last executing test programs: 39m17.543534611s ago: executing program 3 (id=1171): syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) 39m14.096222131s ago: executing program 3 (id=1177): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x848000000015, 0x805, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 39m13.200563267s ago: executing program 3 (id=1183): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="4c005a804800018005000100300000003c0002"], 0x68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x801) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x12, 0xb, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x0) 39m11.312531341s ago: executing program 3 (id=1187): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x18, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x8a, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915", 0xcc}, {&(0x7f0000000500)="4c56c5661eb2897219a486044736a64f1a175ba0", 0x14}, {&(0x7f00000009c0)="8e6487afea5aec79e9dd3278cbb24985e6724be49d1ae08bb9913a5a6d6d6c26d88eb3edece901ad9bfd123a88c27d6e6ea618a42a970bcac49fc3bf5b87b58ba3d1a7dc24d12855a6c54a36b5089658d9482bd0a9a1b9b0d4de13e864e592216f04f31decfaa9", 0x67}, {&(0x7f0000000a40)="71918a5d581601244a3d864d7c74a12529e10637660163c939c6e23c3e3bc3bcfc79d3e47b9d80fc8fc812a2ae2adf778cf426ff4d090e8ad2d1144acb5a392c984f3190aafff8b0f1c5852274bab67df6ce8641ebef383c1503c3c19e1e8b133206cc193d38b8ebf8f76678b320950e8741221069da77cd76e5ff56fce3f0eee2b1922024929b3128ed46411f05a167211c3adf5dea2ab84c4e8c7a20cd114dcc56307f6e4e44cc4d", 0xa9}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x17c}], 0x1}}], 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 39m8.590447986s ago: executing program 3 (id=1193): shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket(0x1d, 0x80000, 0xfffffffc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4004010) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f00000004c0)='./file0\x00', 0x10112, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x6c}, 0x1, 0x0, 0x0, 0x20000024}, 0x44010) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000003060102000000ff0f0000"], 0x1c}}, 0x854) r6 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9cf}, 0x1c) creat(&(0x7f00000000c0)='./bus\x00', 0x182) creat(&(0x7f0000000300)='./bus\x00', 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, &(0x7f00000009c0)="16", 0x31, 0x1, 0x16c0, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) 39m5.720005114s ago: executing program 3 (id=1200): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=""/220, 0x0, 0xdc, 0x0, 0xffff, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xe, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38m49.733751313s ago: executing program 32 (id=1200): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=""/220, 0x0, 0xdc, 0x0, 0xffff, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xe, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34m7.168802792s ago: executing program 1 (id=1863): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)="418e41", 0x0, 0x75}, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1fb5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 34m6.940019133s ago: executing program 1 (id=1866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 34m5.888130637s ago: executing program 1 (id=1869): shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket(0x1d, 0x80000, 0xfffffffc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4004010) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f00000004c0)='./file0\x00', 0x10112, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x6c}, 0x1, 0x0, 0x0, 0x20000024}, 0x44010) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000003060102000000ff0f000000"], 0x1c}}, 0x854) r6 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9cf}, 0x1c) creat(&(0x7f00000000c0)='./bus\x00', 0x182) creat(&(0x7f0000000300)='./bus\x00', 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x31, 0x1, 0x16c0, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) 34m4.48966253s ago: executing program 1 (id=1871): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) 34m2.796589959s ago: executing program 1 (id=1874): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @union={0xd, 0x5, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x5, 0x10001}, {0xc, 0x0, 0x3}, {0xe, 0x2, 0x9}, {0x2, 0x0, 0x40}, {0x3, 0x4, 0x19}]}, @enum64={0x6, 0x0, 0x0, 0x13, 0x1, 0xe}]}}, &(0x7f00000006c0)=""/220, 0x86, 0xdc, 0x0, 0xffff, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xe, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 33m59.762750375s ago: executing program 1 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 33m44.128151265s ago: executing program 33 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 23m8.957642638s ago: executing program 2 (id=3296): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r1}) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002740)={0x2, 0x4e22, @multicast1}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 23m6.800239373s ago: executing program 2 (id=3303): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r1}) r3 = socket(0x2, 0x3, 0xe8c7) bind$rds(r3, &(0x7f0000002740)={0x2, 0x4e22, @multicast1}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 23m3.760462631s ago: executing program 2 (id=3310): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) socket(0x10, 0x80002, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000001180)=""/4089, 0xff9) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0xf05, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, 0x0, 0x0) r5 = dup(r1) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23m2.852542444s ago: executing program 2 (id=3312): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$unix(0x1, 0x1, 0x0) r0 = open$dir(&(0x7f0000000200)='./file2\x00', 0x200100, 0x80) getdents(r0, &(0x7f0000000340)=""/80, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 23m0.780622538s ago: executing program 2 (id=3316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x4, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x3) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000000), 0xd, 0x61c, &(0x7f0000000d80)="$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") 22m56.584427285s ago: executing program 2 (id=3320): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000019, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) munmap(&(0x7f000009b000/0x1000)=nil, 0x1000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r7, 0x0, 0x0) 22m40.864470111s ago: executing program 34 (id=3320): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000019, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) munmap(&(0x7f000009b000/0x1000)=nil, 0x1000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r7, 0x0, 0x0) 14.323682232s ago: executing program 0 (id=6326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c0002400000f900000000000c0001"], 0x118}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4091000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x294, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x1a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "e687f16b64ab7da07ca7de7797e709c0d87be6b72259b8a48375f4e27838678ad88323c9fdedaacb86e3faa4b1acbdf7f4f7407167f4"}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "5481cd24800b71ab0973fa0a55a7e493873301ec7bb2da9985e2cfea7b8669f972af74939c8bc16f2675adba7546e2798115d310afe9e64362778fe93b970f954f9321705c049f357dccfcf8b619df258b11e9556e62d0fcebc702214dcc54746faaf08f29ee31639e680c23babcff00ee84eb387f9e93fbdc9621ce872683a275173b930f19b92fb5a6090590cb2ce4bcdb63320039197374860205a2d361bb2f8d8b992105cb198e4592e94ec1f28ad3c526efd2f534c09cc88954c47ff2446cf70186233a854fcfaad3f2a85e749c309344c659617184682aa7c29d"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "755c56a14e96a2feba71d3aaf24f126b0e0daa687f04cd902c44ce97146661a1a6763c698fc9a05c725d945c3475b145ebfff88ce734106aa249295f2135c10a9358d6ad8c557cadd62c76999b35304be13a3af6b899a10bafc8df98a8bc9030a2cd6e4b14d8f2593f7923ef9863b93181d2bd52"}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x2}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7fe}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3, 0x5}]}]}, 0x178}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r7, 0x0, 0xfffffeea) 13.607917433s ago: executing program 0 (id=6328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 11.33126814s ago: executing program 0 (id=6341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb5"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 9.570057204s ago: executing program 0 (id=6355): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x3c, 0x40085, 0x2013}, 0x2c) 9.373819002s ago: executing program 0 (id=6359): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) 9.049237293s ago: executing program 0 (id=6362): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x1000000) shutdown(r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000020c0), 0x0, 0x20000100) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000014"], 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x77}) r8 = openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000300)={&(0x7f0000000fc0)=[0x2, 0x6, 0x3, 0x7, 0x8, 0x1, 0xfffffffd, 0x9, 0x77, 0x401, 0x1e0, 0x451, 0x2, 0x8, 0x6, 0x5, 0x0, 0x4, 0xfa, 0x2, 0x1175, 0x7, 0x401, 0x49f0, 0x86, 0x7ff, 0x100, 0x7, 0x6ad9f359, 0x6, 0xd5c9, 0xb8d, 0xa, 0xfe21, 0x8, 0xc, 0x7, 0x8, 0x9, 0xe, 0x1, 0xe, 0x8, 0x6, 0xca, 0x6, 0x4, 0x7, 0x1000, 0x5, 0x5, 0x78b6, 0x7fffffff, 0x800, 0x12c, 0x1, 0x9, 0x3, 0x7, 0x4, 0x7, 0x3, 0x9, 0xb, 0x3d30, 0x8000, 0x7, 0x10001, 0x61e, 0x7, 0x4, 0x4, 0x1, 0x1, 0x2, 0x200, 0xffffff89, 0x3, 0x5, 0xfffffffa, 0x3e22, 0x7, 0x10000000, 0x8, 0x9, 0xfffffffa, 0x4, 0x5, 0x2, 0x91, 0xf, 0x8, 0x966, 0xe, 0x8000, 0xad, 0x48, 0x9, 0x2, 0xffffffff, 0x800, 0x1fe27506, 0x3, 0x2, 0x100, 0x0, 0xffffffff, 0x1, 0x3ff, 0x1, 0x4, 0x9, 0xbd71, 0x7f, 0x8, 0x9, 0x6, 0xb, 0x81, 0x2, 0x5, 0x4, 0x100, 0xfff, 0xfffffff9, 0x9, 0xfffffff9, 0x0, 0x5, 0x2, 0x10000, 0x0, 0x94, 0x0, 0x9, 0x5, 0x2ace7259, 0x40, 0x4, 0x8, 0xb, 0x5, 0x1, 0x8, 0x5, 0x0, 0x4, 0x3, 0x1, 0x10, 0xd, 0x3, 0x1, 0x7f, 0xff, 0x3ff7, 0x80000001, 0x7feb, 0xfffffa12, 0x6, 0x8, 0x2, 0x4, 0xa, 0x9, 0x100, 0x8, 0x4, 0x10, 0x6, 0x0, 0x2, 0x2, 0x5, 0x80, 0x3ff, 0x7, 0x9, 0xe9da, 0x0, 0x4, 0x3, 0x50000000, 0x3, 0x6, 0x1, 0x9, 0x8, 0x2, 0x2, 0x2, 0xaa, 0x2, 0x3f, 0x2, 0x1, 0x5, 0x7, 0x3, 0x0, 0x5, 0x4, 0x0, 0xb0d6, 0x8001, 0x10000, 0x8de, 0x7, 0x5, 0x3, 0x9, 0x7ff, 0x9, 0x3, 0xf, 0x4, 0x3c51e62d, 0xd, 0x5, 0xfff, 0x9, 0x80000001, 0xfc4, 0xa, 0x5, 0x8, 0x7, 0x7, 0xffff9ed6, 0x6, 0x4, 0x917, 0xa, 0x1, 0xc3b, 0x5, 0x2, 0x3, 0x4, 0x1000, 0x7, 0xffffffff, 0x84, 0x2, 0x80, 0x3, 0x5, 0x18a5, 0x1455, 0x2, 0x4, 0x2, 0x7, 0x2, 0x1, 0x2, 0x2, 0x5, 0x384, 0x3, 0x5, 0x5e, 0x6, 0xe, 0xff, 0xfffffff7, 0x7fff, 0x4, 0x1, 0x81, 0x0, 0x7, 0x4, 0x73b, 0x2, 0x0, 0xa00000, 0x1, 0xf5, 0xfffffe00, 0x6, 0x1, 0x8001, 0x5, 0x81, 0x8, 0xffff0001, 0x10000, 0x9, 0x3, 0x7fffffff, 0x4, 0x4, 0x4, 0x13, 0x7ff, 0x7, 0xfffffffd, 0x8, 0xb, 0x16af, 0x0, 0xbd9, 0x800, 0xe, 0x5, 0x2, 0xe, 0xaa, 0xf, 0x3, 0x7fff, 0x1, 0xa, 0x53, 0x80000000, 0x23, 0x5, 0x40, 0x9, 0x0, 0x2, 0xffffffff, 0x2, 0x2, 0xfff, 0x8, 0x0, 0x4, 0x0, 0x10001, 0x3, 0x9, 0xb20, 0x30000, 0x9, 0x0, 0x8, 0xfffffff7, 0x3ff, 0x7fff, 0x9, 0x3, 0x1, 0x0, 0x9, 0x40, 0x0, 0x3, 0x8, 0x7, 0xa, 0x7, 0x9, 0x3, 0x3, 0x0, 0x8, 0xec, 0x8000000, 0x3, 0x7a6b, 0xdf7, 0x2, 0x7, 0x6, 0x2, 0x2, 0x0, 0x6, 0x0, 0x6, 0x4, 0x10000, 0x80000000, 0x5, 0x12e00000, 0x7, 0x2, 0x7fff, 0xdb5, 0xffffebe5, 0xc, 0x1000, 0x7fc, 0x8, 0x2, 0x1, 0x7, 0x1, 0x3, 0x9, 0xffffffff, 0x4, 0x200, 0xfffffcb9, 0x1, 0x800, 0x3, 0x7fff, 0x2, 0x26a1, 0x5, 0x9, 0x1, 0x1ba5, 0x3, 0xf7, 0xc5e, 0x8, 0x80, 0x3, 0x7fffffff, 0x5, 0x9659ae0, 0x3, 0x9, 0x7a1, 0xfffffc00, 0x8000, 0xc, 0xfff, 0xffffade7, 0x2, 0x7, 0x0, 0x8, 0x7, 0x8001, 0x4, 0x45fcf08d, 0x4, 0x3, 0x0, 0xb, 0x7, 0x7, 0x0, 0xb, 0x100, 0x9, 0x2, 0x1, 0x20, 0x9, 0x5, 0xe, 0x123, 0x4, 0xfffffffa, 0x7ff, 0x3, 0x5, 0x7, 0x7, 0x10001, 0x100, 0x9, 0x8, 0x3, 0x8, 0x6, 0x8, 0x4, 0x6, 0xbee9, 0x1ff, 0x0, 0x3, 0x2, 0x3, 0x962, 0x0, 0x6, 0xc, 0x4, 0xfffff5d1, 0x7, 0x81, 0x3, 0x4, 0x9, 0xd, 0x200, 0xd, 0x4, 0xffffff9c, 0x5, 0x8001, 0xffffffff, 0x3ff, 0x4, 0x10001, 0x6, 0x4, 0xfffffffd, 0x0, 0x3, 0x2, 0xfffff0d9, 0x5, 0xffff, 0x9, 0x2, 0x6, 0x88, 0x3, 0x0, 0xa, 0x3, 0x2, 0x9, 0x6, 0x4, 0xe, 0x2, 0xffffffc0, 0x683, 0x0, 0x635d, 0xffffffff, 0x6, 0x53f, 0x7, 0xf, 0x3, 0xffff0000, 0x0, 0x9, 0x6, 0x4, 0x8, 0x2, 0x4, 0xffff8001, 0x3, 0xe36c, 0xf1d, 0x9, 0xb, 0x800, 0xcf800, 0x1, 0x0, 0x7, 0x4, 0x55fe, 0x5, 0x3, 0x4, 0xec, 0x0, 0x7cd33cad, 0x3, 0x2, 0x54, 0x1, 0xfffffff7, 0x0, 0xc, 0x825c, 0x6, 0x8, 0xffff, 0x0, 0x6, 0x7, 0x3, 0xf0000000, 0x1, 0x2, 0x0, 0x2, 0x4f, 0xff, 0x7, 0x7, 0x47, 0x7, 0x101, 0x8a5, 0x1, 0x8, 0x6, 0xcac, 0x6, 0x100, 0x2, 0xb1aa, 0x1, 0x60a, 0x10000, 0x7, 0x1, 0x3, 0x5, 0xfffffc00, 0x6, 0x1, 0x8, 0x247c, 0xfffffff9, 0x2, 0xffff8001, 0x0, 0x3, 0x6, 0x3, 0x9, 0x200, 0x9, 0x6, 0x6, 0x0, 0x2, 0xaa, 0x6, 0x400, 0xf7, 0x7ff, 0x4, 0x8, 0x5, 0x7, 0x10, 0x6, 0x295c, 0x6, 0xffff, 0x3, 0x10000000, 0x6, 0x10, 0x6, 0x0, 0x6, 0x7f, 0xe726, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x0, 0xfc9b, 0x401, 0x7, 0x2, 0x101, 0x1, 0x2e, 0x8, 0xfff, 0x2, 0xffffffff, 0x3, 0x2, 0x601b, 0x1000, 0x8, 0x6, 0x6, 0x200, 0x5, 0x7, 0x4, 0x3, 0xf0000000, 0x0, 0x401, 0x0, 0xc2e1, 0xc, 0x40, 0xfff, 0x88, 0x6, 0x7f, 0xfffffffd, 0x4, 0x9, 0x0, 0x3, 0x8, 0xa41, 0x62a, 0x81, 0xfffffffb, 0x1, 0x3, 0xda7, 0x800, 0x0, 0xffffffff, 0x3, 0x7, 0x8001, 0x1, 0x4, 0xe1f, 0x0, 0x2, 0xfffffffe, 0x0, 0x8001, 0xa36, 0x4, 0x7fff, 0xc, 0xb, 0x1, 0x8, 0xfffffffc, 0x1, 0x9, 0xc7d2, 0x6, 0xfffffff7, 0x200, 0x2, 0xfff, 0x7, 0x0, 0x1dbb, 0x400, 0x1, 0x5, 0x3, 0x2, 0xfff, 0x9, 0x7f, 0xeb7, 0xfffffff8, 0xfffffff1, 0x0, 0xc9ab695, 0x5, 0x2a71, 0x6, 0x4, 0x0, 0x4, 0x0, 0x7, 0x8, 0x8, 0xf, 0x80, 0x80000000, 0x9, 0x10001, 0xfffffffc, 0x4, 0x2, 0x1, 0x8, 0x0, 0x1, 0x1ff, 0x1, 0xa, 0xfc97, 0x8ec, 0x6, 0x81, 0x5, 0x1, 0x4, 0xffff, 0x334, 0xffffffff, 0x9, 0x2, 0x7dcdaa65, 0x8c2, 0x2, 0x7, 0x7, 0xfffffffb, 0x7ddad5f8, 0x4, 0x7, 0x1, 0x800, 0x0, 0xd, 0x6, 0x5, 0x0, 0xffff, 0x5, 0x7a0, 0x6, 0x4, 0x4, 0x7ff, 0x2, 0x7, 0x80, 0x2, 0x2, 0xfc, 0x4, 0x3, 0x2097, 0xfdb, 0x8, 0x6, 0x7, 0x1, 0xcf07, 0x6, 0x0, 0x1fc00000, 0x10001, 0x3, 0x80, 0x1, 0x4, 0x7, 0xffff2ba6, 0xc, 0xd2e9, 0x5, 0x6, 0x2, 0x2, 0xb3, 0x430, 0x7fffffff, 0x8000, 0x10000, 0x4, 0xf1d, 0x1000, 0x9, 0x2, 0x2, 0x7, 0xdf, 0x19521258, 0x0, 0x6, 0x9, 0x1, 0x625, 0x80, 0xfffffff8, 0x0, 0x1, 0x7, 0x48, 0x8001, 0x200, 0x8, 0x8, 0x2, 0xfffffffc, 0xc, 0x88fc, 0x80000001, 0x3, 0x0, 0x1000, 0x7, 0x65b0, 0x2, 0x8, 0x8, 0x10000, 0xffffff01, 0xef, 0x3, 0x0, 0x7fff, 0x6, 0x7f, 0x7, 0x3, 0x6, 0x6, 0x6b5d, 0xa, 0x0, 0x87, 0x0, 0xfffffff9, 0x3, 0x0, 0x1, 0x101, 0xffffffff, 0x8, 0x3, 0xcc, 0x10001, 0x5, 0xfffeffff, 0x400, 0x5, 0x6, 0x9, 0x6e73, 0x1644, 0x2, 0x80000001, 0xa6, 0x3, 0x8, 0x9, 0x8001, 0x2, 0x0, 0x94d, 0x1, 0xae1, 0x0, 0xfff, 0xfffff00b, 0x6, 0x81, 0x800, 0x4, 0x2, 0x100, 0x9, 0x400000, 0x8a5, 0x1, 0x6, 0x5, 0x2, 0x8, 0x8, 0x5, 0x0, 0xc, 0x7, 0x8, 0x6, 0x10001, 0x14, 0x10000, 0x0, 0x0, 0x4759, 0x0, 0x8c65, 0x10000, 0xfffff001, 0x1, 0xfffffff7, 0xe12, 0x8, 0x29b2, 0x4, 0x9, 0x2, 0x30, 0x6, 0x1, 0xbe95bfd, 0xfffffffa, 0x3, 0xe19a, 0x1000, 0xfffffff0, 0x4, 0x7, 0x1, 0x7fff, 0x3, 0xf19b, 0x1, 0x9, 0x6fb2, 0x8, 0x7, 0xa91, 0xffff, 0x10000, 0xfff, 0xff, 0x9, 0x9, 0x7, 0x7, 0x7, 0x7fff, 0x0, 0x400, 0x607e, 0x3ff, 0x701, 0x5, 0x0, 0x8, 0x0, 0xf6, 0x1, 0x10000, 0xc, 0x6, 0x80, 0x2, 0x5d1dd674, 0x2, 0xddf3, 0x6, 0x4ed, 0x2, 0x3, 0xfffffff8, 0x0, 0xbe4, 0x9, 0xffffffc0, 0x7fff, 0x0, 0x2, 0x8, 0x1], 0x6, 0x400, 0x401}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) 5.651625271s ago: executing program 7 (id=6375): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x8000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 5.278529143s ago: executing program 7 (id=6377): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}}, 0x0) 4.960003416s ago: executing program 5 (id=6378): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0x20000) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x6, 0xffff, 0x3, 0x6, 0x4, "1dbc2e2db3983c75"}) 4.780305668s ago: executing program 7 (id=6379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.40816793s ago: executing program 5 (id=6380): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.040546003s ago: executing program 5 (id=6381): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x831, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a37", 0xd, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) 2.826250252s ago: executing program 7 (id=6384): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000eb009f000100000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.621181426s ago: executing program 4 (id=6386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) 2.51506924s ago: executing program 5 (id=6387): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x8000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2.457968237s ago: executing