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.944641][ T5756] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.077760][ T5756] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.077803][ T5756] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.077866][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.110866][ T6206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.114315][ T5756] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.115589][ T5756] usb 2-1: invalid MIDI in EP 0 [ 124.472531][ T6027] IPVS: starting estimator thread 0... [ 124.475571][ T6206] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 124.546753][ T5756] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 124.570268][ T6224] IPVS: using max 56 ests per chain, 134400 per kthread [ 124.642148][ T191] usb 2-1: USB disconnect, device number 3 [ 125.375152][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.395496][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.403913][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.411970][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.419966][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.427866][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.427900][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.427926][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.427951][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.427976][ T30] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 125.508692][ T30] hid-generic 000A:FFFFFF1D:0002.0002: hidraw0: HID v0.04 Device [syz0] on syz1 [ 125.741490][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.198564][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.359475][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 126.392499][ T30] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 126.441841][ T30] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 126.538626][ T30] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 126.548480][ T30] usb 2-1: Product: syz [ 126.548542][ T30] usb 2-1: Manufacturer: syz [ 126.548595][ T30] usb 2-1: SerialNumber: syz [ 126.589606][ T30] usb 2-1: config 0 descriptor?? [ 126.597280][ T6248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.985568][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.123'. [ 128.915656][ T191] usb 2-1: USB disconnect, device number 4 [ 130.088735][ T6308] veth0: entered promiscuous mode [ 130.125841][ T6306] veth0: left promiscuous mode [ 132.981295][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988684][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.049319][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.212824][ T30] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.226140][ T30] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.238766][ T30] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.239211][ T5746] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.259415][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.274881][ T6327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.287218][ T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.295947][ T30] usb 1-1: invalid MIDI in EP 0 [ 133.408909][ T5746] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 133.435475][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.435506][ T5746] usb 4-1: Product: syz [ 133.435538][ T5746] usb 4-1: Manufacturer: syz [ 133.435551][ T5746] usb 4-1: SerialNumber: syz [ 133.502283][ T5746] usb 4-1: config 0 descriptor?? [ 133.554722][ T30] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 133.659108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.679105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.871600][ T6327] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 133.924936][ T6275] IPVS: starting estimator thread 0... [ 134.089861][ T6350] IPVS: using max 26 ests per chain, 62400 per kthread [ 134.357552][ T5746] usb 4-1: Firmware version (0.0) predates our first public release. [ 134.357595][ T5746] usb 4-1: Please update to version 0.2 or newer [ 134.548955][ T10] usb 1-1: USB disconnect, device number 4 [ 134.591466][ T5746] usb 4-1: USB disconnect, device number 4 [ 135.369232][ T5746] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.759214][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 135.765546][ T5746] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.788622][ T5746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 135.880889][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.880944][ T5746] usb 2-1: Product: syz [ 135.880974][ T5746] usb 2-1: Manufacturer: syz [ 135.880986][ T5746] usb 2-1: SerialNumber: syz [ 136.110776][ T5746] usb 2-1: config 0 descriptor?? [ 136.125300][ T6365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.375381][ T25] usb 2-1: USB disconnect, device number 5 [ 138.096669][ T6361] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.122677][ T6416] overlay: Unknown parameter '/' [ 140.166339][ T6416] netlink: zone id is out of range [ 140.173043][ T6416] netlink: zone id is out of range [ 140.250562][ T6416] input: syz0 as /devices/virtual/input/input6 [ 140.569511][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.746836][ T5808] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.814238][ T5808] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.814308][ T5808] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.814494][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.186889][ T6417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.326933][ T5808] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.327693][ T5808] usb 4-1: invalid MIDI in EP 0 [ 141.807827][ T6417] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 141.893951][ T5934] IPVS: starting estimator thread 0... [ 142.199233][ T6430] IPVS: using max 37 ests per chain, 88800 per kthread [ 143.892455][ T5808] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 143.911834][ T5808] usb 4-1: USB disconnect, device number 5 [ 144.162102][ T6448] netlink: 'syz.0.149': attribute type 18 has an invalid length. [ 144.380460][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.384271][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.419517][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.572194][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.523123][ T5808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.579203][ T5756] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.693809][ T5808] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 147.707553][ T5808] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 147.716865][ T5808] usb 1-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 147.729163][ T5808] usb 1-1: config 220 has no interface number 2 [ 147.729256][ T5808] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 147.729284][ T5808] usb 1-1: config 220 interface 0 has no altsetting 0 [ 147.729301][ T5808] usb 1-1: config 220 interface 76 has no altsetting 0 [ 147.729320][ T5808] usb 1-1: config 220 interface 1 has no altsetting 0 [ 147.736683][ T5756] usb 2-1: Using ep0 maxpacket: 32 [ 147.737491][ T5756] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.738798][ T5756] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.741058][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.741080][ T5756] usb 2-1: Product: syz [ 147.741093][ T5756] usb 2-1: Manufacturer: syz [ 147.741106][ T5756] usb 2-1: SerialNumber: syz [ 147.778211][ T5756] usb 2-1: config 0 descriptor?? [ 147.779721][ T6485] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.837689][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.837730][ T5808] usb 1-1: Product: syz [ 147.837758][ T5808] usb 1-1: Manufacturer: syz [ 147.837773][ T5808] usb 1-1: SerialNumber: syz [ 148.004307][ T25] usb 2-1: USB disconnect, device number 6 [ 148.158830][ T5808] usb 1-1: selecting invalid altsetting 0 [ 148.171712][ T5808] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 148.171752][ T5808] uvcvideo 1-1:220.0: No valid video chain found. [ 148.205122][ T5808] usb 1-1: selecting invalid altsetting 0 [ 148.212745][ T5808] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 148.241807][ T5808] usb 1-1: USB disconnect, device number 5 [ 149.028360][ T5808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.426807][ T5808] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.440107][ T5808] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.440153][ T5808] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.440211][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.503158][ T6505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.555929][ T5808] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.567869][ T5808] usb 5-1: invalid MIDI in EP 0 [ 149.910829][ T6275] IPVS: starting estimator thread 0... [ 150.007232][ T6530] IPVS: using max 32 ests per chain, 76800 per kthread [ 150.713143][ T5808] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 150.751924][ T5746] usb 5-1: USB disconnect, device number 4 [ 153.210850][ T6563] jffs2: notice: (6563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.247699][ T6565] process 'syz.3.187' launched './file0' with NULL argv: empty string added [ 154.376035][ T31] audit: type=1804 audit(1786364265.306:2): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.190" name="/newroot/31/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=11015 res=1 errno=0 [ 154.593725][ T31] audit: type=1800 audit(1786364265.516:3): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.190" name="iface_name" dev="configfs" ino=11015 res=0 errno=0 [ 155.342460][ T6585] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 158.089311][ T5746] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.307101][ T6617] pim6reg: entered allmulticast mode [ 158.307570][ T6620] pim6reg: left allmulticast mode [ 158.410163][ T5746] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 158.411172][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.411199][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.411234][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.457485][ T5746] usb 5-1: config 0 descriptor?? [ 158.929906][ T5746] usbhid 5-1:0.0: can't add hid device: -71 [ 158.930029][ T5746] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 158.936135][ T5746] usb 5-1: USB disconnect, device number 5 [ 159.054650][ T6629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.206'. [ 159.198668][ T6633] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 161.378339][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 162.993083][ T6679] [ 162.995458][ T6679] ====================================================== [ 163.002479][ T6679] WARNING: possible circular locking dependency detected [ 163.009524][ T6679] syzkaller #0 Not tainted [ 163.013953][ T6679] ------------------------------------------------------ [ 163.021238][ T6679] syz.3.222/6679 is trying to acquire lock: [ 163.027138][ T6679] ffffffff8f9fc388 