program 4 (id=6389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0201050009000a004000623d885d009c1101fc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 2.329682423s ago: executing program 5 (id=6390): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 1.392684615s ago: executing program 6 (id=6391): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.207848717s ago: executing program 7 (id=6392): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0x20000) dup3(r1, r0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0x6, 0xffff, 0x3, 0x6, 0x4, "1dbc2e2db3983c75"}) 1.143495102s ago: executing program 6 (id=6393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x16, 0xc2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x1e, [0xfffffffc, 0xfff, 0x10000, 0x3ff, 0x1ff, 0x8001, 0x7]}, @md5sig={0x13, 0x12, "6d6973cfc35817ba498347fd2e923891"}, @eol, @fastopen={0x22, 0xa, "6472b6c96938467a"}]}}}}}}}}, 0x0) 1.019862306s ago: executing program 4 (id=6394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x258, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x228, 0x2, [@TCA_BASIC_ACT={0x6c, 0x3, [@m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x1b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="f4", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a"]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}]}]}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 797.336437ms ago: executing program 6 (id=6395): futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 620.576801ms ago: executing program 4 (id=6396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={0x34, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 598.0431ms ago: executing program 7 (id=6397): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x831, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a37", 0xd, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) 548.043308ms ago: executing program 6 (id=6398): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 401.97607ms ago: executing program 6 (id=6399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) 397.243895ms ago: executing program 4 (id=6400): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x8000) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 199.363092ms ago: executing program 4 (id=6401): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09e", 0xe}], 0x1) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) io_uring_setup(0x902e34, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 155.207526ms ago: executing program 6 (id=6402): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, 0x0, 0x0) 0s ago: executing program 5 (id=6403): ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d5, &(0x7f0000000480)={0x0, 0xfffffff9, 0x0, 0x2, 0x20e}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0xf404, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): device number 37 using dummy_hcd [ 2094.945339][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 2094.991701][ T978] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2095.050164][ T978] usb 5-1: config 0 has no interface number 0 [ 2095.163721][T23187] syzkaller0: entered promiscuous mode [ 2095.184260][ T978] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2095.216620][T23187] syzkaller0: entered allmulticast mode [ 2095.217915][ T978] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2095.263854][ T978] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2095.333573][ T978] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2095.430093][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.468925][ T978] usb 5-1: Product: syz [ 2095.484228][ T978] usb 5-1: Manufacturer: syz [ 2095.506815][ T978] usb 5-1: SerialNumber: syz [ 2095.513924][ T978] usb 5-1: config 0 descriptor?? [ 2095.574134][ T978] appletouch 5-1:0.85: Could not find int-in endpoint [ 2095.617347][ T978] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 2095.656228][T23173] sd 0:0:1:0: PR command failed: 1026 [ 2095.676248][ T978] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 2095.688783][T23173] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2095.697363][T23173] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2096.222850][T16078] Bluetooth: hci3: command 0x0405 tx timeout [ 2096.295437][ T2149] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2096.517429][ T2149] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.616668][ T2149] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2096.636398][ T2149] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2096.645717][ T2149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2096.655754][ T2149] usb 7-1: SerialNumber: syz [ 2096.951215][ T2149] usb 7-1: 0:2 : does not exist [ 2097.033237][ T2149] usb 7-1: unit 5 not found! [ 2097.124840][ T2149] usb 7-1: USB disconnect, device number 32 [ 2097.229305][T23200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4406'. [ 2097.772668][T23204] 8021q: VLANs not supported on ipvlan1 [ 2097.802458][T23036] udevd[23036]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2098.095439][T22908] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2098.277178][T22908] usb 6-1: Using ep0 maxpacket: 8 [ 2098.302308][T22908] usb 6-1: config 0 has no interfaces? [ 2098.318399][T22908] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2098.354372][T22908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.384394][T22908] usb 6-1: config 0 descriptor?? [ 2098.525716][T23210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2099.132434][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.141943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.849128][ T2149] usb 5-1: USB disconnect, device number 37 [ 2102.652238][T16745] usb 6-1: USB disconnect, device number 19 [ 2102.668979][T23248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2102.693115][T23247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2103.295616][T23255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4419'. [ 2103.935463][T16745] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2104.221590][T16745] usb 5-1: Using ep0 maxpacket: 8 [ 2104.250976][T16745] usb 5-1: config 0 has no interfaces? [ 2104.271665][T16745] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2104.285373][T16745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.359557][T16745] usb 5-1: config 0 descriptor?? [ 2106.464592][T22908] usb 5-1: USB disconnect, device number 38 [ 2107.226766][ T978] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2107.407884][ T978] usb 8-1: Using ep0 maxpacket: 32 [ 2107.442368][ T978] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 2107.468819][ T978] usb 8-1: config 0 has no interface number 0 [ 2107.475888][ T978] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2107.488730][ T978] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2107.560810][T23297] 8021q: VLANs not supported on ipvlan1 [ 2107.959776][ T978] usb 8-1: config 0 interface 85 has no altsetting 0 [ 2108.024376][ T978] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2108.059644][ T978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.128968][ T978] usb 8-1: Product: syz [ 2108.148058][ T978] usb 8-1: Manufacturer: syz [ 2108.167999][ T978] usb 8-1: SerialNumber: syz [ 2108.186193][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2108.195478][ T978] usb 8-1: config 0 descriptor?? [ 2108.224954][ T978] appletouch 8-1:0.85: Could not find int-in endpoint [ 2108.263012][ T978] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 2108.290284][ T978] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 2108.385669][T23310] netdevsim netdevsim6: Direct firmware load for . [ 2108.385669][T23310] failed with error -2 [ 2108.387203][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2108.416952][T23310] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2108.416952][T23310] [ 2108.499066][ T10] usb 6-1: config 0 has no interfaces? [ 2108.508000][ T10] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2108.539556][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.556345][T23312] siw: device registration error -23 [ 2108.566983][ T10] usb 6-1: config 0 descriptor?? [ 2108.707252][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4429'. [ 2108.724060][T23311] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2108.935784][T16745] usb 6-1: USB disconnect, device number 20 [ 2109.912294][T23321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.125613][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2110.359387][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2110.526156][ T10] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 2110.537585][ T10] usb 7-1: config 0 has no interface number 0 [ 2110.543728][ T10] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2110.791739][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.833667][ T10] usb 7-1: config 0 descriptor?? [ 2111.854190][ T10] viperboard 7-1:0.143: version 0.00 found at bus 007 address 033 [ 2111.909629][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2111.910263][T23323] fuse: Bad value for 'group_id' [ 2111.920699][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2111.945111][T23323] fuse: Bad value for 'group_id' [ 2112.293716][ T10] usb 7-1: USB disconnect, device number 33 [ 2112.684445][T23349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4440'. [ 2113.335854][T16745] usb 8-1: USB disconnect, device number 19 [ 2114.351569][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2114.639614][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2114.915883][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 2115.094479][ T10] usb 6-1: config 0 has no interface number 0 [ 2115.116831][ T10] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2116.268841][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.587404][ T10] usb 6-1: config 0 descriptor?? [ 2116.697487][ T10] usb 6-1: can't set config #0, error -71 [ 2116.705699][ T10] usb 6-1: USB disconnect, device number 21 [ 2116.788255][T23386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2120.210175][T23412] lo speed is unknown, defaulting to 1000 [ 2121.468987][T16745] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2122.901541][T16745] usb 5-1: Using ep0 maxpacket: 32 [ 2123.047548][T16745] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2123.101501][T16745] usb 5-1: config 0 has no interface number 0 [ 2123.166986][T16745] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2123.199602][T16745] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2123.236374][T16745] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2123.527509][T16745] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2123.642777][T16745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.849740][T16745] usb 5-1: Product: syz [ 2123.874305][T16745] usb 5-1: Manufacturer: syz [ 2123.883853][T16745] usb 5-1: SerialNumber: syz [ 2123.986727][T16745] usb 5-1: config 0 descriptor?? [ 2123.998058][T16745] appletouch 5-1:0.85: Could not find int-in endpoint [ 2124.074197][T23437] lo speed is unknown, defaulting to 1000 [ 2124.080659][T23437] lo speed is unknown, defaulting to 1000 [ 2124.092002][T23437] lo speed is unknown, defaulting to 1000 [ 2124.186074][T23437] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2124.606965][T23437] lo speed is unknown, defaulting to 1000 [ 2124.613983][T23437] lo speed is unknown, defaulting to 1000 [ 2124.621079][T23437] lo speed is unknown, defaulting to 1000 [ 2124.627993][T23437] lo speed is unknown, defaulting to 1000 [ 2124.634820][T23437] lo speed is unknown, defaulting to 1000 [ 2124.998311][T16745] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 2125.039130][T16745] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 2125.405646][T16745] usb 5-1: USB disconnect, device number 39 [ 2125.413096][T23445] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4461'. [ 2126.601301][T23454] 8021q: VLANs not supported on ipvlan1 [ 2126.895462][ T978] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2127.164949][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 2127.249250][ T978] usb 8-1: config 0 has no interfaces? [ 2127.295059][ T978] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2127.376776][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.868223][ T978] usb 8-1: config 0 descriptor?? [ 2128.204423][ T978] usb 8-1: USB disconnect, device number 20 [ 2129.474015][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4465'. [ 2130.731162][T23483] Unknown options in mask 5 [ 2132.287062][T23494] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4474'. [ 2134.352884][T23510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4478'. [ 2134.716711][T16745] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2135.105730][T16745] usb 7-1: Using ep0 maxpacket: 8 [ 2135.130363][T16745] usb 7-1: config 0 has no interfaces? [ 2135.273908][T16745] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2135.355666][T16745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.566517][T16745] usb 7-1: config 0 descriptor?? [ 2135.799239][T16745] usb 7-1: USB disconnect, device number 34 [ 2136.307035][T23533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4486'. [ 2137.167939][T23544] Unknown options in mask 5 [ 2140.571689][T23582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 2140.761379][T23585] 8021q: VLANs not supported on ipvlan1 [ 2141.057451][ T2149] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2141.377197][ T2149] usb 5-1: Using ep0 maxpacket: 8 [ 2141.446072][ T2149] usb 5-1: config 0 has no interfaces? [ 2141.452535][ T2149] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2141.474666][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.517585][ T2149] usb 5-1: config 0 descriptor?? [ 2141.729849][ T2149] usb 5-1: USB disconnect, device number 40 [ 2144.011604][T23605] nfs: Unknown parameter '€' [ 2146.023418][T23620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2146.435541][T23631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2147.966773][T23651] 8021q: VLANs not supported on ipvlan1 [ 2148.235303][ T2149] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2148.395279][ T2149] usb 8-1: Using ep0 maxpacket: 8 [ 2148.422448][ T2149] usb 8-1: config 0 has no interfaces? [ 2148.442784][ T2149] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2148.472590][ T2149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.511324][T23660] sd 0:0:1:0: PR command failed: 1026 [ 2148.516908][T23660] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2148.523602][T23660] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2148.544782][ T2149] usb 8-1: config 0 descriptor?? [ 2148.794599][ T2149] usb 8-1: USB disconnect, device number 21 [ 2150.405737][T23664] hub 6-0:1.0: USB hub found [ 2150.412827][T23664] hub 6-0:1.0: 1 port detected [ 2150.879647][T23679] fuse: Bad value for 'fd' [ 2151.139008][T23683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2151.382124][T23688] 9pnet_fd: Insufficient options for proto=fd [ 2152.347315][T23698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2153.445465][T22240] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2153.585299][T23714] Unknown options in mask 5 [ 2153.615630][T22240] usb 7-1: Using ep0 maxpacket: 8 [ 2153.660792][T22240] usb 7-1: config 0 has no interfaces? [ 2153.993441][T22240] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2154.014086][T22240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.046193][T22240] usb 7-1: config 0 descriptor?? [ 2154.516414][T23722] netlink: 'syz.0.4536': attribute type 4 has an invalid length. [ 2154.806151][ T978] usb 7-1: USB disconnect, device number 35 [ 2155.119304][T23725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2155.417207][T23731] Unknown options in mask 5 [ 2156.084888][T23737] autofs: Unknown parameter '0x0000000000000000' [ 2156.097891][T22240] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2156.286611][T22240] usb 5-1: Using ep0 maxpacket: 16 [ 2156.318627][T22240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2156.346949][T22240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.395931][T22240] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2156.470899][T22240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.705352][T22240] usb 5-1: config 0 descriptor?? [ 2158.561280][T22240] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0005/input/input25 [ 2158.681448][T23759] Unknown options in mask 5 [ 2159.326862][T22240] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 2159.578389][T23766] 8021q: VLANs not supported on ipvlan1 [ 2159.641020][T22240] usb 5-1: USB disconnect, device number 41 [ 2159.763186][T23768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.856777][T23774] autofs: Unknown parameter '0x0000000000000000' [ 2160.570024][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.576606][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.738374][T23790] 8021q: VLANs not supported on ipvlan1 [ 2161.898923][T22908] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2162.065344][T22908] usb 5-1: Using ep0 maxpacket: 8 [ 2162.078173][T22908] usb 5-1: config 0 has no interfaces? [ 2162.089926][T22908] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2162.114752][T22908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.137659][T22908] usb 5-1: config 0 descriptor?? [ 2162.199710][T23805] autofs: Unknown parameter '0x0000000000000000' [ 2163.364408][T23817] sd 0:0:1:0: PR command failed: 1026 [ 2163.370131][T23817] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2163.377297][T23817] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2164.437123][T23824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.159582][T16078] Bluetooth: hci3: command 0x0405 tx timeout [ 2168.397963][T22240] usb 5-1: USB disconnect, device number 42 [ 2168.765852][T16745] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2169.275464][T16745] usb 7-1: Using ep0 maxpacket: 8 [ 2169.339090][T16745] usb 7-1: config 0 has no interfaces? [ 2169.344680][T16745] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2169.363817][T16745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.438668][T16745] usb 7-1: config 0 descriptor?? [ 2169.594700][T23876] autofs: Unknown parameter '0x0000000000000000' [ 2170.522930][T17096] usb 7-1: USB disconnect, device number 36 [ 2171.610353][T23900] Unknown options in mask 5 [ 2172.460823][T23904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2173.184441][T23915] 8021q: VLANs not supported on ipvlan1 [ 2173.475311][T16745] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2174.357136][T16745] usb 5-1: Using ep0 maxpacket: 8 [ 2174.379683][T16745] usb 5-1: config 0 has no interfaces? [ 2174.403123][T16745] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2174.433708][T16745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.545510][ T2149] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2175.007092][T16745] usb 5-1: config 0 descriptor?? [ 2175.091761][ T2149] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.155373][ T2149] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2175.174714][ T2149] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2175.184099][ T2149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.276011][ T2149] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2175.958806][T23932] netdevsim netdevsim7: Direct firmware load for . [ 2175.958806][T23932] failed with error -2 [ 2176.527443][T17096] usb 5-1: USB disconnect, device number 43 [ 2176.575432][T23932] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2176.575432][T23932] [ 2176.608897][ T2149] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2176.728327][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4601'. [ 2176.830553][T23945] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4599'. [ 2176.867069][T23935] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2178.546275][T23963] siw: device registration error -23 [ 2181.809187][ T978] usb 7-1: USB disconnect, device number 37 [ 2184.266334][T23995] 8021q: VLANs not supported on ipvlan1 [ 2184.777588][T24000] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4622'. [ 2189.343881][T24051] netlink: 'syz.6.4631': attribute type 1 has an invalid length. [ 2189.351764][T24051] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4631'. [ 2189.361896][T24051] netlink: 'syz.6.4631': attribute type 1 has an invalid length. [ 2189.371206][T24051] netlink: 'syz.6.4631': attribute type 2 has an invalid length. [ 2189.379030][T24051] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4631'. [ 2189.412229][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4631'. [ 2191.095778][T24067] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4636'. [ 2194.323142][T24093] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2195.627651][T24121] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4650'. [ 2199.045859][T24143] Unknown options in mask 5 [ 2199.799887][T24146] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2200.510703][T24162] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4663'. [ 2201.257299][T24170] netdevsim netdevsim6: Direct firmware load for . [ 2201.257299][T24170] failed with error -2 [ 2201.294217][T24170] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2201.294217][T24170] [ 2201.406405][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4665'. [ 2201.591259][T24184] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2202.794861][T24189] 9pnet_fd: Insufficient options for proto=fd [ 2207.724936][T24227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2210.338128][T24247] 9pnet_fd: Insufficient options for proto=fd [ 2213.656765][T16078] Bluetooth: hci3: command 0x0405 tx timeout [ 2215.460909][T24291] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4699'. [ 2215.645467][T24292] 9pnet_fd: Insufficient options for proto=fd [ 2220.277495][T24333] 9pnet_fd: Insufficient options for proto=fd [ 2220.576466][T24338] siw: device registration error -23 [ 2222.221066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.230031][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2234.187812][T22367] Bluetooth: hci4: Frame reassembly failed (-84) [ 2236.165403][T12774] Bluetooth: hci4: command 0x1003 tx timeout [ 2236.172678][T16078] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2236.696914][T24481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4749'. [ 2240.252325][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 2240.681444][T24520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4762'. [ 2242.246815][T12774] Bluetooth: hci4: command 0x1003 tx timeout [ 2242.320278][T24543] sd 0:0:1:0: PR command failed: 1026 [ 2242.326051][T24543] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2242.333014][T24543] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2242.385639][T16078] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2245.086510][T24566] netlink: 'syz.4.4773': attribute type 1 has an invalid length. [ 2245.094338][T24566] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4773'. [ 2245.103475][T24566] netlink: 'syz.4.4773': attribute type 1 has an invalid length. [ 2245.111324][T24566] netlink: 'syz.4.4773': attribute type 2 has an invalid length. [ 2245.119459][T24566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4773'. [ 2246.201096][T24576] fuse: Bad value for 'fd' [ 2247.500901][T24579] netlink: 'syz.4.4778': attribute type 4 has an invalid length. [ 2248.074538][T24582] fuse: Unknown parameter 'use00000000000000000000' [ 2248.515840][T24591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4782'. [ 2248.646831][T24596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2253.853086][T24639] netlink: 'syz.5.4794': attribute type 4 has an invalid length. [ 2254.292088][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4796'. [ 2254.541985][T24653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2255.912739][T24666] fuse: Unknown parameter '0x0000000000000005' [ 2258.067705][T24686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4809'. [ 2258.343280][T24690] netlink: 'syz.0.4810': attribute type 4 has an invalid length. [ 2258.819488][T24692] 8021q: VLANs not supported on ipvlan1 [ 2259.395574][T22908] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2259.555741][T22908] usb 8-1: Using ep0 maxpacket: 8 [ 2259.569760][T22908] usb 8-1: config 0 has no interfaces? [ 2259.582591][T22908] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2259.633211][T22908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.670475][T22908] usb 8-1: config 0 descriptor?? [ 2260.640649][T22908] usb 8-1: USB disconnect, device number 22 [ 2261.525343][T24710] netlink: 'syz.0.4813': attribute type 4 has an invalid length. [ 2264.978398][T24728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4820'. [ 2266.851901][T24736] netlink: 'syz.4.4823': attribute type 4 has an invalid length. [ 2266.893655][T24749] 8021q: VLANs not supported on ipvlan1 [ 2269.925940][T17096] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2270.105293][T17096] usb 5-1: Using ep0 maxpacket: 8 [ 2270.115544][T17096] usb 5-1: config 0 has no interfaces? [ 2270.124981][T17096] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2270.160174][T17096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.195330][T17096] usb 5-1: config 0 descriptor?? [ 2271.149133][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4835'. [ 2271.915068][T24790] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2271.924377][T24790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2274.020776][T16745] usb 5-1: USB disconnect, device number 44 [ 2274.178619][T24808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2275.886300][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4846'. [ 2277.583285][T24832] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2277.601985][T24832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2278.520035][T24831] delete_channel: no stack [ 2279.154579][T24850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2280.902313][ T978] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2281.247040][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 2281.394914][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2281.404609][ T978] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2281.417819][ T978] usb 5-1: string descriptor 0 read error: -22 [ 2282.073705][ T978] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2282.365305][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.421283][ T978] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2282.465202][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2282.508355][ T978] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2282.550185][ T978] usb 5-1: media controller created [ 2282.658051][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2282.680565][T24858] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 2283.202213][ T978] zl10353_read_register: readreg error (reg=127, ret==0) [ 2283.473629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.480091][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.399356][ T978] usb 5-1: USB disconnect, device number 45 [ 2285.175567][T24891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2285.523263][T24900] 8021q: VLANs not supported on ipvlan1 [ 2286.775426][ T978] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2287.155350][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 2287.753542][ T978] usb 5-1: config 0 has no interfaces? [ 2287.776655][ T978] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2287.831267][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.859283][ T978] usb 5-1: config 0 descriptor?? [ 2289.605243][T16745] usb 5-1: USB disconnect, device number 46 [ 2289.751446][T24925] netdevsim netdevsim7: Direct firmware load for . [ 2289.751446][T24925] failed with error -2 [ 2289.764063][T24925] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2289.764063][T24925] [ 2290.770046][T24927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4876'. [ 2290.825475][T24931] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2291.148424][T24940] siw: device registration error -23 [ 2295.356115][T24967] fuse: Bad value for 'fd' [ 2296.281356][T24978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 2301.475738][ T978] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2302.995185][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 2303.002976][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2303.013115][ T978] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2303.053074][ T978] usb 5-1: string descriptor 0 read error: -22 [ 2303.071882][ T978] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2303.094750][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.371519][ T978] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2303.459730][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2303.765900][ T978] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2303.790797][ T978] usb 5-1: media controller created [ 2303.877446][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2303.941910][ T978] zl10353_read_register: readreg error (reg=127, ret==0) [ 2304.147113][ T978] usb 5-1: USB disconnect, device number 47 [ 2305.261094][T25044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.086845][T12774] Bluetooth: hci4: command 0x1003 tx timeout [ 2308.146840][T16078] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2309.711410][T25076] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4915'. [ 2311.247527][T25086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.639004][T25084] siw: device registration error -23 [ 2314.673994][T25076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2314.694431][T25076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.869612][T25076] bond0 (unregistering): Released all slaves [ 2316.008817][T16078] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2316.436806][T25127] netlink: 'syz.7.4930': attribute type 4 has an invalid length. [ 2318.911929][T12774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2318.941250][T12774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2318.956422][T12774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2318.984349][T12774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2319.019934][T25145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2319.096998][T12774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2319.173661][T15411] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.767501][T15411] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.076487][T25144] lo speed is unknown, defaulting to 1000 [ 2321.127366][T12774] Bluetooth: hci4: command tx timeout [ 2321.433183][T15411] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.464296][T25150] delete_channel: no stack [ 2321.498657][T25144] lo speed is unknown, defaulting to 1000 [ 2321.748943][T15411] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.932379][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4945'. [ 2323.225983][T12774] Bluetooth: hci4: command tx timeout [ 2323.473484][T25190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4947'. [ 2324.195300][T22908] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2324.418509][T22908] usb 8-1: Using ep0 maxpacket: 8 [ 2324.515850][T22908] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2324.639001][T22908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.701891][T22908] usb 8-1: Product: syz [ 2324.787251][T22908] usb 8-1: Manufacturer: syz [ 2324.807941][T22908] usb 8-1: SerialNumber: syz [ 2324.946896][T22908] usb 8-1: config 0 descriptor?? [ 2324.991882][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4949'. [ 2325.027419][T25195] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2325.099834][T25194] netdevsim netdevsim5: Direct firmware load for . [ 2325.099834][T25194] failed with error -2 [ 2325.209805][T22908] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2325.249090][T25194] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2325.249090][T25194] [ 2325.345435][T12774] Bluetooth: hci4: command tx timeout [ 2327.373500][T12774] Bluetooth: hci4: command tx timeout [ 2327.482889][T22908] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2327.765721][T22908] usb 8-1: USB disconnect, device number 23 [ 2327.857770][T15411] hsr_slave_0: left promiscuous mode [ 2327.883481][T15411] hsr_slave_1: left promiscuous mode [ 2327.894482][T15411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2327.910568][T15411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2327.938192][T15411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2327.951361][T15411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2328.021922][T15411] veth1_macvtap: left promiscuous mode [ 2328.050990][T15411] veth0_macvtap: left promiscuous mode [ 2328.085604][T15411] veth1_vlan: left promiscuous mode [ 2328.091049][T15411] veth0_vlan: left promiscuous mode [ 2331.086661][T25261] netlink: 'syz.7.4958': attribute type 4 has an invalid length. [ 2333.151619][T15411] team0 (unregistering): Port device team_slave_1 removed [ 2333.309823][T15411] team0 (unregistering): Port device team_slave_0 removed [ 2335.962798][T25144] chnl_net:caif_netlink_parms(): no params data found [ 2337.966034][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.044292][T25144] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.077918][T25144] bridge_slave_0: entered allmulticast mode [ 2338.104938][T25144] bridge_slave_0: entered promiscuous mode [ 2338.196237][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.208761][T25144] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.224776][T25144] bridge_slave_1: entered allmulticast mode [ 2338.263872][T25144] bridge_slave_1: entered promiscuous mode [ 2338.711104][T25144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.037473][ T2149] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2339.051363][T25144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2339.205534][ T2149] usb 5-1: Using