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950 [ 163.036979][ T6679] [ 163.036979][ T6679] but task is already holding lock: [ 163.044354][ T6679] ffff88805565cf80 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 163.054079][ T6679] [ 163.054079][ T6679] which lock already depends on the new lock. [ 163.054079][ T6679] [ 163.064493][ T6679] [ 163.064493][ T6679] the existing dependency chain (in reverse order) is: [ 163.073526][ T6679] [ 163.073526][ T6679] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{4:4}: [ 163.082341][ T6679] down_write+0x96/0x200 [ 163.087134][ T6679] configfs_depend_item_unlocked+0x153/0x420 [ 163.093664][ T6679] usbg_make_tpg+0x1f6/0x590 [ 163.098796][ T6679] target_fabric_make_tpg+0xa8/0x6d0 [ 163.104627][ T6679] configfs_mkdir+0x4f6/0x9e0 [ 163.109845][ T6679] vfs_mkdir+0x40c/0x620 [ 163.114634][ T6679] filename_mkdirat+0x285/0x510 [ 163.120025][ T6679] __se_sys_mkdir+0x34/0x150 [ 163.125163][ T6679] do_syscall_64+0x166/0x510 [ 163.130300][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.136731][ T6679] [ 163.136731][ T6679] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 163.144393][ T6679] __mutex_lock+0x19d/0x1550 [ 163.149530][ T6679] tcm_set_name+0x2b/0xd0 [ 163.154412][ T6679] function_make+0x1a8/0x360 [ 163.159583][ T6679] configfs_mkdir+0x4f6/0x9e0 [ 163.164803][ T6679] vfs_mkdir+0x40c/0x620 [ 163.169585][ T6679] filename_mkdirat+0x285/0x510 [ 163.174978][ T6679] __se_sys_mkdir+0x34/0x150 [ 163.180111][ T6679] do_syscall_64+0x166/0x510 [ 163.185242][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.191682][ T6679] [ 163.191682][ T6679] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 163.199968][ T6679] __lock_acquire+0x15ff/0x2e50 [ 163.205368][ T6679] lock_acquire+0x115/0x350 [ 163.210414][ T6679] __mutex_lock+0x19d/0x1550 [ 163.215593][ T6679] configfs_rmdir+0x5f0/0x950 [ 163.220812][ T6679] vfs_rmdir+0x3e6/0x6a0 [ 163.225597][ T6679] filename_rmdir+0x292/0x520 [ 163.230814][ T6679] __se_sys_rmdir+0x2e/0x140 [ 163.235946][ T6679] do_syscall_64+0x166/0x510 [ 163.241164][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.247593][ T6679] [ 163.247593][ T6679] other info that might help us debug this: [ 163.247593][ T6679] [ 163.257828][ T6679] Chain exists of: [ 163.257828][ T6679] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 163.257828][ T6679] [ 163.272547][ T6679] Possible unsafe locking scenario: [ 163.272547][ T6679] [ 163.280004][ T6679] CPU0 CPU1 [ 163.285379][ T6679] ---- ---- [ 163.290757][ T6679] lock(&sb->s_type->i_mutex_key#23); [ 163.296242][ T6679] lock(&opts->dep_lock); [ 163.303200][ T6679] lock(&sb->s_type->i_mutex_key#23); [ 163.311200][ T6679] lock(gadget_subsys.su_mutex); [ 163.316236][ T6679] [ 163.316236][ T6679] *** DEADLOCK *** [ 163.316236][ T6679] [ 163.324392][ T6679] locks held by syz.3.222/6679: 3, last CPU#0: [ 163.330558][ T6679] #0: ffff88801d790460 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 163.339823][ T6679] #1: ffff8880556a0ac0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 163.351182][ T6679] #2: ffff88805565cf80 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 163.361320][ T6679] [ 163.361320][ T6679] stack backtrace: [ 163.369842][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) [ 163.379056][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.389141][ T6679] Call Trace: [ 163.392438][ T6679] [ 163.395395][ T6679] dump_stack_lvl+0xe8/0x150 [ 163.400022][ T6679] print_circular_bug+0x2e2/0x300 [ 163.405087][ T6679] check_noncircular+0x12f/0x150 [ 163.410053][ T6679] __lock_acquire+0x15ff/0x2e50 [ 163.414941][ T6679] ? __bfs+0x153/0x290 [ 163.419035][ T6679] ? __pfx_hlock_conflict+0x10/0x10 [ 163.424264][ T6679] ? check_path+0x21/0x40 [ 163.428707][ T6679] ? check_noncircular+0xdb/0x150 [ 163.434196][ T6679] lock_acquire+0x115/0x350 [ 163.438735][ T6679] ? configfs_rmdir+0x5f0/0x950 [ 163.443619][ T6679] __mutex_lock+0x19d/0x1550 [ 163.448238][ T6679] ? configfs_rmdir+0x5f0/0x950 [ 163.453113][ T6679] ? reacquire_held_locks+0x117/0x1a0 [ 163.458502][ T6679] ? configfs_rmdir+0x5f0/0x950 [ 163.463381][ T6679] ? __pfx___mutex_lock+0x10/0x10 [ 163.468436][ T6679] ? _raw_spin_unlock+0x28/0x50 [ 163.473310][ T6679] ? fast_dput+0x481/0x690 [ 163.477760][ T6679] configfs_rmdir+0x5f0/0x950 [ 163.482469][ T6679] vfs_rmdir+0x3e6/0x6a0 [ 163.486741][ T6679] ? bpf_lsm_path_rmdir+0x9/0x20 [ 163.491699][ T6679] filename_rmdir+0x292/0x520 [ 163.496407][ T6679] ? __pfx_filename_rmdir+0x10/0x10 [ 163.501630][ T6679] ? do_getname+0x151/0x250 [ 163.506153][ T6679] __se_sys_rmdir+0x2e/0x140 [ 163.510802][ T6679] do_syscall_64+0x166/0x510 [ 163.515407][ T6679] ? trace_irq_disable+0x3b/0x140 [ 163.520452][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.526551][ T6679] ? clear_bhb_loop+0x70/0xc0 [ 163.531218][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.537114][ T6679] RIP: 0033:0x7f1435d9e0d9 [ 163.541528][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.561223][ T6679] RSP: 002b:00007f1436d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 163.569684][ T6679] RAX: ffffffffffffffda RBX: 00007f1436025fa0 RCX: 00007f1435d9e0d9 [ 163.577659][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 163.585616][ T6679] RBP: 00007f1435e35024 R08: 0000000000000000 R09: 0000000000000000 [ 163.593570][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.601660][ T6679] R13: 00007f1436026038 R14: 00007f1436025fa0 R15: 00007ffc538ec048 [ 163.609621][ T6679]