ep0 maxpacket: 8 [ 2339.224704][ T2149] usb 5-1: config 0 has no interfaces? [ 2339.232687][ T2149] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2339.273277][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.322318][ T2149] usb 5-1: config 0 descriptor?? [ 2339.434618][T25144] team0: Port device team_slave_0 added [ 2339.453693][T15411] IPVS: stop unused estimator thread 0... [ 2339.461498][T25144] team0: Port device team_slave_1 added [ 2339.585464][ T2149] usb 5-1: USB disconnect, device number 48 [ 2340.585358][T25144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2340.592391][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2340.658684][T25144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2340.793690][T25144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2340.816523][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2340.842511][ C0] vkms_vblank_simulate: vblank timer overrun [ 2341.542821][T25144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2341.922646][T25365] 8021q: VLANs not supported on ipvlan1 [ 2342.726441][T25144] hsr_slave_0: entered promiscuous mode [ 2342.927934][T25144] hsr_slave_1: entered promiscuous mode [ 2342.934555][T25144] debugfs: 'hsr0' already exists in 'hsr' [ 2342.948878][T25144] Cannot create hsr debugfs directory [ 2343.030209][T25381] fuse: Bad value for 'fd' [ 2343.919394][ T2149] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2344.285613][ T2149] usb 5-1: Using ep0 maxpacket: 8 [ 2344.325879][ T2149] usb 5-1: config 0 has no interfaces? [ 2344.845668][ T2149] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2344.901890][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.910084][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.934572][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.963688][ T2149] usb 5-1: config 0 descriptor?? [ 2344.982253][ T2149] usb 5-1: can't set config #0, error -71 [ 2344.999596][ T2149] usb 5-1: USB disconnect, device number 49 [ 2345.044723][T25393] fuse: Bad value for 'fd' [ 2345.710637][T25404] netdevsim netdevsim4: Direct firmware load for . [ 2345.710637][T25404] failed with error -2 [ 2345.733030][T25404] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2345.733030][T25404] [ 2346.076647][T25406] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2347.105248][T25427] netlink: 'syz.7.4992': attribute type 4 has an invalid length. [ 2349.774118][T25446] 8021q: VLANs not supported on ipvlan1 [ 2350.237329][T17096] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2350.298819][T25144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2350.340613][T25144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2350.415948][T25144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2350.422840][T17096] usb 5-1: Using ep0 maxpacket: 8 [ 2350.433512][T17096] usb 5-1: config 0 has no interfaces? [ 2350.455401][T17096] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2350.464597][T17096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.483616][T25144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2350.533253][T17096] usb 5-1: config 0 descriptor?? [ 2351.619928][ T2149] usb 5-1: USB disconnect, device number 50 [ 2351.841191][T25144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2351.960381][T25144] 8021q: adding VLAN 0 to HW filter on device team0 [ 2352.073299][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 2352.080579][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2352.179317][T15411] bridge0: port 2(bridge_slave_1) entered blocking state [ 2352.186555][T15411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2357.711827][T25538] 8021q: VLANs not supported on ipvlan1 [ 2358.251337][T25144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2358.335389][T22908] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2358.685206][T22908] usb 8-1: Using ep0 maxpacket: 8 [ 2358.702571][T22908] usb 8-1: config 0 has no interfaces? [ 2359.463211][T22908] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2359.479178][T22908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.517543][T22908] usb 8-1: config 0 descriptor?? [ 2359.844197][T22240] usb 8-1: USB disconnect, device number 24 [ 2361.863946][T25144] veth0_vlan: entered promiscuous mode [ 2361.933840][T25144] veth1_vlan: entered promiscuous mode [ 2363.110120][T25144] veth0_macvtap: entered promiscuous mode [ 2363.203006][T25144] veth1_macvtap: entered promiscuous mode [ 2363.474291][T25144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2363.837565][T25144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2363.922591][T22367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.954525][T22367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.991235][ T6019] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.036034][ T6019] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.131588][ T9859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.142453][ T9859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2366.516027][T15411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.547584][T25594] delete_channel: no stack [ 2366.549188][T15411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2376.736265][T25688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5048'. [ 2382.905446][T25730] hub 6-0:1.0: USB hub found [ 2383.015274][T25730] hub 6-0:1.0: 1 port detected [ 2384.105211][T25751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5060'. [ 2388.997439][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5070'. [ 2390.240170][ T978] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2390.625092][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 2390.964192][ T978] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2391.253541][ T978] usb 7-1: config 4 interface 0 has no altsetting 0 [ 2391.292941][ T978] usb 7-1: string descriptor 0 read error: -22 [ 2391.303941][ T978] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2391.591658][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.024564][ T978] usb 7-1: can't set config #4, error -71 [ 2392.097481][ T978] usb 7-1: USB disconnect, device number 38 [ 2394.635895][T25844] 8021q: VLANs not supported on ipvlan1 [ 2395.241408][ T978] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2395.635192][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 2395.652530][ T978] usb 8-1: config 0 has no interfaces? [ 2395.667588][ T978] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2395.700469][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.750808][ T978] usb 8-1: config 0 descriptor?? [ 2396.006197][ T978] usb 8-1: USB disconnect, device number 25 [ 2397.542775][T25878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5091'. [ 2402.698540][T25909] 8021q: VLANs not supported on ipvlan1 [ 2404.005413][T22908] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2404.660967][T22908] usb 6-1: Using ep0 maxpacket: 8 [ 2404.677372][T22908] usb 6-1: config 0 has no interfaces? [ 2404.682910][T22908] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2404.700276][T22908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.715830][T22908] usb 6-1: config 0 descriptor?? [ 2405.055899][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2405.307011][T17096] usb 6-1: USB disconnect, device number 22 [ 2405.584823][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2405.601171][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2406.376121][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.382564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.518939][ T10] usb 7-1: config 4 interface 0 has no altsetting 0 [ 2406.547323][ T10] usb 7-1: string descriptor 0 read error: -22 [ 2406.568765][ T10] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2406.591000][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.629383][ T10] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2406.660539][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2406.690273][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2406.698003][ T10] usb 7-1: media controller created [ 2407.266421][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2407.299167][T25922] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 2407.424240][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 2407.513312][ T10] usb 7-1: USB disconnect, device number 39 [ 2407.949743][T25953] sd 0:0:1:0: PR command failed: 1026 [ 2407.955269][T25953] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2407.962009][T25953] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2408.817000][T25951] netlink: 'syz.0.5113': attribute type 4 has an invalid length. [ 2410.947590][T25969] netlink: 'syz.7.5116': attribute type 4 has an invalid length. [ 2413.325490][T25994] sd 0:0:1:0: PR command failed: 1026 [ 2413.330923][T25994] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2413.337680][T25994] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2415.532097][T12774] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2415.538600][T24262] Bluetooth: hci5: command 0x1003 tx timeout [ 2416.527252][T26023] netlink: 'syz.0.5136': attribute type 4 has an invalid length. [ 2416.910690][T26028] fuse: Bad value for 'group_id' [ 2416.932087][T26028] fuse: Bad value for 'group_id' [ 2417.259244][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5141'. [ 2423.845600][T26069] fuse: Bad value for 'group_id' [ 2423.850608][T26069] fuse: Bad value for 'group_id' [ 2425.029841][T26082] 8021q: VLANs not supported on ipvlan1 [ 2426.510285][T17096] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2426.723183][T17096] usb 6-1: Using ep0 maxpacket: 8 [ 2426.755750][T16745] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2427.767203][T17096] usb 6-1: unable to read config index 0 descriptor/all [ 2427.805457][T17096] usb 6-1: can't read configurations, error -71 [ 2427.806517][T16745] usb 7-1: Using ep0 maxpacket: 8 [ 2428.116720][T16745] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 2428.986203][T16745] usb 7-1: config 0 has no interface number 0 [ 2428.992876][T16745] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2429.011356][T16745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.054245][T16745] usb 7-1: config 0 descriptor?? [ 2429.223390][T16745] viperboard 7-1:0.143: version 0.00 found at bus 007 address 040 [ 2429.382203][T26117] 9p: Unknown Cache mode or invalid value fsca [ 2429.767143][T16745] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2429.812451][T16745] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2429.918375][T16745] usb 7-1: USB disconnect, device number 40 [ 2430.444873][T26129] fuse: Bad value for 'fd' [ 2431.673085][T26144] 8021q: VLANs not supported on ipvlan1 [ 2432.185312][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2432.675357][T26140] netlink: 'syz.6.5171': attribute type 4 has an invalid length. [ 2432.925200][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 2432.944064][ T10] usb 8-1: config 0 has no interfaces? [ 2432.956561][ T10] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2432.983223][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.011499][ T10] usb 8-1: config 0 descriptor?? [ 2434.059624][T10608] usb 8-1: USB disconnect, device number 26 [ 2442.458967][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5190'. [ 2444.346771][T12774] Bluetooth: hci4: command 0x0406 tx timeout [ 2445.315238][T16745] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2445.415371][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5195'. [ 2445.644383][T16745] usb 7-1: Using ep0 maxpacket: 8 [ 2446.791866][T16745] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2446.925529][ T30] audit: type=1800 audit(1751724404.024:89): pid=26242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5196" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2446.933714][T16745] usb 7-1: can't read configurations, error -71 [ 2450.336879][T26283] Invalid ELF header magic: != ELF [ 2451.692622][T26296] 8021q: VLANs not supported on ipvlan1 [ 2452.317180][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2452.948581][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2452.955611][ T10] usb 6-1: config 0 has no interfaces? [ 2452.961252][ T10] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2452.980922][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.009826][ T10] usb 6-1: config 0 descriptor?? [ 2453.035302][ T978] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2454.114204][T16745] usb 6-1: USB disconnect, device number 25 [ 2454.145215][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 2454.153562][ T978] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2454.233609][ T978] usb 7-1: config 4 interface 0 has no altsetting 0 [ 2454.257211][T10608] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2454.297692][ T978] usb 7-1: string descriptor 0 read error: -22 [ 2454.305378][ T978] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2454.316053][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.448902][ T978] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2454.505381][T10608] usb 8-1: Using ep0 maxpacket: 8 [ 2454.538528][ T978] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2454.553221][T10608] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 2454.620755][T10608] usb 8-1: config 0 has no interface number 0 [ 2454.625428][ T978] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2454.758068][T26301] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 2454.760813][T10608] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2454.833204][ T978] usb 7-1: media controller created [ 2454.843110][T10608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2454.906368][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2454.926784][T10608] usb 8-1: config 0 descriptor?? [ 2454.980642][ T978] zl10353_read_register: readreg error (reg=127, ret==0) [ 2455.065950][T10608] viperboard 8-1:0.143: version 0.00 found at bus 008 address 027 [ 2455.151755][T10608] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2455.177969][T10608] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2455.179249][T26309] fuse: Bad value for 'group_id' [ 2455.220110][ T978] usb 7-1: USB disconnect, device number 43 [ 2455.245286][T26309] fuse: Bad value for 'group_id' [ 2455.423859][T17096] usb 8-1: USB disconnect, device number 27 [ 2457.834240][T26335] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5220'. [ 2457.843760][T26335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5220'. [ 2462.126401][T26365] netlink: 'syz.5.5229': attribute type 10 has an invalid length. [ 2462.164176][T26365] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2465.222560][T26390] netlink: 'syz.4.5235': attribute type 4 has an invalid length. [ 2465.881104][T26396] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5237'. [ 2465.890724][T26396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5237'. [ 2466.203980][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5238'. [ 2467.795532][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.801904][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.736332][T26441] syz.0.5248: attempt to access beyond end of device [ 2471.736332][T26441] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2471.765830][T26441] hpfs: hpfs_map_sector(): read error [ 2471.961175][T17096] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2472.645311][T17096] usb 8-1: Using ep0 maxpacket: 8 [ 2472.676843][T17096] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2472.782207][T17096] usb 8-1: config 4 interface 0 has no altsetting 0 [ 2472.816413][T17096] usb 8-1: string descriptor 0 read error: -22 [ 2472.828411][T17096] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2472.887042][T17096] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.029201][T17096] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2473.068907][T17096] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2473.434177][T17096] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2473.830940][T17096] usb 8-1: media controller created [ 2473.863994][T26436] usb 8-1: dvb_usb_au6610: wlen=0, aborting [ 2474.112827][T17096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2474.325601][T17096] zl10353_read_register: readreg error (reg=127, ret==0) [ 2475.666731][T26477] netlink: 'syz.5.5260': attribute type 10 has an invalid length. [ 2475.687486][T26477] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2475.955579][T17096] usb 8-1: USB disconnect, device number 28 [ 2478.366205][T26491] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5265'. [ 2478.376417][T26491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5265'. [ 2480.267656][T26509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5270'. [ 2482.179627][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5273'. [ 2484.435250][T26519] lo speed is unknown, defaulting to 1000 [ 2484.442059][T26519] lo speed is unknown, defaulting to 1000 [ 2487.435100][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5281'. [ 2490.730274][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5287'. [ 2492.474113][T26566] lo speed is unknown, defaulting to 1000 [ 2492.481050][T26566] lo speed is unknown, defaulting to 1000 [ 2496.898164][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5297'. [ 2497.206062][T26615] lo speed is unknown, defaulting to 1000 [ 2497.229840][T26615] lo speed is unknown, defaulting to 1000 [ 2498.980837][T26632] siw: device registration error -23 [ 2500.642008][T26641] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5305'. [ 2506.085609][T12774] Bluetooth: hci5: command 0x1003 tx timeout [ 2506.095550][T24262] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2507.688963][T26687] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 2508.598999][T26699] Device name cannot be null; rc = [-22] [ 2510.437273][T26709] 9pnet_fd: Insufficient options for proto=fd [ 2511.449371][T26720] 8021q: VLANs not supported on ipvlan1 [ 2515.067899][T26747] Device name cannot be null; rc = [-22] [ 2516.650372][T26766] 9pnet_fd: Insufficient options for proto=fd [ 2518.805232][T26781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5341'. [ 2518.924475][T26781] lo speed is unknown, defaulting to 1000 [ 2518.941353][T26781] lo speed is unknown, defaulting to 1000 [ 2519.405223][T26777] Unknown options in mask 5 [ 2519.514459][T26786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5343'. [ 2520.996741][T26795] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 2524.090909][T26819] 9pnet_fd: Insufficient options for proto=fd [ 2524.315503][T26821] 9pnet_fd: Insufficient options for proto=fd [ 2524.534154][T26826] Device name cannot be null; rc = [-22] [ 2526.011619][T26313] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2526.205252][T26313] usb 6-1: Using ep0 maxpacket: 16 [ 2526.628204][T26313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2526.655114][T26313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2526.700336][T26313] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2526.751028][T26313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.817383][T26313] usb 6-1: config 0 descriptor?? [ 2528.027761][T26313] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0006/input/input28 [ 2528.207078][T26313] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 2528.982582][T17096] usb 6-1: USB disconnect, device number 26 [ 2529.318589][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2530.700323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.156842][T26861] fido_id[26861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2531.339864][T26871] 9pnet_fd: Insufficient options for proto=fd [ 2532.717962][T26881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2534.729147][T26891] netlink: 'syz.5.5368': attribute type 4 has an invalid length. [ 2535.956044][T26901] fuse: Bad value for 'user_id' [ 2536.446462][T26901] fuse: Bad value for 'user_id' [ 2536.685218][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2536.845398][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 2536.884069][ T10] usb 5-1: config 0 has no interfaces? [ 2536.898696][ T10] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2536.935392][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.979455][ T10] usb 5-1: config 0 descriptor?? [ 2537.692462][T16745] usb 5-1: USB disconnect, device number 51 [ 2538.059544][T26926] fuse: Unknown parameter 'grou00000000000000000000' [ 2538.717597][T26934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2540.276258][T26948] fuse: Bad value for 'user_id' [ 2540.287675][T26948] fuse: Bad value for 'user_id' [ 2544.365715][T26990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2544.862132][T26997] fuse: Bad value for 'fd' [ 2545.045275][T26980] Bluetooth: hci4: command 0x0406 tx timeout [ 2545.536884][T27001] fuse: Unknown parameter 'grou00000000000000000000' [ 2545.855068][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5408'. [ 2547.512316][T27009] lo speed is unknown, defaulting to 1000 [ 2547.621130][T27021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5411'. [ 2548.291791][T27009] lo speed is unknown, defaulting to 1000 [ 2549.353623][T27027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2550.745423][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5422'. [ 2553.963115][T27071] fuse: Unknown parameter 'grou00000000000000000000' [ 2555.141044][T27082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2555.289575][T27084] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5432'. [ 2555.298841][T27084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5432'. [ 2557.241059][T27105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2559.553270][T27115] Invalid ELF header magic: != ELF [ 2562.065153][T16745] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2562.166947][T27134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2562.265102][T16745] usb 5-1: Using ep0 maxpacket: 8 [ 2562.273043][T16745] usb 5-1: config 0 has no interfaces? [ 2562.362658][T16745] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2562.417854][T16745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.453709][T16745] usb 5-1: config 0 descriptor?? [ 2562.694055][ T10] usb 5-1: USB disconnect, device number 52 [ 2563.816174][T27154] Unknown options in mask 5 [ 2564.376530][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5452'. [ 2564.429479][T27155] fuse: Unknown parameter 'group_i00000000000000000000' [ 2565.417927][T27150] lo speed is unknown, defaulting to 1000 [ 2565.437158][T27150] lo speed is unknown, defaulting to 1000 [ 2566.279931][T27166] fuse: Unknown parameter 'grou00000000000000000000' [ 2567.623126][T27173] 9pnet_fd: Insufficient options for proto=fd [ 2568.764800][T27179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2569.789872][T27191] 8021q: VLANs not supported on ipvlan1 [ 2570.743365][T27181] fuse: Bad value for 'group_id' [ 2570.748418][T27181] fuse: Bad value for 'group_id' [ 2573.298353][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5469'. [ 2574.248863][T27221] lo speed is unknown, defaulting to 1000 [ 2574.483151][T27221] lo speed is unknown, defaulting to 1000 [ 2576.316163][T27250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2578.690648][T27278] 8021q: VLANs not supported on ipvlan1 [ 2579.122158][T16745] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2579.625152][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2579.765300][T16745] usb 5-1: Using ep0 maxpacket: 8 [ 2579.795150][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2579.819294][T16745] usb 5-1: config 0 has no interfaces? [ 2579.821501][ T10] usb 7-1: config 0 has no interfaces? [ 2579.841134][T16745] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2579.855890][ T10] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2579.870236][T16745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.879027][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.901960][T16745] usb 5-1: config 0 descriptor?? [ 2579.916895][ T10] usb 7-1: config 0 descriptor?? [ 2580.575799][ T10] usb 5-1: USB disconnect, device number 53 [ 2580.595118][T16745] usb 7-1: USB disconnect, device number 44 [ 2581.567735][T27292] fuse: Unknown parameter 'group_i00000000000000000000' [ 2582.697856][T27299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.459195][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5492'. [ 2584.774362][T27312] lo speed is unknown, defaulting to 1000 [ 2584.786978][T27318] 9pnet_fd: Insufficient options for proto=fd [ 2584.985821][T27312] lo speed is unknown, defaulting to 1000 [ 2587.365193][T12774] Bluetooth: hci4: command 0x0406 tx timeout [ 2588.478121][T27342] 8021q: VLANs not supported on ipvlan1 [ 2588.579113][T17096] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2589.025378][T17096] usb 8-1: Using ep0 maxpacket: 8 [ 2589.053615][T17096] usb 8-1: config 0 has no interfaces? [ 2589.077311][T17096] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2589.215757][ T978] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2589.355244][T17096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.484169][T17096] usb 8-1: config 0 descriptor?? [ 2590.018122][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 2590.129859][ T978] usb 7-1: config 0 has no interfaces? [ 2590.140624][ T978] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2590.142038][T16745] usb 8-1: USB disconnect, device number 29 [ 2590.172869][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.208309][ T978] usb 7-1: config 0 descriptor?? [ 2590.876847][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.884764][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.400426][T16745] usb 7-1: USB disconnect, device number 45 [ 2592.897647][T27368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5506'. [ 2594.726153][T27377] 9pnet_fd: Insufficient options for proto=fd [ 2598.146135][T27419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5520'. [ 2600.012237][T27435] lo speed is unknown, defaulting to 1000 [ 2600.023332][T27435] lo speed is unknown, defaulting to 1000 [ 2602.454213][T27453] netlink: 'syz.0.5528': attribute type 10 has an invalid length. [ 2602.467352][T27453] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2604.896723][T27466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5532'. [ 2605.846945][T27470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.165299][T17096] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2606.830287][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 2607.058049][T27479] lo speed is unknown, defaulting to 1000 [ 2607.077563][T27479] lo speed is unknown, defaulting to 1000 [ 2607.186702][T17096] usb 8-1: Using ep0 maxpacket: 16 [ 2607.204934][T17096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2607.216088][T17096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2607.225903][T17096] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2607.235159][T17096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.274070][T17096] usb 8-1: config 0 descriptor?? [ 2607.315162][ T978] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2607.485194][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 2607.514645][ T978] usb 7-1: config 0 has no interfaces? [ 2607.520522][ T978] usb 7-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2607.546616][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.700484][T17096] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0007/input/input29 [ 2608.560484][ T978] usb 7-1: config 0 descriptor?? [ 2608.659089][T17096] appleir 0003:05AC:8241.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 2608.807177][T16745] usb 7-1: USB disconnect, device number 46 [ 2610.114036][T17096] usb 8-1: reset high-speed USB device number 30 using dummy_hcd [ 2610.262008][T27496] fuse: Unknown parameter 'group_id00000000000000000000' [ 2610.437065][T27501] Device name cannot be null; rc = [-22] [ 2611.338810][T27509] Device name cannot be null; rc = [-22] [ 2611.766228][T27343] usb 8-1: USB disconnect, device number 30 [ 2612.002420][T27513] siw: device registration error -23 [ 2612.295810][T27515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2613.663351][T27525] trusted_key: encrypted_key: insufficient parameters specified [ 2616.636728][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5557'. [ 2618.257044][T27561] netlink: 'syz.0.5559': attribute type 10 has an invalid length. [ 2618.265855][T27561] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2620.110143][T27576] fuse: Bad value for 'group_id' [ 2620.115361][T27576] fuse: Bad value for 'group_id' [ 2625.101807][T27608] fuse: Unknown parameter 'use00000000000000000000' [ 2625.905259][T27343] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2626.071027][T27615] trusted_key: encrypted_key: insufficient parameters specified [ 2626.583100][ T30] audit: type=1800 audit(1751724583.694:90): pid=27611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5569" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2628.692172][T27634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5579'. [ 2628.921072][T27634] lo speed is unknown, defaulting to 1000 [ 2628.940400][T27634] lo speed is unknown, defaulting to 1000 [ 2631.471249][T27656] fuse: Unknown parameter 'use00000000000000000000' [ 2633.925306][T27665] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2634.020010][T27668] netdevsim netdevsim0: Direct firmware load for . [ 2634.020010][T27668] failed with error -2 [ 2634.295161][T27668] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2634.295161][T27668] [ 2635.101508][T27673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5589'. [ 2635.142937][T27673] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2636.435020][T27711] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 2637.170409][T27715] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5597'. [ 2637.181550][T27715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5597'. [ 2639.140210][T27722] fuse: Unknown parameter 'use00000000000000000000' [ 2639.649842][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5603'. [ 2639.974795][T27738] lo speed is unknown, defaulting to 1000 [ 2639.995254][T27738] lo speed is unknown, defaulting to 1000 [ 2640.184444][T27727] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2640.934532][T27757] fuse: Bad value for 'group_id' [ 2640.946287][T27757] fuse: Bad value for 'group_id' [ 2644.723746][T27783] fuse: Unknown parameter 'user_i00000000000000000000' [ 2649.762289][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5626'. [ 2651.931152][T27836] fuse: Unknown parameter 'user_i00000000000000000000' [ 2652.093662][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.100094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2656.467283][T27871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2657.309040][T27877] Invalid ELF header magic: != ELF [ 2659.394769][T27890] fuse: Unknown parameter 'user_i00000000000000000000' [ 2661.491112][T27913] dlm: no local IP address has been set [ 2661.540202][T27913] dlm: cannot start dlm midcomms -107 [ 2664.721549][T27934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2667.296359][T27955] netdevsim netdevsim7: Direct firmware load for . [ 2667.296359][T27955] failed with error -2 [ 2667.359813][T27955] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2667.359813][T27955] [ 2668.008165][T27961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5664'. [ 2668.130366][T27961] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2669.932693][T27981] fuse: Unknown parameter 'user_id00000000000000000000' [ 2670.214005][ T30] audit: type=1800 audit(1751724627.324:91): pid=27977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5668" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2674.079788][T28010] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5678'. [ 2674.089445][T28010] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5678'. [ 2674.468256][T28017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5680'. [ 2674.697676][T28017] lo speed is unknown, defaulting to 1000 [ 2674.717355][T28017] lo speed is unknown, defaulting to 1000 [ 2675.777581][T28029] fuse: Unknown parameter 'user_id00000000000000000000' [ 2677.311991][T28044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2681.090964][T28077] fuse: Bad value for 'fd' [ 2681.276194][T28081] dlm: no local IP address has been set [ 2681.282835][T28081] dlm: cannot start dlm midcomms -107 [ 2681.535104][T27343] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2681.699304][T27343] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.722814][T27343] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2681.772449][T27343] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2681.787863][T27343] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2681.799043][T27343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.820549][T27343] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2682.477235][T28083] udevd[28083]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2682.502863][T27343] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2682.672165][T28093] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5699'. [ 2683.185939][T28099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2684.745036][T10608] usb 7-1: USB disconnect, device number 47 [ 2684.824797][T28112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5707'. [ 2686.892915][T28118] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 2687.697110][T28131] sd 0:0:1:0: PR command failed: 1026 [ 2687.702867][T28131] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2687.709819][T28131] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2689.361126][T28144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2689.504029][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5715'. [ 2690.483570][T28150] lo speed is unknown, defaulting to 1000 [ 2690.491894][T28156] netdevsim netdevsim7: Direct firmware load for . [ 2690.491894][T28156] failed with error -2 [ 2690.545148][T28156] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2690.545148][T28156] [ 2690.557404][T28150] lo speed is unknown, defaulting to 1000 [ 2690.661449][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5719'. [ 2691.160008][T28164] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5718'. [ 2691.219936][T28164] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2691.314529][T28161] lo speed is unknown, defaulting to 1000 [ 2691.489314][T28161] lo speed is unknown, defaulting to 1000 [ 2696.991794][T28200] 8021q: VLANs not supported on ipvlan1 [ 2697.511471][T28199] fuse: Bad value for 'fd' [ 2697.557729][T27343] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2697.711031][T28206] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2698.218136][T27343] usb 5-1: Using ep0 maxpacket: 8 [ 2698.381446][T27343] usb 5-1: config 0 has no interfaces? [ 2698.412853][T27343] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2698.461270][T27343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.487522][T27343] usb 5-1: config 0 descriptor?? [ 2698.502957][T28209] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2698.774357][T28217] fuse: Unknown parameter 'use00000000000000000000' [ 2698.855949][T10608] usb 5-1: USB disconnect, device number 54 [ 2700.512799][T28231] fuse: Bad value for 'fd' [ 2701.755095][T27343] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2702.785429][T27343] usb 8-1: Using ep0 maxpacket: 16 [ 2702.872661][T28257] Device name cannot be null; rc = [-22] [ 2703.004423][T27343] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2703.287116][T27343] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.368392][T27343] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2703.386993][T27343] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.400838][T27343] usb 8-1: config 0 descriptor?? [ 2703.655252][T10608] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2704.307606][T27343] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0008/input/input32 [ 2704.378130][T10608] usb 5-1: Using ep0 maxpacket: 8 [ 2704.567098][T10608] usb 5-1: config 0 has no interfaces? [ 2704.572659][T10608] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2704.583254][T10608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.805368][T26980] Bluetooth: hci4: command 0x0406 tx timeout [ 2705.113521][T10608] usb 5-1: config 0 descriptor?? [ 2705.217660][T10608] usb 5-1: can't set config #0, error -71 [ 2705.250827][T10608] usb 5-1: USB disconnect, device number 55 [ 2705.267910][T27343] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 2705.555668][T28279] fuse: Unknown parameter 'use00000000000000000000' [ 2705.631967][T27343] usb 8-1: USB disconnect, device number 32 [ 2705.801207][T28281] fido_id[28281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2706.169908][T28292] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5752'. [ 2706.766868][T28295] fuse: Unknown parameter 'group_i00000000000000000000' [ 2707.666803][T28305] Unknown options in mask 5 [ 2708.229864][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5756'. [ 2708.509660][T28307] lo speed is unknown, defaulting to 1000 [ 2708.566374][T28307] lo speed is unknown, defaulting to 1000 [ 2710.635205][T28326] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5760'. [ 2712.085792][T28333] fuse: Unknown parameter 'use00000000000000000000' [ 2713.083703][T28343] 9pnet_fd: Insufficient options for proto=fd [ 2713.449670][T28347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5765'. [ 2713.605146][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.613100][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.900153][T28351] fuse: Unknown parameter '0x0000000000000004' [ 2715.832939][T28375] fuse: Unknown parameter 'group_id00000000000000000000' [ 2716.069288][T28383] Device name cannot be null; rc = [-22] [ 2716.731061][T28386] 9pnet_fd: Insufficient options for proto=fd [ 2717.030710][T28389] Unknown options in mask 5 [ 2717.599225][T28396] Device name cannot be null; rc = [-22] [ 2718.733637][T28401] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2721.655145][T12774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2721.676193][T12774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2721.695348][T12774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2721.703652][T12774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2721.711965][T12774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2722.012331][T28422] lo speed is unknown, defaulting to 1000 [ 2723.255560][T15622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.328131][T28434] 9pnet_fd: Insufficient options for proto=fd [ 2723.341759][T28422] lo speed is unknown, defaulting to 1000 [ 2723.386834][T28436] fuse: Bad value for 'group_id' [ 2723.391838][T28436] fuse: Bad value for 'group_id' [ 2723.446916][T28438] Bluetooth: MGMT ver 1.23 [ 2723.640405][T15622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2723.798358][T22367] Bluetooth: hci5: Frame reassembly failed (-84) [ 2724.343300][T15622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.142112][T28448] fuse: Unknown parameter 'user_i00000000000000000000' [ 2725.265623][T15622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2725.916753][T12774] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2725.922074][T26980] Bluetooth: hci5: command 0x1003 tx timeout [ 2726.977691][T28468] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 2727.761276][T28422] chnl_net:caif_netlink_parms(): no params data found [ 2728.114336][T28478] fuse: Unknown parameter 'group_id00000000000000000000' [ 2729.138906][T28487] 9pnet_fd: Insufficient options for proto=fd [ 2729.712084][T28491] netlink: 'syz.6.5805': attribute type 4 has an invalid length. [ 2731.801605][T28512] netlink: 'syz.6.5809': attribute type 4 has an invalid length. [ 2732.290507][T16745] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2732.751920][T16745] usb 6-1: Using ep0 maxpacket: 8 [ 2732.843418][T16745] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2732.896820][T16745] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2733.379355][T16745] usb 6-1: string descriptor 0 read error: -22 [ 2733.415388][T16745] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2733.455492][T16745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.515034][T16745] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2733.533005][T28422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2733.571005][T28422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.579318][T16745] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2733.608889][T28422] bridge_slave_0: entered allmulticast mode [ 2733.619116][T16745] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2733.627688][T28422] bridge_slave_0: entered promiscuous mode [ 2733.647018][T16745] usb 6-1: media controller created [ 2733.723347][T28422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.738098][T16745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2733.775979][T28422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.361367][T28422] bridge_slave_1: entered allmulticast mode [ 2734.819491][T28422] bridge_slave_1: entered promiscuous mode [ 2734.873471][T16745] zl10353_read_register: readreg error (reg=127, ret==0) [ 2734.949366][T28541] 9pnet_fd: Insufficient options for proto=fd [ 2734.988324][T16745] usb 6-1: USB disconnect, device number 27 [ 2735.293687][T28547] siw: device registration error -23 [ 2736.321495][T28422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2737.541976][T15622] hsr_slave_0: left promiscuous mode [ 2737.996301][T15622] hsr_slave_1: left promiscuous mode [ 2738.135838][T15622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2738.157959][T15622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2738.197663][T15622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2738.217878][T15622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2738.400720][T15622] veth1_macvtap: left promiscuous mode [ 2738.411099][T15622] veth0_macvtap: left promiscuous mode [ 2738.535866][T15622] veth1_vlan: left promiscuous mode [ 2738.551631][T15622] veth0_vlan: left promiscuous mode [ 2739.757639][T28583] Device name cannot be null; rc = [-22] [ 2741.539957][T15622] team0 (unregistering): Port device team_slave_1 removed [ 2741.720207][T15622] team0 (unregistering): Port device team_slave_0 removed [ 2742.751423][T28422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2743.078798][T28601] 9pnet_fd: Insufficient options for proto=fd [ 2743.268555][T28422] team0: Port device team_slave_0 added [ 2743.337215][T28422] team0: Port device team_slave_1 added [ 2744.901516][T28422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2745.055133][T28422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2745.137972][T28422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2745.166677][T28422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2745.173654][T28422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2745.725254][T28422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2745.811371][T28627] fuse: Bad value for 'fd' [ 2747.287902][T28422] hsr_slave_0: entered promiscuous mode [ 2747.294752][T28422] hsr_slave_1: entered promiscuous mode [ 2747.614666][T28644] netlink: 'syz.5.5835': attribute type 4 has an invalid length. [ 2747.985736][T28422] debugfs: 'hsr0' already exists in 'hsr' [ 2747.991526][T28422] Cannot create hsr debugfs directory [ 2748.392415][T28651] 9pnet_fd: Insufficient options for proto=fd [ 2749.006844][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 2750.058771][T28668] dlm: no local IP address has been set [ 2750.076252][T28668] dlm: cannot start dlm midcomms -107 [ 2750.965073][T12774] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2753.654878][T28676] fuse: Bad value for 'user_id' [ 2753.659840][T28676] fuse: Bad value for 'user_id' [ 2753.736427][T28701] 9pnet_fd: Insufficient options for proto=fd [ 2754.547936][T28716] netlink: 'syz.4.5851': attribute type 4 has an invalid length. [ 2755.086323][T28422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2755.537233][T28422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2755.772621][T28422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2755.869952][T28422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2758.196966][T28422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2758.913619][T28422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2758.956022][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 2758.963156][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2759.050886][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 2759.058140][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2759.310490][T28754] netlink: 'syz.6.5855': attribute type 4 has an invalid length. [ 2759.694373][T28422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2759.895779][T28762] 9pnet_fd: Insufficient options for proto=fd [ 2762.884104][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 2763.063381][T28422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2764.220220][T28422] veth0_vlan: entered promiscuous mode [ 2764.320965][T28422] veth1_vlan: entered promiscuous mode [ 2764.582150][T28422] veth0_macvtap: entered promiscuous mode [ 2764.823275][T12774] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2765.203311][T28422] veth1_macvtap: entered promiscuous mode [ 2765.296281][T28422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2765.306873][T28422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2765.327848][T15622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2765.419052][T15622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2765.448437][T15622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2765.533794][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.933889][T28826] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2768.735081][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.743390][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2769.444374][T15622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2769.454509][T15622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2770.340416][T28856] fuse: Unknown parameter 'use00000000000000000000' [ 2770.550279][T28858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2775.095543][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.101916][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.516114][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5886'. [ 2776.988644][T28906] lo speed is unknown, defaulting to 1000 [ 2776.998800][T28906] lo speed is unknown, defaulting to 1000 [ 2778.808480][T28929] Device name cannot be null; rc = [-22] [ 2783.915288][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2784.277659][ T978] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2784.473185][ T978] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2784.511041][ T978] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2784.542726][ T978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2784.562282][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.675534][ T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2784.740737][T28978] Device name cannot be null; rc = [-22] [ 2786.540768][ T978] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2787.044281][T28990] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 2788.729446][T29003] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5901'. [ 2792.565510][T29032] Unknown options in mask 5 [ 2793.250560][T29036] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5925'. [ 2793.304721][T16745] usb 6-1: USB disconnect, device number 28 [ 2796.857897][T29057] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2798.251222][T29057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2798.267756][T29057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2799.587097][T29081] fuse: Invalid rootmode [ 2800.062647][T29084] netlink: 'syz.5.5936': attribute type 4 has an invalid length. [ 2802.418321][T29110] siw: device registration error -23 [ 2807.830000][T29141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2808.595139][T29150] fuse: Unknown parameter 'fd0x0000000000000004' [ 2814.907900][T29202] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2816.246220][T29204] lo speed is unknown, defaulting to 1000 [ 2816.253026][T29204] lo speed is unknown, defaulting to 1000 [ 2818.358045][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5969'. [ 2820.044617][T29232] fuse: Bad value for 'fd' [ 2820.535535][T29221] lo speed is unknown, defaulting to 1000 [ 2820.640313][T29221] lo speed is unknown, defaulting to 1000 [ 2825.385466][T29278] fuse: Unknown parameter 'use00000000000000000000' [ 2827.582827][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5986'. [ 2827.596562][T29292] lo speed is unknown, defaulting to 1000 [ 2828.506722][T29292] lo speed is unknown, defaulting to 1000 [ 2831.375022][T27343] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2831.399986][T29316] 8021q: VLANs not supported on ipvlan1 [ 2831.784199][T27343] usb 7-1: device descriptor read/64, error -71 [ 2832.325275][T27343] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2832.362746][T29338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2832.964304][T27343] usb 7-1: device descriptor read/64, error -71 [ 2833.245088][T27343] usb usb7-port1: attempt power cycle [ 2833.306950][T29345] Device name cannot be null; rc = [-22] [ 2835.991905][T29371] dlm: no local IP address has been set [ 2835.997720][T29371] dlm: cannot start dlm midcomms -107 [ 2836.456090][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.462553][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.207929][T29390] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 2840.345085][T27343] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2841.244817][T27343] usb 8-1: device descriptor read/64, error -71 [ 2843.215022][T27343] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2844.902138][T29436] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 2847.182441][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6032'. [ 2847.398404][T29458] lo speed is unknown, defaulting to 1000 [ 2847.419326][T29458] lo speed is unknown, defaulting to 1000 [ 2847.857720][T29461] netlink: 'syz.0.6031': attribute type 4 has an invalid length. [ 2848.762259][T29466] 8021q: VLANs not supported on ipvlan1 [ 2849.660816][T27343] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2849.696047][T29478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2849.805278][T27343] usb 6-1: device descriptor read/64, error -71 [ 2849.975166][T29480] fuse: Unknown parameter 'group_i00000000000000000000' [ 2850.075198][T27343] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2850.228903][T27343] usb 6-1: device descriptor read/64, error -71 [ 2850.368001][T29493] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6040'. [ 2850.409180][T27343] usb usb6-port1: attempt power cycle [ 2851.014993][T27343] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2851.086306][T27343] usb 6-1: device descriptor read/8, error -71 [ 2852.495495][T10608] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2852.665834][T10608] usb 8-1: device descriptor read/64, error -71 [ 2852.955014][T10608] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2853.114953][T29520] fuse: Unknown parameter 'group_id00000000000000000000' [ 2853.135018][T10608] usb 8-1: device descriptor read/64, error -71 [ 2853.135678][T29522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2853.246653][T10608] usb usb8-port1: attempt power cycle [ 2853.885070][T10608] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2854.424511][T10608] usb 8-1: device descriptor read/8, error -71 [ 2855.532438][T29535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6053'. [ 2856.722075][T29547] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 2858.381702][T29565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2858.526237][T29568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2858.690277][T29570] overlayfs: failed to resolve './file0': -2 [ 2863.510172][T29611] Unknown options in mask 5 [ 2864.488505][T10608] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2864.859063][T29625] Device name cannot be null; rc = [-22] [ 2865.460652][T10608] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2865.472091][T10608] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2865.591043][T10608] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2865.623026][T10608] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2865.666567][T10608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.441168][T10608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2866.866677][T10608] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2866.877161][T29606] udevd[29606]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2867.461351][T29644] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6075'. [ 2872.795147][T16745] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2873.627891][T16745] usb 7-1: Using ep0 maxpacket: 8 [ 2873.635551][T16745] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2873.718807][T16745] usb 7-1: config 4 interface 0 has no altsetting 0 [ 2873.743366][T16745] usb 7-1: string descriptor 0 read error: -22 [ 2873.835185][T16745] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2873.844301][T16745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.867877][T26313] usb 6-1: USB disconnect, device number 33 [ 2873.907764][T16745] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2873.943579][T16745] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2874.002134][T16745] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2874.085878][T16745] usb 7-1: media controller created [ 2874.124425][T29671] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 2874.228406][T16745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2874.374095][T16745] zl10353_read_register: readreg error (reg=127, ret==0) [ 2874.547249][T16745] usb 7-1: USB disconnect, device number 51 [ 2875.035872][T29697] netlink: 'syz.0.6094': attribute type 4 has an invalid length. [ 2876.883959][T29711] dlm: no local IP address has been set [ 2876.895446][T29711] dlm: cannot start dlm midcomms -107 [ 2877.083554][T29715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2877.682057][T29719] Device name cannot be null; rc = [-22] [ 2881.138021][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6108'. [ 2881.591905][T29749] lo speed is unknown, defaulting to 1000 [ 2881.604806][T29749] lo speed is unknown, defaulting to 1000 [ 2882.216874][T29752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6110'. [ 2883.900455][T29768] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2884.929401][T29773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2885.005761][T29774] Device name cannot be null; rc = [-22] [ 2889.125147][T29803] Device name cannot be null; rc = [-22] [ 2891.864378][T29824] Device name cannot be null; rc = [-22] [ 2893.262217][T29831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2893.319280][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6132'. [ 2893.852569][T29832] lo speed is unknown, defaulting to 1000 [ 2893.887412][T29832] lo speed is unknown, defaulting to 1000 [ 2896.289250][T29867] 9pnet_fd: Insufficient options for proto=fd [ 2896.305097][T10608] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2896.465156][T10608] usb 6-1: Using ep0 maxpacket: 8 [ 2896.536016][T10608] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2896.592190][T10608] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2896.708546][T10608] usb 6-1: string descriptor 0 read error: -22 [ 2897.428310][T10608] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2897.464988][T10608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.581629][T10608] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2897.860165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.877888][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.911118][T10608] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2898.140118][T10608] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2898.235216][T10608] usb 6-1: media controller created [ 2898.430270][T29894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2898.504493][T10608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2898.570011][T10608] zl10353_read_register: readreg error (reg=127, ret==0) [ 2899.713859][T10608] usb 6-1: USB disconnect, device number 34 [ 2902.273609][T29922] netlink: 'syz.6.6147': attribute type 4 has an invalid length. [ 2903.001286][T29928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6153'. [ 2904.674003][T29930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6152'. [ 2904.780133][T29941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6155'. [ 2905.809481][T29941] lo speed is unknown, defaulting to 1000 [ 2906.372871][T29941] lo speed is unknown, defaulting to 1000 [ 2906.818610][T29956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2907.859872][T26313] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2908.886302][T26313] usb 6-1: Using ep0 maxpacket: 8 [ 2909.013658][T26313] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2909.043388][T26313] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2909.068373][T26313] usb 6-1: string descriptor 0 read error: -22 [ 2909.074733][T26313] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2909.104245][T26313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.350785][T26313] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2910.125232][T26313] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2910.258124][T26313] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2910.281875][T26313] usb 6-1: media controller created [ 2910.894809][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6169'. [ 2911.190580][T29993] lo speed is unknown, defaulting to 1000 [ 2911.209508][T29993] lo speed is unknown, defaulting to 1000 [ 2911.535914][T26313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2911.736787][T26313] zl10353_read_register: readreg error (reg=127, ret==0) [ 2911.948511][T30002] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6171'. [ 2911.958127][T30002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6171'. [ 2912.556592][T26313] usb 6-1: USB disconnect, device number 35 [ 2913.834440][T30012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2914.114597][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6175'. [ 2914.960079][T30019] lo speed is unknown, defaulting to 1000 [ 2915.059684][T30019] lo speed is unknown, defaulting to 1000 [ 2917.626323][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6183'. [ 2917.946958][T30046] lo speed is unknown, defaulting to 1000 [ 2917.966641][T30046] lo speed is unknown, defaulting to 1000 [ 2919.787573][T30061] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6186'. [ 2919.797214][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6186'. [ 2920.171802][T30064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.897837][T30084] xt_CT: No such helper "snmp" [ 2924.590259][T30117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6202'. [ 2925.700165][T30120] geneve2: entered promiscuous mode [ 2926.276816][T30143] netlink: 'syz.0.6210': attribute type 1 has an invalid length. [ 2926.338986][T30143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2926.466705][T30143] vlan2: entered allmulticast mode [ 2926.521774][T30143] geneve1: entered allmulticast mode [ 2926.608689][T16745] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 2926.708279][T30143] bond1: (slave vlan2): making interface the new active one [ 2926.717410][T30143] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 2926.958502][T16745] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2926.989746][T16745] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2927.039900][T16745] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2927.065294][T16745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.149056][T16745] usb 7-1: Product: syz [ 2927.228565][T16745] usb 7-1: Manufacturer: syz [ 2927.233227][T16745] usb 7-1: SerialNumber: syz [ 2927.462225][T16745] usb 7-1: 0:2 : does not exist [ 2927.531664][T16745] usb 7-1: USB disconnect, device number 52 [ 2927.686734][T30014] udevd[30014]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2928.018764][T26980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2928.029857][T26980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2928.039995][T26980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2928.048995][T26980] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2928.057159][T26980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2928.165023][T30164] netlink: 388 bytes leftover after parsing attributes in process `syz.6.6220'. [ 2928.391739][T30158] lo speed is unknown, defaulting to 1000 [ 2928.537353][T30158] lo speed is unknown, defaulting to 1000 [ 2928.554970][T26980] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2928.816017][ T3472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.047846][ T3472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.174217][ T3472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.280443][ T3472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.831899][T30158] chnl_net:caif_netlink_parms(): no params data found [ 2929.968575][ T3472] bridge_slave_1: left allmulticast mode [ 2929.974656][ T3472] bridge_slave_1: left promiscuous mode [ 2929.984930][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2930.036288][ T3472] bridge_slave_0: left allmulticast mode [ 2930.042007][ T3472] bridge_slave_0: left promiscuous mode [ 2930.044745][ T30] audit: type=1800 audit(1751724887.154:92): pid=30201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6231" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2930.086417][T26980] Bluetooth: hci5: command tx timeout [ 2930.099573][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2930.347272][T30214] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6235'. [ 2930.777421][T30223] netlink: 59 bytes leftover after parsing attributes in process `syz.7.6236'. [ 2930.958395][T30210] syz_tun: entered allmulticast mode [ 2930.964210][T30210] syz_tun: left allmulticast mode [ 2931.302334][T30230] vxcan1: tx drop: invalid sa for name 0x0000001000000000 [ 2931.382374][T30158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2931.393210][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 2931.417962][T30158] bridge_slave_0: entered allmulticast mode [ 2931.437211][T30158] bridge_slave_0: entered promiscuous mode [ 2931.636522][T30158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2931.696559][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.703959][T30158] bridge_slave_1: entered allmulticast mode [ 2931.731159][T30158] bridge_slave_1: entered promiscuous mode [ 2931.770200][T30241] vti0: entered promiscuous mode [ 2931.775704][T30241] vti0: entered allmulticast mode [ 2932.181256][T26980] Bluetooth: hci5: command tx timeout [ 2932.710135][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2932.973040][ T3472] hsr_slave_0: left promiscuous mode [ 2932.981670][ T3472] hsr_slave_1: left promiscuous mode [ 2932.988247][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2932.998766][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2933.068783][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2933.133950][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2933.232913][ T3472] veth1_macvtap: left promiscuous mode [ 2933.239775][ T3472] veth0_macvtap: left promiscuous mode [ 2933.250060][ T3472] veth1_vlan: left promiscuous mode [ 2933.350347][ T3472] veth0_vlan: left promiscuous mode [ 2933.785096][T30260] nvme_fabrics: missing parameter 'transport=%s' [ 2933.792823][T30260] nvme_fabrics: missing parameter 'nqn=%s' [ 2933.887091][ T3472] pim6reg (unregistering): left allmulticast mode [ 2934.246292][T26980] Bluetooth: hci5: command tx timeout [ 2935.219299][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 2935.281343][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 2936.212609][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2936.335057][T26980] Bluetooth: hci5: command tx timeout [ 2936.416571][T30158] team0: Port device team_slave_0 added [ 2936.526803][T30158] team0: Port device team_slave_1 added [ 2936.826630][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2936.843326][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2936.908657][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2936.957509][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2937.011933][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2937.152328][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2937.553693][T30304] lo speed is unknown, defaulting to 1000 [ 2938.008614][T30158] hsr_slave_0: entered promiscuous mode [ 2938.036140][T30158] hsr_slave_1: entered promiscuous mode [ 2938.900755][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2938.922126][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2938.958829][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2938.984201][ T3472] IPVS: stop unused estimator thread 0... [ 2938.988948][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.061423][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.091472][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.174802][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.305010][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.409671][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.463342][T16745] hid-generic 6B95:0005:0001.0009: unknown main item tag 0x0 [ 2939.541865][T16745] hid-generic 6B95:0005:0001.0009: hidraw0: HID v0.0b Device [syz0] on syz1 [ 2939.810685][T30344] fido_id[30344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2939.904909][T30347] usb usb8: usbfs: process 30347 (syz.6.6260) did not claim interface 0 before use [ 2941.395520][T27343] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2941.565160][T27343] usb 8-1: Using ep0 maxpacket: 16 [ 2941.750450][T27343] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2941.800409][T27343] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2941.934118][T27343] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 2941.951961][T27343] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2942.005598][T22908] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2942.029030][T27343] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2942.076717][T27343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.168725][T27343] usb 8-1: Product: syz [ 2942.195335][T22908] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2942.217773][T27343] usb 8-1: Manufacturer: syz [ 2942.222432][T27343] usb 8-1: SerialNumber: syz [ 2942.255571][T22908] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2942.300133][T27343] usb 8-1: config 0 descriptor?? [ 2942.356561][T22908] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2942.416710][T22908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.578464][T27343] rc_core: IR keymap rc-xbox-dvd not found [ 2942.587061][T27343] Registered IR keymap rc-empty [ 2942.646402][T27343] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 2942.702486][T27343] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input37 [ 2942.749440][T30372] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6265'. [ 2942.758573][ T30] audit: type=1326 audit(1751724899.834:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2942.945724][ T30] audit: type=1326 audit(1751724899.834:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2942.974136][T30158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2943.061771][T30158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2943.107564][ T30] audit: type=1326 audit(1751724899.834:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2943.222884][T30158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2943.343249][ T30] audit: type=1326 audit(1751724899.834:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2943.385420][T30158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2943.399962][ T30] audit: type=1326 audit(1751724899.834:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2943.785982][ T30] audit: type=1326 audit(1751724899.834:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2944.120761][ T30] audit: type=1326 audit(1751724899.834:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2944.280523][ T30] audit: type=1326 audit(1751724899.834:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2944.516413][ T30] audit: type=1326 audit(1751724899.834:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2944.678648][ T30] audit: type=1326 audit(1751724899.834:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.5.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807fb8e929 code=0x7ffc0000 [ 2944.786007][T30378] usb 6-1: USB disconnect, device number 36 [ 2944.827073][T30158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2944.964898][T30158] 8021q: adding VLAN 0 to HW filter on device team0 [ 2945.049008][T15411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.056277][T15411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.330841][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.338179][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2946.350950][T16745] usb 8-1: USB disconnect, device number 39 [ 2946.351003][ C0] xbox_remote 8-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 2946.534781][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2949.339560][T30158] veth0_vlan: entered promiscuous mode [ 2949.350164][T27343] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2949.430923][T30158] veth1_vlan: entered promiscuous mode [ 2949.526005][T27343] usb 7-1: Using ep0 maxpacket: 8 [ 2949.536322][T27343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.540806][T30158] veth0_macvtap: entered promiscuous mode [ 2949.599164][T27343] usb 7-1: config 0 has no interfaces? [ 2949.625411][T27343] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2949.648032][T27343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.650463][T30158] veth1_macvtap: entered promiscuous mode [ 2949.670788][T27343] usb 7-1: config 0 descriptor?? [ 2949.869440][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2949.907790][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2949.944976][T15411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2950.001241][T15411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2950.063242][T27343] usb 7-1: USB disconnect, device number 53 [ 2950.215668][T26960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2950.249008][T26960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2950.568073][T15409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2950.655073][T15409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2950.846019][ T9859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2950.895485][ T9859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2952.077075][T30519] lo speed is unknown, defaulting to 1000 [ 2952.795477][T16745] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2952.977578][T16745] usb 6-1: device descriptor read/64, error -71 [ 2953.311553][T16745] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 2953.897101][T16745] usb 6-1: device descriptor read/64, error -71 [ 2954.037912][T16745] usb usb6-port1: attempt power cycle [ 2954.562142][T16745] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2954.619205][T30545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2954.625530][T30545] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2954.759861][T16745] usb 6-1: device descriptor read/8, error -71 [ 2954.823334][T30545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2954.830425][T30545] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2954.847673][T30545] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2954.886818][T30545] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2954.937484][T30545] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2954.943913][T30545] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2954.966093][T30545] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2955.059897][T16745] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 2956.657343][T12774] Bluetooth: hci2: command 0x0406 tx timeout [ 2956.886795][T12774] Bluetooth: hci4: command 0x0406 tx timeout [ 2956.892871][T26980] Bluetooth: hci3: command 0x0405 tx timeout [ 2956.934986][T16745] usb 6-1: device descriptor read/8, error -71 [ 2956.975610][T12774] Bluetooth: hci5: command 0x0405 tx timeout [ 2957.118784][T16745] usb usb6-port1: unable to enumerate USB device [ 2957.208374][T30585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6300'. [ 2957.219689][T30578] ip6gre1: entered promiscuous mode [ 2957.235133][T30585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'. [ 2957.265863][T30578] ip6gre1: entered allmulticast mode [ 2957.666073][T30590] bridge_slave_0: left allmulticast mode [ 2957.721244][T30590] bridge_slave_0: left promiscuous mode [ 2957.728755][T30590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2957.810294][T30590] bridge_slave_1: left allmulticast mode [ 2957.828925][T30590] bridge_slave_1: left promiscuous mode [ 2957.836844][T30590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2957.948860][T30590] bond0: (slave bond_slave_0): Releasing backup interface [ 2958.053536][T30590] bond0: (slave bond_slave_1): Releasing backup interface [ 2958.083230][T30590] team0: Port device team_slave_0 removed [ 2958.149907][T30590] team0: Port device team_slave_1 removed [ 2958.157868][T30590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2958.210894][T30590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2958.270437][T30590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2958.290597][T30590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2958.637974][T30614] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2958.788392][T30614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2958.813788][T12774] Bluetooth: hci2: command 0x0406 tx timeout [ 2958.878317][T30594] lo speed is unknown, defaulting to 1000 [ 2958.965748][T12774] Bluetooth: hci4: command 0x0406 tx timeout [ 2958.971822][T26980] Bluetooth: hci3: command 0x0405 tx timeout [ 2959.055590][T12774] Bluetooth: hci5: command 0x0405 tx timeout [ 2959.207993][T30590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6303'. [ 2959.327369][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.337197][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.669447][T16745] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 2959.847306][T16745] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2959.870933][T16745] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2959.901674][T16745] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2959.942135][T16745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.155470][T10608] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2960.207593][T16745] usb 7-1: usb_control_msg returned -32 [ 2960.219560][T16745] usbtmc 7-1:16.0: can't read capabilities [ 2960.319173][T10608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2960.332737][T10608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2960.343764][T10608] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2960.357000][T10608] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2960.367111][T10608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.399845][T10608] usb 5-1: config 0 descriptor?? [ 2960.582705][T30655] block device autoloading is deprecated and will be removed. [ 2960.871274][T16745] usb 7-1: USB disconnect, device number 54 [ 2960.910542][T10608] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2961.060790][T10608] usb 5-1: USB disconnect, device number 56 [ 2961.276079][T12774] Bluetooth: hci5: command 0x0405 tx timeout [ 2961.350186][T30667] input: syz1 as /devices/virtual/input/input38 [ 2962.119347][T30663] fido_id[30663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2962.345015][T30686] netlink: 'syz.4.6325': attribute type 10 has an invalid length. [ 2962.753325][T30686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2962.773960][T30686] bond0: (slave team0): Enslaving as an active interface with an up link [ 2963.397479][T30690] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6326'. [ 2964.370450][T30378] IPVS: starting estimator thread 0... [ 2964.476825][T30707] IPVS: using max 47 ests per chain, 112800 per kthread [ 2966.039384][T30727] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6338'. [ 2966.078909][T16745] IPVS: starting estimator thread 0... [ 2966.205514][T30737] IPVS: using max 25 ests per chain, 60000 per kthread [ 2966.671990][T30749] netlink: 388 bytes leftover after parsing attributes in process `syz.6.6346'. [ 2966.816323][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2966.816345][ T30] audit: type=1326 audit(1751724923.924:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30745 comm="syz.4.6345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f689dd8e929 code=0x0 [ 2967.791852][T30378] IPVS: starting estimator thread 0... [ 2967.886046][T30774] IPVS: using max 25 ests per chain, 60000 per kthread [ 2968.378196][T30786] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6358'. [ 2970.481513][T30792] syz.7.6358 (30792): drop_caches: 2 [ 2970.515386][T30378] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2970.747121][T30378] usb 5-1: Using ep0 maxpacket: 16 [ 2970.782750][T30378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2970.803118][T30378] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2970.875076][T30378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 2970.922537][T30378] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2971.009157][T30378] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2971.023806][T30378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2971.043086][T30378] usb 5-1: Product: syz [ 2971.053381][T30378] usb 5-1: Manufacturer: syz [ 2971.058976][T30378] usb 5-1: SerialNumber: syz [ 2971.080293][T30378] usb 5-1: config 0 descriptor?? [ 2971.437436][T30378] rc_core: IR keymap rc-xbox-dvd not found [ 2971.499088][T30378] Registered IR keymap rc-empty [ 2971.535876][T30378] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2971.571204][T30378] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 2972.807242][T10608] usb 5-1: USB disconnect, device number 57 [ 2972.807250][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 2977.168756][ T30] audit: type=1326 audit(1751724934.284:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30899 comm="syz.6.6402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc0a98e929 code=0x0 [ 2977.273028][T30901] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 2977.285465][T30901] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 30901, name: syz.4.6401 [ 2977.299663][T30901] preempt_count: 0, expected: 0 [ 2977.309778][T30901] RCU nest depth: 1, expected: 0 [ 2977.314959][T30901] 2 locks held by syz.4.6401/30901: [ 2977.335038][T30901] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 2977.354088][T30901] #1: ffff88805f8c3448 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 2977.375054][T30901] CPU: 1 UID: 0 PID: 30901 Comm: syz.4.6401 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 2977.375091][T30901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2977.375105][T30901] Call Trace: [ 2977.375115][T30901] [ 2977.375125][T30901] dump_stack_lvl+0x189/0x250 [ 2977.375170][T30901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2977.375206][T30901] ? print_lock_name+0xde/0x100 [ 2977.375243][T30901] __might_resched+0x495/0x610 [ 2977.375272][T30901] ? __pfx___might_resched+0x10/0x10 [ 2977.375297][T30901] ? vma_start_read+0x218/0x3b0 [ 2977.375324][T30901] ? vma_start_read+0x259/0x3b0 [ 2977.375356][T30901] ? __filemap_get_folio+0x9a6/0xaf0 [ 2977.375388][T30901] down_read+0x22/0x2e0 [ 2977.375423][T30901] freader_get_folio+0x38b/0x830 [ 2977.375458][T30901] freader_fetch+0xa3/0x5d0 [ 2977.375499][T30901] __build_id_parse+0x133/0x7d0 [ 2977.375530][T30901] ? __pfx___build_id_parse+0x10/0x10 [ 2977.375565][T30901] ? query_matching_vma+0x494/0x4b0 [ 2977.375623][T30901] procfs_procmap_ioctl+0x7dd/0xce0 [ 2977.375665][T30901] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 2977.375708][T30901] ? __fget_files+0x2a/0x420 [ 2977.375740][T30901] ? __fget_files+0x2a/0x420 [ 2977.375766][T30901] ? __fget_files+0x3a0/0x420 [ 2977.375792][T30901] ? __fget_files+0x2a/0x420 [ 2977.375825][T30901] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2977.375849][T30901] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 2977.375878][T30901] __se_sys_ioctl+0xf9/0x170 [ 2977.375905][T30901] do_syscall_64+0xfa/0x3b0 [ 2977.375932][T30901] ? lockdep_hardirqs_on+0x9c/0x150 [ 2977.375959][T30901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2977.375980][T30901] ? clear_bhb_loop+0x60/0xb0 [ 2977.376008][T30901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2977.376028][T30901] RIP: 0033:0x7f689dd8e929 [ 2977.376048][T30901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2977.376067][T30901] RSP: 002b:00007f689ebc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2977.376091][T30901] RAX: ffffffffffffffda RBX: 00007f689dfb6080 RCX: 00007f689dd8e929 [ 2977.376106][T30901] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 2977.376121][T30901] RBP: 00007f689de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2977.376135][T30901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2977.376156][T30901] R13: 0000000000000000 R14: 00007f689dfb6080 R15: 00007ffe91e12c48 [ 2977.376192][T30901] [ 2977.377496][T30901] [ 2977.622697][T30901] ============================= [ 2977.627544][T30901] [ BUG: Invalid wait context ] [ 2977.632390][T30901] 6.16.0-rc4-next-20250704-syzkaller #0 Tainted: G W [ 2977.640537][T30901] ----------------------------- [ 2977.645378][T30901] syz.4.6401/30901 is trying to lock: [ 2977.650745][T30901] ffff888022db94c0 (mapping.invalidate_lock){++++}-{4:4}, at: freader_get_folio+0x38b/0x830 [ 2977.660847][T30901] other info that might help us debug this: [ 2977.666730][T30901] context-{5:5} [ 2977.670268][T30901] 2 locks held by syz.4.6401/30901: [ 2977.675459][T30901] #0: ffffffff8e13bf60 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 2977.684874][T30901] #1: ffff88805f8c3448 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 2977.693694][T30901] stack backtrace: [ 2977.697428][T30901] CPU: 1 UID: 0 PID: 30901 Comm: syz.4.6401 Tainted: G W 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 2977.697454][T30901] Tainted: [W]=WARN [ 2977.697460][T30901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2977.697470][T30901] Call Trace: [ 2977.697479][T30901] [ 2977.697487][T30901] dump_stack_lvl+0x189/0x250 [ 2977.697511][T30901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2977.697531][T30901] ? __pfx__printk+0x10/0x10 [ 2977.697556][T30901] __lock_acquire+0xbcb/0xd20 [ 2977.697583][T30901] ? freader_get_folio+0x38b/0x830 [ 2977.697603][T30901] lock_acquire+0x120/0x360 [ 2977.697625][T30901] ? freader_get_folio+0x38b/0x830 [ 2977.697645][T30901] ? vma_start_read+0x218/0x3b0 [ 2977.697665][T30901] ? vma_start_read+0x259/0x3b0 [ 2977.697687][T30901] down_read+0x46/0x2e0 [ 2977.697710][T30901] ? freader_get_folio+0x38b/0x830 [ 2977.697730][T30901] freader_get_folio+0x38b/0x830 [ 2977.697751][T30901] freader_fetch+0xa3/0x5d0 [ 2977.697772][T30901] __build_id_parse+0x133/0x7d0 [ 2977.697792][T30901] ? __pfx___build_id_parse+0x10/0x10 [ 2977.697813][T30901] ? query_matching_vma+0x494/0x4b0 [ 2977.697839][T30901] procfs_procmap_ioctl+0x7dd/0xce0 [ 2977.697863][T30901] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 2977.697887][T30901] ? __fget_files+0x2a/0x420 [ 2977.697908][T30901] ? __fget_files+0x2a/0x420 [ 2977.697926][T30901] ? __fget_files+0x3a0/0x420 [ 2977.697945][T30901] ? __fget_files+0x2a/0x420 [ 2977.697965][T30901] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2977.697982][T30901] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 2977.698001][T30901] __se_sys_ioctl+0xf9/0x170 [ 2977.698018][T30901] do_syscall_64+0xfa/0x3b0 [ 2977.698039][T30901] ? lockdep_hardirqs_on+0x9c/0x150 [ 2977.698058][T30901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2977.698074][T30901] ? clear_bhb_loop+0x60/0xb0 [ 2977.698091][T30901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2977.698107][T30901] RIP: 0033:0x7f689dd8e929 [ 2977.698122][T30901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2977.698136][T30901] RSP: 002b:00007f689ebc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2977.698155][T30901] RAX: ffffffffffffffda RBX: 00007f689dfb6080 RCX: 00007f689dd8e929 [ 2977.698174][T30901] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 2977.698185][T30901] RBP: 00007f689de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2977.698195][T30901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2977.698205][T30901] R13: 0000000000000000 R14: 00007f689dfb6080 R15: 00007ffe91e12c48 [ 2977.698222][T30901]